last executing test programs: 46.054816849s ago: executing program 3 (id=600): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='cq_alloc_error\x00', r0}, 0xfffffffffffffff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb26fc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe, 0x6e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 42.097957418s ago: executing program 3 (id=606): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000022, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000500000000001c00028004000100140003800c000180080001"], 0x48}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18.326275228s ago: executing program 0 (id=622): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$eJzs3ctrXFUYAPDvTl5NGk0EQesqIGigdGJrbBUUKi5EsFDQtW1IpqFmkimZSWlCwRYR3AgqLgTddO2j7sSdj63+Fy6kpWpbrLqQkTuPdtLMTDOkM1PI7wc3c869d+ac7577OJNzuRPArjWV/slE7IuID5OIidr8JCKGKqnBiKPV9W5dPz+fTkmUy2/8kVTWuXn9/Hw0vCe1t5Z5PCJ+fC9if2ZrucX1jaW5fD63WsvPlJbPzBTXNw6cXp5bzC3mVg4fnJ09dOS5I4fvX6x//bIxfvWjV5/++ui/7z52+YOfkjga47VljXHcL1MxVdsmQ+km3OSV+11YnyVtlr3Uw3rQmfTQHKge5bEvJmKgkmphtJc1AwC65Z2IKAMAu0zi+g8Au0xETEZt/Ks+9ft/Er107eWI2FONvz6+WV0yWBuz21MZBx27mWwaGUnqG26HpiLi82/f+jKdokvjkADNXLgYEScnp7ae/5Mt9yx06pl2C8sjlZepu2Y7/0HvfJ/2f55v1v/L3O7/RJP+T3r0TpXb3fWzPfc+/jNXdlxIG2n/78WGe9tuNcRfMzlQyz1U6fMNJadO53Ppue3hiJiOoZE0f7CyavPtMX3jvxutym/s//358dtfpOVvvgMnc2VwZPN7FuZKczsKusG1ixFPDDaLP7nd/kmL/u/xbZbx2gvvf9ZqWRp/Gnd9SstPX3cUVAfKlyKeatr+d9oyaXt/4kxld5ip7xRNfPPrp2Otym9s/3RKy69/F+iFtP3H2sc/mTTer1nsvIyfL0380GrZveNvvv8PJ29W0sO1eefmSqXVgxHDyetb5x+68956vr5+Gv/0k82P/3b7f/qd8OQ24x+8+vtXtY9qGn/Fhf61/0JH7d8mUb8e3LXo8q2lgVblb6/9Zyup6dqc7Zz/7lHTHezNAAAAAAAAAAAAAAAAAAAAAAAAANC5TESMR5LJ3k5nMtls9Te8H42xTL5QLO0/VVhbWYjx76rPP83UH3U50fA81PJA9Xn49fyh2Jx/NiIeiYhPRkYr+ex8Ib/Q7+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGZvi9//T/020u/aAQBds6ffFQAAes71HwB2n86u/6NdqwcA0Dsdf/8vJ92pCADQM9u+/p/sbj0AgN4x/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXHT92LJ3Kf18/P5/mF86ury0Vzh5YyBWXsstr89n5wuqZ7GKhsJjPZecLyy0/6EL1JV8onJmNlbVzM6VcsTRTXN84sVxYWymdOL08t5g7kRvqWWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsH3F9Y2luXw+tyrRNjH6YFSjh4nkn3brDEb/a7gbEsN9K73xLDHavxMUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPu/wAAAP//wJMmNg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$watch_queue(0x0, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(r1, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus/file0\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x3000) 15.802255885s ago: executing program 0 (id=625): r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r3, &(0x7f00000000c0)='./file0\x00') openat(r3, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@initdev, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xffffff35) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x21, 0x80000, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=@delchain={0x24, 0x28, 0xd39, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0) openat(r9, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1000c0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532332c72713d3078303030303030303030303060303030302c72713d3078303030303030303030303030303030392c73713d3078303030302905ae2e4864b728114b7acb3030303030303030303830302c667363616368652c73713d3078303030303030303030303030613438342c70726976706f72742c73713d3078303030303030303030303030303030312c72713d3078303030303030303030303030303030c6a99d786f04681746b71f691e28382c726f6f74636f6e746578743d"]) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004800128008000100736974003c000280050009002b"], 0x68}}, 0x0) socket$key(0xf, 0x3, 0x2) 13.928684435s ago: executing program 0 (id=633): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlYaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuHcv5o/B9IJPvzOybee/tu7cgCOK/5fOn7x+f31xeuwLgDBYwY9e/evkz3Hn+w0uvYeWb7fknx6fPYwCUyuf+hPsDAK9XPOAwPVYp1xpYsGeugRutuQOOy1bfBUOY+apyawGG+3b50Y4aRtObtUIK9qAn1x9uShHpIdZDoocOoAr+nxwxrANo2iuY49/u/sHjrgT6qZAiEw2V3TOyVVeMy5/xb4XjhpMC/b7uPXt6pOehXY+c/MXgiK3ugGHV6mXMIAzDlp2K2In/gp+f76WvLeWwTiTN6RJRV5xdKtnSFT7efFYKHe1vc+On+iMBBoUS/HtZLRPaj/pWvDVqFUw4R0zvMzu9wtySOH9y/HbU6ss/Te90wjQuAO7WC1027+ekvFVqda6wcrHiJ5NVYGVJpP2D+cAlpz/5zlehPdjaae/uHyxtbnU3xIbYTpLO9ehqFF1L2qY3p+OY/tc0/WnOOb9R8WzAAux1B4N+vAcM+vFwnqSj03FXX/W+GRtu+h/H4g+lss+LCTv7ULLiHcz+cfNfq0Wv0nmCIAiCIAiCIAiCIAiCIIhatMDwbn44VeX4yW2z/SsAAP//mv9ajg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0x82e0, 0xff39, 0x3) 11.345294197s ago: executing program 0 (id=635): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0) 11.07819212s ago: executing program 0 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="5100330080000000080211000000080211000000a5fcc8639e9800000000000000000000640000000006020500000000000000060000000000000602000025030000003c04000000007206030303030303000000"], 0x70}}, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x4cb, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x495, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf636"}, {0x0, 0x7, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d81"}, {0x0, 0x1, "d429145c793e823829b43763"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000240), 0x3af4701e) sendfile(r11, r3, 0x0, 0x10000a007) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000340)={{r2}, "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"}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000008000840"], 0x60}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1111ce", 0x8, 0x0, 0x0, @local, @private2, {[@srh]}}}}}, 0x0) 9.918590489s ago: executing program 4 (id=639): syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e00cd2e0475"], 0xf) 9.848243955s ago: executing program 4 (id=640): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_ev_le_advertising_info={{}, {0x1, [{0x0, 0x0, @fixed, 0x11, "10a1ed94495df99cf6e78831ca231f2627"}]}}}}, 0x20) 9.631126044s ago: executing program 4 (id=642): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000067c0)={[{@noinline_xattr}, {@four_active_logs}, {@jqfmt_vfsv0}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@atgc}, {@user_xattr}, {@noinline_xattr}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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") 8.451768915s ago: executing program 0 (id=644): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x6, 0x835, 0x202, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x1, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) syz_emit_vhci(0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0x82e0, 0xff39, 0x3) 7.999116894s ago: executing program 3 (id=611): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_delete(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x434c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) socket$inet6(0xa, 0x3, 0x6) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0f00000014000100fe80"], 0x30}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x6e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@rthdr={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x2, 0x88, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}], 0x48}}], 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', r5, 0x7800, 0x81, 0x0, 0x2, {{0x2b, 0x4, 0x0, 0x0, 0xac, 0x68, 0x0, 0x80, 0x4, 0x0, @broadcast, @broadcast, {[@end, @cipso={0x86, 0x69, 0x3, [{0x5, 0x8, "86aadcd6efe0"}, {0x2, 0xd, "45459d83f212ffffe9ee1f"}, {0x0, 0x9, "1b4e77fc6a39c7"}, {0x5, 0xc, "7174fd481d5635d82f38"}, {0x7, 0xd, "7b6058116843bbf0bd407e"}, {0x2, 0xf, "c688e0e3205aa6a5f8f1d0059f"}, {0x5, 0x11, "b827e0c126850fb88780371cd09dc3"}, {0x0, 0x3, "a9"}, {0x7, 0x9, "7275ebad32795f"}]}, @timestamp_addr={0x44, 0x2c, 0x7d, 0x1, 0x8, [{@private=0xa010100, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x10000}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={@mcast1, 0x33, r8}) r9 = socket$nl_audit(0x10, 0x3, 0x9) accept4(r9, &(0x7f0000000080)=@isdn, &(0x7f0000000700)=0x80, 0x1400) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x8b44, 0x75c, 0x0, 0x101, 0xffffffffffffffff, 0x3389, '\x00', r11, 0xffffffffffffffff, 0x2, 0x3}, 0x48) sendmmsg$inet6(r10, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0x80000}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@pktinfo={{0x24, 0x29, 0x3b, {@mcast2}}}, @rthdr={{0x38, 0x29, 0x39, {0x2f, 0x4, 0x2, 0x5, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}]}}}], 0x60}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x178, 0xc, 0x0, 0x178, 0x1f0, 0x258, 0x258, 0x1f0, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @local, [], [0xffffffff], 'team_slave_0\x00', 'tunl0\x00', {}, {0xff}, 0x5e, 0x0, 0x0, 0x5c}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0xa0, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xe3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 4.326838069s ago: executing program 4 (id=651): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) io_setup(0x6, &(0x7f0000002140)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) io_submit(r5, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x3000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 3.943777272s ago: executing program 2 (id=654): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000005c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@discard}, {@orlov}, {@noauto_da_alloc}, {@journal_async_commit}, {@jqfmt_vfsv1}, {@grpid}, {}, {@data_err_abort}]}, 0x0, 0x238, &(0x7f0000000600)="$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") landlock_create_ruleset(&(0x7f0000000080), 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$clear(0x1c, 0xfffffffffffffff9) 3.005706312s ago: executing program 1 (id=655): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0) 1.51853427s ago: executing program 1 (id=656): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e05005a0c"], 0x8) 1.465754144s ago: executing program 3 (id=657): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08000c08"], 0xb) 1.362112553s ago: executing program 2 (id=658): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x0, 0xc9, "5f90df", "16bebc", "efd72c", "ac7b2e"}}}}, 0x20) 1.361670743s ago: executing program 3 (id=659): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nomblk_io_submit}, {@minixdf}]}, 0x2, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40), 0x0, &(0x7f0000001c40)={[{@subsystem='net_prio'}, {@subsystem='pids'}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x12}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002180)={0x3000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x1}) 1.361317233s ago: executing program 1 (id=660): syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x1f, 0xa}, {0x0, 0x0, 0xfff6, 0xff}}}}, 0x17) 1.268575331s ago: executing program 2 (id=661): syz_emit_vhci(&(0x7f00000027c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf8, 0x0, 0x401}}}, 0x7) 1.268321981s ago: executing program 1 (id=662): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x3}}}, 0x9) 1.268229181s ago: executing program 2 (id=663): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8300a00060001000102"], 0xf) 1.259002522s ago: executing program 4 (id=664): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.195987877s ago: executing program 2 (id=665): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04e04020"], 0x7) 1.063052599s ago: executing program 1 (id=666): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0) 303.969544ms ago: executing program 2 (id=667): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x5c42}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xff, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) r7 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r7, 0x17}, {r7, 0x2081}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000000)={0xa0000001}) socket$can_raw(0x1d, 0x3, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x64289200, 0x0, 0x0, 0x0, 0x0, 0x0) 303.082674ms ago: executing program 4 (id=668): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000005c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@discard}, {@orlov}, {@noauto_da_alloc}, {@journal_async_commit}, {@jqfmt_vfsv1}, {@grpid}, {}, {@data_err_abort}]}, 0x0, 0x238, &(0x7f0000000600)="$eJzs3T9oM2UcB/DvXRL7L0jVRRBUEBEtFN0El3ZRKEgpIoIKFREXpRVqi1vr5OKgs0onlyJuVkfpUlwUwalqh7oIWhwsDjpEkrTQ2ojS9M29vPf5wCX3JPfc7znuvk+yHBegtqaTzCVpJJlJ0kpSnN/g/v4yfdrcnthfTjqdZ34retv1231n/aaSbCV5PMleWeS1ZrKx+8LRHwdPPfTueuvBj3efnxjpQZ46Pjp8+uSjxXc+W3hs45vvflksMpf2heO6fsWAz5pFcueNKHaTKJpVj4D/Y+mtT7/v5v6uJA/08t9Kmf7Je2/ttr1WHvnw3/q+/+u394xyrMD163Ra3d/ArQ5QO2WSdopyNkl/vSxnZ/v/4X9oTJavr669OfPq6vrKK1XPVMB1aSeHT34x9vnUP/L/c6Off+DW1c3/s0s7P3bXTxpVjwYYpW7+Z17afDjyD7Uj/1Bf8g/1Jf9QX/IP9SX/UF/yD/Ul/1BLrcg/1Jr8Q32dzz8AUC+dsarvQAaqUvX8AwAAAAAAAAAAAAAAAAAAXLY9sb98toyq5lcfJMfzyXhzUP1G73nEyXjvdfL3Is1zfYvkQvsqXrxvyB0M6ZOK776+/adq6399b7X1N1eSrbeTPNpsXr7+itPr7+ru+I/vWy8PWWBITzxXbf2/dqqtv3CQfDnfPf+D5p8yd/feB88/7STTQ9Z/488hdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDI/B0AAP///TVtQQ==") landlock_create_ruleset(&(0x7f0000000080), 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), 0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) keyctl$clear(0x1c, 0xfffffffffffffff9) 260.777808ms ago: executing program 3 (id=669): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095", @ANYRES8=0x0, @ANYRES64=0x0], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x60, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/25, 0x19}, {&(0x7f00000003c0)=""/165, 0xa5}, {&(0x7f0000000600)=""/161, 0xa1}, {&(0x7f0000000540)=""/76, 0x4c}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000a40)=""/254, 0xfe}, {0x0}, {&(0x7f0000000b80)=""/55, 0x37}, {0x0}, {0x0}], 0x5}}], 0x2, 0x0, &(0x7f0000001e80)={0x0, 0x989680}) socketpair(0x1, 0x80001, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.U'], 0x0, 0x0, 0x0) rt_sigqueueinfo(r3, 0x0, &(0x7f0000000240)={0x0, 0x4, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=670): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1d19"], 0x20) kernel console output (not intermixed with test programs): 274.927897][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.945308][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.955694][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.977714][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.999723][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.413004][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 275.974588][ T6481] loop1: detected capacity change from 0 to 512 [ 275.976846][ T6481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.121412][ T6481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 276.137139][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.139446][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.206643][ T6307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.233885][ T6307] device veth0_vlan entered promiscuous mode [ 277.240414][ T6307] device veth1_vlan entered promiscuous mode [ 277.256794][ T6307] device veth0_macvtap entered promiscuous mode [ 277.261031][ T6307] device veth1_macvtap entered promiscuous mode [ 277.271727][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.275094][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.277860][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.280713][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.283392][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.286287][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.289046][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.291874][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.294454][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.331864][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.334574][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.337273][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.415196][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.435493][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.439324][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.442103][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.448987][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.473557][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 277.490889][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 277.507875][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.541843][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.568904][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.582951][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.599123][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.615115][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.618293][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.628037][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.630862][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.649122][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.651826][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.654375][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.726792][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.729457][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.732234][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.734917][ T6307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.737678][ T6307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.741494][ T6307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.745113][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.748206][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.751786][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.759969][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 277.775922][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.856438][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.178008][ T27] audit: type=1326 audit(265.689:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.413" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90945ee8 code=0x0 [ 279.184837][ T6307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.187813][ T6307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.190615][ T6307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.191629][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 279.192883][ T6307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.267319][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.540077][ T4694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.546504][ T4694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.562160][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.623111][ T27] audit: type=1326 audit(266.279:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6505 comm="syz.1.414" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d45ee8 code=0x0 [ 279.712025][ T5516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.715551][ T5516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.745607][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.870627][ T6514] loop2: detected capacity change from 0 to 40427 [ 281.052241][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.069299][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.073221][ T6516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.437807][ T6514] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 281.440063][ T6514] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 281.588368][ T6514] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.624318][ T6514] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 281.626431][ T6514] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.579792][ T6529] syz.2.415: attempt to access beyond end of device [ 282.579792][ T6529] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.865878][ T6532] loop1: detected capacity change from 0 to 16 [ 282.870606][ T6532] erofs: (device loop1): mounted with root inode @ nid 36. [ 282.871977][ T6531] loop3: detected capacity change from 0 to 512 [ 282.874323][ T6532] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 282.874953][ T6531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.877008][ T6532] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 282.881282][ T6532] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 282.883821][ T6532] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 282.885736][ T6525] overlayfs: statfs failed on './file0' [ 282.886248][ T6532] syz.1.418: attempt to access beyond end of device [ 282.886248][ T6532] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 282.891636][ T6532] syz.1.418: attempt to access beyond end of device [ 282.891636][ T6532] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 282.893418][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 283.039266][ T6531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 286.416674][ T6537] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 286.539408][ T6540] loop4: detected capacity change from 0 to 8 [ 286.578791][ T5428] syz-executor: attempt to access beyond end of device [ 286.578791][ T5428] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 286.713229][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 286.945029][ T6548] loop4: detected capacity change from 0 to 1024 [ 287.193876][ T6549] loop0: detected capacity change from 0 to 16 [ 287.213119][ T6548] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 287.215430][ T6549] erofs: (device loop0): mounted with root inode @ nid 36. [ 287.220471][ T6549] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 287.222972][ T6549] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 287.225431][ T6549] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 287.227889][ T6549] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 287.230262][ T6549] syz.0.432: attempt to access beyond end of device [ 287.230262][ T6549] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 287.233726][ T6548] EXT4-fs (loop4): invalid journal inode [ 287.234265][ T6549] syz.0.432: attempt to access beyond end of device [ 287.234265][ T6549] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 288.253286][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 288.867070][ T6559] loop3: detected capacity change from 0 to 512 [ 288.903702][ T6557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.424'. [ 288.918086][ T6559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.205136][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.683794][ T6559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 290.817522][ T6578] loop0: detected capacity change from 0 to 512 [ 292.198495][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 292.483572][ T6582] loop1: detected capacity change from 0 to 512 [ 292.500340][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 292.516563][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 292.522302][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 292.527540][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 293.108271][ T6588] loop2: detected capacity change from 0 to 2048 [ 293.259587][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 293.266452][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 293.282482][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 293.283903][ T6578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.296333][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 293.309003][ T6588] Alternate GPT is invalid, using primary GPT. [ 293.310953][ T6588] loop2: p1 p2 p3 [ 293.313886][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 293.326770][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 293.380005][ T6595] loop4: detected capacity change from 0 to 512 [ 293.382271][ T6595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.388547][ T6582] EXT4-fs (loop1): 1 orphan inode deleted [ 293.390210][ T6582] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 294.532121][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 295.311141][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.559879][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 295.712639][ T6606] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 295.773184][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 296.122732][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 296.303677][ T6610] loop1: detected capacity change from 0 to 16 [ 296.412597][ T6610] erofs: (device loop1): mounted with root inode @ nid 36. [ 296.416895][ T6610] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 296.419707][ T6610] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 296.422353][ T6610] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 296.424964][ T6610] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 296.427434][ T6610] syz.1.437: attempt to access beyond end of device [ 296.427434][ T6610] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 296.431125][ T6610] syz.1.437: attempt to access beyond end of device [ 296.431125][ T6610] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 297.070644][ T5805] EXT4-fs (loop4): unmounting filesystem. [ 298.970742][ T6633] binder: 6629:6633 Acquire 1 refcount change on invalid ref 0 ret -22 [ 299.680092][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop1p53, 10) failed: No such file or directory [ 299.703362][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.707154][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.709218][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.728200][ T6637] loop2: detected capacity change from 0 to 8 [ 299.746789][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.750466][ T6628] loop4: detected capacity change from 0 to 8192 [ 299.767510][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p54, 10) failed: No such file or directory [ 299.791823][ T6628] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 299.795394][ T6628] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 300.687801][ T6628] REISERFS (device loop4): using ordered data mode [ 300.689770][ T6628] reiserfs: using flush barriers [ 300.697817][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.740247][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p50, 10) failed: No such file or directory [ 300.752124][ T6628] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 300.758992][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.788907][ T6628] REISERFS (device loop4): checking transaction log (loop4) [ 300.806933][ T6628] REISERFS (device loop4): Using r5 hash to sort names [ 300.822166][ T6628] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 300.852752][ T6649] loop3: detected capacity change from 0 to 512 [ 300.855301][ T6649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.840705][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p61, 10) failed: No such file or directory [ 301.890864][ T6649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 301.896362][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p59, 10) failed: No such file or directory [ 301.901165][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p57, 10) failed: No such file or directory [ 303.245439][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p62, 10) failed: No such file or directory [ 303.257508][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p60, 10) failed: No such file or directory [ 303.269202][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p58, 10) failed: No such file or directory [ 303.283014][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p63, 10) failed: No such file or directory [ 303.297835][ T6659] loop0: detected capacity change from 0 to 512 [ 303.310571][ T6659] EXT4-fs (loop0): Test dummy encryption mode enabled [ 303.327547][ T6659] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.446: invalid block [ 303.341903][ T6659] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.446: couldn't read orphan inode 11 (err -117) [ 303.356246][ T6659] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 303.379690][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.374242][ T6664] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.446: Directory hole found for htree leaf block 0 [ 304.746949][ T6669] loop4: detected capacity change from 0 to 512 [ 304.749138][ T6669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.769402][ T6668] loop2: detected capacity change from 0 to 16 [ 304.773865][ T6668] erofs: (device loop2): mounted with root inode @ nid 36. [ 304.778106][ T6668] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 304.780504][ T6668] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 304.783029][ T6668] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 304.785484][ T6668] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 304.787874][ T6668] syz.2.449: attempt to access beyond end of device [ 304.787874][ T6668] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 304.791560][ T6668] syz.2.449: attempt to access beyond end of device [ 304.791560][ T6668] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 304.812939][ T6669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.817237][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 304.961921][ T6675] loop0: detected capacity change from 0 to 512 [ 304.964530][ T6676] loop1: detected capacity change from 0 to 512 [ 304.993127][ T6676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.998005][ T6675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.027056][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 305.040267][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p96, 10) failed: No such file or directory [ 305.053058][ T6675] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 305.058433][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p98, 10) failed: No such file or directory [ 305.062287][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p97, 10) failed: No such file or directory [ 305.062552][ T6676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 305.865344][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p100, 10) failed: No such file or directory [ 305.982474][ T6686] loop3: detected capacity change from 0 to 512 [ 305.988274][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p101, 10) failed: No such file or directory [ 305.999131][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p102, 10) failed: No such file or directory [ 307.018324][ T6694] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 307.149727][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p103, 10) failed: No such file or directory [ 307.157617][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p104, 10) failed: No such file or directory [ 307.178451][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p99, 10) failed: No such file or directory [ 307.183826][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p105, 10) failed: No such file or directory [ 307.237436][ T6686] EXT4-fs (loop3): 1 orphan inode deleted [ 307.239034][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 307.381961][ T5805] EXT4-fs (loop4): unmounting filesystem. [ 308.229678][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 308.232015][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 308.344091][ T6709] loop2: detected capacity change from 0 to 128 [ 308.390474][ T6711] netlink: 40 bytes leftover after parsing attributes in process `syz.1.467'. [ 312.063123][ T6717] overlayfs: unrecognized mount option "rootcontext=system_u" or missing value [ 312.070130][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p117, 10) failed: No such file or directory [ 312.088012][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop1p120, 10) failed: No such file or directory [ 312.103266][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p111, 10) failed: No such file or directory [ 312.118314][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p116, 10) failed: No such file or directory [ 312.135069][ T6725] loop0: detected capacity change from 0 to 1024 [ 312.159800][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p121, 10) failed: No such file or directory [ 312.185311][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.213480][ T6725] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 312.216410][ T6725] EXT4-fs (loop0): orphan cleanup on readonly fs [ 312.222937][ T6725] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.457: Invalid inode table block 0 in block_group 0 [ 312.231902][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p122, 10) failed: No such file or directory [ 312.244923][ T6725] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 312.252282][ T6725] EXT4-fs error (device loop0): ext4_quota_write:7172: inode #3: comm syz.0.457: mark_inode_dirty error [ 312.341355][ T6725] Quota error (device loop0): write_blk: dquota write failed [ 312.343520][ T6725] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 312.346093][ T6725] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.457: Failed to acquire dquot type 0 [ 312.352874][ T6725] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.457: Invalid inode table block 0 in block_group 0 [ 312.356518][ T6725] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 312.362403][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 312.367315][ T6725] EXT4-fs error (device loop0): ext4_ext_truncate:4431: inode #15: comm syz.0.457: mark_inode_dirty error [ 312.370626][ T6725] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.457: Invalid inode table block 0 in block_group 0 [ 312.397437][ T6725] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 312.406164][ T6725] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 312.416657][ T6725] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.457: Invalid inode table block 0 in block_group 0 [ 312.434899][ T6725] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 312.453466][ T6733] loop3: detected capacity change from 0 to 128 [ 312.492273][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p123, 10) failed: No such file or directory [ 312.633698][ T6725] EXT4-fs error (device loop0): ext4_truncate:4311: inode #15: comm syz.0.457: mark_inode_dirty error [ 312.638817][ T6725] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 312.667252][ T6725] EXT4-fs (loop0): 1 truncate cleaned up [ 312.669005][ T6725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 312.675337][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p125, 10) failed: No such file or directory [ 315.781346][ T6736] binder: 6727:6736 Acquire 1 refcount change on invalid ref 0 ret -22 [ 315.842525][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p124, 10) failed: No such file or directory [ 315.860461][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p126, 10) failed: No such file or directory [ 315.873761][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 316.118327][ T6742] loop2: detected capacity change from 0 to 512 [ 316.125109][ T6739] loop3: detected capacity change from 0 to 1024 [ 316.136973][ T6742] EXT4-fs (loop2): Test dummy encryption mode enabled [ 316.211053][ T6747] loop1: detected capacity change from 0 to 16 [ 316.213998][ T6747] erofs: (device loop1): mounted with root inode @ nid 36. [ 316.217560][ T6747] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 316.220116][ T6747] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 316.222710][ T6747] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 316.225189][ T6747] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 316.227553][ T6747] syz.1.463: attempt to access beyond end of device [ 316.227553][ T6747] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 316.231140][ T6747] syz.1.463: attempt to access beyond end of device [ 316.231140][ T6747] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 316.307072][ T6739] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 316.313377][ T6739] EXT4-fs (loop3): orphan cleanup on readonly fs [ 316.334326][ T6739] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.474: Invalid inode table block 0 in block_group 0 [ 316.345058][ T6739] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 316.347665][ T6739] EXT4-fs error (device loop3): ext4_quota_write:7172: inode #3: comm syz.3.474: mark_inode_dirty error [ 316.351361][ T6739] Quota error (device loop3): write_blk: dquota write failed [ 316.353576][ T6739] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 316.357198][ T6739] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.474: Failed to acquire dquot type 0 [ 316.362951][ T6739] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.474: Invalid inode table block 0 in block_group 0 [ 316.363097][ T6742] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.461: invalid block [ 316.369812][ T6742] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.461: couldn't read orphan inode 11 (err -117) [ 316.373924][ T6739] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 316.383671][ T6739] EXT4-fs error (device loop3): ext4_ext_truncate:4431: inode #15: comm syz.3.474: mark_inode_dirty error [ 316.389371][ T6742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 316.403933][ T6739] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.474: Invalid inode table block 0 in block_group 0 [ 316.407766][ T6751] loop0: detected capacity change from 0 to 1764 [ 316.420230][ T6739] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 316.446330][ T6739] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 316.448982][ T6739] EXT4-fs error (device loop3): __ext4_get_inode_loc:4506: comm syz.3.474: Invalid inode table block 0 in block_group 0 [ 316.452656][ T6739] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 316.455304][ T6739] EXT4-fs error (device loop3): ext4_truncate:4311: inode #15: comm syz.3.474: mark_inode_dirty error [ 316.465217][ T6739] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 316.480582][ T6739] EXT4-fs (loop3): 1 truncate cleaned up [ 316.483414][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 316.830231][ T6754] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.461: Directory hole found for htree leaf block 0 [ 317.334641][ T6751] loop0: detected capacity change from 0 to 512 [ 317.381706][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.391424][ T6751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 317.605833][ T6760] loop1: detected capacity change from 0 to 40427 [ 317.608713][ T6760] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 317.610918][ T6760] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 317.668374][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.200060][ T5428] EXT4-fs (loop2): unmounting filesystem. [ 318.345103][ T6770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.356702][ T6772] loop2: detected capacity change from 0 to 512 [ 318.363399][ T6760] F2FS-fs (loop1): Found nat_bits in checkpoint [ 318.386087][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 318.409719][ T6760] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 318.411692][ T6760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 318.427682][ T6770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.442079][ T6772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 318.557225][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 318.577401][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p157, 10) failed: No such file or directory [ 318.578146][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p158, 10) failed: No such file or directory [ 318.657923][ T6774] syz.1.465: attempt to access beyond end of device [ 318.657923][ T6774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.676008][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop1p156, 10) failed: No such file or directory [ 318.682704][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p154, 10) failed: No such file or directory [ 318.685651][ T6772] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 318.691653][ T6777] loop0: detected capacity change from 0 to 1024 [ 318.710971][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p152, 10) failed: No such file or directory [ 318.723003][ T6777] hfsplus: failed to load extents file [ 318.944945][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 318.964095][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p153, 10) failed: No such file or directory [ 321.730067][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 321.736665][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p149, 10) failed: No such file or directory [ 321.746999][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p151, 10) failed: No such file or directory [ 321.770112][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p150, 10) failed: No such file or directory [ 321.787981][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p155, 10) failed: No such file or directory [ 321.959152][ T6790] loop0: detected capacity change from 0 to 512 [ 321.961466][ T6790] EXT4-fs: Ignoring removed orlov option [ 323.251511][ T5428] EXT4-fs (loop2): unmounting filesystem. [ 323.355530][ T6790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6000e09c, mo2=0002] [ 323.358479][ T6790] System zones: 1-12 [ 323.686732][ T4769] syz-executor: attempt to access beyond end of device [ 323.686732][ T4769] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 323.710087][ T6790] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.471: casefold flag without casefold feature [ 323.715833][ T6790] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.471: missing EA_INODE flag [ 323.719231][ T6790] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.471: error while reading EA inode 12 err=-117 [ 323.722699][ T6790] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.471: missing EA_INODE flag [ 323.727397][ T6790] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.471: error while reading EA inode 12 err=-117 [ 323.731335][ T6790] EXT4-fs (loop0): 1 orphan inode deleted [ 323.732933][ T6790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 323.751483][ T6788] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.471: Directory hole found for htree leaf block 0 [ 323.903356][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 323.921287][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 323.946551][ T6797] loop4: detected capacity change from 0 to 4096 [ 323.949383][ T6797] ntfs: (device loop4): parse_options(): Invalid fmask option argument: 0000000000000000000000how_sys_files=yes [ 323.960323][ T6184] udevd[6184]: inotify_add_watch(7, /dev/loop1p168, 10) failed: No such file or directory [ 323.980479][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p165, 10) failed: No such file or directory [ 323.994366][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p167, 10) failed: No such file or directory [ 324.018920][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p169, 10) failed: No such file or directory [ 324.032502][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p170, 10) failed: No such file or directory [ 324.188505][ T6804] loop1: detected capacity change from 0 to 256 [ 324.374903][ T6810] loop3: detected capacity change from 0 to 16 [ 324.955469][ T6810] erofs: (device loop3): mounted with root inode @ nid 36. [ 325.045384][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 325.050062][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 325.054996][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 325.059286][ T6810] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 325.063343][ T6810] syz.3.480: attempt to access beyond end of device [ 325.063343][ T6810] loop3: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 325.068708][ T6810] syz.3.480: attempt to access beyond end of device [ 325.068708][ T6810] loop3: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 325.202220][ T6815] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 325.218715][ T6815] netlink: 92 bytes leftover after parsing attributes in process `syz.0.482'. [ 325.391062][ T6820] loop3: detected capacity change from 0 to 256 [ 326.181126][ T6825] loop2: detected capacity change from 0 to 512 [ 326.183414][ T6825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.256474][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p171, 10) failed: No such file or directory [ 326.262130][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p172, 10) failed: No such file or directory [ 326.267598][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p173, 10) failed: No such file or directory [ 326.274176][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p176, 10) failed: No such file or directory [ 326.279594][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p177, 10) failed: No such file or directory [ 326.341753][ T6825] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.431050][ T6836] loop1: detected capacity change from 0 to 128 [ 326.435727][ T6836] EXT4-fs: Ignoring removed orlov option [ 326.475617][ T6836] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 326.825017][ T6839] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 327.740120][ T6840] loop1: detected capacity change from 0 to 16 [ 327.742311][ T6840] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 327.750191][ T6840] cramfs: wrong endianness [ 328.120086][ T5428] EXT4-fs (loop2): unmounting filesystem. [ 328.158490][ T6843] loop3: detected capacity change from 0 to 8 [ 328.207284][ T6845] loop0: detected capacity change from 0 to 512 [ 328.209730][ T6845] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.392104][ T6845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.653836][ T4301] Bluetooth: hci5: command 0x0406 tx timeout [ 329.693921][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p201, 10) failed: No such file or directory [ 330.458188][ T6854] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full [ 330.892494][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p208, 10) failed: No such file or directory [ 330.910265][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p206, 10) failed: No such file or directory [ 330.917127][ T6859] loop3: detected capacity change from 0 to 1024 [ 330.936055][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p200, 10) failed: No such file or directory [ 330.957345][ T6859] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 330.970312][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p210, 10) failed: No such file or directory [ 330.991879][ T6859] EXT4-fs (loop3): invalid journal inode [ 331.006423][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p205, 10) failed: No such file or directory [ 331.132353][ T6307] EXT4-fs (loop0): unmounting filesystem. [ 331.239160][ T6863] loop1: detected capacity change from 0 to 512 [ 331.761320][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p203, 10) failed: No such file or directory [ 331.804642][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p202, 10) failed: No such file or directory [ 332.097202][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.105864][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.195078][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p213, 10) failed: No such file or directory [ 332.555872][ T6868] loop0: detected capacity change from 0 to 40427 [ 332.561160][ T6868] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 332.563414][ T6868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 332.564375][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p212, 10) failed: No such file or directory [ 332.579020][ T6863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 332.852475][ T6868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 333.115702][ T6869] loop2: detected capacity change from 0 to 16 [ 336.088830][ T6869] erofs: (device loop2): mounted with root inode @ nid 36. [ 336.093152][ T6869] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 336.095845][ T6869] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 336.098387][ T6869] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 336.100933][ T6869] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 336.103437][ T6869] syz.2.493: attempt to access beyond end of device [ 336.103437][ T6869] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 336.107224][ T6869] syz.2.493: attempt to access beyond end of device [ 336.107224][ T6869] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 336.132857][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop1p215, 10) failed: No such file or directory [ 336.283846][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 336.456473][ T6886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.705323][ T6886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.144151][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p219, 10) failed: No such file or directory [ 337.169608][ T6182] udevd[6182]: inotify_add_watch(7, /dev/loop1p227, 10) failed: No such file or directory [ 337.170198][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p230, 10) failed: No such file or directory [ 337.199621][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop1p225, 10) failed: No such file or directory [ 337.203686][ T6193] udevd[6193]: inotify_add_watch(7, /dev/loop1p223, 10) failed: No such file or directory [ 337.214418][ T6192] udevd[6192]: inotify_add_watch(7, /dev/loop1p229, 10) failed: No such file or directory [ 337.233433][ T6889] loop2: detected capacity change from 0 to 512 [ 337.240153][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p220, 10) failed: No such file or directory [ 337.247587][ T4311] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.253658][ T4311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.256440][ T4311] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.257040][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop1p224, 10) failed: No such file or directory [ 337.274203][ T4311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.281622][ T4311] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 337.283961][ T4311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.289470][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop1p234, 10) failed: No such file or directory [ 337.385136][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 338.337978][ T6901] loop3: detected capacity change from 0 to 512 [ 338.340351][ T6901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.461789][ T6901] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 340.502651][ T6912] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 340.606988][ T4301] Bluetooth: hci2: command tx timeout [ 340.846193][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 341.196040][ T6888] chnl_net:caif_netlink_parms(): no params data found [ 341.440877][ T6888] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.442798][ T6888] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.451685][ T6888] device bridge_slave_0 entered promiscuous mode [ 341.465402][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.468425][ T6888] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.470964][ T6888] device bridge_slave_1 entered promiscuous mode [ 341.551755][ T6888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.556167][ T6888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.668553][ T6888] team0: Port device team_slave_0 added [ 341.671857][ T6888] team0: Port device team_slave_1 added [ 341.761923][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.763812][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.770517][ T6888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.777160][ T6888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.778979][ T6888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.814192][ T6888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.998941][ T6888] device hsr_slave_0 entered promiscuous mode [ 342.083622][ T6888] device hsr_slave_1 entered promiscuous mode [ 342.153322][ T6888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.155327][ T6888] Cannot create hsr debugfs directory [ 342.388660][ T5804] udevd[5804]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 342.405540][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 342.426702][ T6185] udevd[6185]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 342.598579][ T6888] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.767477][ T6888] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.873494][ T4301] Bluetooth: hci2: command tx timeout [ 342.874418][ T6888] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.098881][ T6888] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.324443][ T6888] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.366919][ T6888] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.408745][ T6888] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.441477][ T6888] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 343.554641][ T6888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.568301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 343.570813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 343.590570][ T6888] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.602724][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 343.605495][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.620303][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.622282][ T6913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.640016][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.651885][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 343.664184][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 343.666739][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.668592][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.670856][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 343.673595][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 343.699255][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 343.714510][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 343.723258][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 343.727312][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 343.741750][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 343.767905][ T6888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.774494][ T6888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.779851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.783908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.786802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.789408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.806972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.045380][ T6888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.048789][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.051006][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.284788][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 344.287526][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 344.314606][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 344.318989][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 344.321965][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 344.324349][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 344.338086][ T6888] device veth0_vlan entered promiscuous mode [ 344.351822][ T6888] device veth1_vlan entered promiscuous mode [ 344.379599][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 344.385190][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 344.387724][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 344.399392][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 344.408445][ T6888] device veth0_macvtap entered promiscuous mode [ 344.416990][ T6888] device veth1_macvtap entered promiscuous mode [ 344.432091][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.436692][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.439301][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.442119][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.445492][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.448252][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.450833][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.453675][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.456931][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.459711][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.462340][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.465221][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.468866][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.471630][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.475557][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.478545][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 344.481256][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 344.483915][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 344.488635][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.491750][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.494236][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.496966][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.500066][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.502741][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.505305][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.507993][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.511300][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.514100][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.516559][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.519885][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.522373][ T6888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.525005][ T6888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.528845][ T6888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.546040][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 344.548795][ T6913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 344.620639][ T6888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.623082][ T6888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.625411][ T6888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.628301][ T6888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.956968][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.968104][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.975453][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.980255][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.982574][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.988183][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.087037][ T4316] Bluetooth: hci2: command tx timeout [ 345.094075][ T6939] loop3: detected capacity change from 0 to 256 [ 345.260149][ T6943] loop1: detected capacity change from 0 to 256 [ 346.173935][ T6948] loop4: detected capacity change from 0 to 1024 [ 346.176501][ T6948] EXT4-fs: Ignoring removed orlov option [ 346.178009][ T6948] EXT4-fs: Ignoring removed orlov option [ 346.231174][ T6948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 346.471308][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 347.188751][ T6960] loop2: detected capacity change from 0 to 256 [ 347.248437][ T6960] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.264259][ T6960] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.102851][ T4301] Bluetooth: hci2: command tx timeout [ 351.787591][ T6981] loop0: detected capacity change from 0 to 256 [ 352.115023][ T6981] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 352.588059][ T6986] loop1: detected capacity change from 0 to 2048 [ 352.607615][ T6986] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 352.615757][ T6988] loop3: detected capacity change from 0 to 512 [ 352.633269][ T6988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.863123][ T6996] loop4: detected capacity change from 0 to 16 [ 352.882716][ T6996] erofs: (device loop4): mounted with root inode @ nid 36. [ 352.886524][ T6996] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 352.889038][ T6996] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 352.891556][ T6996] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 352.894034][ T6996] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 352.896553][ T6996] syz.4.508: attempt to access beyond end of device [ 352.896553][ T6996] loop4: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 352.900277][ T6996] syz.4.508: attempt to access beyond end of device [ 352.900277][ T6996] loop4: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 353.976918][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 354.562250][ T7011] fuse: Bad value for 'fd' [ 358.397771][ T7031] loop3: detected capacity change from 0 to 1024 [ 358.399952][ T7031] EXT4-fs: Ignoring removed orlov option [ 358.401783][ T7031] EXT4-fs: Ignoring removed orlov option [ 359.053249][ T7031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 359.978124][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 360.062599][ T6913] bridge0: port 3(erspan0) entered disabled state [ 360.141074][ T6913] device erspan0 left promiscuous mode [ 360.142644][ T6913] bridge0: port 3(erspan0) entered disabled state [ 360.252697][ T7045] loop0: detected capacity change from 0 to 128 [ 361.087200][ T7045] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (102c0) [ 361.308930][ T7063] loop2: detected capacity change from 0 to 512 [ 361.311166][ T7063] EXT4-fs: Invalid commit interval 1836789753, must be smaller than 21474836 [ 361.587408][ T7066] loop1: detected capacity change from 0 to 16 [ 361.791142][ T7066] erofs: (device loop1): mounted with root inode @ nid 36. [ 361.795061][ T7066] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 361.797612][ T7066] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 361.800065][ T7066] erofs: (device loop1): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 361.802551][ T7066] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 361.804941][ T7066] syz.1.527: attempt to access beyond end of device [ 361.804941][ T7066] loop1: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 361.808771][ T7066] syz.1.527: attempt to access beyond end of device [ 361.808771][ T7066] loop1: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 362.829064][ T7071] loop0: detected capacity change from 0 to 16 [ 362.835550][ T7071] erofs: (device loop0): mounted with root inode @ nid 36. [ 362.840331][ T7071] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 362.842915][ T7071] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 362.845478][ T7071] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 362.847950][ T7071] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 362.850286][ T7071] syz.0.540: attempt to access beyond end of device [ 362.850286][ T7071] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 362.853969][ T7071] syz.0.540: attempt to access beyond end of device [ 362.853969][ T7071] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 362.855346][ T7074] loop2: detected capacity change from 0 to 512 [ 362.879666][ T7077] loop1: detected capacity change from 0 to 512 [ 363.178052][ T7079] loop3: detected capacity change from 0 to 16 [ 363.258468][ T7079] erofs: (device loop3): mounted with root inode @ nid 36. [ 363.358567][ T7079] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 363.361965][ T7079] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 363.365441][ T7079] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 363.368699][ T7079] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 363.372021][ T7079] syz.3.531: attempt to access beyond end of device [ 363.372021][ T7079] loop3: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 363.376265][ T7079] syz.3.531: attempt to access beyond end of device [ 363.376265][ T7079] loop3: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 363.462330][ T27] audit: type=1326 audit(344.693:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7072 comm="syz.3.531" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7545ee8 code=0x0 [ 363.851509][ T7074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 366.221111][ T7100] loop1: detected capacity change from 0 to 128 [ 367.061570][ T7100] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 367.080435][ T7100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.109287][ T5428] EXT4-fs (loop2): unmounting filesystem. [ 367.136477][ T7105] loop3: detected capacity change from 0 to 512 [ 367.153376][ T7105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.568620][ T7105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 368.609889][ T7121] loop1: detected capacity change from 0 to 164 [ 368.829146][ T7119] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 369.210074][ T7120] fuse: Unknown parameter '0x000000000000000a' [ 369.280472][ T7116] loop0: detected capacity change from 0 to 1024 [ 369.313573][ T7116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.014280][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 370.552520][ T7138] loop3: detected capacity change from 0 to 16 [ 370.556894][ T7138] erofs: (device loop3): mounted with root inode @ nid 36. [ 370.560672][ T7138] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 370.563684][ T7138] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 370.566105][ T7138] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 370.568488][ T7138] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 370.570812][ T7138] syz.3.544: attempt to access beyond end of device [ 370.570812][ T7138] loop3: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 370.574447][ T7138] syz.3.544: attempt to access beyond end of device [ 370.574447][ T7138] loop3: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 370.726567][ T7144] syz.3.547 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 370.736342][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.546'. [ 370.813065][ T7151] loop0: detected capacity change from 0 to 128 [ 370.815279][ T7151] EXT4-fs: Ignoring removed orlov option [ 370.837379][ T7151] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 370.841096][ T6913] device hsr_slave_0 left promiscuous mode [ 370.848124][ T7152] loop4: detected capacity change from 0 to 512 [ 370.851922][ T7150] loop2: detected capacity change from 0 to 1024 [ 370.857123][ T7150] EXT4-fs: Ignoring removed orlov option [ 370.860040][ T7150] EXT4-fs: Ignoring removed orlov option [ 370.863100][ T7150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 370.873824][ T6913] device hsr_slave_1 left promiscuous mode [ 370.892267][ T7150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 371.040677][ T7152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 371.275977][ T7163] loop0: detected capacity change from 0 to 16 [ 371.279520][ T7163] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 372.233163][ T27] audit: type=1326 audit(351.933:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7153 comm="syz.3.550" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7545ee8 code=0x0 [ 372.287547][ T7163] cramfs: wrong endianness [ 373.507989][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.510239][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.539909][ T6913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.542219][ T6913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.545243][ T6913] device bridge_slave_1 left promiscuous mode [ 373.549622][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.554878][ T27] audit: type=1326 audit(354.131:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.2.559" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2145ee8 code=0x0 [ 374.879799][ T7177] hub 9-0:1.0: USB hub found [ 374.885163][ T7177] hub 9-0:1.0: 8 ports detected [ 374.995705][ T7169] EXT4-fs (loop2): unmounting filesystem. [ 375.385965][ T6913] device bridge_slave_0 left promiscuous mode [ 375.387712][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.406564][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 375.464435][ T7179] loop1: detected capacity change from 0 to 512 [ 375.466632][ T7179] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.583753][ T7183] loop4: detected capacity change from 0 to 2048 [ 375.656103][ T7179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 375.767714][ T6913] device veth1_macvtap left promiscuous mode [ 375.769469][ T6913] device veth0_macvtap left promiscuous mode [ 375.771164][ T6913] device veth1_vlan left promiscuous mode [ 375.786425][ T6913] device veth0_vlan left promiscuous mode [ 376.763607][ T7195] loop4: detected capacity change from 0 to 16 [ 376.766313][ T7195] erofs: (device loop4): mounted with root inode @ nid 36. [ 376.769940][ T7195] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 376.772517][ T7195] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 376.774920][ T7195] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 376.777367][ T7195] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 376.779680][ T7195] syz.4.557: attempt to access beyond end of device [ 376.779680][ T7195] loop4: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 376.783248][ T7195] syz.4.557: attempt to access beyond end of device [ 376.783248][ T7195] loop4: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 376.981633][ T7197] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 377.047198][ T7185] loop2: detected capacity change from 0 to 32768 [ 377.073920][ T7185] gfs2: Invalid block size shift [ 377.077321][ T7200] block device autoloading is deprecated and will be removed. [ 377.125961][ T5806] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 377.375932][ T7202] loop2: detected capacity change from 0 to 64 [ 377.415278][ T7204] loop4: detected capacity change from 0 to 256 [ 377.465430][ T7204] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 378.446437][ T7209] loop4: detected capacity change from 0 to 512 [ 378.493048][ T7209] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.561: attempt to clear invalid blocks 2 len 1 [ 378.520304][ T7213] loop3: detected capacity change from 0 to 512 [ 378.522778][ T7213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 378.523277][ T7209] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 378.539496][ T7209] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.561: invalid indirect mapped block 1819239214 (level 0) [ 378.548375][ T7209] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.561: invalid indirect mapped block 1819239214 (level 1) [ 378.555060][ T7209] EXT4-fs (loop4): 1 truncate cleaned up [ 378.556812][ T7209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 378.567649][ T7213] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 378.602376][ T7209] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.561: Unrecognised inode hash code 20 [ 378.605654][ T7209] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.561: Corrupt directory, running e2fsck is recommended [ 378.687751][ T7209] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.561: corrupted in-inode xattr [ 378.911834][ T7218] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 379.503098][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 379.629148][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 379.972481][ T27] audit: type=1326 audit(360.137:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.563" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d45ee8 code=0x0 [ 380.521741][ T7223] loop3: detected capacity change from 0 to 8192 [ 380.974532][ T27] audit: type=1326 audit(360.969:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7222 comm="syz.3.564" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7545ee8 code=0x0 [ 381.553204][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.557260][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.560960][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.667578][ T7238] netlink: 'syz.3.566': attribute type 5 has an invalid length. [ 381.669900][ T7238] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.566'. [ 381.712232][ T4311] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.856892][ T4311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 381.878923][ T4311] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.396116][ T7240] loop3: detected capacity change from 0 to 8192 [ 382.455940][ T7240] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 382.458840][ T7240] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 382.463160][ T7240] loop3: unable to read partition table [ 382.464734][ T7240] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 382.468479][ T3910] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 382.471290][ T3910] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 382.473350][ T3910] loop3: unable to read partition table [ 382.525711][ T6913] team0 (unregistering): Port device team_slave_1 removed [ 383.090563][ T7243] loop3: detected capacity change from 0 to 1024 [ 383.391645][ T6913] team0 (unregistering): Port device team_slave_0 removed [ 383.596561][ T6913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.871962][ T6913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.427407][ T4311] Bluetooth: hci5: command tx timeout [ 386.597969][ T4316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.602591][ T4316] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.606184][ T4316] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.611080][ T4316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.613382][ T4316] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 386.615643][ T4316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.632672][ T6913] bond0 (unregistering): Released all slaves [ 386.661440][ T4311] Bluetooth: hci5: command tx timeout [ 386.750810][ T4681] hfsplus: b-tree write err: -5, ino 4 [ 387.154256][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 387.265456][ T7251] loop4: detected capacity change from 0 to 16 [ 387.267652][ T7251] erofs: Unknown parameter '' [ 387.314880][ T7250] loop3: detected capacity change from 0 to 512 [ 387.317046][ T7250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 387.323126][ T5803] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 387.494766][ T7250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 387.610445][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 387.673567][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 387.777177][ T7267] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 388.272981][ T7269] loop4: detected capacity change from 0 to 512 [ 388.301274][ T7269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 388.367327][ T7269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 388.443129][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 388.500817][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.502807][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.516321][ T7236] device bridge_slave_0 entered promiscuous mode [ 388.556622][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.558740][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.567437][ T7236] device bridge_slave_1 entered promiscuous mode [ 388.577373][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.599579][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.624407][ T7245] device bridge_slave_0 entered promiscuous mode [ 388.701716][ T7279] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 388.789962][ T4311] Bluetooth: hci6: command tx timeout [ 388.874485][ T4311] Bluetooth: hci5: command tx timeout [ 389.045279][ T4311] Bluetooth: hci4: command 0x0406 tx timeout [ 389.245106][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.247044][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.253196][ T7245] device bridge_slave_1 entered promiscuous mode [ 389.353113][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.388816][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 389.430850][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.495972][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.506043][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.535653][ T7281] loop4: detected capacity change from 0 to 512 [ 389.570077][ T7245] team0: Port device team_slave_0 added [ 389.576328][ T7236] team0: Port device team_slave_0 added [ 389.582735][ T7236] team0: Port device team_slave_1 added [ 389.632090][ T7245] team0: Port device team_slave_1 added [ 389.634015][ T5806] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 389.664887][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.667100][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.674069][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.776710][ T7278] loop3: detected capacity change from 0 to 32768 [ 389.779078][ T7278] XFS: noattr2 mount option is deprecated. [ 389.870020][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.871987][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.905616][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.018360][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.020335][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.600324][ T7278] XFS (loop3): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 390.624485][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.731357][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.733339][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.777626][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.787216][ T7295] loop4: detected capacity change from 0 to 512 [ 390.822209][ T7236] device hsr_slave_0 entered promiscuous mode [ 390.863120][ T7236] device hsr_slave_1 entered promiscuous mode [ 390.869924][ T7295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 390.883370][ T7295] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.576: bg 0: block 248: padding at end of block bitmap is not set [ 390.901874][ T7295] Quota error (device loop4): write_blk: dquota write failed [ 390.904033][ T7295] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 390.912504][ T7295] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.576: Failed to acquire dquot type 1 [ 390.932883][ T7295] EXT4-fs (loop4): 1 truncate cleaned up [ 390.984234][ T7295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 391.006657][ T7295] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 391.012446][ T4316] Bluetooth: hci6: command tx timeout [ 391.024944][ T7245] device hsr_slave_0 entered promiscuous mode [ 391.049136][ T7245] device hsr_slave_1 entered promiscuous mode [ 391.060439][ T7295] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 391.088497][ T7245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.090632][ T7245] Cannot create hsr debugfs directory [ 391.098023][ T4311] Bluetooth: hci5: command tx timeout [ 391.154894][ T7295] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 391.316298][ T7236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.383655][ T7278] loop3: detected capacity change from 0 to 8192 [ 391.441603][ T7278] loop3: p1 p2 p4 < > [ 391.442930][ T7278] loop3: partition table partially beyond EOD, truncated [ 391.446393][ T7278] loop3: p1 size 108986237 extends beyond EOD, truncated [ 391.453405][ T7278] loop3: p2 start 65535 is beyond EOD, truncated [ 391.455852][ T7278] loop3: p4 start 50331648 is beyond EOD, truncated [ 391.473846][ T7236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.512589][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 391.635337][ T7236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.735737][ T7236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.836924][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.038447][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.634486][ T4316] Bluetooth: hci6: command tx timeout [ 394.008348][ T7236] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.188933][ T7317] loop3: detected capacity change from 0 to 1024 [ 394.195248][ T7317] hfsplus: type requires a 4 character value [ 394.196983][ T7317] hfsplus: unable to parse mount options [ 394.441343][ T7245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.639359][ T7236] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.925838][ T7236] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.981180][ T7236] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.197461][ T7245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.294187][ T7326] loop4: detected capacity change from 0 to 16 [ 395.298397][ T7326] erofs: Unknown parameter '' [ 395.801817][ T4316] Bluetooth: hci6: command tx timeout [ 396.011036][ T7245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.107395][ T7329] loop3: detected capacity change from 0 to 512 [ 396.109578][ T7329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.187536][ T7329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 396.460770][ T7337] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 397.134818][ T4309] EXT4-fs (loop3): unmounting filesystem. [ 397.225499][ T7245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.238668][ T7333] device vlan2 entered promiscuous mode [ 397.395722][ T7342] loop1: detected capacity change from 0 to 512 [ 397.411763][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.722043][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.952452][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.954868][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.121680][ T27] audit: type=1326 audit(376.665:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7338 comm="syz.3.584" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7545ee8 code=0x0 [ 398.194403][ T5806] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 398.198726][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.201833][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.204251][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.206906][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.210958][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.212850][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.215141][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.218044][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.220480][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.222353][ T4661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.224700][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.227697][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.232540][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.260826][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.265742][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.273915][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.276968][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.347843][ T7236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.351580][ T7236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 398.429861][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.432625][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.437289][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.440115][ T7348] loop4: detected capacity change from 0 to 128 [ 398.445579][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.481496][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.484457][ T7348] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 398.875911][ T133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 399.261893][ T7348] loop4: detected capacity change from 0 to 128 [ 400.166745][ T7370] loop4: detected capacity change from 0 to 512 [ 400.169552][ T7370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.216639][ T7370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 400.260115][ T7374] loop1: detected capacity change from 0 to 512 [ 400.350420][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.397734][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.400820][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.432829][ T7374] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 400.591376][ T7378] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 401.188336][ T7245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.254301][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 401.280426][ T27] audit: type=1326 audit(380.079:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.598" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82d45ee8 code=0x0 [ 401.303573][ T7245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.375937][ T7245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.923297][ T27] audit: type=1326 audit(380.669:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.4.591" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97545ee8 code=0x0 [ 402.423183][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 402.444756][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 402.447662][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 402.451614][ T7245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.525093][ T7395] loop4: detected capacity change from 0 to 16 [ 402.527331][ T7395] erofs: Unknown parameter '' [ 402.574020][ T5806] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.638089][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 402.640834][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 402.653392][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 402.656454][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 402.661184][ T7236] device veth0_vlan entered promiscuous mode [ 402.720843][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 402.762178][ T7236] device veth1_vlan entered promiscuous mode [ 402.791670][ T7397] loop1: detected capacity change from 0 to 512 [ 402.800765][ T7397] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.840541][ T7397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 402.991940][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 402.994575][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 402.998610][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 403.001488][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 403.006690][ T7236] device veth0_macvtap entered promiscuous mode [ 403.011916][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.016705][ T7236] device veth1_macvtap entered promiscuous mode [ 403.104172][ T7401] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 403.741998][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.763631][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.772659][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.775746][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.797371][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.802602][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.809189][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.811986][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.814717][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.817509][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.830475][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.833449][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.836029][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.838912][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.842113][ T4316] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 403.939470][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 403.942709][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.963477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 403.966335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.968888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 403.984574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.135552][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.138447][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.147576][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.150596][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.163593][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.166546][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.169409][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.172388][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.177613][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.180532][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.190303][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.193326][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.205112][ T7236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.208174][ T7236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.219947][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.225103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.228224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.230922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 404.237492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.249502][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.432999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.435933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.438514][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.440513][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.456301][ T7236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.459015][ T7236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.462342][ T7236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.471883][ T7236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.504184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.506898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.509739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.515682][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.517599][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.520013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.669052][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.709372][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.713934][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.720399][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.057610][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 405.062092][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 405.064853][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 405.067483][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 405.070073][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 405.073185][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 405.080513][ T7245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.091619][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.101762][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.142799][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 405.155381][ T4661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.159009][ T4661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.167152][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 405.262317][ T7409] loop3: detected capacity change from 0 to 512 [ 405.270804][ T7414] loop1: detected capacity change from 0 to 128 [ 405.273120][ T7414] EXT4-fs: Ignoring removed orlov option [ 405.287699][ T7415] loop0: detected capacity change from 0 to 512 [ 405.317263][ T7414] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 405.429890][ T5803] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 405.433001][ T5806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 406.954458][ T7424] loop0: detected capacity change from 0 to 512 [ 407.129208][ T7424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 407.241315][ T7429] loop1: detected capacity change from 0 to 16 [ 407.246944][ T7429] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 407.285550][ T7429] cramfs: wrong endianness [ 407.650717][ T7424] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 407.884663][ T5803] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.041516][ T27] audit: type=1326 audit(386.393:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.0.567" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96f45ee8 code=0x0 [ 408.273226][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 408.302088][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.315772][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.317951][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.367801][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.370657][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.387191][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 408.389883][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 408.392618][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 408.395091][ T4661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 408.399595][ T7245] device veth0_vlan entered promiscuous mode [ 408.407018][ T7245] device veth1_vlan entered promiscuous mode [ 408.754998][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 408.759823][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 408.762453][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 408.765173][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 408.769083][ T7245] device veth0_macvtap entered promiscuous mode [ 408.773949][ T7245] device veth1_macvtap entered promiscuous mode [ 408.815460][ T4409] device hsr_slave_0 left promiscuous mode [ 408.855531][ T4409] device hsr_slave_1 left promiscuous mode [ 408.940691][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.942824][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.945551][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.947603][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.950100][ T4409] device bridge_slave_1 left promiscuous mode [ 408.952094][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.005797][ T4409] device bridge_slave_0 left promiscuous mode [ 409.007577][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.062870][ T4409] device hsr_slave_0 left promiscuous mode [ 409.111911][ T4409] device hsr_slave_1 left promiscuous mode [ 409.197240][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.199305][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.202864][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.204911][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.207332][ T4409] device bridge_slave_1 left promiscuous mode [ 409.209297][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.251415][ T4409] device bridge_slave_0 left promiscuous mode [ 409.253132][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.453985][ T4409] device veth1_macvtap left promiscuous mode [ 409.455615][ T4409] device veth0_macvtap left promiscuous mode [ 409.457283][ T4409] device veth1_vlan left promiscuous mode [ 409.458842][ T4409] device veth0_vlan left promiscuous mode [ 409.573107][ T4409] device veth1_macvtap left promiscuous mode [ 409.574891][ T4409] device veth0_macvtap left promiscuous mode [ 409.576541][ T4409] device veth1_vlan left promiscuous mode [ 409.579233][ T4409] device veth0_vlan left promiscuous mode [ 411.724252][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 411.989419][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 412.160302][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.437267][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.241020][ T4409] bond0 (unregistering): Released all slaves [ 417.616002][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 417.816320][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 418.039215][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.297095][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.132734][ T4409] bond0 (unregistering): Released all slaves [ 421.396774][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.399634][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.402118][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.404841][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.408160][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.410967][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.413577][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.416235][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.418878][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.421603][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.424192][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.426915][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.431469][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.437041][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.442297][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.444852][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.447523][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.453311][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.456135][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.458712][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.462641][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.465333][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.468070][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.471228][ T7245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.474013][ T7245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.477823][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.479924][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 421.483208][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.485931][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 421.488534][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.491782][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.494526][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 421.501717][ T7245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.504279][ T7245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.506619][ T7245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.508895][ T7245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.574484][ T4694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.577120][ T4694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.586395][ T5516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.605097][ T5516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.607407][ T5516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.616901][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.838175][ T7444] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 421.860213][ T4311] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.864489][ T4311] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.867714][ T4311] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.871188][ T4311] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.874519][ T4311] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.877465][ T4311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.935416][ T7438] loop1: detected capacity change from 0 to 512 [ 422.076499][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 422.080216][ T7438] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.610: casefold flag without casefold feature [ 422.085912][ T7438] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.610: corrupted inode contents [ 422.137493][ T7438] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #3: comm syz.1.610: mark_inode_dirty error [ 422.158436][ T7438] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #3: comm syz.1.610: corrupted inode contents [ 422.166113][ T7438] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.610: mark_inode_dirty error [ 422.184746][ T7438] Quota error (device loop1): write_blk: dquota write failed [ 422.187212][ T7438] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 422.189857][ T7438] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.610: Failed to acquire dquot type 0 [ 422.227717][ T7449] loop4: detected capacity change from 0 to 8192 [ 422.239170][ T7460] loop0: detected capacity change from 0 to 1024 [ 422.274773][ T7438] EXT4-fs (loop1): 1 orphan inode deleted [ 422.276394][ T7438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 422.279739][ T7449] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.304683][ T4694] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 422.308056][ T4694] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:15: Failed to release dquot type 1 [ 422.797005][ T7460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 423.074897][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 423.082914][ T7468] loop2: detected capacity change from 0 to 512 [ 423.087448][ T7468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.123033][ T7468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 423.149535][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.151518][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.154005][ T7442] device bridge_slave_0 entered promiscuous mode [ 423.157183][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.192457][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.211426][ T7442] device bridge_slave_1 entered promiscuous mode [ 423.292411][ T7476] loop1: detected capacity change from 0 to 1024 [ 423.443060][ T7480] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 423.512712][ T7442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.014767][ T7476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 424.017057][ T7476] System zones: 0-1, 3-12 [ 424.017936][ T7442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.025367][ T4311] Bluetooth: hci1: command tx timeout [ 424.025669][ T7476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 424.159572][ T7442] team0: Port device team_slave_0 added [ 424.162773][ T7442] team0: Port device team_slave_1 added [ 424.211811][ T7476] tmpfs: Unknown parameter ':' [ 424.223815][ T7245] EXT4-fs (loop2): unmounting filesystem. [ 424.314831][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.316747][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.323497][ T7442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.339794][ T7442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.341811][ T7442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.356705][ T7442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.429598][ T4311] Bluetooth: hci2: unexpected event 0x35 length: 4 < 6 [ 424.496200][ T4311] Bluetooth: hci2: unexpected event 0x3b length: 20 > 10 [ 424.602937][ T7493] loop2: detected capacity change from 0 to 16 [ 424.647189][ T7493] erofs: (device loop2): mounted with root inode @ nid 36. [ 424.672616][ T7493] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 424.675718][ T7493] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 424.679080][ T7493] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 424.682139][ T7493] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 424.685077][ T7493] syz.2.604: attempt to access beyond end of device [ 424.685077][ T7493] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 424.689298][ T7493] syz.2.604: attempt to access beyond end of device [ 424.689298][ T7493] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 425.207016][ T7442] device hsr_slave_0 entered promiscuous mode [ 425.266234][ T7442] device hsr_slave_1 entered promiscuous mode [ 425.285122][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 425.308323][ T7442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.310409][ T7442] Cannot create hsr debugfs directory [ 425.486056][ T7495] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 425.488105][ T7495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 425.520367][ T7495] vhci_hcd vhci_hcd.0: Device attached [ 426.101854][ T7508] loop4: detected capacity change from 0 to 164 [ 426.250126][ T4311] Bluetooth: hci1: command tx timeout [ 426.424436][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 426.505311][ T4353] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 426.524910][ T7512] loop0: detected capacity change from 0 to 512 [ 426.538060][ T7512] ext4: Unknown parameter 'noacl' [ 426.569593][ T7514] loop1: detected capacity change from 0 to 512 [ 426.572163][ T7514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 426.591696][ T7496] vhci_hcd: connection reset by peer [ 426.595571][ T7442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.599137][ T5516] vhci_hcd: stop threads [ 426.616081][ T5516] vhci_hcd: release socket [ 426.715216][ T7514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 426.758607][ T5516] vhci_hcd: disconnect device [ 427.531654][ T7520] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 428.028969][ T4311] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3 [ 428.123962][ T7442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.939175][ T4316] Bluetooth: hci1: command tx timeout [ 429.009908][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 429.130846][ T7535] loop0: detected capacity change from 0 to 2048 [ 429.153271][ T7537] loop1: detected capacity change from 0 to 512 [ 429.159131][ T7537] EXT4-fs: Ignoring removed nomblk_io_submit option [ 429.192230][ T7442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.210420][ T7535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 429.213817][ T7537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 429.315015][ T7544] loop2: detected capacity change from 0 to 16 [ 429.583685][ T7544] erofs: (device loop2): mounted with root inode @ nid 36. [ 429.610402][ T7544] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 429.613456][ T7544] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 429.616413][ T7544] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 429.619068][ T7544] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 429.621941][ T7544] syz.2.620: attempt to access beyond end of device [ 429.621941][ T7544] loop2: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 429.625906][ T7544] syz.2.620: attempt to access beyond end of device [ 429.625906][ T7544] loop2: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 430.422686][ T7548] EXT4-fs warning (device loop1): verify_group_input:169: Last group not full [ 430.972127][ T7550] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 16: comm syz.0.622: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 431.295848][ T4301] Bluetooth: hci6: command 0x0406 tx timeout [ 431.298191][ T4311] Bluetooth: hci1: command tx timeout [ 431.354812][ T7553] loop4: detected capacity change from 0 to 512 [ 431.383884][ T7553] EXT4-fs (loop4): 1 truncate cleaned up [ 431.385771][ T7553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.535080][ T7553] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.623: Directory hole found for htree leaf block 0 [ 431.550645][ T7236] EXT4-fs (loop0): unmounting filesystem. [ 431.575720][ T27] audit: type=1326 audit(408.413:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.623" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff97545ee8 code=0x0 [ 431.691867][ T7559] syz.2.626 (7559): attempted to duplicate a private mapping with mremap. This is not supported. [ 431.729989][ T4769] EXT4-fs (loop1): unmounting filesystem. [ 431.745109][ T7442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.951386][ T7563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.625'. [ 431.988189][ T4353] vhci_hcd: vhci_device speed not set [ 432.052342][ T7566] loop1: detected capacity change from 0 to 16 [ 432.066226][ T7566] erofs: (device loop1): mounted with root inode @ nid 36. [ 432.098801][ T7442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.174077][ T7442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.215742][ T7442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.264558][ T7442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.427311][ T7568] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 432.684803][ T7568] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 432.695770][ T7568] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 432.722722][ T7568] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 432.725851][ T7568] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -18 in[46, 4050] out[1851] [ 432.736813][ T7568] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 433.091400][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 433.183245][ T7573] loop2: detected capacity change from 0 to 512 [ 433.185487][ T7573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.227758][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.281775][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.284607][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.295853][ T7442] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.326143][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 433.329190][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.331743][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.333656][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.350517][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 433.359958][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.378902][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.380846][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.416209][ T7573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 433.959761][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.363915][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.368690][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.371700][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.387740][ T7585] loop1: detected capacity change from 0 to 128 [ 434.395491][ T7585] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 434.405437][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.110512][ T7587] loop0: detected capacity change from 0 to 16 [ 435.571002][ T7588] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 435.602727][ T7587] erofs: (device loop0): mounted with root inode @ nid 36. [ 435.610308][ T7583] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 435.613122][ T7583] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 435.615734][ T7583] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 435.618317][ T7583] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 435.620987][ T7583] syz.0.633: attempt to access beyond end of device [ 435.620987][ T7583] loop0: rw=524288, sector=736, nr_sectors = 112 limit=16 [ 435.624961][ T7583] syz.0.633: attempt to access beyond end of device [ 435.624961][ T7583] loop0: rw=524288, sector=13478624032, nr_sectors = 24 limit=16 [ 435.727631][ T7442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.795398][ T7442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.048594][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.051180][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.084996][ T4301] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 436.087537][ T4301] Bluetooth: hci6: Injecting HCI hardware error event [ 436.095191][ T4316] Bluetooth: hci6: hardware error 0x00 [ 436.137553][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.181761][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.199553][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.238408][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.266410][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.284325][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 436.340026][ T7245] EXT4-fs (loop2): unmounting filesystem. [ 436.435505][ T7600] loop2: detected capacity change from 0 to 512 [ 436.450315][ T7600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.459238][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 436.462065][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.497735][ T7600] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 436.512496][ T7442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.571499][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.574262][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 436.592327][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 436.596153][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 436.623289][ T7442] device veth0_vlan entered promiscuous mode [ 436.646748][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 436.649604][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 436.718751][ T7442] device veth1_vlan entered promiscuous mode [ 436.842972][ T7609] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 437.398723][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 437.401594][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 437.455747][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 437.459189][ T4680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.462884][ T7442] device veth0_macvtap entered promiscuous mode [ 437.465527][ T4301] Bluetooth: hci2: unexpected cc 0x042e length: 9 > 7 [ 437.474695][ T7442] device veth1_macvtap entered promiscuous mode [ 437.538656][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.542013][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.559568][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.562427][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.600508][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.603532][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.606272][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.608986][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.611727][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.615648][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.618170][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.620987][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.624201][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.627046][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.630940][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.631004][ T7245] EXT4-fs (loop2): unmounting filesystem. [ 437.646748][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 437.649808][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 437.659695][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 437.688007][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.711673][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.714610][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.717207][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.765222][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.767742][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.770395][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.772999][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.799574][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.802061][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.804797][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.838425][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.841291][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.843851][ T7442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.846569][ T7442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.884133][ T7442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.900898][ T7619] loop2: detected capacity change from 0 to 128 [ 437.902310][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.905606][ T7290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.923926][ T7619] EXT4-fs: Ignoring removed orlov option [ 437.926458][ T7442] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.929007][ T7442] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.931354][ T7442] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.941601][ T7442] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.946442][ T7619] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 438.907159][ T4316] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 439.057592][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.060506][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.075746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.213416][ T7422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.215825][ T7422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.222881][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.245172][ T7627] loop2: detected capacity change from 0 to 512 [ 439.271300][ T7627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 439.341390][ T7627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 442.633836][ T7637] EXT4-fs warning (device loop2): verify_group_input:169: Last group not full [ 442.688803][ T7615] loop4: detected capacity change from 0 to 40427 [ 442.700935][ T7634] loop0: detected capacity change from 0 to 16 [ 442.717633][ T7634] erofs: (device loop0): mounted with root inode @ nid 36. [ 442.730295][ T7615] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 442.732267][ T7615] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 442.735117][ T7615] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff [ 442.875169][ T7615] F2FS-fs (loop4): invalid crc value [ 442.894669][ T7245] EXT4-fs (loop2): unmounting filesystem. [ 442.897307][ T7615] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 443.105469][ T7477] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 443.335578][ T7654] loop4: detected capacity change from 0 to 512 [ 443.370794][ T7654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.409454][ T7657] loop2: detected capacity change from 0 to 128 [ 443.411601][ T7657] EXT4-fs: Ignoring removed orlov option [ 443.450926][ T7654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 444.145973][ T7657] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 444.560586][ T7666] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 445.967037][ T7677] loop3: detected capacity change from 0 to 512 [ 445.969588][ T7677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 446.109762][ T6888] EXT4-fs (loop4): unmounting filesystem. [ 446.119186][ T7677] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 446.462744][ T7696] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 447.074879][ T7442] EXT4-fs (loop3): unmounting filesystem. [ 447.108808][ T7700] loop4: detected capacity change from 0 to 128 [ 447.134104][ T7700] EXT4-fs: Ignoring removed orlov option [ 447.165995][ T7700] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 449.555229][ T4316] Bluetooth: hci5: link tx timeout [ 449.556993][ T4316] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 449.559266][ T4316] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 449.561766][ T4316] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 4316, name: kworker/u5:8 [ 449.813917][ T7711] loop3: detected capacity change from 0 to 1024 [ 449.816163][ T7711] EXT4-fs: Ignoring removed orlov option [ 449.817644][ T7711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 449.964269][ T4316] preempt_count: 0, expected: 0 [ 449.965647][ T4316] RCU nest depth: 1, expected: 0 [ 449.967013][ T4316] 3 locks held by kworker/u5:8/4316: [ 449.968400][ T4316] #0: ffff0000f0f2e138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 449.971634][ T4316] #1: ffff80001e0c7c20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 449.975043][ T4316] #2: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 449.977907][ T4316] CPU: 0 PID: 4316 Comm: kworker/u5:8 Not tainted 6.1.106-syzkaller #0 [ 449.980060][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 449.982691][ T4316] Workqueue: hci5 hci_tx_work [ 449.983926][ T4316] Call trace: [ 449.984844][ T4316] dump_backtrace+0x1c8/0x1f4 [ 449.986125][ T4316] show_stack+0x2c/0x3c [ 449.987225][ T4316] dump_stack_lvl+0x108/0x170 [ 449.988512][ T4316] dump_stack+0x1c/0x58 [ 449.989622][ T4316] __might_resched+0x37c/0x4d8 [ 449.990931][ T4316] __might_sleep+0x90/0xe4 [ 449.992162][ T4316] __mutex_lock_common+0xcc/0x21a0 [ 449.993499][ T4316] mutex_lock_nested+0x38/0x44 [ 449.994885][ T4316] hci_cmd_sync_submit+0x4c/0x230 [ 449.996271][ T4316] hci_cmd_sync_queue+0x84/0x9c [ 449.997603][ T4316] hci_abort_conn+0x19c/0x2f8 [ 449.998873][ T4316] hci_disconnect+0xe4/0x288 [ 450.000119][ T4316] __check_timeout+0x2d8/0x3fc [ 450.001441][ T4316] hci_tx_work+0xf84/0x18e4 [ 450.002604][ T4316] process_one_work+0x7ac/0x1404 [ 450.003925][ T4316] worker_thread+0x8e4/0xfec [ 450.005174][ T4316] kthread+0x250/0x2d8 [ 450.006226][ T4316] ret_from_fork+0x10/0x20 [ 450.009751][ T4316] [ 450.010418][ T4316] ============================= [ 450.011668][ T4316] [ BUG: Invalid wait context ] [ 450.012919][ T4316] 6.1.106-syzkaller #0 Tainted: G W [ 450.014731][ T4316] ----------------------------- [ 450.016072][ T4316] kworker/u5:8/4316 is trying to lock: [ 450.017565][ T4316] ffff0000e3cc89b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x4c/0x230 [ 450.020291][ T4316] other info that might help us debug this: [ 450.021869][ T4316] context-{4:4} [ 450.022735][ T4316] 3 locks held by kworker/u5:8/4316: [ 450.024161][ T4316] #0: ffff0000f0f2e138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 450.027068][ T4316] #1: ffff80001e0c7c20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 450.030230][ T4316] #2: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 450.032763][ T4316] stack backtrace: [ 450.033878][ T4316] CPU: 0 PID: 4316 Comm: kworker/u5:8 Tainted: G W 6.1.106-syzkaller #0 [ 450.036445][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 450.039126][ T4316] Workqueue: hci5 hci_tx_work [ 450.040454][ T4316] Call trace: [ 450.041357][ T4316] dump_backtrace+0x1c8/0x1f4 [ 450.042615][ T4316] show_stack+0x2c/0x3c [ 450.043720][ T4316] dump_stack_lvl+0x108/0x170 [ 450.045035][ T4316] dump_stack+0x1c/0x58 [ 450.046113][ T4316] __lock_acquire+0x1b14/0x7680 [ 450.047361][ T4316] lock_acquire+0x26c/0x7cc [ 450.048538][ T4316] __mutex_lock_common+0x190/0x21a0 [ 450.050022][ T4316] mutex_lock_nested+0x38/0x44 [ 450.051302][ T4316] hci_cmd_sync_submit+0x4c/0x230 [ 450.052622][ T4316] hci_cmd_sync_queue+0x84/0x9c [ 450.053927][ T4316] hci_abort_conn+0x19c/0x2f8 [ 450.055148][ T4316] hci_disconnect+0xe4/0x288 [ 450.056323][ T4316] __check_timeout+0x2d8/0x3fc [ 450.057570][ T4316] hci_tx_work+0xf84/0x18e4 [ 450.058761][ T4316] process_one_work+0x7ac/0x1404 [ 450.060139][ T4316] worker_thread+0x8e4/0xfec [ 450.061365][ T4316] kthread+0x250/0x2d8 [ 450.062435][ T4316] ret_from_fork+0x10/0x20 [ 450.120335][ T7711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 450.195575][ T4316] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 450.197957][ T4316] Bluetooth: hci1: Injecting HCI hardware error event [ 450.200013][ T4311] Bluetooth: hci1: hardware error 0x00 [ 450.370547][ T7442] EXT4-fs (loop3): unmounting filesystem. [ 452.121322][ T4409] device hsr_slave_0 left promiscuous mode [ 452.248219][ T4316] Bluetooth: hci5: command 0x0406 tx timeout [ 452.290979][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.293137][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.296311][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.298229][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.300513][ T4409] device bridge_slave_1 left promiscuous mode [ 452.302304][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.345876][ T4409] device bridge_slave_0 left promiscuous mode [ 452.347686][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.391577][ T4409] device hsr_slave_1 left promiscuous mode [ 452.494236][ T4409] device veth1_macvtap left promiscuous mode [ 452.496030][ T4409] device veth0_macvtap left promiscuous mode [ 452.497812][ T4409] device veth1_vlan left promiscuous mode [ 452.499502][ T4409] device veth0_vlan left promiscuous mode [ 452.590325][ T4311] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 454.623501][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 454.816043][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 454.997043][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.231757][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.865560][ T4409] bond0 (unregistering): Released all slaves