last executing test programs: 42.149422472s ago: executing program 2 (id=3657): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@dioread_nolock}, {@noinit_itable}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x471, &(0x7f0000000bc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d6f64653d3078303030303030303030303030303830302c6372756674006e6f6a6f6c6965742cf9b364b872696465726f636b7065726d2c6d61709bf30000831e6d616c2c7362736563746f723d30783030303030303030303030303062356141636865636b3d7374726963742c657569", @ANYRESDEC=0x0, @ANYBLOB=',mask=MAY_READ,\x00'], 0x0, 0x640, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40040, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x21) 39.605270611s ago: executing program 2 (id=3668): socket(0x2, 0x3, 0xff) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080dc435f9240046004578000000000011907800000000000000000000000000649078100080000000a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f00000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000002400)) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r4}) 37.906826823s ago: executing program 2 (id=3674): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f0000000180)=[{0x0, 0xffff}, {0x1, 0xffff, 0x1800}], 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) semtimedop(0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 33.948997529s ago: executing program 2 (id=3690): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') 32.204396132s ago: executing program 2 (id=3696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) 31.444084107s ago: executing program 2 (id=3700): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) semtimedop(0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 30.916177047s ago: executing program 32 (id=3700): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) socket$inet_udp(0x2, 0x2, 0x0) semget$private(0x0, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) semtimedop(0x0, &(0x7f0000000140)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) 8.737400293s ago: executing program 4 (id=3779): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x57) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 8.34202485s ago: executing program 4 (id=3782): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.975599516s ago: executing program 0 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) 6.582629964s ago: executing program 1 (id=3786): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6.308114779s ago: executing program 1 (id=3788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 6.056887124s ago: executing program 1 (id=3789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 5.923878116s ago: executing program 0 (id=3790): r0 = socket(0x2, 0x3, 0xff) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080dc435f9240046004578000000000011907800000000000000000000000000649078100080000000a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f00000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000002400)) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) process_vm_writev(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f00000004c0)=""/209, 0xd1}], 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r5}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r7 = getpid() r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) kcmp(r7, r1, 0x6, 0xffffffffffffffff, r8) 5.756120079s ago: executing program 3 (id=3791): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x57) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 5.75588419s ago: executing program 1 (id=3792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e24, 0x3, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000008c0)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 5.538604074s ago: executing program 5 (id=3793): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x100002, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) 4.754254989s ago: executing program 5 (id=3794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f8"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYBLOB="9b0f2dbd7000fb28df2501000000"], 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 4.735964179s ago: executing program 3 (id=3795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x389, @any, 0xe, 0x2}, 0xe) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x551083, 0x28) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000040)='./file0\x00', 0x200) lseek(r6, 0x100, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 4.723837409s ago: executing program 4 (id=3796): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x8001, 0xd) 4.590032102s ago: executing program 0 (id=3797): unshare(0x22020600) userfaultfd(0x801) userfaultfd(0x1) pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x2, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 4.398099446s ago: executing program 5 (id=3798): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 4.336965617s ago: executing program 0 (id=3799): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x705, 0x70bf2b, 0x5, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff3, 0x78bbe9f1cfa0a994}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x12002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) read$FUSE(r0, &(0x7f0000000c00)={0x2020}, 0x2020) 4.056166232s ago: executing program 5 (id=3800): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000006c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.176037179s ago: executing program 3 (id=3801): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) 3.14618738s ago: executing program 0 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.028177852s ago: executing program 4 (id=3803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) 3.017152232s ago: executing program 5 (id=3804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) futex(0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioprio_set$pid(0x3, r0, 0x4007) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000006a006bb325bd70000000", @ANYRES32=0x0, @ANYBLOB="080004", @ANYRES32=r0], 0x28}}, 0x20048000) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000280)={0x1, 0x2, 0x3, 0x5, 0x252, 0x3}) close_range(r1, r3, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r4, 0x53, 0x0, 0x804000020004) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0x11, 0x80}, 0x0, 0x2000040e, 0x7fffffff, {0x74, 0xf}, 0x80, 0x2}) r5 = syz_clone(0x26020000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x0, 0x3, 0x1}, 0x10}, 0x94) rt_sigqueueinfo(r5, 0x30, &(0x7f00000007c0)={0x3e}) pidfd_send_signal(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x3e, 0xfffff751, 0x4}, 0x0) 2.912046535s ago: executing program 3 (id=3805): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008084, 0x0, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x4004084, 0x0, 0x0) 2.836440406s ago: executing program 0 (id=3806): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.835828256s ago: executing program 4 (id=3807): r0 = socket(0x2, 0x3, 0xff) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511aaaaaaaaaabb080dc435f9240046004578000000000011907800000000000000000000000000649078100080000000a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000000000000000e400000000000035f3c07eeca4a20a9858ac150000000063081fe8fe001a08ed082ad7121d696f00000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000002400)) mlock(&(0x7f0000754000/0x3000)=nil, 0x3000) process_vm_writev(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f00000004c0)=""/209, 0xd1}], 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0xff00}, 0x0, r5}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000380)) r7 = getpid() r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) kcmp(r7, r1, 0x6, 0xffffffffffffffff, r8) 416.001692ms ago: executing program 3 (id=3808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r0, 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYBLOB="9b0f2dbd7000fb28df2501000000"], 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x0) 397.525302ms ago: executing program 5 (id=3809): unshare(0x22020600) userfaultfd(0x801) userfaultfd(0x1) pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x2, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xffffffffffffffea, 0x0, 0x0, 0x200000, 0x4, 0x6}, 0x0, 0x0) 379.482163ms ago: executing program 1 (id=3810): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000340)={'a', ' *:* ', 'r\x00'}, 0x8) 218.544276ms ago: executing program 3 (id=3811): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x4, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0x72, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x5}, {0x51, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x0, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0x6, 0x0, '\x00', 0x6}, {0x40, 0x11, 0x2, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x0, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0xb, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x4, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semtimedop(0x0, &(0x7f0000000900)=[{0x2, 0x7, 0x800}], 0x44, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$netlink(0x10, 0x3, 0xc) unshare(0x2040400) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x808b9027}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1a}, 0x1c) 208.905526ms ago: executing program 4 (id=3812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 1 (id=3813): openat$sysfs(0xffffffffffffff9c, &(0x7f0000001880)='/sys/kernel/uevent_seqnum', 0x20000, 0x204) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000900)={0x0, 0x21}, &(0x7f0000000940)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xa4, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = accept(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file2\x00', 0x818010, &(0x7f0000001280)=ANY=[@ANYRES8, @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b461be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828a5b3e9db4e0f87928c18c0380050249fb6ab8e225d1"], 0x1, 0x2ab, &(0x7f0000001640)="$eJzs3TFrO2UYAPDnkvzTqEOKuCiCBzo4lX9dXRqlgthJiaAOWmwLkoRCCwErGDv1Ezj6PfwILi5+A8FVcWuHysnl7pLUJrXGmIL9/aan997zvk/uKcmUJ5+9POgdHCdxfvlztFpJ1HZiJ66S2IxaVL6JRgAA/x9XWRa/Z8tkNmqrrwYAWIfi87/w0LUAAOvxwUcfv9fZ29t9P01b8WL7YthNImJwMewW652j+CL6cRhPox3XEdlEEb/z7t5uNNLcZrw2GA27eebg0x/L/Tu/Rozzt6Mdm/Pzt9PCJP/Zqro0OkdPqj/a8cL8/Df+mh+DUXSb8fqrM/VvRTt++jyOox8HkedO87/eTtO3s28vv/okPybPT2rR3RjfN5XV19QSAAAAAAAAAAAAAAAAAAAAAAAega00TYrxPeP5Pfml8fycYbd+PV7fSiuz831G1XygpNqomA+URTmiZ5TFd9V8nadpmmbljdP8RrzU8MMCAAAAAAAAAAAAAAAAAAAAkDv98qy33+8fnqwkqKYBVF/rX3afnZkrr8RZb7++eMON+581O20gr/XOm6PRiCWKr/b/J1nP5PWsqAXTYGPa3A+jCKrGrPSs598qNj3r7ae3HkLyd2e1qsZ9P7vUjKXr6f2WP8xmWUF2s6etSak3s5orehrN5+Yu/ZFl2f32efOXokfllWQ8YuN+pz8pg7kvMA9ak140q+CHRf/80V/4llH/N+83AAAAAAAAAAAAAAAAAADAYtMv/c5ZPL8ztfafFQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAazb9/f8qaEXEzSu3glGZfNc9ZdCMk9MHfokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8An8GAAD///BqRhY=") openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xa00, 0x30) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) close(r3) recvfrom$inet(r4, &(0x7f0000000000)=""/46, 0x2e, 0x40010000, &(0x7f00000000c0)={0x2, 0x4a21, @private=0xa010101}, 0x10) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000840), 0x0) mount$9p_fd(0x0, &(0x7f0000000880)='./file2\x00', &(0x7f00000008c0), 0x10000, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_mount_image$hfsplus(&(0x7f0000000980), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2201118, &(0x7f00000009c0)=ANY=[], 0xff, 0x6de, &(0x7f0000000180)="$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") creat(&(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB="6f73782e636f6d2e6170706c652e46696e646572496e666f002a7a5a3e47207f3e6f5321c72e7b9551be8b8629359b3365847ce5c3feaa8cb4794cf9b791"], 0x0, 0x1f) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000000c00028005000100840000003c0002800c00028005000100840000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000400006800c00038006000100000000001c000380060002004e200000060001004e22"], 0xd4}}, 0x0) kernel console output (not intermixed with test programs): yz.0.3047': attribute type 1 has an invalid length. [ 511.818397][T13086] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.903159][ T4650] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 511.994325][T13208] batman_adv: batadv0: Adding interface: geneve2 [ 512.012336][T13208] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 512.042263][T13086] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 512.108545][T13086] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.158470][T13086] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 513.222009][T12611] Bluetooth: hci4: command 0x0419 tx timeout [ 513.851301][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.860408][T13246] fuse: Unknown parameter '0x0000000000000004' [ 513.890730][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.945041][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.986625][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.022421][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.037236][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.051748][T12209] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.058960][T12209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.097726][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.123463][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.139925][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.168871][T12209] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.176084][T12209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.212599][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.231212][T13257] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 514.306512][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.342011][ T6852] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 514.370627][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.420518][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.472989][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 514.504963][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 514.532850][ T6852] usb 1-1: Using ep0 maxpacket: 8 [ 514.549766][ T6852] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 514.577657][T13086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.598368][ T6852] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 514.632056][ T6852] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 514.642407][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.675841][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.683431][ T6852] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 514.701480][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 514.719884][ T6852] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.736024][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 514.753361][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 514.768008][ T6852] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 514.792851][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 514.809489][ T6852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.819001][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 514.869094][T13272] loop1: detected capacity change from 0 to 512 [ 514.968528][T13272] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.404468][T13272] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 515.821739][T13272] EXT4-fs (loop1): 1 truncate cleaned up [ 515.828016][T13272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 515.968546][T13296] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 516.064943][T13296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.140981][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 516.158410][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.169656][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.191658][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.313087][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.337403][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.409126][T13312] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 516.442925][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.464012][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.477306][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.496595][ T4647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.575812][T13086] device veth0_vlan entered promiscuous mode [ 516.590638][T13086] device veth1_vlan entered promiscuous mode [ 516.619987][T13086] device veth0_macvtap entered promiscuous mode [ 516.631127][T13086] device veth1_macvtap entered promiscuous mode [ 516.651116][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.674421][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.742420][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.753150][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.763488][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.774272][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.784202][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.908422][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.930886][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.156619][ T6852] usb 1-1: USB disconnect, device number 28 [ 517.217079][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 517.243234][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 517.322629][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.331615][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.340620][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 517.350281][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.360097][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.369325][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 517.385344][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.402670][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.413119][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.424271][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.439020][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.450368][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.465557][T13086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.478391][T13086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.491465][T13086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.556860][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.566677][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.594388][T13086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.903944][T13086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.001340][T13086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.092960][T13086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.250361][T13335] netlink: 'syz.0.3083': attribute type 1 has an invalid length. [ 518.530041][ T4646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.576551][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.576755][ T4646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.590114][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.634058][T13346] netlink: 'syz.0.3087': attribute type 1 has an invalid length. [ 518.669075][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.678907][T12209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.322721][ T27] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 519.496927][T13365] loop3: detected capacity change from 0 to 128 [ 519.543198][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 519.555605][ T27] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 519.572534][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.588117][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.592775][T13365] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 519.673997][T13365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 519.711924][ T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.732164][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.770747][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.799606][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.104659][T13374] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 520.310102][T12611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 520.319622][T12611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 520.328943][T12611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 520.337751][T12611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 520.352230][T12611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 520.361269][T12611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 520.607925][T13385] loop1: detected capacity change from 0 to 512 [ 520.640019][T13385] EXT4-fs: Ignoring removed nobh option [ 520.759194][T13385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 520.792197][T13385] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 520.893098][T13385] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.3103: iget: bad i_size value: 2533274857506816 [ 520.957760][T11948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.969183][T11948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.113132][T11948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.127501][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 521.151918][T11948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.225258][T13406] input: syz1 as /devices/virtual/input/input10 [ 521.231612][T13406] input: failed to attach handler leds to device input10, error: -6 [ 521.325707][T11948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.371953][T11948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.437445][T13381] chnl_net:caif_netlink_parms(): no params data found [ 521.510579][T11948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.526952][T11948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.541161][T13415] loop1: detected capacity change from 0 to 128 [ 521.579646][T13415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 521.734798][T13415] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.827643][T13429] fuse: Bad value for 'fd' [ 521.855097][T13381] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.872082][T13381] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.897189][T13381] device bridge_slave_0 entered promiscuous mode [ 521.938748][T13381] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.947932][T13381] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.966538][T13381] device bridge_slave_1 entered promiscuous mode [ 522.110969][ T6852] usb 1-1: USB disconnect, device number 29 [ 522.184683][T13381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.237237][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 522.339651][T13381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.361561][T13439] loop0: detected capacity change from 0 to 512 [ 522.367816][T13437] loop1: detected capacity change from 0 to 512 [ 522.442372][T12611] Bluetooth: hci5: command 0x0409 tx timeout [ 522.478197][T13437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 522.499750][T13439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 522.544783][T13437] ext4 filesystem being mounted at /586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 522.581510][T13439] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.802440][T13437] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #2: block 18: comm syz.1.3121: lblock 23 mapped to illegal pblock 18 (length 1) [ 522.819908][T12608] EXT4-fs (loop0): unmounting filesystem. [ 522.853505][T13381] team0: Port device team_slave_0 added [ 522.859095][T13437] EXT4-fs (loop1): Remounting filesystem read-only [ 523.029645][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 523.030321][T13381] team0: Port device team_slave_1 added [ 523.453499][T13381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.460551][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.528463][T13381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.622641][T13381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.629863][T13480] capability: warning: `syz.3.3133' uses deprecated v2 capabilities in a way that may be insecure [ 523.642935][T13381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.691399][T13481] loop3: detected capacity change from 0 to 512 [ 523.708138][T13381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.719171][ T7] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 523.728192][T13481] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 523.767547][T13481] EXT4-fs (loop3): invalid journal inode [ 523.808260][T13481] EXT4-fs (loop3): can't get journal size [ 523.860719][T13481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 523.878541][T13481] System zones: 1-12, 13-13 [ 523.929762][T13381] device hsr_slave_0 entered promiscuous mode [ 523.936302][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 523.944443][T13481] EXT4-fs (loop3): 1 truncate cleaned up [ 523.951285][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 523.959988][T13481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 523.968607][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.979160][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 523.990072][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 524.000393][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 524.013656][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 524.031949][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.064483][T13381] device hsr_slave_1 entered promiscuous mode [ 524.094167][T13381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 524.123348][T13381] Cannot create hsr debugfs directory [ 524.385492][T13086] EXT4-fs (loop3): unmounting filesystem. [ 524.451553][T13496] loop0: detected capacity change from 0 to 128 [ 524.471027][T13496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 524.503037][T13496] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 524.543053][T12611] Bluetooth: hci5: command 0x041b tx timeout [ 524.632053][T13494] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaa [ 524.992128][ T7] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 525.048866][T11948] device hsr_slave_0 left promiscuous mode [ 525.073733][T11948] device hsr_slave_1 left promiscuous mode [ 525.087235][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.105002][T11948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.144826][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.158062][T11948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.181551][T11948] device bridge_slave_1 left promiscuous mode [ 525.187880][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 525.195359][ T7] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 525.208565][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.217289][ T7] usb 1-1: config 179 has no interface number 0 [ 525.229688][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 525.253480][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 525.278756][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.301655][ T7] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 525.318573][ T7] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 525.339532][ T7] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 525.358894][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.400112][T13496] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 525.410199][T11948] device bridge_slave_0 left promiscuous mode [ 525.419595][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.610287][T11948] device veth1_macvtap left promiscuous mode [ 525.630778][T11948] device veth0_macvtap left promiscuous mode [ 525.651134][T11948] device veth1_vlan left promiscuous mode [ 525.661522][T11948] device veth0_vlan left promiscuous mode [ 525.676147][ T7] usb 1-1: USB disconnect, device number 30 [ 525.682381][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 525.690720][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 526.232602][ T7] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 526.248492][T11948] bond4 (unregistering): Released all slaves [ 526.296616][T12608] EXT4-fs (loop0): unmounting filesystem. [ 526.441020][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 526.468344][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 526.514007][ T7] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 526.549941][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.577391][ T7] usb 4-1: Product: syz [ 526.581626][ T7] usb 4-1: Manufacturer: syz [ 526.586841][ T7] usb 4-1: SerialNumber: syz [ 526.612575][T12611] Bluetooth: hci5: command 0x040f tx timeout [ 526.613517][ T4335] usb 2-1: USB disconnect, device number 25 [ 526.648896][ T7] usb 4-1: config 0 descriptor?? [ 526.696190][T13541] loop1: detected capacity change from 0 to 128 [ 526.711770][ T7] usb 4-1: no audio or video endpoints found [ 526.717500][T13541] FAT-fs (loop1): Directory bread(block 524322) failed [ 526.751968][T13541] FAT-fs (loop1): Directory bread(block 524323) failed [ 526.758914][T13541] FAT-fs (loop1): Directory bread(block 524324) failed [ 526.805747][T13541] FAT-fs (loop1): Directory bread(block 524325) failed [ 526.842352][T13541] FAT-fs (loop1): Directory bread(block 524326) failed [ 526.849304][T13541] FAT-fs (loop1): Directory bread(block 524327) failed [ 526.857004][T13541] FAT-fs (loop1): Directory bread(block 524328) failed [ 526.897505][T13541] FAT-fs (loop1): Directory bread(block 524329) failed [ 526.933882][T11948] bond3 (unregistering): Released all slaves [ 526.988116][ T5554] usb 4-1: USB disconnect, device number 26 [ 527.028563][T11948] bond2 (unregistering): (slave geneve1): Releasing backup interface [ 527.057518][T13541] FAT-fs (loop1): FAT read failed (blocknr 128) [ 528.111316][T11948] bond2 (unregistering): Released all slaves [ 528.256671][T11948] bond1 (unregistering): Released all slaves [ 528.692368][T12611] Bluetooth: hci5: command 0x0419 tx timeout [ 528.710175][T11948] team0 (unregistering): Port device team_slave_1 removed [ 528.770246][T11948] team0 (unregistering): Port device team_slave_0 removed [ 528.873437][T11948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.995409][T11948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.309480][T11948] bond0 (unregistering): Released all slaves [ 530.410639][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 530.505687][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 531.411103][T13381] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.469727][T13381] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.491685][T13381] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.526293][T13381] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.700621][T13636] loop3: detected capacity change from 0 to 512 [ 531.805282][T13636] EXT4-fs: Ignoring removed nobh option [ 531.851593][T13381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.870381][T13636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 531.908524][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.924673][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.948191][T13381] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.979451][T13636] EXT4-fs (loop3): Test dummy encryption mode enabled [ 531.997506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.015170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.055154][T13636] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3179: iget: bad i_size value: 38620345925642 [ 532.094997][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.102247][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.110521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.122859][T13636] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3179: couldn't read orphan inode 15 (err -117) [ 532.132058][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.144248][T13636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 532.186093][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.212247][T13636] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3179: iget: bad i_size value: 38620345925642 [ 532.225875][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.233065][T13291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.273551][T13636] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.3179: iget: bad i_size value: 38620345925642 [ 532.313779][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.353079][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.392842][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.409712][T13086] EXT4-fs (loop3): unmounting filesystem. [ 532.424319][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.499869][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.519899][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.553977][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.582940][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.604522][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.627570][T13381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.669334][T13381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.690410][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.700197][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.861930][ T126] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 533.052057][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 533.059454][ T126] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 533.086353][ T126] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.117520][ T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.145487][ T126] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.170874][ T126] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 533.197083][ T126] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 533.216673][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.261036][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.279163][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.311299][T13381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.392000][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.401708][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 533.444536][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 533.483243][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 533.496293][T13381] device veth0_vlan entered promiscuous mode [ 533.504357][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 533.518209][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 533.542424][T13381] device veth1_vlan entered promiscuous mode [ 533.576331][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 533.610768][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 533.660241][T13381] device veth0_macvtap entered promiscuous mode [ 533.671758][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 533.688917][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 533.701015][T13381] device veth1_macvtap entered promiscuous mode [ 533.719433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 533.728080][T13671] loop0: detected capacity change from 0 to 1024 [ 533.731591][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.771429][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.789004][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.808613][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.820745][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.838458][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.858882][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.870169][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.881623][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.910372][T13381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.923416][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.931890][T13671] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 533.952341][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.971167][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.990179][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.000512][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.011621][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.023300][T13381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.023913][T13671] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 534.044411][T13381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.074976][T13381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.086659][T13671] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.3185: Failed to acquire dquot type 0 [ 534.106643][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.145877][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.157022][T13671] EXT4-fs error (device loop0): mb_free_blocks:1810: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 534.182269][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.191613][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 534.202618][T13671] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.3185: corrupted inode contents [ 534.223590][T13671] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #13: comm syz.0.3185: mark_inode_dirty error [ 534.224233][T13381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.235702][T13671] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.3185: corrupted inode contents [ 534.267477][T13671] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.3185: mark_inode_dirty error [ 534.272244][T13381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.315633][T13671] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.3185: corrupted inode contents [ 534.321693][T13381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.350143][T13671] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 534.374707][T13381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.385235][T13671] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.3185: corrupted inode contents [ 534.442526][T13671] EXT4-fs error (device loop0): ext4_truncate:4312: inode #13: comm syz.0.3185: mark_inode_dirty error [ 534.466715][T13671] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 534.502650][T13671] EXT4-fs (loop0): 1 truncate cleaned up [ 534.524658][T13671] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 534.572337][T13671] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 534.595452][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.625202][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.639466][T13671] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 534.671143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 534.691526][T13671] EXT4-fs error (device loop0): ext4_acquire_dquot:6816: comm syz.0.3185: Failed to acquire dquot type 0 [ 534.706305][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.729440][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.756678][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.828247][T12608] EXT4-fs (loop0): unmounting filesystem. [ 535.708479][ T4335] usb 4-1: USB disconnect, device number 27 [ 536.182704][T13722] loop3: detected capacity change from 0 to 256 [ 536.301677][T13722] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 536.485713][T13722] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 536.679728][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 536.690461][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 536.699281][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 536.712883][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 536.720683][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 536.732853][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.930372][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3203'. [ 537.977882][T13752] netlink: 'syz.1.3208': attribute type 1 has an invalid length. [ 538.060346][T13732] chnl_net:caif_netlink_parms(): no params data found [ 538.094739][T13752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3208'. [ 538.135548][T13752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.162101][ T5554] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 538.357395][T13732] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.365166][ T5554] usb 1-1: Using ep0 maxpacket: 8 [ 538.377416][ T5554] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 538.391478][ T5554] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.404763][T13732] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.413632][T13732] device bridge_slave_0 entered promiscuous mode [ 538.421662][ T5554] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.434145][T13732] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.441348][T13732] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.452532][ T5554] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.463207][ T5554] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.477896][T13732] device bridge_slave_1 entered promiscuous mode [ 538.488330][ T5554] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.504572][ T5554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.598447][T13732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.646790][T13732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.750893][T13732] team0: Port device team_slave_0 added [ 538.762080][T12611] Bluetooth: hci2: command 0x0409 tx timeout [ 538.776641][T13732] team0: Port device team_slave_1 added [ 538.835150][T13732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.843238][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.869510][T13732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.934948][T13732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.951987][T13732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.032238][T13732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.251036][T13732] device hsr_slave_0 entered promiscuous mode [ 539.267535][T13782] loop2: detected capacity change from 0 to 2048 [ 539.285550][T13732] device hsr_slave_1 entered promiscuous mode [ 539.297701][T13783] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 539.314362][T13732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.316972][ T5554] usb 1-1: USB disconnect, device number 31 [ 539.332059][T13732] Cannot create hsr debugfs directory [ 539.627802][T13782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 539.784728][T13782] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 539.842297][T13782] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 168 with error 28 [ 539.877839][T13782] EXT4-fs (loop2): This should not happen!! Data will be lost [ 539.877839][T13782] [ 539.919943][T13782] EXT4-fs (loop2): Total free blocks count 0 [ 539.982663][T13782] EXT4-fs (loop2): Free/Dirty block details [ 539.988720][T13782] EXT4-fs (loop2): free_blocks=2415919104 [ 540.047428][T13782] EXT4-fs (loop2): dirty_blocks=176 [ 540.053260][T13782] EXT4-fs (loop2): Block reservation details [ 540.062484][T13782] EXT4-fs (loop2): i_reserved_data_blocks=11 [ 540.077722][T13798] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 540.096502][T13732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.363913][T13732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.607168][T13732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.678985][T13815] netlink: 'syz.1.3220': attribute type 1 has an invalid length. [ 540.852200][T12611] Bluetooth: hci2: command 0x041b tx timeout [ 541.079050][T13732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.137653][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3220'. [ 541.163712][T13815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.475044][T13732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 541.531487][T13732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 541.586466][T13732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 541.634415][T13732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 541.928516][T13732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.982022][T13732] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.993380][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.008359][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.016204][ T5554] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 542.037272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.053316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.082819][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.090049][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.118497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.159404][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.179161][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.199504][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.206769][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.223635][ T5554] usb 2-1: Using ep0 maxpacket: 8 [ 542.226262][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.244614][ T5554] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 542.264642][ T5554] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.271156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.299762][ T5554] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.304026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.320112][ T5554] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.341144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.359907][ T5554] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.371514][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.394483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.404148][ T5554] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.421925][ T5554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.450043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.470573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.488940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.500157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.518096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.533088][T13732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.922080][T12611] Bluetooth: hci2: command 0x040f tx timeout [ 543.221922][T13855] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 543.239850][ T5554] usb 2-1: USB disconnect, device number 26 [ 543.293390][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.311316][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.322934][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.338142][T13732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.503950][T13858] loop0: detected capacity change from 0 to 2048 [ 543.604432][T13858] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 543.642570][T13858] UDF-fs: Scanning with blocksize 512 failed [ 543.728442][T13858] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 544.244798][T13871] loop2: detected capacity change from 0 to 512 [ 544.295376][T13871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.322272][T13871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 544.432276][T13871] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 544.440251][T13871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 544.449978][T13871] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 544.460087][T13871] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 544.469901][T13871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 544.485360][T13871] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 544.553218][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.564640][T13381] EXT4-fs (loop2): unmounting filesystem. [ 544.580501][T13238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.645518][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.675748][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.697180][T13732] device veth0_vlan entered promiscuous mode [ 544.733140][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.752528][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.768805][T13732] device veth1_vlan entered promiscuous mode [ 544.831711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.849047][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.875726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.896868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.922959][T13732] device veth0_macvtap entered promiscuous mode [ 544.951465][T13732] device veth1_macvtap entered promiscuous mode [ 545.002015][T12611] Bluetooth: hci2: command 0x0419 tx timeout [ 545.016117][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.035649][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.046368][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.057452][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.067964][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.079432][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.090286][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.101271][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.111630][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.132032][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.142881][ T4314] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 545.159525][T13732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.180189][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.200120][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.218107][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.235597][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.281139][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.301989][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.322598][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.334323][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.345479][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 545.353251][ T4314] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 545.369553][ T4314] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.380093][T13732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.397094][ T4314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.407478][T13732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.420866][ T4314] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 545.433721][T13732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.441446][ T4314] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.442424][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.463819][ T4314] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 545.473568][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.524623][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 545.547597][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 545.563595][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 545.577555][T13897] loop3: detected capacity change from 0 to 512 [ 545.598994][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 545.628367][T13897] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 545.644172][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.661663][T13732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.673878][T13897] EXT4-fs (loop3): invalid journal inode [ 545.679637][T13897] EXT4-fs (loop3): can't get journal size [ 545.711332][T13732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.722272][T13732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.738869][T13732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.785625][T13897] EXT4-fs (loop3): 1 truncate cleaned up [ 545.791451][T13897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 545.902234][ T26] audit: type=1800 audit(1759440323.829:2): pid=13897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3243" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 546.101098][T13238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.139537][T13238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.165855][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.211155][ T4649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.242427][ T4649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.256039][ T4649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.288543][T13908] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 546.336428][ T22] usb 2-1: USB disconnect, device number 27 [ 546.447626][T13086] EXT4-fs (loop3): unmounting filesystem. [ 547.671198][T13937] loop4: detected capacity change from 0 to 2048 [ 547.796205][T13937] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 549.169393][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.187161][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.198667][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.220485][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 549.245679][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 549.256632][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.558154][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.266552][T13732] EXT4-fs (loop4): unmounting filesystem. [ 550.438439][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.897299][T13961] loop2: detected capacity change from 0 to 7 [ 550.904429][T13962] loop4: detected capacity change from 0 to 128 [ 550.920048][T13962] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 550.926436][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.945711][T13961] Dev loop2: unable to read RDB block 7 [ 550.953252][T13961] loop2: AHDI p1 p2 p3 [ 550.957482][T13961] loop2: partition table partially beyond EOD, truncated [ 551.005713][T13961] loop2: p1 start 1601398130 is beyond EOD, truncated [ 551.044299][T13963] loop3: detected capacity change from 0 to 1024 [ 551.051583][T13963] ext3: Unknown parameter 'measure' [ 551.082241][T13961] loop2: p2 start 1702059890 is beyond EOD, truncated [ 551.145162][ T3639] Dev loop2: unable to read RDB block 7 [ 551.150815][ T3639] loop2: AHDI p1 p2 p3 [ 551.168795][ T3639] loop2: partition table partially beyond EOD, truncated [ 551.179294][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.209054][ T3639] loop2: p1 start 1601398130 is beyond EOD, truncated [ 551.227412][ T3639] loop2: p2 start 1702059890 is beyond EOD, truncated [ 551.252200][T13968] loop2: detected capacity change from 0 to 16 [ 551.308515][T13968] erofs: (device loop2): mounted with root inode @ nid 36. [ 551.322975][T12611] Bluetooth: hci0: command 0x0409 tx timeout [ 551.370994][T13968] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 551.837397][T13951] chnl_net:caif_netlink_parms(): no params data found [ 552.182135][T13994] loop4: detected capacity change from 0 to 512 [ 552.202823][T13994] EXT4-fs (loop4): Test dummy encryption mode enabled [ 552.209809][T13994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 552.234004][T13994] EXT4-fs (loop4): 1 truncate cleaned up [ 552.263191][T13994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 552.312484][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.348576][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.389707][T13951] device bridge_slave_0 entered promiscuous mode [ 552.492691][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.509741][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.519763][T13951] device bridge_slave_1 entered promiscuous mode [ 552.859027][T13994] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 552.985145][T13732] EXT4-fs (loop4): unmounting filesystem. [ 553.402458][T12611] Bluetooth: hci0: command 0x041b tx timeout [ 553.501986][ T5554] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 553.975120][T14028] loop3: detected capacity change from 0 to 256 [ 554.224936][T14028] loop3: detected capacity change from 0 to 1024 [ 555.485332][T12611] Bluetooth: hci0: command 0x040f tx timeout [ 555.494855][T14036] loop0: detected capacity change from 0 to 2048 [ 555.559561][T14036] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 557.562988][T12611] Bluetooth: hci0: command 0x0419 tx timeout [ 558.620185][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.685084][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.930364][T14063] loop4: detected capacity change from 0 to 256 [ 559.257549][T14063] loop4: detected capacity change from 0 to 1024 [ 559.703741][T14064] loop3: detected capacity change from 0 to 512 [ 560.098255][T14064] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.183068][T14064] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0080] [ 560.215148][T14071] loop4: detected capacity change from 0 to 256 [ 560.217939][T14064] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 560.265454][T14064] EXT4-fs warning (device loop3): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 560.303052][T14071] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 560.308473][T13951] team0: Port device team_slave_0 added [ 560.364353][T14064] EXT4-fs (loop3): mount failed [ 560.412579][T13951] team0: Port device team_slave_1 added [ 560.643144][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.650735][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.771931][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.886553][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.902759][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.021392][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.156062][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3302'. [ 561.182181][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 561.199817][T14092] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 561.424360][T14099] loop2: detected capacity change from 0 to 512 [ 561.620025][T13951] device hsr_slave_0 entered promiscuous mode [ 561.649014][T13951] device hsr_slave_1 entered promiscuous mode [ 561.686275][T13951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.712244][T13951] Cannot create hsr debugfs directory [ 562.021124][ T11] bond5: (slave wlan0): Releasing backup interface [ 562.214418][ T11] device hsr_slave_0 left promiscuous mode [ 562.239111][ T11] device hsr_slave_1 left promiscuous mode [ 562.254233][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.279043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.327180][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.361720][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.390041][ T11] device bridge_slave_1 left promiscuous mode [ 562.420830][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.471035][ T11] device bridge_slave_0 left promiscuous mode [ 562.482401][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.642337][ T11] device veth1_macvtap left promiscuous mode [ 562.676575][ T11] device veth0_macvtap left promiscuous mode [ 562.692422][ T11] device veth1_vlan left promiscuous mode [ 562.702481][ T11] device veth0_vlan left promiscuous mode [ 562.807948][T14132] loop3: detected capacity change from 0 to 4096 [ 562.866702][T14132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 562.995544][T13086] EXT4-fs (loop3): unmounting filesystem. [ 563.537410][T14147] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 563.701925][ T126] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 563.903533][ T126] usb 3-1: Using ep0 maxpacket: 32 [ 563.911734][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.959330][ T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.996943][ T126] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 564.026654][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.055601][ T11] bond8 (unregistering): Released all slaves [ 564.067041][T14158] loop4: detected capacity change from 0 to 1024 [ 564.093784][ T126] usb 3-1: config 0 descriptor?? [ 564.099970][T14158] hfsplus: unable to parse mount options [ 564.473543][T14160] loop4: detected capacity change from 0 to 128 [ 564.512220][T14160] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 564.562957][T14160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.949473][ T126] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 565.005752][ T126] usb 3-1: USB disconnect, device number 23 [ 565.294144][ T11] bond7 (unregistering): Released all slaves [ 565.469246][T14164] fido_id[14164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 566.056660][ T11] bond6 (unregistering): Released all slaves [ 566.070743][T14176] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3331'. [ 566.294488][ T11] bond5 (unregistering): Released all slaves [ 566.308990][ T11] bond4 (unregistering): Released all slaves [ 566.312641][T14181] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 566.335355][ T11] bond3 (unregistering): Released all slaves [ 566.579149][T14187] loop2: detected capacity change from 0 to 256 [ 566.626734][T14187] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 566.651962][T14187] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 566.697966][T14187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 567.084399][ T11] bond2 (unregistering): Released all slaves [ 567.130505][ T11] bond1 (unregistering): (slave geneve2): Releasing active interface [ 567.688918][ T11] bond1 (unregistering): Released all slaves [ 568.330313][ T11] team0 (unregistering): Port device team_slave_1 removed [ 568.382325][ T11] team0 (unregistering): Port device team_slave_0 removed [ 568.426770][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.477978][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.161781][ T11] bond0 (unregistering): Released all slaves [ 570.062046][T14201] netlink: 'syz.3.3341': attribute type 1 has an invalid length. [ 570.164933][T14230] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 570.182682][T14208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 570.204590][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.211061][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.781392][T14245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3358'. [ 571.774034][T14250] loop0: detected capacity change from 0 to 1024 [ 571.899322][ T26] audit: type=1800 audit(1759440349.829:3): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3360" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 572.017926][T14259] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 572.352344][T14266] netlink: 'syz.4.3364': attribute type 1 has an invalid length. [ 572.487211][T14267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3364'. [ 572.555128][T13951] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.592376][T13951] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.645598][T13951] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.699520][T13951] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.090650][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.125621][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 573.142605][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.186484][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.243038][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.283273][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.333190][T11948] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.340432][T11948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.382574][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 573.411415][T14291] loop4: detected capacity change from 0 to 512 [ 573.436315][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.459892][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.493117][T12326] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.500303][T12326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.539021][T14291] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 573.572335][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.605726][T14293] loop3: detected capacity change from 0 to 128 [ 573.663441][T14291] EXT4-fs (loop4): 1 truncate cleaned up [ 573.669167][T14291] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.687554][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.710804][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.771641][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.823284][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 573.873249][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 573.919240][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.159770][T13951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.802747][T13732] EXT4-fs (loop4): unmounting filesystem. [ 574.865176][T14302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3372'. [ 574.879852][T13951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.924724][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.950766][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 575.003215][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.026399][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.065954][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 575.228949][T14310] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 575.330112][T12326] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 575.663419][T14318] netlink: 'syz.3.3374': attribute type 1 has an invalid length. [ 575.845515][T14320] bond1: (slave geneve2): making interface the new active one [ 575.877128][T14320] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 575.982123][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3376'. [ 575.998786][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3374'. [ 576.301954][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 576.306169][T14330] loop0: detected capacity change from 0 to 1024 [ 576.309521][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 576.401488][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.532659][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 576.562488][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 576.654852][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.700188][T13950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.724338][T11948] hfsplus: b-tree write err: -5, ino 3 [ 576.746576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 576.769844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 576.807742][T13951] device veth0_vlan entered promiscuous mode [ 576.861666][T13951] device veth1_vlan entered promiscuous mode [ 576.936940][T14344] Bluetooth: MGMT ver 1.22 [ 576.987823][T13951] device veth0_macvtap entered promiscuous mode [ 577.023804][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 577.042669][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 577.076029][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 577.102874][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 577.135777][T14347] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 577.149341][T13951] device veth1_macvtap entered promiscuous mode [ 577.171098][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 577.193891][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 577.273701][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.298371][T14352] binder: 14351:14352 ioctl c0306201 200000000640 returned -14 [ 577.313391][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.382499][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.415373][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.441991][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.494602][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.541890][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.571872][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.582126][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.612924][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.643546][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.713864][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 577.731685][T12193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 577.777517][T14365] netlink: 'syz.3.3389': attribute type 1 has an invalid length. [ 577.842184][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.900659][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.959628][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.009270][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.038755][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.059998][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.079162][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.111691][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.150106][T13951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.178987][T13951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.223733][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.279775][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'. [ 578.356612][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 578.396304][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 578.577975][T13951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.601615][T13951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.661931][T13951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.680903][T13951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.911791][T14389] fuse: Bad value for 'max_read' [ 579.049895][T14386] loop0: detected capacity change from 0 to 1024 [ 579.113664][T14386] hfsplus: invalid btree flag [ 579.119039][T14386] hfsplus: failed to load attributes file [ 579.430664][T12193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.432036][T12209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.756379][T14400] loop0: detected capacity change from 0 to 1024 [ 580.132722][T12193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.259221][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 580.267097][T12209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.292998][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 580.416526][T14406] loop4: detected capacity change from 0 to 256 [ 580.873464][ T41] hfsplus: b-tree write err: -5, ino 4 [ 581.023361][T14417] fuse: Bad value for 'fd' [ 581.386672][T14425] loop1: detected capacity change from 0 to 1024 [ 581.612399][ T26] audit: type=1800 audit(1759440359.549:4): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3402" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 581.915463][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3404'. [ 583.147707][T13950] device hsr_slave_0 left promiscuous mode [ 583.242120][T13950] device hsr_slave_1 left promiscuous mode [ 583.342026][T13950] device veth1_macvtap left promiscuous mode [ 583.348148][T13950] device veth0_macvtap left promiscuous mode [ 583.400611][T13950] device veth1_vlan left promiscuous mode [ 583.423496][T13950] device veth0_vlan left promiscuous mode [ 584.044174][T13950] bond6 (unregistering): Released all slaves [ 584.123150][T13950] bond5 (unregistering): Released all slaves [ 584.227026][T13950] bond4 (unregistering): Released all slaves [ 584.317267][T13950] bond3 (unregistering): Released all slaves [ 584.596004][T13950] bond2 (unregistering): Released all slaves [ 584.648742][T13950] bond1 (unregistering): Released all slaves [ 584.672070][ T7] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 584.871952][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 584.887087][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 584.920901][ T7] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 584.937282][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.983269][ T7] usb 5-1: too many endpoints for config 1 interface 1 altsetting 145: 111, using maximum allowed: 30 [ 585.005008][ T7] usb 5-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 585.028946][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7 [ 585.048916][ T7] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.063552][ T7] usb 5-1: config 1 interface 1 has no altsetting 0 [ 585.085642][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.095172][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.104829][ T7] usb 5-1: Product: syz [ 585.109281][ T7] usb 5-1: Manufacturer: syz [ 585.114531][ T7] usb 5-1: SerialNumber: syz [ 585.230423][T14225] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 585.453853][T14225] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.485646][T14225] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.759251][T14225] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.929369][T14225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.940485][ T7] usb 5-1: USB disconnect, device number 36 [ 586.056887][T13501] udevd[13501]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.210418][T14225] usb 3-1: GET_CAPABILITIES returned 0 [ 586.220598][T14225] usbtmc 3-1:16.0: can't read capabilities [ 586.465332][T14533] loop4: detected capacity change from 0 to 8 [ 586.514042][T14533] SQUASHFS error: zlib decompression failed, data probably corrupt [ 586.535348][T14533] SQUASHFS error: Failed to read block 0x9b: -5 [ 586.550546][T14533] SQUASHFS error: Unable to read metadata cache entry [99] [ 586.558664][T14533] SQUASHFS error: Unable to read inode 0x127 [ 587.398120][T13950] bond0 (unregistering): Released all slaves [ 588.520677][T14556] loop0: detected capacity change from 0 to 1024 [ 588.589444][T14556] hfsplus: unable to parse mount options [ 588.778637][T14562] loop3: detected capacity change from 0 to 1024 [ 588.786013][T14562] EXT4-fs: Ignoring removed orlov option [ 588.791712][T14562] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.872298][ T951] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 588.893761][T14562] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 589.626285][ T951] usb 2-1: config 0 has no interfaces? [ 589.698707][ T951] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 589.949634][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.072694][ T951] usb 2-1: Product: syz [ 590.107409][ T951] usb 2-1: Manufacturer: syz [ 590.142262][ T951] usb 2-1: SerialNumber: syz [ 590.201078][ T951] usb 2-1: config 0 descriptor?? [ 590.255003][T13086] EXT4-fs (loop3): unmounting filesystem. [ 591.482563][T14519] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -110 [ 591.820534][T14225] usb 3-1: USB disconnect, device number 24 [ 591.856785][ T8451] usb 2-1: USB disconnect, device number 28 [ 591.943665][T14598] loop0: detected capacity change from 0 to 128 [ 592.069794][T14602] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 592.085596][T14598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 592.114916][T14598] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.682076][T14224] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 592.892004][T14224] usb 1-1: Using ep0 maxpacket: 8 [ 592.932239][T14224] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 593.115793][T14224] usb 1-1: config 179 has no interface number 0 [ 593.478992][T14224] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 593.511948][T14224] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 593.524903][T14224] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 593.536701][T14224] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 593.549335][T14224] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 593.590755][T14224] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 593.616679][T14224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.772261][T14598] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.039474][T14224] usb 1-1: USB disconnect, device number 32 [ 594.045543][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 594.045591][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 595.405380][T12608] EXT4-fs (loop0): unmounting filesystem. [ 596.517810][T14657] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 596.933727][T14665] loop2: detected capacity change from 0 to 1024 [ 597.028397][ T26] audit: type=1800 audit(1759440374.959:5): pid=14665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3472" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 597.391294][T14678] loop3: detected capacity change from 0 to 128 [ 597.573069][T14678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 597.619305][T14678] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 598.917822][T14225] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 598.961536][T14694] loop2: detected capacity change from 0 to 1024 [ 599.359376][T14696] loop0: detected capacity change from 0 to 1024 [ 599.458667][T14225] usb 4-1: Using ep0 maxpacket: 8 [ 599.763429][T14225] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 599.772029][T14225] usb 4-1: config 179 has no interface number 0 [ 599.778767][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 599.801751][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 599.916406][ T4646] hfsplus: b-tree write err: -5, ino 4 [ 599.941889][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 599.953269][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 599.965697][T14225] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 599.979058][T14225] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 600.001886][T14225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.024871][T14678] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 600.258454][T14225] usb 4-1: USB disconnect, device number 28 [ 600.264619][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 600.264679][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 600.402809][T14710] loop2: detected capacity change from 0 to 1024 [ 600.425254][T14710] EXT4-fs: Ignoring removed mblk_io_submit option [ 600.622115][T14710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 600.661226][T14710] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.314708][T14710] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.3487: lblock 3 mapped to illegal pblock 3 (length 3) [ 601.417801][T14710] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 601.430353][T14710] EXT4-fs (loop2): This should not happen!! Data will be lost [ 601.430353][T14710] [ 601.446157][T14710] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 601.456046][T13086] EXT4-fs (loop3): unmounting filesystem. [ 601.473963][T14719] loop1: detected capacity change from 0 to 1024 [ 601.534422][T13291] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:17: lblock 8 mapped to illegal pblock 8 (length 5) [ 601.593363][ T26] audit: type=1800 audit(1759440379.529:6): pid=14719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3489" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 601.614575][T13291] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 601.661971][T13291] EXT4-fs (loop2): This should not happen!! Data will be lost [ 601.661971][T13291] [ 601.713812][T13381] EXT4-fs (loop2): unmounting filesystem. [ 601.812002][ T5554] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 602.023829][ T5554] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 602.054792][ T5554] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 602.110472][ T5554] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 602.131537][ T5554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.368480][ T5554] usb 5-1: GET_CAPABILITIES returned 0 [ 602.392290][ T5554] usbtmc 5-1:16.0: can't read capabilities [ 602.483222][T14738] loop2: detected capacity change from 0 to 512 [ 602.548588][T14738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 602.575363][T14738] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 603.002031][T12611] Bluetooth: hci1: command 0x0406 tx timeout [ 603.198199][T13381] EXT4-fs (loop2): unmounting filesystem. [ 603.228425][T14752] loop3: detected capacity change from 0 to 128 [ 603.300737][T14752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 603.345681][T14752] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 603.952427][T14225] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 604.152383][T14225] usb 4-1: Using ep0 maxpacket: 8 [ 604.199287][T14225] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.207935][T12611] Bluetooth: hci0: command 0x0405 tx timeout [ 604.258600][T14225] usb 4-1: config 179 has no interface number 0 [ 604.296928][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 604.319665][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 604.339471][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.358643][T14225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 604.370795][T14225] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 604.393620][T14225] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 604.410555][T14225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.503434][T14752] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 604.822701][ T8451] usb 4-1: USB disconnect, device number 29 [ 604.828954][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 604.837291][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 605.546471][T14780] loop0: detected capacity change from 0 to 1024 [ 605.806969][T14780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 605.956810][T14780] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.075536][T13086] EXT4-fs (loop3): unmounting filesystem. [ 606.388547][T12608] EXT4-fs (loop0): unmounting filesystem. [ 606.467536][T14788] loop3: detected capacity change from 0 to 128 [ 607.718837][T14722] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 607.825725][ T22] usb 5-1: USB disconnect, device number 37 [ 608.078366][T14806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.097195][T14806] device batadv_slave_0 entered promiscuous mode [ 609.319714][T14822] loop2: detected capacity change from 0 to 128 [ 609.329996][T14806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.344541][T14822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 609.360557][T14822] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 609.731979][ T4328] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 610.052023][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 610.059700][ T4328] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 610.078293][ T4328] usb 3-1: config 179 has no interface number 0 [ 610.092087][ T4328] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 610.316435][ T4328] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 610.484999][ T4328] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 610.653826][ T4328] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 610.781138][ T4328] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 610.822156][ T4328] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 610.841237][ T4328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.914503][T14829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.148630][ T22] usb 3-1: USB disconnect, device number 25 [ 611.148631][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 611.148674][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 611.174233][T14225] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 611.399046][T14225] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.469024][T14225] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.806695][T14225] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 612.059631][T14225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.084765][T13381] EXT4-fs (loop2): unmounting filesystem. [ 612.470029][T14225] usb 5-1: GET_CAPABILITIES returned 0 [ 612.475971][T14225] usbtmc 5-1:16.0: can't read capabilities [ 614.268006][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3540'. [ 614.297038][T14889] loop2: detected capacity change from 0 to 128 [ 614.328090][T14889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 614.365865][T14889] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 614.773119][T14224] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 615.092015][T14224] usb 3-1: Using ep0 maxpacket: 8 [ 615.100632][T14224] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 615.116042][T14224] usb 3-1: config 179 has no interface number 0 [ 615.125199][T14224] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 615.136693][T14224] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 615.151197][T14224] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 615.173778][T14224] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 615.182221][ T5554] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 615.193342][T14224] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 615.214760][T14224] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 615.227499][T14224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.249517][T14897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.371995][ T5554] usb 4-1: Using ep0 maxpacket: 16 [ 615.379522][ T5554] usb 4-1: config 139 has an invalid interface number: 29 but max is 15 [ 615.389420][ T5554] usb 4-1: config 139 has 2 interfaces, different from the descriptor's value: 16 [ 615.399304][ T5554] usb 4-1: config 139 has no interface number 0 [ 615.405986][ T5554] usb 4-1: config 139 has no interface number 1 [ 615.412803][ T5554] usb 4-1: too many endpoints for config 139 interface 29 altsetting 0: 238, using maximum allowed: 30 [ 615.425334][ T5554] usb 4-1: config 139 interface 29 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 615.439146][ T5554] usb 4-1: config 139 interface 10 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 615.452823][ T5554] usb 4-1: config 139 interface 10 has no altsetting 0 [ 615.470970][ T5554] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 615.481054][T14224] usb 3-1: USB disconnect, device number 26 [ 615.483046][ T5554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.487335][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 615.496389][ T5554] usb 4-1: Product: syz [ 615.503826][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 615.508501][ T5554] usb 4-1: Manufacturer: syz [ 615.522675][ T5554] usb 4-1: SerialNumber: syz [ 615.863572][T14915] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3550'. [ 615.872888][T14915] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 616.046349][T13381] EXT4-fs (loop2): unmounting filesystem. [ 617.423656][T14938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3557'. [ 617.734072][T14849] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -110 [ 618.303338][T14224] usb 5-1: USB disconnect, device number 38 [ 618.315399][ T951] usb 4-1: USB disconnect, device number 30 [ 618.382251][T14942] loop0: detected capacity change from 0 to 512 [ 618.403706][T14942] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 618.591240][T14942] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 618.661992][T14942] EXT4-fs (loop0): 1 truncate cleaned up [ 618.683113][T14942] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 619.614029][T12608] EXT4-fs (loop0): unmounting filesystem. [ 620.711580][T14976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3571'. [ 621.272473][T14979] loop0: detected capacity change from 0 to 1024 [ 621.360316][T14980] loop3: detected capacity change from 0 to 512 [ 621.617342][ T26] audit: type=1800 audit(1759440399.549:7): pid=14979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3572" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 621.699675][T14980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 621.722192][T14980] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.003060][T13086] EXT4-fs (loop3): unmounting filesystem. [ 622.670339][T15005] loop4: detected capacity change from 0 to 128 [ 622.678075][T15005] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 622.709539][T15005] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 622.895179][ T11] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 624.160572][T15021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3585'. [ 626.221533][T15053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.369570][T15057] loop0: detected capacity change from 0 to 512 [ 626.386951][T15057] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 626.417326][T15057] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0080] [ 626.433895][T15057] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 626.446163][T15057] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 626.465734][T15057] EXT4-fs (loop0): mount failed [ 626.828276][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3601'. [ 627.571250][T15069] loop2: detected capacity change from 0 to 128 [ 627.656829][T15069] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 627.708988][ T26] audit: type=1800 audit(1759440405.639:8): pid=15069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3602" name="file1" dev="loop2" ino=1048628 res=0 errno=0 [ 627.797859][T15076] loop3: detected capacity change from 0 to 512 [ 627.817672][T15076] EXT4-fs: Ignoring removed i_version option [ 627.837240][T15076] ext4: Bad value for 'barrier' [ 628.602483][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 628.913128][T11948] kworker/u4:11: attempt to access beyond end of device [ 628.913128][T11948] loop2: rw=1, sector=132, nr_sectors = 136 limit=128 [ 629.190816][T15096] loop0: detected capacity change from 0 to 512 [ 629.214867][T15096] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 629.607792][T15096] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8002e019, mo2=0080] [ 629.896283][T15096] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 629.939594][T15096] EXT4-fs warning (device loop0): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 629.968366][T15096] EXT4-fs (loop0): mount failed [ 630.142423][T15105] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.151555][T15105] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.197728][T15107] loop0: detected capacity change from 0 to 1024 [ 630.251075][T15108] device bridge_slave_1 left promiscuous mode [ 630.269120][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.336017][T15108] device bridge_slave_0 left promiscuous mode [ 630.806806][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.426855][T15107] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3615'. [ 631.655021][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.668792][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.140589][T15112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3616'. [ 632.362813][T15124] loop3: detected capacity change from 0 to 512 [ 632.388826][T15124] EXT4-fs (loop3): Test dummy encryption mode enabled [ 632.415011][T15124] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 632.608243][T15124] EXT4-fs (loop3): 1 truncate cleaned up [ 632.662556][T15124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 633.612747][T15146] 9pnet_fd: Insufficient options for proto=fd [ 633.788414][T15124] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3620: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 633.900112][T15124] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3620: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 634.187765][T13086] EXT4-fs (loop3): unmounting filesystem. [ 635.012802][T15163] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 636.459920][T15186] loop1: detected capacity change from 0 to 512 [ 636.556732][T15186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 636.582178][T15186] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.740709][T15197] loop4: detected capacity change from 0 to 1024 [ 636.774550][ T22] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 636.829010][T13951] EXT4-fs (loop1): unmounting filesystem. [ 636.840169][ T26] audit: type=1800 audit(1759440414.769:9): pid=15197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3643" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 636.984044][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 637.002303][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.025796][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 637.043538][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.104819][T15185] loop3: detected capacity change from 0 to 8192 [ 637.187627][T15185] loop3: p1 p2 [ 637.191222][T15185] loop3: partition table partially beyond EOD, truncated [ 637.232127][T15203] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 637.242310][T15185] loop3: p1 start 16777216 is beyond EOD, truncated [ 637.260657][T15185] loop3: p2 size 515840 extends beyond EOD, truncated [ 637.289977][ T22] usb 1-1: GET_CAPABILITIES returned 0 [ 637.297125][ T22] usbtmc 1-1:16.0: can't read capabilities [ 638.369427][T15210] loop3: detected capacity change from 0 to 4096 [ 638.384009][T15210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 638.453822][T15210] EXT4-fs (loop3): Test dummy encryption mode enabled [ 638.494792][T15210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 638.522255][T15210] System zones: 0-5 [ 638.537607][T15210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 638.821485][T13086] EXT4-fs (loop3): unmounting filesystem. [ 638.955796][T13501] udevd[13501]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 640.413597][T15235] loop4: detected capacity change from 0 to 128 [ 640.522713][T15235] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 640.836401][ T26] audit: type=1800 audit(1759440418.649:10): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3655" name="file1" dev="loop4" ino=1048629 res=0 errno=0 [ 641.088944][T15238] loop2: detected capacity change from 0 to 512 [ 641.117711][T15238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 641.152820][T15238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 641.238878][T15240] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaa [ 641.261339][T15238] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 641.284351][T11948] kworker/u4:11: attempt to access beyond end of device [ 641.284351][T11948] loop4: rw=1, sector=148, nr_sectors = 40 limit=128 [ 641.333670][T15238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 641.364047][T15238] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 641.472045][T15238] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 641.480950][T15238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 641.699387][T15238] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3657: dx entry: limit 65535 != root limit 120 [ 641.723667][T15248] loop1: detected capacity change from 0 to 512 [ 642.313269][T15238] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3657: Corrupt directory, running e2fsck is recommended [ 642.593355][T15250] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3657: dx entry: limit 65535 != root limit 120 [ 642.606952][T15188] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -110 [ 642.646163][T14225] usb 1-1: USB disconnect, device number 33 [ 642.658182][T15248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 642.682109][T15258] loop3: detected capacity change from 0 to 512 [ 642.699073][T15248] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.712709][T15250] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3657: Corrupt directory, running e2fsck is recommended [ 642.841049][T15258] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 642.867434][T15258] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.878228][T15238] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.3657: dx entry: limit 65535 != root limit 120 [ 643.000109][T15238] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3657: Corrupt directory, running e2fsck is recommended [ 643.138297][T13086] EXT4-fs (loop3): unmounting filesystem. [ 643.307386][T13951] EXT4-fs (loop1): unmounting filesystem. [ 643.337040][T13381] EXT4-fs (loop2): unmounting filesystem. [ 643.961971][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 645.762370][T15300] loop2: detected capacity change from 0 to 128 [ 645.879358][T15300] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 645.902290][T15300] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 646.216260][T15309] loop4: detected capacity change from 0 to 256 [ 646.256894][T15309] exfat: Deprecated parameter 'namecase' [ 646.302121][T15309] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 646.350137][T15309] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 646.412010][ T4385] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 646.608959][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 646.618720][ T4385] usb 3-1: Using ep0 maxpacket: 8 [ 646.627426][ T4385] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 646.653576][ T4385] usb 3-1: config 179 has no interface number 0 [ 646.684507][ T4385] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 646.723729][ T4385] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 646.744183][ T4385] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 646.784659][ T4385] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 646.798630][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3681'. [ 646.808668][ T4385] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 646.823190][ T4385] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 646.835564][ T4385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.866276][T15307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 647.463151][T15332] loop1: detected capacity change from 0 to 1024 [ 648.983663][ T8451] usb 3-1: USB disconnect, device number 27 [ 649.000582][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 649.031898][ T8525] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 649.150125][T13381] EXT4-fs (loop2): unmounting filesystem. [ 649.263428][ T8525] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.289212][T15354] loop3: detected capacity change from 0 to 512 [ 649.300954][ T8525] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.161898][ T8525] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 650.171056][ T8525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 650.234595][T15359] loop2: detected capacity change from 0 to 128 [ 650.258869][T15354] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 650.269692][T15359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 650.324658][ T8525] usb 1-1: SerialNumber: syz [ 650.333779][T15354] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.382287][T15359] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 650.578363][ T8525] usb 1-1: 0:2 : does not exist [ 650.590830][ T8525] usb 1-1: unit 115 not found! [ 650.668149][ T8525] usb 1-1: USB disconnect, device number 34 [ 650.736067][T13086] EXT4-fs (loop3): unmounting filesystem. [ 650.944216][T12933] udevd[12933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.384642][T13381] EXT4-fs (loop2): unmounting filesystem. [ 651.677303][T11948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.900421][T11948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.157956][T11948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.446897][T15389] device wlan0 entered promiscuous mode [ 652.496411][T15389] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 652.673983][T11948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.835144][T15401] loop0: detected capacity change from 0 to 128 [ 652.935252][T15401] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 653.081372][T15401] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 653.184032][T15407] loop1: detected capacity change from 0 to 1024 [ 653.270609][T12611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.282941][T12611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.292361][T12611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.300446][T12611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.309791][T12611] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 653.317287][T12611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 653.472022][ T4351] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 653.551622][ T41] hfsplus: bad catalog file entry [ 653.581586][ T41] hfsplus: b-tree write err: -5, ino 3 [ 653.663698][ T4351] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 653.688038][ T4351] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 653.954512][ T4351] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 653.964982][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.004113][T12326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 655.513801][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 655.759070][ T4351] usb 4-1: GET_CAPABILITIES returned 0 [ 655.765148][ T4351] usbtmc 4-1:16.0: can't read capabilities [ 655.887006][T15431] loop0: detected capacity change from 0 to 1024 [ 655.963227][ T4328] usb 4-1: USB disconnect, device number 31 [ 657.287262][T15409] chnl_net:caif_netlink_parms(): no params data found [ 657.562112][T12611] Bluetooth: hci3: command 0x041b tx timeout [ 659.390762][T12611] Bluetooth: hci2: command 0x0406 tx timeout [ 659.623725][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.641951][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 659.665928][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.693533][T15409] device bridge_slave_0 entered promiscuous mode [ 660.232808][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.239977][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.269161][T15409] device bridge_slave_1 entered promiscuous mode [ 660.497661][T11948] device hsr_slave_0 left promiscuous mode [ 660.530133][T11948] device hsr_slave_1 left promiscuous mode [ 660.561186][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.568802][T11948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.596907][T11948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.637411][T11948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.669027][T11948] device bridge_slave_1 left promiscuous mode [ 660.686068][T11948] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.725658][T11948] device bridge_slave_0 left promiscuous mode [ 660.745682][T11948] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.931032][T11948] device veth1_macvtap left promiscuous mode [ 660.967698][T11948] device veth0_macvtap left promiscuous mode [ 660.974568][T11948] device veth1_vlan left promiscuous mode [ 660.980529][T11948] device veth0_vlan left promiscuous mode [ 661.194957][T15504] loop1: detected capacity change from 0 to 2048 [ 661.291758][T15504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 661.725238][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 662.282289][ T4328] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 662.477940][ T4328] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.500654][ T4328] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.528722][ T4328] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.548293][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.784690][ T4328] usb 2-1: GET_CAPABILITIES returned 0 [ 662.790413][ T4328] usbtmc 2-1:16.0: can't read capabilities [ 662.886937][T11948] team0 (unregistering): Port device team_slave_1 removed [ 663.033329][T11948] team0 (unregistering): Port device team_slave_0 removed [ 663.034028][ T22] usb 2-1: USB disconnect, device number 29 [ 663.189496][T11948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.269321][T11948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.129539][T11948] bond0 (unregistering): Released all slaves [ 664.218652][T15409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.392644][T15409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.561062][T15409] team0: Port device team_slave_0 added [ 664.593564][T15409] team0: Port device team_slave_1 added [ 665.335456][T15409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.382006][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.469024][T15409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.498761][T15409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.511174][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.661766][T15409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.918118][T15539] loop4: detected capacity change from 0 to 512 [ 665.936650][T15409] device hsr_slave_0 entered promiscuous mode [ 665.963224][T15409] device hsr_slave_1 entered promiscuous mode [ 665.983105][T15539] EXT4-fs: Ignoring removed nobh option [ 665.989178][T15409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.024321][T15409] Cannot create hsr debugfs directory [ 666.037252][T15539] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 666.113527][T15539] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.3747: iget: bad i_size value: 15393162788874 [ 666.393583][T13732] EXT4-fs (loop4): unmounting filesystem. [ 667.172891][T15409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 667.412654][T15409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 667.525191][T15409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 667.687923][T15409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.505921][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.548710][T15409] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.637772][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.655685][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.691944][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.727499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.754845][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.762102][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.790305][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.831184][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.863456][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.891665][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.898963][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.960677][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.996502][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.052979][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.102290][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.128662][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.160497][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.198478][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.231756][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.295574][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.332619][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.365542][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.408580][T15409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 670.966298][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.010529][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.049917][T15409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.200799][T15631] loop0: detected capacity change from 0 to 1024 [ 671.273299][T15631] EXT4-fs: Ignoring removed orlov option [ 671.329874][T15631] EXT4-fs: Ignoring removed nomblk_io_submit option [ 671.743088][T15631] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 674.364376][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 674.427160][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 674.514373][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 674.543879][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.571431][T15409] device veth0_vlan entered promiscuous mode [ 674.793988][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.803530][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.817465][T15409] device veth1_vlan entered promiscuous mode [ 674.922307][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 674.936123][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 674.960525][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.997617][T11948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 675.031213][T15409] device veth0_macvtap entered promiscuous mode [ 675.112793][T15409] device veth1_macvtap entered promiscuous mode [ 675.190668][T12608] EXT4-fs (loop0): unmounting filesystem. [ 675.209911][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.228376][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.238797][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.264648][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.295391][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.365856][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.409432][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.475888][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.519928][T15409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.563180][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 675.583039][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 675.622844][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.662425][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 675.806823][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.851912][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.882509][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.904243][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.924789][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.987602][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.038357][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.075970][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.106372][T15409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.146809][T15409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.197529][T15409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.275157][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.305420][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.364718][T15409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.386480][T15409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.411938][T15409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.420690][T15409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.652236][T13291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.688381][T13291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.753761][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 676.786548][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.805581][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.850213][T13291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 678.387228][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3796'. [ 679.447027][T15758] loop1: detected capacity change from 0 to 1024 [ 679.454481][T15758] EXT4-fs: Ignoring removed orlov option [ 679.460175][T15758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 679.599434][T15758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 680.203472][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3804'. [ 682.551632][T13951] EXT4-fs (loop1): unmounting filesystem. [ 683.081032][T15801] loop1: detected capacity change from 0 to 256 [ 683.183682][ T9] ------------[ cut here ]------------ [ 683.189895][ T9] WARNING: CPU: 0 PID: 9 at io_uring/io_uring.c:2890 io_ring_exit_work+0x314/0x704 [ 683.199348][ T9] Modules linked in: [ 683.203609][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 683.210991][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 683.221381][ T9] Workqueue: events_unbound io_ring_exit_work [ 683.227636][ T9] RIP: 0010:io_ring_exit_work+0x314/0x704 [ 683.233545][ T9] Code: 71 f7 48 8b 7c 24 38 48 8b 74 24 18 e8 89 12 11 00 48 85 c0 4c 8b 7c 24 10 75 3f e8 6a 88 71 f7 e9 09 fe ff ff e8 60 88 71 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb ca 48 8b 4c 24 08 80 e1 07 [ 683.253290][ T9] RSP: 0018:ffffc900000e7ac0 EFLAGS: 00010293 [ 683.259466][ T9] RAX: ffffffff8a0f4690 RBX: 0000000100009421 RCX: ffff88813fe78000 [ 683.267538][ T9] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 683.275594][ T9] RBP: ffffc900000e7c30 R08: dffffc0000000000 R09: fffff5200001cf49 [ 683.283642][ T9] R10: fffff5200001cf49 R11: 1ffff9200001cf48 R12: dffffc0000000000 [ 683.291647][ T9] R13: 1ffff1100a88e24c R14: ffff888054471260 R15: 0000000100009422 [ 683.299691][ T9] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 683.308783][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.315430][ T9] CR2: 00007fce10f721e0 CR3: 000000005e8c3000 CR4: 00000000003506f0 [ 683.323466][ T9] Call Trace: [ 683.326887][ T9] [ 683.329913][ T9] ? io_ring_ctx_wait_and_kill+0x2da/0x2da [ 683.335854][ T9] ? _raw_spin_unlock+0x40/0x40 [ 683.340756][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 683.346076][ T9] ? process_one_work+0x7a1/0x1160 [ 683.351239][ T9] process_one_work+0x898/0x1160 [ 683.356298][ T9] ? worker_detach_from_pool+0x240/0x240 [ 683.362117][ T9] ? _raw_spin_lock_irq+0xab/0xe0 [ 683.367192][ T9] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 683.372671][ T9] ? kthread_data+0x4b/0xc0 [ 683.377225][ T9] worker_thread+0xaa2/0x1250 [ 683.381994][ T9] kthread+0x29d/0x330 [ 683.386104][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 683.391177][ T9] ? kthread_blkcg+0xd0/0xd0 [ 683.395855][ T9] ret_from_fork+0x1f/0x30 [ 683.400329][ T9] [ 683.403417][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 683.410713][ T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 683.418034][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 683.428123][ T9] Workqueue: events_unbound io_ring_exit_work [ 683.434236][ T9] Call Trace: [ 683.437542][ T9] [ 683.440492][ T9] dump_stack_lvl+0x168/0x22e [ 683.445198][ T9] ? memcpy+0x3c/0x60 [ 683.449238][ T9] ? show_regs_print_info+0x12/0x12 [ 683.454466][ T9] ? load_image+0x3b0/0x3b0 [ 683.459015][ T9] panic+0x2c9/0x710 [ 683.462953][ T9] ? bpf_jit_dump+0xd0/0xd0 [ 683.467502][ T9] ? ret_from_fork+0x1f/0x30 [ 683.472129][ T9] __warn+0x2f8/0x4f0 [ 683.476193][ T9] ? io_ring_exit_work+0x314/0x704 [ 683.481354][ T9] ? io_ring_exit_work+0x314/0x704 [ 683.486504][ T9] report_bug+0x2ba/0x4f0 [ 683.490889][ T9] ? io_ring_exit_work+0x314/0x704 [ 683.496045][ T9] handle_bug+0x3a/0x70 [ 683.500305][ T9] exc_invalid_op+0x16/0x40 [ 683.504850][ T9] asm_exc_invalid_op+0x16/0x20 [ 683.509730][ T9] RIP: 0010:io_ring_exit_work+0x314/0x704 [ 683.515482][ T9] Code: 71 f7 48 8b 7c 24 38 48 8b 74 24 18 e8 89 12 11 00 48 85 c0 4c 8b 7c 24 10 75 3f e8 6a 88 71 f7 e9 09 fe ff ff e8 60 88 71 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb ca 48 8b 4c 24 08 80 e1 07 [ 683.535113][ T9] RSP: 0018:ffffc900000e7ac0 EFLAGS: 00010293 [ 683.541214][ T9] RAX: ffffffff8a0f4690 RBX: 0000000100009421 RCX: ffff88813fe78000 [ 683.549211][ T9] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 683.557201][ T9] RBP: ffffc900000e7c30 R08: dffffc0000000000 R09: fffff5200001cf49 [ 683.565196][ T9] R10: fffff5200001cf49 R11: 1ffff9200001cf48 R12: dffffc0000000000 [ 683.573191][ T9] R13: 1ffff1100a88e24c R14: ffff888054471260 R15: 0000000100009422 [ 683.581198][ T9] ? io_ring_exit_work+0x314/0x704 [ 683.586381][ T9] ? io_ring_ctx_wait_and_kill+0x2da/0x2da [ 683.592237][ T9] ? _raw_spin_unlock+0x40/0x40 [ 683.597125][ T9] ? _raw_spin_unlock_irq+0x1f/0x40 [ 683.602365][ T9] ? process_one_work+0x7a1/0x1160 [ 683.607502][ T9] process_one_work+0x898/0x1160 [ 683.612489][ T9] ? worker_detach_from_pool+0x240/0x240 [ 683.618161][ T9] ? _raw_spin_lock_irq+0xab/0xe0 [ 683.623218][ T9] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 683.628625][ T9] ? kthread_data+0x4b/0xc0 [ 683.633175][ T9] worker_thread+0xaa2/0x1250 [ 683.637909][ T9] kthread+0x29d/0x330 [ 683.642024][ T9] ? worker_clr_flags+0x1a0/0x1a0 [ 683.647080][ T9] ? kthread_blkcg+0xd0/0xd0 [ 683.651706][ T9] ret_from_fork+0x1f/0x30 [ 683.656177][ T9] [ 683.659539][ T9] Kernel Offset: disabled [ 683.663968][ T9] Rebooting in 86400 seconds..