last executing test programs: 1m10.058088182s ago: executing program 0 (id=689): socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r4, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) sendmsg$nl_route(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000080), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m7.404229207s ago: executing program 0 (id=694): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000100)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000121401000006000000000000001300"/32], 0x20}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r6, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000004c0)=')', 0x1}]) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x0, 0x0, 0x300a}}) r7 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r7, 0xab07, 0x7fffffffffffffff) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[@ANYBLOB="c51f58717a9aa08ccd0308bf9e8358098084ef72ec8f33d6c720cb988b51223feb1efe2cea182310e97390f27beb3a3e32ef7ee1cba7c77b6c63124f98192e48c22d701fd05ee407b579232703a794bdf299069012b798dc52ee5c8cb36364eabfe74e85776ebc266d119eb93425d47f4df8e63a783e23dc7ba264bccd2330b28c26ff4dea9c70a818543dc57de60b1a5f76532d57ded6024694ed3f1492688d8c6a4b0c2fb92bebb5b969eda48fa789548077aeaccbfb3bd8463ee63978d0293f3ab5e7d2"]) syz_usb_control_io(r8, 0x0, 0x0) 58.288152157s ago: executing program 0 (id=716): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() rt_sigaction(0x10016, 0x0, 0x0, 0x8, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x52000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b4000000000000006114180000000000050000000000000095007400000000006f1fbcdc400ba3dc92830312caafed3827dd3782a01ba7049cbd16ca84f468df37d317b1cc41ba9c090f1a0479b99712434c8bd55ddaf78c2277bdeabe46b6b78cf4e0bf644bcd5c6ba5e293e62a0be0291a724829fb673777753f7c63a9f8231a1c6fbf0bc7510a982c299aab9bc955dfff62ef7648aa58694593facd659984bafc77cacb66406108"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 57.083552444s ago: executing program 0 (id=720): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_open_dev$usbfs(0x0, 0x20076, 0x24000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff0000000007000000", @ANYRES32=0x0], 0x28}}, 0x0) unshare(0x64000600) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file3\x00', 0x20005e, &(0x7f0000000340)={[{@nodelalloc}, {@nodiscard}, {@nodelalloc}]}, 0x2, 0x455, &(0x7f0000000a80)="$eJzs28tvG8UfAPDv2k766+uXUMqjD2igICoQSZMW6IFDi0DiABISHMoxJGlV6jaoCRKtKggcyhFV4o44IvEXcIILAk5IXOGOKlWolxZOi9beTZ3EDo7jxGn9+Ugbz+xDM1/Pjj2zEwfQt0ayP0nEroj4PSKG6tmlJ4zUX+7cujr1962rU0mk6dt/JbXzbt+6OlWcWly3s8gs1PMHmpQ7d/nK+clqdeZSnh+bv/DB2NzlK8+fuzB5dubszMWJEyeOHxt/6cWJF1pXPmk/zqxOt/d/PHtw3+vvXn9z6vT1937+NiniXxZHl4w02VcuEk93ubBe292QTip5otyjytC2rImy5hqo9f+hKEdl8dhQvPZZTysHbKg0TdPBVgeTWEiB+1gSva4B0BvFV302/y22TRt8bAE3T9UnQFncd/KtfqQSpfycgWXz227KZlunF/75KttiY55DAAAs8f2p+uvK8V8pHm4472S+NjQcEQ9ExJ6IeDAi9kbEQxG1cx+JiEcbrmlneWb5IsnK8U/pRmeRtScb/72cr20tHf8Vo78YLue53bX4B5Iz56ozRyPi/xFxJAa2ZfnxVcr44dXfvmh1bKRh/JdtWfnFWDCvx43KtqXXTE/OT64n5kY3P43YX2kWf7K4EpC1476I2H+oszLOPfvNwVbH/jv+VVQ6q0+j9OuIZ+rtvxDL4i8kq69Pjv0vqjNHx4q7YqVffr32Vqvy1xV/F2Ttv6Pp/b8Y/3DSuF47t/Yyrv3xecs5Taf3/2DyTi1dPLv+aHJ+/tJ4xGDyRr7/5N39E3evLfLF+Vn8Rw437/974u47cSAispv4sYh4PCIO5XV/IiKejIjDq8T/0ytPvd95/Bsri396Te2/9kT5/I/fLSl0eJX4k2jS/sdrqSP5nnY+/9qt4HrfPwAAALgXlCJiVySl0cV0qTQ6Wv9/+b2xo1SdnZt/7szshxen678RGI6BUvGka6jheeh4/sSgyE/k0/wifyx/bvxleXstPzo1W53udfDQ53a26P+ZP/1+A+5/XVhHA+5Rnfb/NE0/6XJVgE3m+x/6l/4P/atJ/9++LL9ts+oCbK5m3/8m9tAfjP+hf+n/0L/0f+hf+j/0pfX8rr9riezzZwtUo+1Emvao9MHex76YiNKWqIbEBiV6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHf8GAAD//zV058U=") 55.886431097s ago: executing program 0 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) 55.337669062s ago: executing program 3 (id=725): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r3}, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x76}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xa, 0x2}]}, @fwd={0x8}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x7b, 0x2}]}, {0x0, [0x61, 0x0, 0x61]}}, &(0x7f0000000640)=""/109, 0x4d, 0x6d, 0x0, 0x4, 0x0, @void, @value}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080002007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 54.407373662s ago: executing program 0 (id=726): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001080)={0x0, 0xfff1, 0xbb53c9e0894411f2, 0x1, 0x7}, &(0x7f00000010c0)=0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, &(0x7f0000001140)) ptrace$pokeuser(0x6, r4, 0x5, 0xd9e) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001300)={r2, 0x1000, "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"}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/zoneinfo\x00', 0x0, 0x0) syz_clone3(&(0x7f0000001280)={0x4000000, 0x0, 0x0, 0x0, {0x17}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x58) 53.796342348s ago: executing program 3 (id=728): r0 = open(0x0, 0x400145042, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x12, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) 53.491633537s ago: executing program 3 (id=730): semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x3}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='io\x00') pread64(r7, &(0x7f00000004c0)=""/251, 0xfb, 0x4) 50.397554608s ago: executing program 3 (id=738): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0xa0) write$P9_RVERSION(r4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x13) r5 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') getdents64(r5, 0xffffffffffffffff, 0x43) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000001c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@nostrict}, {@unhide}, {@uid}, {@shortad}, {@gid}, {@shortad}, {@utf8}]}, 0x4, 0xc3d, &(0x7f0000001940)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000000200)) 48.473846121s ago: executing program 3 (id=740): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f0000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x180}}, 0x0) 47.375741589s ago: executing program 3 (id=745): syz_open_procfs(0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x0, 0x0, 0x8000, 0x14, 0x0, 0xe8d9}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x3, &(0x7f0000000040)=@raw=[@alu, @cb_func], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r3, 0x0, 0xfdef) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2204c3b, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1]) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0xa2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'user\x00'}, 0x7a, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 40.206638062s ago: executing program 4 (id=760): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00bc78f72200e6b3bc31a70c81525029e43200000000000dd448e5855409a301ed5993e6933eada08379b21e9579bab9db6bdd84d037364fd92b4983ef2f2cf4008195395b88471ebaca09ed5f44494e25d854d372a2f036bf4a60e6ac1bc79e1e3f7a855c"], 0xfe, 0x19e, &(0x7f0000000000)="$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") ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 39.477034889s ago: executing program 4 (id=761): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001fffffff080001006e00000008000300", @ANYRES32=r5], 0x60}}, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0xf1, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x2, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x6}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0xf}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x1], 0x1}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0xae, "d1"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x1, 0x3, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3f, 0x3, 0x7f, 0x9, "", "23b1da"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x9, 0x3e, 0x7, "60d705"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1f, 0x3, 0x9, {0x7, 0x25, 0x1, 0x1, 0x0, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x0, 0x40, 0x6a, "993b6cd1d0"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf8, 0x3, 0x3c, 0x6, "8b05f93cf0b66ddd1e"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x81, 0x3, 0x1f, 0x6, "70cd", "de06cc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x57, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf7, 0x1, 0x4, 0x4, "", "ab85"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x40, 0x4, 0x6, 0x2, "494ad2fbf6d7cbe5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x1f, 0x86, {0x7, 0x25, 0x1, 0x82, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0x3f, 0x1, 0x20, 0x6}, 0x54, &(0x7f0000000180)={0x5, 0xf, 0x54, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x4, 0xf0f, 0x9, [0x0, 0xc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf000, 0x8, [0xf0]}, @generic={0x21, 0x10, 0xa, "fddfa0427216fb801ca1ebb625459d8fa5ca2072f424b94c7d06be0e5043"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x1, 0xb4, 0x3ff}]}, 0x2, [{0x77, &(0x7f0000000200)=@string={0x77, 0x3, "16893d5b427d5d851545df100d513f6451a1b10a875f2c4123fa32d09f9cbaa8c5698cb925d0b9dec4b182b49513b56b4075fad7ff889c3e74cba9f7dac072d6c9a0afbfef8e7c3acebc19b15845e1dbe121b7dd4af07957b2fcfae02480948088e3d8e8efd3a776ecf4c45029e7250bd50841eef4"}}, {0xee, &(0x7f0000000340)=@string={0xee, 0x3, "de9af1b4d86d1a826079215f15d76b862bc533b8d04a55e243ca2fc2decf2fbf2d16b5228a0fdc4687a52f9c34ffcb45c245f89992c1c749bbb477e0dc2f30ddad8e760bf7ca258149b03ef691878c5e57211b245c53a56d317c92771d9cc45978640b7811d7f985416074e738a7393462e563b1f7b071db11d9bb83f21456bcc29f9baba895755b7fda2d1b0a19b75ae1f9613ef07adea631da712ca7c13e800f4fdd05471342586d2e5110719300c38b6f32660e672b247bee36ceb17ba90c96c5f14ec3c5ffb928be0c7219f2f9f424831e9d6cf7282c06708ad0e0d690fd0947e861d9ab643f6b707cd5"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r7, 0x402, 0x29) fcntl$setsig(r7, 0xa, 0x21) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc050) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 34.64045271s ago: executing program 4 (id=766): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x1, 0x2c3, &(0x7f00000007c0)="$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") timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1}, 0x6e) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) 33.591775532s ago: executing program 4 (id=767): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x22000c0, &(0x7f0000000300)=ANY=[@ANYBLOB='codepage=utf8,part=0x0000000000000f85,iocharset=default,dir_umask=000\x000000000000000000002,\x00'], 0x4, 0x32d, &(0x7f0000000540)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000d80), &(0x7f0000000dc0)=ANY=[@ANYBLOB='en'], 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f00000026c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x810) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000002740)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2885800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000600)={0x2020}, 0xffffffb5) 32.545065929s ago: executing program 4 (id=769): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x8, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) socket$inet6(0xa, 0x3, 0x1) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0xee01, r6) add_key$keyring(0x0, 0x0, 0x0, 0x0, r5) 30.175773942s ago: executing program 4 (id=772): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 26.955750868s ago: executing program 1 (id=781): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) unshare(0x62040200) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4, 0x400}) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000240)='\x00', &(0x7f00000002c0)='./file0\x00', r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x1c}, {0x4c, 0x0, 0x0, 0x7}, {0x6}]}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 26.706575174s ago: executing program 2 (id=782): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) fanotify_mark(0xffffffffffffffff, 0x0, 0x4800003e, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000380)=ANY=[@ANYBLOB="71756f74612c646973636172643d3078303030303030303030303030303030332c696f636861727365743d6e6f6e652c696f636861727365743d6d6163677265656b2c696f636861727365743d69736f383835392d312c71756f74612c6e6f646973636172642c6e6f71756f74612c696f636861727365743d63703836352c00c6fbe0a196a64eeb4f0d01207ded279d4202d04b91811d7c08346d989463a9e62882850e59cc2fe35de327c9155f7754fc59ea4ba1928598c2fd066f53199a43f90356f4f93db1422d41d3a2488395a0fb86d62a4707fcd2a71056d9e3a409b923eb6803fd912ed05b706ce4bcf037"], 0x24, 0x61b6, &(0x7f00000075c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="515206"], 0x14) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="270300000000000000000000000008000100", @ANYRES32], 0x1c}}, 0x0) 25.208682375s ago: executing program 1 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1e, 0x1517, &(0x7f0000003040)="$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") r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001f000100000000000000000005"], 0x114}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) unshare(0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x8, &(0x7f0000000200)=0x1, 0x4) 24.575921721s ago: executing program 2 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8c, 0xfffffffffffffffc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000029c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_connect(0x0, 0x43, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff0005240665"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYBLOB='i'], 0x1, 0x27b, &(0x7f0000000640)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) getgroups(0x8, &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setuid(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) 23.551745556s ago: executing program 1 (id=785): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x9, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='\x00', r4) r5 = epoll_create1(0x0) ustat(0x6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000000}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) 22.384768801s ago: executing program 1 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) close(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 21.237309367s ago: executing program 1 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1b, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/323], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8248, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x1, 0x2d0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}]}, 0x40}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@flushpolicy={0x10, 0x1d, 0x6a1d63bef531ea9b}, 0x10}}, 0x0) 21.015632253s ago: executing program 1 (id=788): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000001080)="$eJzs289rHFUcAPDvzCbp7ybWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vd/Gg2u7H7+cAk7+17s++9ffN23sybDaBnDWd/kojdEfFbRAzWosszDNf+3Vq4XP5n4XI5icXFt/5MqvluLlwuF1mL/XblkZE0Iv0kyQuJbfVvO3vx0tnJSmX6Qh4fmzv33tjsxUvPnjk3eXr69PT5iePHjx0df+H5iefW1I5klfSsXTcPfjhz6MBr71x7vXzy2rs/fZvtsztPr29HuwxnDf9rsaox7Yl2F9Zle+rCSV8XK8K6lCIi667+6vgfjFLc7rzBePXjrlYO2FTZuWlb6+T5ReAelsTqef7uREWADitO9Nn1b7F1aOqxJdx4qXYBlLX7Vr7VUvoizfP0N1zfttNwRJyc//erbItNug8BAFDvs/KXJ+KZZvO/NB6sy7c3X0MZioj7ImJfRNwfEfsj4oGILG/jlHJNhhvid85/0ut32bQ1yeZ/L+ZrW8vnf8XsL4ZKeWxPtf39yakzlekj+WcyEv3bsvj4CmV8/8qvn7dKq5//ZVtWfjEXzOtxva/hBt3U5NxkdVLaBjc+ijjY16z9ydJKQBIRByLi4Preem8ROPPUN4d2HGqeafX2r6AN60yLX0c8Wev/+WhofyFZeX1ybHtUpo+MFUfFnX7+5eqbrcrfUPvbIOv/ncuP/8YsQ0n9eu3s+su4+vunLa9p7vb4H0jervbLQP7aB5NzcxfGIwaSE9X4stcnbu9bxIv8WftHDjcf//vyfbJyHoqI7BB+OCIeiYhH87o/FhGPR8ThFdr/48ut07ZC/081/f5bOv4b+n/9gdLZH75rVf7a+v9YNTSSv1L9/lvFWiu4kc8OAAAA/i/S6jPwSTq6FE7T0dHaM/z7Y2damZmde/rUzPvnp2rPyg9Ff1rc6Rqsux86nszn71iLT+T3iov0o/l94y9KO6rx0fJMZarLbYdet6vF+M/8Uep27YBN12wdbWKgCxUBOq5x/KfLo1fe6GRlgI7ye23oXauM/7RT9QA6z/kfelez8X+lIW4tAO5Nzv/Qu4x/6F3GP/Qu4x960kZ+1y/Qy4FIK5Wp7RFbpT4C7Q10+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPf4LAAD//zAd9WE=") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x201, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) listen(0xffffffffffffffff, 0xfff) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 19.165178982s ago: executing program 2 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc513, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfd, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xf1, 0x3, 0x9}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x15b, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x149, 0x1, 0x1, 0xb, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0xf5, 0x94, 0x2, 0x6, 0x0, 0x7, {{0x7, 0x24, 0x6, 0x0, 0x0, "09dd"}, {0x5, 0x24, 0x0, 0xfff7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfffd, 0x6, 0x1}, [@mdlm_detail={0x103, 0x24, 0x13, 0x2, "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"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x12, 0xfd}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x6, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x1, 0x8, 0x8, 0xf7}, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="3af7cbdcadc21b17"], 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x424}}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r8) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.203839927s ago: executing program 2 (id=790): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 7.575404042s ago: executing program 2 (id=792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, 0x0) 0s ago: executing program 2 (id=793): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") open(&(0x7f00000000c0)='./bus\x00', 0x1a18fd, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') kernel console output (not intermixed with test programs): unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.077890][ T5242] Bluetooth: hci5: command tx timeout [ 472.098135][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.105246][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.133787][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.140947][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.177879][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.301045][ T8603] team0: Port device team_slave_0 added [ 472.400103][ T8603] team0: Port device team_slave_1 added [ 472.488085][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.495074][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.524104][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.617289][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.626212][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.662477][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.776717][ T8718] x_tables: unsorted underflow at hook 1 [ 473.634275][ T8603] hsr_slave_0: entered promiscuous mode [ 473.650504][ T8603] hsr_slave_1: entered promiscuous mode [ 473.666299][ T8497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.690120][ T8725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 473.738175][ T8727] loop3: detected capacity change from 0 to 1764 [ 473.763834][ T8497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.800335][ T8497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.827711][ T8727] ISOFS: Unable to identify CD-ROM format. [ 473.886611][ T8497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.956402][ T8422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.034556][ T8419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.051964][ T5242] Bluetooth: hci5: command tx timeout [ 474.136841][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.540'. [ 474.158227][ T8732] vlan1: entered promiscuous mode [ 474.163304][ T8732] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 474.189874][ T8732] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 474.220348][ T8419] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.267853][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.275254][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.420462][ T8497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.441955][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.449103][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.683687][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.735471][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.742614][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.794441][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.801609][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.566749][ T8422] veth0_vlan: entered promiscuous mode [ 475.585882][ T8756] loop3: detected capacity change from 0 to 24 [ 475.622432][ T8756] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 475.658684][ T8756] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 475.680029][ T8419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.833560][ T8422] veth1_vlan: entered promiscuous mode [ 476.598302][ T8603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.683362][ T8603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.736894][ T8603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.789212][ T8603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.793487][ T8768] loop3: detected capacity change from 0 to 256 [ 476.810959][ T8768] vfat: Unknown parameter 'codepag' [ 476.828193][ T8419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.854038][ T8768] loop3: detected capacity change from 0 to 8 [ 476.864110][ T8422] veth0_macvtap: entered promiscuous mode [ 476.888386][ T8768] unable to read inode lookup table [ 476.901291][ T8422] veth1_macvtap: entered promiscuous mode [ 477.001023][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.020471][ T8768] Invalid source name [ 477.023917][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.035080][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.035658][ T8768] UBIFS error (pid: 8768): cannot open "ubifs", error -22 [ 477.054305][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.065793][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.076706][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.100674][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.112590][ T8497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.165060][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.187059][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.203292][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.214305][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.224732][ T8422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.235591][ T8422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.247300][ T8422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.356925][ T8422] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.366535][ T8422] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.387300][ T8422] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.402678][ T8422] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.169960][ T8419] veth0_vlan: entered promiscuous mode [ 478.362257][ T8419] veth1_vlan: entered promiscuous mode [ 478.424331][ T8497] veth0_vlan: entered promiscuous mode [ 478.515581][ T8419] veth0_macvtap: entered promiscuous mode [ 478.570568][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.622573][ T8419] veth1_macvtap: entered promiscuous mode [ 478.689622][ T8497] veth1_vlan: entered promiscuous mode [ 478.707702][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.710788][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.738228][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.761338][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.787543][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.803125][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.820784][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.832211][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.852441][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.862727][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.873428][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.885537][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.902761][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.909946][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.935252][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.946383][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.958185][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.969076][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.979114][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.989777][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.000934][ T8419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.013251][ T8419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.026604][ T8419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.038803][ T6595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.050497][ T6595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.079465][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.086632][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.352659][ T8419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.367705][ T8419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.376814][ T8419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.490669][ T8419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.835729][ T8497] veth0_macvtap: entered promiscuous mode [ 480.058064][ T8808] program syz.3.546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.064229][ T8497] veth1_macvtap: entered promiscuous mode [ 480.201173][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.211798][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.221963][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.232734][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.243059][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.253995][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.264115][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.275003][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.285201][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.295979][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.308511][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.319255][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.329768][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.339671][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.350459][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.360673][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.371364][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.381697][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.392284][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.402162][ T8497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.412888][ T8497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.424145][ T8497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.436281][ T8603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 480.457860][ T8497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.469155][ T8497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.478608][ T8497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.487913][ T8497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.574294][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.615488][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.743736][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.755130][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.767698][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.776703][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.843127][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.873178][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.905492][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.049176][ T8603] veth0_vlan: entered promiscuous mode [ 481.221238][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 481.703429][ T8603] veth1_vlan: entered promiscuous mode [ 481.748128][ T8603] veth0_macvtap: entered promiscuous mode [ 481.789712][ T8603] veth1_macvtap: entered promiscuous mode [ 481.870309][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.903938][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.916968][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.927516][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.937512][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.948241][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.958197][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.969059][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.979092][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.989768][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.999663][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.010786][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.023390][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.035234][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.046191][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.056828][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.067387][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.077722][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.088468][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.098378][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.110844][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.120854][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.153599][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.192677][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.204231][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.225325][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.796567][ T8603] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.835278][ T8603] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.849010][ T8603] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.873619][ T8603] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.608648][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.665230][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.883116][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.922440][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.019515][ T8846] loop4: detected capacity change from 0 to 512 [ 484.115149][ T8846] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 484.162332][ T8846] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.553: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 484.382614][ T8846] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.553: couldn't read orphan inode 15 (err -117) [ 484.418595][ T8846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.458063][ T8422] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.781783][ T8870] binder: 8859:8870 ioctl c018620c 20000040 returned -1 [ 488.505691][ T6595] bridge_slave_1: left allmulticast mode [ 488.520604][ T6595] bridge_slave_1: left promiscuous mode [ 488.581910][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.655325][ T6595] bridge_slave_0: left allmulticast mode [ 488.679667][ T6595] bridge_slave_0: left promiscuous mode [ 488.687739][ T8882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.689758][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.736116][ T8883] loop4: detected capacity change from 0 to 2048 [ 488.804840][ T8884] loop2: detected capacity change from 0 to 256 [ 488.843565][ T8883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.187561][ T29] audit: type=1800 audit(2000000018.427:151): pid=8894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.563" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 490.507805][ T8884] MINIX-fs: mounting file system with errors, running fsck is recommended [ 490.548004][ T6117] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 490.592598][ T6117] EXT4-fs (loop4): Remounting filesystem read-only [ 490.634601][ T8422] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.787056][ T8901] loop4: detected capacity change from 0 to 8 [ 490.794751][ T8899] loop3: detected capacity change from 0 to 2048 [ 490.801849][ T8899] udf: Unknown parameter '0xffffffffffffffffĭkp;/uH6Rϛ"U\:Jtz Z'Ӡ! mkTNnYd;'Xwmj*eN [ 490.801849][ T8899] s' [ 490.819715][ T8901] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 490.834851][ T8899] netlink: 104 bytes leftover after parsing attributes in process `syz.3.566'. [ 491.003089][ T8903] loop3: detected capacity change from 0 to 512 [ 491.095351][ T8903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.251957][ T8903] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.341001][ T8903] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.567: corrupted inode contents [ 491.356109][ T8911] cramfs: Error -3 while decompressing! [ 491.361889][ T8911] cramfs: ffffffff9a511a08(1306)->ffff88805bd9d000(4096) [ 491.369933][ T8911] cramfs: bad data blocksize 3221485966 [ 491.375836][ T8911] cramfs: Error -3 while decompressing! [ 491.381395][ T8911] cramfs: ffffffff9a511a08(1306)->ffff88805bd9d000(4096) [ 491.427420][ T8903] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.567: mark_inode_dirty error [ 491.499775][ T8903] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.567: corrupted inode contents [ 491.726174][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.740599][ T8915] loop4: detected capacity change from 0 to 4096 [ 491.763311][ T7757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.763574][ T8915] NILFS (loop4): invalid segment: Checksum error in segment payload [ 491.788097][ T8915] NILFS (loop4): trying rollback from an earlier position [ 491.818125][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.832330][ T8915] NILFS (loop4): recovery complete [ 491.839302][ T6595] bond0 (unregistering): Released all slaves [ 491.842817][ T29] audit: type=1400 audit(2000000020.893:152): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=8916 comm="syz.0.571" [ 491.875784][ T8918] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.045039][ T6595] tipc: Left network mode [ 492.332305][ T8927] loop2: detected capacity change from 0 to 256 [ 493.763264][ T6595] hsr_slave_0: left promiscuous mode [ 493.771619][ T6595] hsr_slave_1: left promiscuous mode [ 493.832830][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.879852][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.919130][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.936940][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.000049][ T6595] veth1_macvtap: left promiscuous mode [ 494.006156][ T6595] veth0_macvtap: left promiscuous mode [ 494.011871][ T6595] veth1_vlan: left promiscuous mode [ 494.034375][ T6595] veth0_vlan: left promiscuous mode [ 494.044347][ T8939] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.576'. [ 494.053739][ T8939] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.509623][ T5345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 495.680783][ T5345] usb 2-1: Using ep0 maxpacket: 32 [ 495.687646][ T5345] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.715801][ T5345] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.768753][ T5345] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 495.795319][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 495.814654][ T5345] usb 2-1: Product: syz [ 495.824187][ T5345] usb 2-1: Manufacturer: syz [ 495.829206][ T5345] usb 2-1: SerialNumber: syz [ 495.847863][ T5345] appletouch 2-1:1.0: Could not find int-in endpoint [ 495.866352][ T5345] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 495.887285][ T5345] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 497.309737][ T6595] team0 (unregistering): Port device team_slave_1 removed [ 497.440287][ T6595] team0 (unregistering): Port device team_slave_0 removed [ 497.910593][ T5240] Bluetooth: hci0: command 0x0406 tx timeout [ 497.916675][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 498.438896][ T6089] usb 2-1: USB disconnect, device number 7 [ 498.946550][ T8956] loop1: detected capacity change from 0 to 256 [ 498.981181][ T8956] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 500.920657][ T8965] loop1: detected capacity change from 0 to 2048 [ 501.490272][ T8965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.508011][ T8967] loop0: detected capacity change from 0 to 1024 [ 501.706103][ T8969] vlan2: entered promiscuous mode [ 501.711285][ T8969] batadv0: entered promiscuous mode [ 501.985966][ T8977] nfs4: Unexpected value for 'rdma' [ 502.306454][ T8967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 502.349803][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 502.364210][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 502.380806][ T8969] batadv0: left promiscuous mode [ 502.390392][ T5242] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 502.402735][ T5242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 502.410738][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 502.419233][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 502.426610][ T5242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 502.434292][ T5242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 502.471154][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 502.507519][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 502.515242][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 502.522384][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.736383][ T8497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.157882][ T8989] sched: DL replenish lagged too much [ 507.209564][ T5240] Bluetooth: hci4: command tx timeout [ 507.216145][ T5240] Bluetooth: hci7: command tx timeout [ 507.372833][ T8993] : Can't lookup blockdev [ 508.412025][ T9004] loop2: detected capacity change from 0 to 1024 [ 508.467055][ T9004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.817693][ T8979] chnl_net:caif_netlink_parms(): no params data found [ 508.998429][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 509.174678][ T5345] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 509.193844][ T5240] Bluetooth: hci4: command tx timeout [ 509.199670][ T4623] Bluetooth: hci7: command tx timeout [ 509.239569][ T8419] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.279754][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.286926][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.307861][ T8979] bridge_slave_0: entered allmulticast mode [ 509.314963][ T8979] bridge_slave_0: entered promiscuous mode [ 509.374771][ T5345] usb 2-1: Using ep0 maxpacket: 32 [ 509.396281][ T5345] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 509.405656][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.417599][ T5345] usb 2-1: config 0 descriptor?? [ 509.428335][ T5345] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 509.443244][ T5345] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 509.454024][ T5345] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 509.460986][ T5345] usb 2-1: media controller created [ 509.484411][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 509.523018][ T5345] usb 2-1: selecting invalid altsetting 1 [ 509.529839][ T5345] set interface failed [ 509.532031][ T5345] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 509.542979][ T5345] error writing reg: 0xff, val: 0x00 [ 510.261638][ T9021] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 511.202689][ T4623] Bluetooth: hci7: command tx timeout [ 511.218583][ T4623] Bluetooth: hci4: command tx timeout [ 511.290889][ T5345] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 511.512285][ T6595] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.529646][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.537897][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.270746][ T8979] bridge_slave_1: entered allmulticast mode [ 512.278107][ T8979] bridge_slave_1: entered promiscuous mode [ 512.374407][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.383613][ T5345] usb 2-1: USB disconnect, device number 8 [ 512.400825][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.411152][ T8975] bridge_slave_0: entered allmulticast mode [ 512.425005][ T8975] bridge_slave_0: entered promiscuous mode [ 512.445292][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.460309][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.478311][ T8975] bridge_slave_1: entered allmulticast mode [ 512.503996][ T8975] bridge_slave_1: entered promiscuous mode [ 512.573640][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.692016][ T6595] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.720712][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.741538][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.991110][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.564733][ T5240] Bluetooth: hci4: command tx timeout [ 513.577031][ T5240] Bluetooth: hci7: command tx timeout [ 514.809929][ T6595] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.859044][ T9045] loop1: detected capacity change from 0 to 2048 [ 514.924707][ T8979] team0: Port device team_slave_0 added [ 514.966726][ T9045] UDF-fs: error (device loop1): udf_read_inode: (ino 1312) failed !bh [ 514.979465][ T8979] team0: Port device team_slave_1 added [ 515.003966][ T9045] UDF-fs: Scanning with blocksize 512 failed [ 515.008931][ T8975] team0: Port device team_slave_0 added [ 515.021714][ T9045] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 515.033044][ T9045] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 515.041156][ T9045] UDF-fs: Scanning with blocksize 1024 failed [ 515.051269][ T9045] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 515.072923][ T9045] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 515.082499][ T9045] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 515.091229][ T9045] UDF-fs: Scanning with blocksize 2048 failed [ 515.103587][ T9045] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 515.179627][ T6595] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.203418][ T8975] team0: Port device team_slave_1 added [ 515.232833][ T9056] loop0: detected capacity change from 0 to 1024 [ 515.244093][ T9045] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 515.276576][ T9059] loop2: detected capacity change from 0 to 512 [ 515.283829][ T9059] EXT4-fs: Ignoring removed orlov option [ 515.292804][ T9059] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 515.293176][ T9045] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 515.319688][ T9056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.336242][ T9045] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 515.350005][ T9045] UDF-fs: Scanning with blocksize 4096 failed [ 515.373366][ T9045] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 515.388852][ T9059] EXT4-fs (loop2): 1 truncate cleaned up [ 515.395488][ T9059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.461450][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.622241][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.648302][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.666168][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.369888][ T8419] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /15/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 516.391655][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.426770][ T8419] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 516.474861][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.481875][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.487833][ T8419] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /15/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 516.507900][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.518589][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.550637][ T8603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.561365][ T8419] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 516.564094][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.590855][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.616743][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.618111][ T8419] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /15/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 516.655016][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.682502][ T8419] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 516.718330][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.725539][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.758601][ T8419] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /15/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 516.762221][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.863462][ T8419] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 516.883073][ C1] vkms_vblank_simulate: vblank timer overrun [ 516.910800][ T8979] hsr_slave_0: entered promiscuous mode [ 517.087007][ T8419] EXT4-fs error (device loop2): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /15/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 517.108210][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.125578][ T8979] hsr_slave_1: entered promiscuous mode [ 517.142850][ T8979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.691907][ T8979] Cannot create hsr debugfs directory [ 517.932311][ T8419] EXT4-fs error (device loop2): ext4_empty_dir:3128: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 518.211133][ T8975] hsr_slave_0: entered promiscuous mode [ 518.228651][ T8975] hsr_slave_1: entered promiscuous mode [ 518.246720][ T8975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.254692][ T8975] Cannot create hsr debugfs directory [ 519.265189][ T6595] bridge_slave_1: left allmulticast mode [ 519.271630][ T6595] bridge_slave_1: left promiscuous mode [ 519.278133][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.290244][ T6595] bridge_slave_0: left allmulticast mode [ 519.297477][ T6595] bridge_slave_0: left promiscuous mode [ 519.304481][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.681035][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.692585][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.727114][ T6595] bond0 (unregistering): Released all slaves [ 520.864286][ T8979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.948540][ T4623] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 520.958538][ T4623] Bluetooth: hci1: Injecting HCI hardware error event [ 520.968766][ T4623] Bluetooth: hci1: hardware error 0x00 [ 521.025463][ T8979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.056430][ T9096] batadv0: entered promiscuous mode [ 521.066841][ T9096] macvlan2: entered allmulticast mode [ 521.072267][ T9096] batadv0: entered allmulticast mode [ 521.082765][ T9096] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 521.109477][ T8419] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.158888][ T9096] batadv0: left allmulticast mode [ 521.178723][ T9096] batadv0: left promiscuous mode [ 521.471729][ T8979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.686290][ T9110] loop1: detected capacity change from 0 to 4096 [ 521.744874][ T9113] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 522.615185][ T8979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.705370][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 522.718124][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 522.727478][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 522.748165][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 522.757468][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 522.766026][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 522.830173][ T6595] hsr_slave_0: left promiscuous mode [ 522.849779][ T6595] hsr_slave_1: left promiscuous mode [ 522.870037][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.887070][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.900600][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.911867][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.952939][ T6595] veth1_macvtap: left promiscuous mode [ 522.959358][ T6595] veth0_macvtap: left promiscuous mode [ 522.965677][ T6595] veth1_vlan: left promiscuous mode [ 522.971005][ T6595] veth0_vlan: left promiscuous mode [ 523.001955][ T4623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 523.639079][ T6595] team0 (unregistering): Port device team_slave_1 removed [ 523.846589][ T6595] team0 (unregistering): Port device team_slave_0 removed [ 524.750450][ T4623] Bluetooth: hci2: command tx timeout [ 525.469356][ T9152] loop1: detected capacity change from 0 to 512 [ 525.641930][ T9152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 525.717601][ T9152] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.899762][ T9161] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 526.730036][ T4623] Bluetooth: hci2: command tx timeout [ 526.792749][ T9152] Cannot find set identified by id 0 to match [ 527.055766][ T8497] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 527.136931][ T9176] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 527.995802][ T9183] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 528.003293][ T9124] chnl_net:caif_netlink_parms(): no params data found [ 528.015728][ T6089] IPVS: starting estimator thread 0... [ 528.114665][ T9186] IPVS: using max 23 ests per chain, 55200 per kthread [ 528.135906][ T9185] netlink: 40 bytes leftover after parsing attributes in process `syz.1.619'. [ 528.243752][ T6595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.313564][ T9124] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.330946][ T9124] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.360424][ T9124] bridge_slave_0: entered allmulticast mode [ 528.368414][ T9124] bridge_slave_0: entered promiscuous mode [ 528.518307][ T8975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 528.594796][ T6595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.610148][ T9124] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.618620][ T9124] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.719213][ T4623] Bluetooth: hci2: command tx timeout [ 528.835671][ T9124] bridge_slave_1: entered allmulticast mode [ 528.881963][ T9124] bridge_slave_1: entered promiscuous mode [ 529.300883][ T8975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 529.322148][ T8975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 529.340648][ T8975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 529.476030][ T6595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.494054][ T9199] loop1: detected capacity change from 0 to 256 [ 529.542954][ T9124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.618429][ T6595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.700087][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.741319][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.756769][ T9124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.886497][ T9124] team0: Port device team_slave_0 added [ 530.068845][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.076046][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.167201][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.174385][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.376737][ T8979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.574035][ T8979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 530.612674][ T9124] team0: Port device team_slave_1 added [ 530.648324][ T8979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 530.666751][ T8979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 530.691982][ T4623] Bluetooth: hci2: command tx timeout [ 530.797127][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.824513][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.868461][ T9124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.951108][ T9124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.986368][ T9124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.026970][ T9124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.085171][ T6595] bridge_slave_1: left allmulticast mode [ 531.091579][ T6595] bridge_slave_1: left promiscuous mode [ 531.107351][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.151732][ T6595] bridge_slave_0: left allmulticast mode [ 531.166715][ T6595] bridge_slave_0: left promiscuous mode [ 531.182535][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.239989][ T6595] bridge_slave_1: left allmulticast mode [ 531.258744][ T6595] bridge_slave_1: left promiscuous mode [ 531.269675][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.064822][ T6595] bridge_slave_0: left allmulticast mode [ 532.092628][ T6595] bridge_slave_0: left promiscuous mode [ 532.098375][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.862900][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.879632][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.890636][ T6595] bond0 (unregistering): Released all slaves [ 533.035057][ T6595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.047652][ T6595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.069545][ T6595] bond0 (unregistering): Released all slaves [ 533.083097][ T9219] bridge0: port 3(veth0_to_batadv) entered blocking state [ 533.092115][ T9219] bridge0: port 3(veth0_to_batadv) entered disabled state [ 533.099661][ T9219] veth0_to_batadv: entered allmulticast mode [ 533.108012][ T9219] veth0_to_batadv: entered promiscuous mode [ 533.133231][ T9219] bridge0: port 3(veth0_to_batadv) entered blocking state [ 533.140826][ T9219] bridge0: port 3(veth0_to_batadv) entered forwarding state [ 533.266767][ T6595] IPVS: stopping backup sync thread 8557 ... [ 533.462894][ T9124] hsr_slave_0: entered promiscuous mode [ 533.478876][ T9124] hsr_slave_1: entered promiscuous mode [ 533.500679][ T9124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.518607][ T9124] Cannot create hsr debugfs directory [ 534.020925][ T8979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.238322][ T9236] loop1: detected capacity change from 0 to 32768 [ 534.371913][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.421784][ T8979] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.074872][ T6595] hsr_slave_0: left promiscuous mode [ 535.161056][ T6595] hsr_slave_1: left promiscuous mode [ 535.186275][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.227799][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.256310][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.263742][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.338610][ T6595] hsr_slave_0: left promiscuous mode [ 535.382233][ T6595] hsr_slave_1: left promiscuous mode [ 535.388644][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.409171][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.447167][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.454594][ T6595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.505553][ T9284] loop1: detected capacity change from 0 to 128 [ 535.561872][ T29] audit: type=1800 audit(2000000066.766:153): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.630" name="bus" dev="loop1" ino=1048705 res=0 errno=0 [ 535.613636][ T6595] veth1_macvtap: left promiscuous mode [ 535.628465][ T6595] veth0_macvtap: left promiscuous mode [ 535.634068][ T6595] veth1_vlan: left promiscuous mode [ 535.654587][ T9287] Bluetooth: MGMT ver 1.23 [ 535.657114][ T6595] veth0_vlan: left promiscuous mode [ 535.667266][ T6595] veth1_macvtap: left promiscuous mode [ 535.672656][ T9284] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 535.672781][ T6595] veth0_macvtap: left promiscuous mode [ 535.700811][ T6595] veth1_vlan: left promiscuous mode [ 535.708095][ T6595] veth0_vlan: left promiscuous mode [ 535.724592][ T9287] loop1: detected capacity change from 128 to 0 [ 536.053672][ T8497] syz-executor: attempt to access beyond end of device [ 536.053672][ T8497] loop1: rw=524288, sector=33, nr_sectors = 1 limit=0 [ 536.084519][ T8497] syz-executor: attempt to access beyond end of device [ 536.084519][ T8497] loop1: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 536.125496][ T8497] syz-executor: attempt to access beyond end of device [ 536.125496][ T8497] loop1: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 536.149442][ T8497] syz-executor: attempt to access beyond end of device [ 536.149442][ T8497] loop1: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 536.170993][ T8497] syz-executor: attempt to access beyond end of device [ 536.170993][ T8497] loop1: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 536.185180][ T8497] syz-executor: attempt to access beyond end of device [ 536.185180][ T8497] loop1: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 536.200068][ T8497] syz-executor: attempt to access beyond end of device [ 536.200068][ T8497] loop1: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 536.215246][ T8497] syz-executor: attempt to access beyond end of device [ 536.215246][ T8497] loop1: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 536.232068][ T8497] syz-executor: attempt to access beyond end of device [ 536.232068][ T8497] loop1: rw=0, sector=33, nr_sectors = 1 limit=0 [ 536.245718][ T8497] FAT-fs (loop1): Directory bread(block 33) failed [ 536.262517][ T8497] syz-executor: attempt to access beyond end of device [ 536.262517][ T8497] loop1: rw=0, sector=34, nr_sectors = 1 limit=0 [ 536.275924][ T8497] FAT-fs (loop1): Directory bread(block 34) failed [ 536.282514][ T8497] FAT-fs (loop1): Directory bread(block 35) failed [ 536.294373][ T8497] FAT-fs (loop1): Directory bread(block 36) failed [ 536.301043][ T8497] FAT-fs (loop1): Directory bread(block 37) failed [ 536.308080][ T8497] FAT-fs (loop1): Directory bread(block 38) failed [ 536.314989][ T8497] FAT-fs (loop1): Directory bread(block 39) failed [ 536.321858][ T8497] FAT-fs (loop1): Directory bread(block 40) failed [ 536.348415][ T8497] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 536.672671][ T6595] team0 (unregistering): Port device team_slave_1 removed [ 536.720050][ T6595] team0 (unregistering): Port device team_slave_0 removed [ 537.552835][ T5240] Bluetooth: hci0: command 0x0406 tx timeout [ 537.559583][ T4623] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 537.600850][ T6595] team0 (unregistering): Port device team_slave_1 removed [ 537.664605][ T6595] team0 (unregistering): Port device team_slave_0 removed [ 538.128141][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.135346][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.192128][ T9289] batadv0: entered promiscuous mode [ 538.206947][ T9289] veth0: entered promiscuous mode [ 538.258044][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.265158][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.453852][ T9306] vivid-000: ================= START STATUS ================= [ 538.461963][ T9306] vivid-000: Generate PTS: true [ 538.467221][ T9306] vivid-000: Generate SCR: true [ 538.472452][ T9306] tpg source WxH: 320x180 (R'G'B) [ 538.477692][ T9306] tpg field: 1 [ 538.481180][ T9306] tpg crop: 320x180@0x0 [ 538.485402][ T9306] tpg compose: 320x180@0x0 [ 538.489917][ T9306] tpg colorspace: 8 [ 538.493789][ T9306] tpg transfer function: 0/0 [ 538.498491][ T9306] tpg quantization: 0/0 [ 538.503131][ T9306] tpg RGB range: 0/2 [ 538.507343][ T9306] vivid-000: ================== END STATUS ================== [ 539.284389][ T8979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.374322][ T9124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 539.403702][ T9124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 539.439364][ T9124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 539.468876][ T9124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 539.500340][ T8975] veth0_vlan: entered promiscuous mode [ 539.534403][ T4623] Bluetooth: hci0: command 0x0406 tx timeout [ 539.561727][ T8975] veth1_vlan: entered promiscuous mode [ 539.638230][ T8975] veth0_macvtap: entered promiscuous mode [ 539.678821][ T8975] veth1_macvtap: entered promiscuous mode [ 539.721907][ T9124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.759742][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.772330][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.782001][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.792050][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.802593][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.812579][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.833598][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.865788][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.892176][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.903291][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.913454][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.930424][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.940851][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.963605][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.011746][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.035341][ T8975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.058862][ T8975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.094467][ T8975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.111212][ T8975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.128830][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 540.142732][ T9124] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.150987][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 540.163719][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 540.175011][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 540.190913][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 540.191618][ T9333] netlink: 76 bytes leftover after parsing attributes in process `syz.0.637'. [ 540.207651][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 540.275875][ T8979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.348068][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.355297][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.407039][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.414172][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.301304][ T6577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.330554][ T6577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.391582][ T9124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.419748][ T9124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.439975][ T8979] veth0_vlan: entered promiscuous mode [ 541.476503][ T8979] veth1_vlan: entered promiscuous mode [ 541.564994][ T9347] loop0: detected capacity change from 0 to 256 [ 541.655299][ T9347] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 541.716129][ T6082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.101771][ T6082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.207810][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 542.352024][ T4623] Bluetooth: hci1: command tx timeout [ 542.393113][ T8979] veth0_macvtap: entered promiscuous mode [ 542.535531][ T8979] veth1_macvtap: entered promiscuous mode [ 542.878186][ T9365] xt_limit: Overflow, try lower: 0/0 [ 543.221332][ T9124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.437018][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.449125][ T9358] loop4: detected capacity change from 0 to 8192 [ 543.474373][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.533269][ T9358] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 543.544870][ T9331] bridge_slave_0: entered allmulticast mode [ 543.571145][ T9331] bridge_slave_0: entered promiscuous mode [ 543.643463][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.658629][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.679828][ T9331] bridge_slave_1: entered allmulticast mode [ 543.707538][ T9331] bridge_slave_1: entered promiscuous mode [ 543.832794][ T9124] veth0_vlan: entered promiscuous mode [ 543.841073][ T6089] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 543.844611][ T9124] veth1_vlan: entered promiscuous mode [ 543.858902][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.874957][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.886043][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.896790][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.906642][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.918758][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.929340][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 543.941057][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.952862][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.976756][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.989233][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.027532][ T6089] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 544.037043][ T6089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.060714][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.062542][ T6089] usb 5-1: config 0 descriptor?? [ 544.080134][ T6089] smsusb:smsusb_probe: board id=8, interface number 0 [ 544.087846][ T6089] smsusb:smsusb_probe: Device initialized with return code -19 [ 544.137261][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.162367][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.173048][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.183026][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.193669][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.203877][ T8979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.214532][ T8979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.234786][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.268639][ T8979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.289106][ T8979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.312865][ T8979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.332791][ T8979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.346960][ T4623] Bluetooth: hci1: command tx timeout [ 544.352515][ T9331] team0: Port device team_slave_0 added [ 544.416136][ T9331] team0: Port device team_slave_1 added [ 544.579626][ T5244] usb 5-1: USB disconnect, device number 7 [ 544.606959][ T9124] veth0_macvtap: entered promiscuous mode [ 544.654199][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.661561][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.702770][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.729803][ T9124] veth1_macvtap: entered promiscuous mode [ 544.738016][ T6082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.745856][ T6082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.753827][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.768082][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.832236][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.977568][ T9331] hsr_slave_0: entered promiscuous mode [ 544.994321][ T9331] hsr_slave_1: entered promiscuous mode [ 545.010372][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.030000][ T9331] Cannot create hsr debugfs directory [ 545.149860][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.186937][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.207458][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.232994][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.280831][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.309474][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.338824][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.385708][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.414511][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.454441][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.490896][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.509390][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.539741][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.673606][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.695128][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.719327][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.737730][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.757236][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.775496][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.860745][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.911737][ T9380] loop0: detected capacity change from 0 to 8192 [ 545.928224][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.968510][ T9124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.007053][ T9124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.018664][ T9124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.319239][ T4623] Bluetooth: hci1: command tx timeout [ 546.978341][ T9124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.988774][ T9124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.007850][ T9124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.039946][ T9124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.500814][ T6577] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.114294][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 548.133902][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 548.150374][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 548.160103][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 548.168369][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 548.175667][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 548.316958][ T9331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.422824][ T5240] Bluetooth: hci1: command tx timeout [ 548.802020][ T9331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.997156][ T6577] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.091116][ T9331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.161036][ T6577] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.270294][ T9331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.380028][ T6577] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.479353][ T9404] loop0: detected capacity change from 0 to 65536 [ 549.507769][ T9404] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 549.596235][ T9404] XFS (loop0): Ending clean mount [ 549.609703][ T9404] XFS (loop0): Quotacheck needed: Please wait. [ 549.639229][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.651630][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.726774][ T9404] XFS (loop0): Quotacheck: Done. [ 549.888713][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.909824][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.380743][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 550.522370][ T5240] Bluetooth: hci3: command tx timeout [ 550.655445][ T8603] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 550.676353][ T9331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.741215][ T9331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 551.355767][ T9331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.718103][ T9331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.817737][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.840243][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.861895][ T9397] bridge_slave_0: entered allmulticast mode [ 551.886898][ T9397] bridge_slave_0: entered promiscuous mode [ 551.895203][ T6577] bridge_slave_1: left allmulticast mode [ 551.900874][ T6577] bridge_slave_1: left promiscuous mode [ 551.913142][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.933083][ T6577] bridge_slave_0: left allmulticast mode [ 551.940338][ T6577] bridge_slave_0: left promiscuous mode [ 551.963639][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.158766][ T9452] loop0: detected capacity change from 0 to 256 [ 552.165689][ T5288] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 552.195522][ T9452] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 552.355885][ T5288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.401447][ T5288] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.428227][ T5288] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.516149][ T5240] Bluetooth: hci3: command tx timeout [ 553.136515][ T9461] loop0: detected capacity change from 0 to 512 [ 553.216188][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.226123][ T5288] usb 4-1: config 0 descriptor?? [ 553.254706][ T9461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.284667][ T9461] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.486088][ T5240] Bluetooth: hci3: command tx timeout [ 554.560276][ T8603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.749088][ T6577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.761466][ T6577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.784763][ T6577] bond0 (unregistering): Released all slaves [ 554.807299][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.819672][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.826891][ T9397] bridge_slave_1: entered allmulticast mode [ 554.860133][ T9397] bridge_slave_1: entered promiscuous mode [ 554.966681][ T9480] team0: Port device team_slave_0 removed [ 555.008968][ T9441] netlink: 'syz.3.654': attribute type 1 has an invalid length. [ 555.034737][ T9441] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.654'. [ 555.087897][ T1849] usb 4-1: USB disconnect, device number 12 [ 555.166239][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.237730][ T9483] loop0: detected capacity change from 0 to 256 [ 555.410615][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.431476][ T9499] vlan2: entered promiscuous mode [ 556.462701][ T5240] Bluetooth: hci3: command tx timeout [ 557.355954][ T9509] loop3: detected capacity change from 0 to 764 [ 557.368151][ T9509] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 557.390092][ T9509] Cannot find set identified by id 0 to match [ 557.396253][ T9511] loop0: detected capacity change from 0 to 512 [ 557.484751][ T9515] loop2: detected capacity change from 0 to 512 [ 557.611683][ T9511] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.667: corrupted in-inode xattr: invalid ea_ino [ 557.626547][ T9515] journal_path: Lookup failure for './bus' [ 557.653751][ T9515] EXT4-fs: error: could not find journal device path [ 557.662149][ T9397] team0: Port device team_slave_0 added [ 557.682662][ T6577] hsr_slave_0: left promiscuous mode [ 557.715295][ T6577] hsr_slave_1: left promiscuous mode [ 557.727774][ T9511] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.667: couldn't read orphan inode 15 (err -117) [ 557.756350][ T9511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.877213][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.884810][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.949063][ T6577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.942982][ T9511] EXT4-fs error (device loop0): ext4_add_entry:2437: inode #2: comm syz.0.667: Directory hole found for htree leaf block 0 [ 558.943083][ T9527] loop3: detected capacity change from 0 to 512 [ 558.968380][ T9527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 558.976127][ T6577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.177347][ T6577] veth1_macvtap: left promiscuous mode [ 559.182898][ T6577] veth0_macvtap: left promiscuous mode [ 559.214296][ T6577] veth1_vlan: left promiscuous mode [ 559.219729][ T6577] veth0_vlan: left promiscuous mode [ 559.747849][ T9527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 559.756859][ T9527] System zones: 1-12 [ 559.761099][ T9527] EXT4-fs (loop3): 1 truncate cleaned up [ 559.767380][ T9527] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.200820][ T8979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.563885][ T6577] team0 (unregistering): Port device team_slave_1 removed [ 560.618850][ T6577] team0 (unregistering): Port device team_slave_0 removed [ 561.128706][ T9397] team0: Port device team_slave_1 added [ 561.138462][ T9525] dummy0: entered promiscuous mode [ 561.351371][ T8603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.401898][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.413714][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.477318][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.479156][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.479169][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.479191][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.566796][ T9397] hsr_slave_0: entered promiscuous mode [ 561.571105][ T9397] hsr_slave_1: entered promiscuous mode [ 561.572087][ T9397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.572143][ T9397] Cannot create hsr debugfs directory [ 561.587037][ T9331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.595048][ T5287] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 561.826795][ T9331] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.835449][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 561.846261][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 561.846313][ T5287] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 561.846342][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.854537][ T5287] usb 3-1: config 0 descriptor?? [ 561.923986][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.924105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.926207][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.926290][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.245168][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.279586][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.451165][ T9331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.498209][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.523899][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.546988][ T5287] hid (null): bogus close delimiter [ 562.566193][ T5287] hid (null): unknown global tag 0xa5 [ 562.573185][ T5287] hid (null): unknown global tag 0xd [ 562.593414][ T5287] hid-generic 0003:0158:0100.0005: unknown main item tag 0x1 [ 562.602300][ T5287] hid-generic 0003:0158:0100.0005: unexpected long global item [ 562.618967][ T5287] hid-generic 0003:0158:0100.0005: probe with driver hid-generic failed with error -22 [ 562.651341][ T9331] veth0_vlan: entered promiscuous mode [ 562.713878][ T9331] veth1_vlan: entered promiscuous mode [ 562.759742][ T5287] usb 3-1: USB disconnect, device number 6 [ 562.780242][ T9397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.832347][ T9397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 563.796264][ T9397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 564.258967][ T9331] veth0_macvtap: entered promiscuous mode [ 564.275208][ T9397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 564.352878][ T9331] veth1_macvtap: entered promiscuous mode [ 564.556238][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.587164][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.606235][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.635237][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.653749][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.676768][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.691626][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.702639][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.712913][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.724905][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.736560][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.787771][ T5312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 564.797627][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.810678][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.821780][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.832963][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.843247][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.857157][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.870524][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.891769][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.911244][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.922154][ T5244] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 564.938196][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.956316][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.979274][ T5312] usb 3-1: Using ep0 maxpacket: 16 [ 564.995811][ T9331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.006133][ T5312] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 565.017777][ T9331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.027004][ T5312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.038677][ T9331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.048434][ T5312] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 565.058593][ T9331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.070909][ T5312] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 565.097714][ T5312] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.107588][ T5312] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.117100][ T5244] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 565.137119][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.148697][ T5312] usb 3-1: Manufacturer: syz [ 565.154598][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.165664][ T5312] usb 3-1: config 0 descriptor?? [ 565.197860][ T5244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 565.216310][ T5244] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 565.231576][ T5244] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 565.253826][ T5244] usb 4-1: Manufacturer: syz [ 565.265281][ T5244] usb 4-1: config 0 descriptor?? [ 565.310906][ T5240] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 565.320643][ T5240] Bluetooth: hci5: Injecting HCI hardware error event [ 565.331150][ T5240] Bluetooth: hci5: hardware error 0x00 [ 565.344920][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.437907][ T6595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.473754][ T6595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.492139][ T5312] rc_core: IR keymap rc-hauppauge not found [ 565.520550][ T5312] Registered IR keymap rc-empty [ 565.545661][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 565.549837][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.585823][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.592993][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.603444][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 565.640541][ T6591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.642142][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.650625][ T5312] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 565.655566][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.672935][ T6591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.704988][ T5244] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 565.725398][ T5312] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 565.755125][ T5244] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 565.780006][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 565.837889][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 565.891825][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 565.907210][ T9607] loop2: detected capacity change from 0 to 256 [ 565.941704][ T9607] exfat: Unknown parameter 'S-fTl%s-< Qs.+樂Tu\ţ@urZDCL8_:HGm SL' [ 565.959126][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.143051][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.528972][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.773919][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.839374][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.868134][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.895266][ T5312] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 566.913590][ T5312] mceusb 3-1:0.0: Registered ؋ with mce emulator interface version 1 [ 566.932837][ T5312] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 567.085377][ T6089] usb 4-1: USB disconnect, device number 13 [ 567.099907][ T9624] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.679'. [ 567.200405][ T9620] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.679'. [ 567.284881][ T5240] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 567.402324][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.905969][ T9640] loop3: detected capacity change from 0 to 16 [ 567.912351][ T5287] usb 3-1: USB disconnect, device number 7 [ 567.989052][ T9640] erofs: (device loop3): mounted with root inode @ nid 36. [ 568.578246][ T9634] loop1: detected capacity change from 0 to 8192 [ 568.635673][ T9634] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 568.731140][ T9397] veth0_vlan: entered promiscuous mode [ 568.798804][ T9397] veth1_vlan: entered promiscuous mode [ 568.922558][ T9397] veth0_macvtap: entered promiscuous mode [ 568.936341][ T9397] veth1_macvtap: entered promiscuous mode [ 568.962500][ T9634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 568.962588][ T9634] overlayfs: failed to set xattr on upper [ 568.962599][ T9634] overlayfs: ...falling back to redirect_dir=nofollow. [ 568.962608][ T9634] overlayfs: ...falling back to index=off. [ 568.962617][ T9634] overlayfs: ...falling back to uuid=null. [ 568.962628][ T9634] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 568.992376][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992399][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.992412][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992427][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.992441][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992456][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.992468][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992483][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.992496][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992510][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.992523][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.992538][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.993654][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.996809][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996834][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.996845][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996857][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.996867][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996879][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.996889][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996901][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.996912][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996924][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.996934][ T9397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.996945][ T9397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.997769][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.020779][ T9397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.020823][ T9397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.020853][ T9397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.020880][ T9397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.335871][ T9672] loop1: detected capacity change from 0 to 8 [ 569.865338][ T9673] bridge0: port 3(erspan0) entered blocking state [ 569.865427][ T9673] bridge0: port 3(erspan0) entered disabled state [ 569.865568][ T9673] erspan0: entered allmulticast mode [ 569.866756][ T9673] erspan0: entered promiscuous mode [ 569.867272][ T9673] bridge0: port 3(erspan0) entered blocking state [ 569.867355][ T9673] bridge0: port 3(erspan0) entered forwarding state [ 569.916935][ T6600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.916959][ T6600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.000023][ T6595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.000048][ T6595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.026942][ T9672] SQUASHFS error: zlib decompression failed, data probably corrupt [ 570.026972][ T9672] SQUASHFS error: Failed to read block 0x9b: -5 [ 570.026991][ T9672] SQUASHFS error: Unable to read metadata cache entry [99] [ 570.027007][ T9672] SQUASHFS error: Unable to read inode 0x127 [ 571.360712][ T9686] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 572.501556][ T9686] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 573.087335][ T9716] loop2: detected capacity change from 0 to 16 [ 573.158784][ T9716] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x9fefb860, 0x02d6543f expected [ 573.447217][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'. [ 573.955720][ T9729] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 574.759341][ T9726] loop2: detected capacity change from 0 to 8192 [ 575.024605][ T9726] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.335111][ T4623] Bluetooth: hci2: Malformed LE Event: 0x0d [ 575.396787][ T9736] loop4: detected capacity change from 0 to 256 [ 575.419968][ T9736] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 575.823276][ T4623] Bluetooth: hci2: command 0x206a tx timeout [ 575.823405][ T5240] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 575.910772][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 577.968674][ T9770] netlink: 'syz.1.704': attribute type 3 has an invalid length. [ 578.339328][ T9778] loop1: detected capacity change from 0 to 164 [ 578.400610][ T9778] bio_check_eod: 7 callbacks suppressed [ 578.400628][ T9778] syz.1.707: attempt to access beyond end of device [ 578.400628][ T9778] loop1: rw=524288, sector=263328, nr_sectors = 8 limit=164 [ 578.406144][ T9778] syz.1.707: attempt to access beyond end of device [ 578.406144][ T9778] loop1: rw=0, sector=263328, nr_sectors = 8 limit=164 [ 578.406283][ T29] audit: type=1800 audit(2000000111.744:154): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.707" name="file0" dev="loop1" ino=1862 res=0 errno=0 [ 578.487901][ T9783] loop2: detected capacity change from 0 to 512 [ 578.689998][ T9783] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 578.690026][ T9783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 578.690092][ T9783] System zones: 0-1, 15-15, 18-18, 34-34 [ 578.690576][ T9783] EXT4-fs (loop2): orphan cleanup on readonly fs [ 578.690659][ T9783] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 578.690730][ T9783] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 578.690762][ T9783] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 578.744185][ T6089] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 578.754054][ T9783] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.708: bg 0: block 40: padding at end of block bitmap is not set [ 578.755227][ T9783] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 578.755577][ T9783] EXT4-fs (loop2): 1 truncate cleaned up [ 578.756503][ T9783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.864650][ T9787] loop4: detected capacity change from 0 to 64 [ 578.865211][ T9787] hfs: Bad value for 'session' [ 579.274327][ T6089] usb 2-1: Using ep0 maxpacket: 32 [ 579.283982][ T6089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.284078][ T6089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.284202][ T6089] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.284273][ T6089] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.386792][ T6089] usb 2-1: config 0 descriptor?? [ 579.410879][ T6089] hub 2-1:0.0: USB hub found [ 579.645455][ T9124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.717433][ T6089] hub 2-1:0.0: 1 port detected [ 580.433951][ T5291] hub 2-1:0.0: activate --> -90 [ 580.728415][ T9805] loop4: detected capacity change from 0 to 256 [ 581.752823][ T5291] usb 2-1-port1: cannot reset (err = -71) [ 581.762514][ T5291] usb 2-1-port1: cannot reset (err = -71) [ 581.768975][ T5291] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 581.785534][ T5291] usb 2-1-port1: cannot disable (err = -71) [ 581.791930][ T1849] usb 2-1: USB disconnect, device number 9 [ 581.798836][ T5291] usb 2-1-port1: attempt power cycle [ 582.024938][ T9811] loop1: detected capacity change from 0 to 736 [ 582.137511][ T9818] netlink: 'syz.2.717': attribute type 1 has an invalid length. [ 582.141208][ T9816] xt_l2tp: v2 doesn't support IP mode [ 582.170842][ T29] audit: type=1326 audit(2000000115.690:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9815 comm="syz.4.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8277dff9 code=0x0 [ 582.236675][ T9818] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.717'. [ 583.118589][ T9823] netlink: 'syz.4.718': attribute type 1 has an invalid length. [ 583.312569][ T9827] loop2: detected capacity change from 0 to 2048 [ 583.354956][ T9827] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 583.425718][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.718'. [ 583.492999][ T9830] veth0_to_batadv: entered allmulticast mode [ 583.523240][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 583.763450][ T9832] loop0: detected capacity change from 0 to 512 [ 583.936504][ T9832] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 583.955007][ T9832] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.720: invalid indirect mapped block 1 (level 1) [ 583.988538][ T9832] EXT4-fs (loop0): 1 truncate cleaned up [ 583.998140][ T9832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.351762][ T8603] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.179466][ T9849] loop2: detected capacity change from 0 to 2048 [ 586.386848][ T9849] loop2: p1 < > p4 [ 586.469335][ T9849] loop2: p4 size 8388608 extends beyond EOD, truncated [ 586.515632][ T9859] binder: 9858:9859 ioctl c018620c 20000040 returned -1 [ 586.556236][ T4686] loop2: p1 < > p4 [ 586.565458][ T4686] loop2: p4 size 8388608 extends beyond EOD, truncated [ 586.759873][ T9859] loop1: detected capacity change from 0 to 1024 [ 586.862792][ T9865] ip6t_rpfilter: unknown options [ 587.659646][ T9870] loop4: detected capacity change from 0 to 512 [ 587.709785][ T9870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.746385][ T9870] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.762888][ T9859] hfsplus: failed to load root directory [ 587.951855][ T9870] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #2: comm syz.4.732: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 587.981786][ T9876] loop1: detected capacity change from 0 to 512 [ 587.988322][ T9876] EXT4-fs: Ignoring removed oldalloc option [ 588.001619][ T9876] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 588.103059][ T9876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 588.115765][ T9876] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.135726][ T6859] udevd[6859]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 588.161806][ T6290] udevd[6290]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 588.173197][ T9876] EXT4-fs (loop1): shut down requested (0) [ 588.246761][ T9870] EXT4-fs (loop4): Remounting filesystem read-only [ 588.249142][ T29] audit: type=1326 audit(2000000122.059:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.4.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8277dff9 code=0x0 [ 588.293259][ T7606] udevd[7606]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 588.311105][ T6850] udevd[6850]: inotify_add_watch(7, /dev/loop11, 10) failed: No such file or directory [ 588.316192][ T6859] udevd[6859]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 588.438056][ T4623] Bluetooth: hci2: command 0x206a tx timeout [ 588.485160][ T9331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 589.654353][ T9397] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.687327][ T9896] loop2: detected capacity change from 0 to 1024 [ 589.694139][ T9896] EXT4-fs: Ignoring removed nobh option [ 589.725317][ T9896] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 590.553402][ T9906] loop3: detected capacity change from 0 to 2048 [ 591.424620][ T9906] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 591.436010][ T9906] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 591.443699][ T9906] UDF-fs: Scanning with blocksize 512 failed [ 591.475894][ T9906] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.652443][ T9909] loop1: detected capacity change from 0 to 1024 [ 591.729149][ T8979] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 591.758888][ T8979] UDF-fs: error (device loop3): udf_read_inode: (ino 834) failed !bh [ 591.890412][ T9913] loop2: detected capacity change from 0 to 512 [ 592.226351][ T5240] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 592.262269][ T5240] Bluetooth: hci3: Injecting HCI hardware error event [ 592.276302][ T5240] Bluetooth: hci3: hardware error 0x00 [ 592.380801][ T9917] hfsplus: xattr search failed [ 592.614692][ T1833] hfsplus: b-tree write err: -5, ino 3 [ 592.645337][ T9913] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 592.718901][ T9918] loop4: detected capacity change from 0 to 1024 [ 592.746518][ T9913] System zones: 0-2, 18-18, 34-35 [ 592.908557][ T9913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.922717][ T9913] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.941358][ T9918] loop4: detected capacity change from 0 to 2048 [ 593.003120][ T6591] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.040053][ T9918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.085899][ T9924] loop1: detected capacity change from 0 to 512 [ 593.172167][ T9924] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 593.259672][ T6591] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.358752][ T9124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.411234][ T6591] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.683748][ T6591] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.575717][ T5240] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 594.585405][ T5240] Bluetooth: hci1: command tx timeout [ 596.110537][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.124679][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.133954][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.163619][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.177359][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.186819][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.266120][ T9957] loop4: detected capacity change from 0 to 1024 [ 596.310792][ T9957] EXT4-fs: Ignoring removed orlov option [ 596.319196][ T9957] EXT4-fs (loop4): Test dummy encryption mode enabled [ 596.338389][ T9957] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 596.391264][ T9956] loop1: detected capacity change from 0 to 2048 [ 596.461755][ T9956] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 596.495294][ T9957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.598365][ T6591] bridge_slave_1: left allmulticast mode [ 596.604058][ T6591] bridge_slave_1: left promiscuous mode [ 596.867438][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.902473][ T9967] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.753: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 597.908187][ T6591] bridge_slave_0: left allmulticast mode [ 597.920207][ T6591] bridge_slave_0: left promiscuous mode [ 597.926397][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.947441][ T9397] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.055572][ T5242] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 598.086010][ T5242] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 598.097073][ T5242] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 598.106150][ T5242] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 598.115764][ T5242] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 598.124296][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.158863][ T5242] Bluetooth: hci4: command tx timeout [ 598.345805][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 600.083378][T10004] loop4: detected capacity change from 0 to 8 [ 600.143942][ T8948] Bluetooth: hci4: command 0x041b tx timeout [ 600.144198][ T5242] Bluetooth: hci6: command tx timeout [ 600.256460][T10004] unable to read fragment index table [ 600.481023][ T5240] Bluetooth: hci1: command tx timeout [ 600.844904][T10012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.761'. [ 600.996967][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.027236][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.059457][ T6591] bond0 (unregistering): Released all slaves [ 601.152272][ T5345] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 601.385225][T10017] loop2: detected capacity change from 0 to 512 [ 601.428143][ T5345] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 601.449689][ T5345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.474000][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 601.523020][ T5345] usb 5-1: config 0 descriptor?? [ 601.928902][T10017] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.762: attempt to clear invalid blocks 2 len 1 [ 601.973547][T10017] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 602.018590][T10017] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.762: invalid indirect mapped block 1819239214 (level 0) [ 602.122562][ T9984] Bluetooth: hci6: command tx timeout [ 602.131993][ T9984] Bluetooth: hci4: command 0x041b tx timeout [ 603.174503][ T9984] Bluetooth: hci1: command tx timeout [ 603.180045][ T5345] hackrf 5-1:0.0: usb_control_msg() failed -110 request 0f [ 603.187371][ T5345] hackrf 5-1:0.0: Could not detect board [ 603.196976][ T5345] hackrf 5-1:0.0: probe with driver hackrf failed with error -110 [ 603.234430][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.457401][T10017] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.762: invalid indirect mapped block 1819239214 (level 1) [ 603.501021][T10017] EXT4-fs (loop2): 1 truncate cleaned up [ 603.514611][T10017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.596991][T10015] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.762: Unrecognised inode hash code 20 [ 603.616091][T10015] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.762: Corrupt directory, running e2fsck is recommended [ 603.629910][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.686013][T10017] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.762: Unrecognised inode hash code 20 [ 603.714521][T10017] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.762: Corrupt directory, running e2fsck is recommended [ 604.070965][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 604.112177][ T5240] Bluetooth: hci4: command 0x041b tx timeout [ 604.122813][ T9984] Bluetooth: hci6: command tx timeout [ 604.144351][ T9124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.216586][ T6591] hsr_slave_0: left promiscuous mode [ 604.236164][ T6591] hsr_slave_1: left promiscuous mode [ 604.255118][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.262773][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.312550][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.326112][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.351484][T10047] loop2: detected capacity change from 0 to 512 [ 604.403125][ T6591] veth1_macvtap: left promiscuous mode [ 604.408697][ T6591] veth0_macvtap: left promiscuous mode [ 604.428636][ T6591] veth1_vlan: left promiscuous mode [ 604.439809][T10047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.466934][ T6591] veth0_vlan: left promiscuous mode [ 604.474890][T10047] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.492760][ T5312] usb 5-1: USB disconnect, device number 8 [ 605.927853][T10057] loop4: detected capacity change from 0 to 128 [ 605.938333][T10057] vfat: Unknown parameter '00000000000000000000003' [ 606.092877][T10057] block device autoloading is deprecated and will be removed. [ 606.127677][ T5240] Bluetooth: hci4: command 0x041b tx timeout [ 606.134483][ T5240] Bluetooth: hci6: command tx timeout [ 606.597285][T10059] loop4: detected capacity change from 0 to 64 [ 607.517035][ T6591] team0 (unregistering): Port device team_slave_1 removed [ 607.975261][ T6591] team0 (unregistering): Port device team_slave_0 removed [ 609.803922][T10071] bond0: entered promiscuous mode [ 609.809109][T10071] bond_slave_0: entered promiscuous mode [ 609.822303][T10071] bond_slave_1: entered promiscuous mode [ 609.840399][T10073] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 609.855249][ T9124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.015749][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.018171][T10076] loop2: detected capacity change from 0 to 512 [ 610.023005][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.044965][ T9948] bridge_slave_0: entered allmulticast mode [ 610.052176][ T9948] bridge_slave_0: entered promiscuous mode [ 610.064747][T10070] bond0: left promiscuous mode [ 610.088465][T10076] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.773: corrupted in-inode xattr: e_value size too large [ 610.089667][T10070] bond_slave_0: left promiscuous mode [ 610.111068][T10076] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.773: couldn't read orphan inode 15 (err -117) [ 610.134675][T10076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.167739][T10070] bond_slave_1: left promiscuous mode [ 610.253183][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.260311][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.268303][ T9948] bridge_slave_1: entered allmulticast mode [ 610.275685][ T9948] bridge_slave_1: entered promiscuous mode [ 610.325765][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.454913][ T9124] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.465523][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.549035][T10085] loop1: detected capacity change from 0 to 256 [ 610.577948][T10085] exfat: Deprecated parameter 'utf8' [ 610.608526][T10085] exfat: Deprecated parameter 'namecase' [ 610.622475][T10085] exfat: Deprecated parameter 'namecase' [ 610.642079][T10085] exfat: Deprecated parameter 'namecase' [ 610.673715][T10085] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 610.688643][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 610.710874][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 610.731375][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 610.768222][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 610.778080][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 610.795105][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 610.964379][ T9948] team0: Port device team_slave_0 added [ 611.007242][ T9972] chnl_net:caif_netlink_parms(): no params data found [ 611.159259][ T9948] team0: Port device team_slave_1 added [ 611.993206][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.019334][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.046883][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.164561][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.186661][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.226063][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.451892][ T6591] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.586830][ T6591] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.853613][ T5240] Bluetooth: hci3: command tx timeout [ 613.036561][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.129157][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.196024][ T9972] bridge_slave_0: entered allmulticast mode [ 613.224610][ T9972] bridge_slave_0: entered promiscuous mode [ 613.257035][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.300652][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.356304][ T9972] bridge_slave_1: entered allmulticast mode [ 613.369062][ T9972] bridge_slave_1: entered promiscuous mode [ 613.701209][T10133] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 613.709328][T10133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.781'. [ 613.758579][ T29] audit: type=1326 audit(2000000633.795:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.1.781" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff238f7dff9 code=0x0 [ 613.879308][ T6591] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.334860][ T6591] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.369213][ T9948] hsr_slave_0: entered promiscuous mode [ 614.392919][ T9948] hsr_slave_1: entered promiscuous mode [ 614.405437][ T9948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.426420][ T9948] Cannot create hsr debugfs directory [ 614.438129][ T9972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.501794][ T9972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.651367][ T9972] team0: Port device team_slave_0 added [ 614.660734][T10130] loop2: detected capacity change from 0 to 32768 [ 614.778554][ T5240] Bluetooth: hci3: command tx timeout [ 614.849706][ T9972] team0: Port device team_slave_1 added [ 615.352962][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.587578][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.615066][ T9972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.706193][T10155] loop1: detected capacity change from 0 to 256 [ 615.820179][T10155] netlink: 256 bytes leftover after parsing attributes in process `syz.1.783'. [ 616.344667][ T9972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.369190][ T9972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.395573][ T9972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.465001][ T6591] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.499128][T10087] chnl_net:caif_netlink_parms(): no params data found [ 616.563571][T10157] loop2: detected capacity change from 0 to 256 [ 616.651389][ T9972] hsr_slave_0: entered promiscuous mode [ 616.670087][ T9972] hsr_slave_1: entered promiscuous mode [ 616.683774][ T9972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.691338][ T9972] Cannot create hsr debugfs directory [ 616.759613][ T9984] Bluetooth: hci3: command tx timeout [ 617.391796][ T6591] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.541312][ T5291] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 617.701936][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 617.737475][ T5291] usb 3-1: config 0 has an invalid descriptor of length 69, skipping remainder of the config [ 617.791635][ T5291] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 617.836207][ T5291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.863436][ T5291] usb 3-1: config 0 descriptor?? [ 617.864894][ T6591] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.874576][ T5291] usb 3-1: bad CDC descriptors [ 617.991958][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.008076][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.024491][T10087] bridge_slave_0: entered allmulticast mode [ 618.034529][T10087] bridge_slave_0: entered promiscuous mode [ 618.052393][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.101503][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.108798][T10087] bridge_slave_1: entered allmulticast mode [ 618.115757][T10087] bridge_slave_1: entered promiscuous mode [ 618.824489][ T9984] Bluetooth: hci3: command tx timeout [ 619.092491][ T6591] bond0: (slave netdevsim0): Releasing backup interface [ 619.139311][ T6591] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.152864][T10177] loop1: detected capacity change from 0 to 512 [ 619.199203][T10177] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.788: corrupted in-inode xattr: invalid ea_ino [ 619.216130][T10177] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.788: couldn't read orphan inode 15 (err -117) [ 619.242163][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.253130][T10177] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.741985][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.580848][T10087] team0: Port device team_slave_0 added [ 620.871181][T10087] team0: Port device team_slave_1 added [ 620.888734][ T5291] usb 3-1: USB disconnect, device number 8 [ 621.724459][ T5288] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 621.932323][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.037951][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 622.116850][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.132378][ T5288] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 622.141906][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.169907][ T5288] usb 3-1: config 0 descriptor?? [ 622.387333][T10183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 622.411153][T10183] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 623.020083][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.031002][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.061972][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.148572][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.159745][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.194215][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.238583][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.415545][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.726707][ T9948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 623.860551][T10184] binder: 10182:10184 ioctl 4c80 0 returned -22 [ 623.866302][ T9948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.320394][ T5288] usb 3-1: USB disconnect, device number 9 [ 624.789273][ T6591] bridge_slave_1: left allmulticast mode [ 624.878512][ T6591] bridge_slave_1: left promiscuous mode [ 624.885535][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.921304][ T6591] bridge_slave_0: left allmulticast mode [ 624.931650][ T6591] bridge_slave_0: left promiscuous mode [ 624.938765][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.970399][ T6591] bridge_slave_1: left allmulticast mode [ 624.976412][ T6591] bridge_slave_1: left promiscuous mode [ 624.983121][ T6591] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.005550][ T6591] bridge_slave_0: left allmulticast mode [ 625.011332][ T6591] bridge_slave_0: left promiscuous mode [ 625.019163][ T6591] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.697248][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.848649][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.999168][ T6591] bond0 (unregistering): Released all slaves [ 633.956968][ T5240] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 634.102475][ T5240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 634.113875][ T5240] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 634.309974][ T5240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 634.323193][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 634.333107][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.496118][ T5240] Bluetooth: hci2: unexpected event for opcode 0x202d [ 635.529052][ T6591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.627256][ T6591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.697935][ T6591] bond0 (unregistering): Released all slaves [ 636.277315][ T5240] Bluetooth: hci5: command tx timeout [ 636.706570][ T9948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 637.682946][ T9948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.257850][ T5242] Bluetooth: hci5: command tx timeout [ 638.961536][T10087] hsr_slave_0: entered promiscuous mode [ 639.004843][T10087] hsr_slave_1: entered promiscuous mode [ 639.050806][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.088476][T10087] Cannot create hsr debugfs directory [ 639.401684][ T5242] Bluetooth: hci2: command 0x206a tx timeout [ 640.240373][ T5240] Bluetooth: hci5: command tx timeout [ 642.222822][ T5240] Bluetooth: hci5: command tx timeout [ 642.580744][T10202] loop2: detected capacity change from 0 to 64 [ 644.105238][ T6591] hsr_slave_0: left promiscuous mode [ 644.134969][ T6591] hsr_slave_1: left promiscuous mode [ 644.163185][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.179642][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.240837][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.277865][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.344003][ T6591] batadv0: left promiscuous mode [ 644.390903][ T6591] veth0: left promiscuous mode [ 644.511471][ T6591] hsr_slave_0: left promiscuous mode [ 644.529494][ T6591] hsr_slave_1: left promiscuous mode [ 644.552410][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.574292][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.619833][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.643266][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.772925][ T6591] veth1_macvtap: left promiscuous mode [ 644.788603][ T6591] veth0_macvtap: left promiscuous mode [ 644.794618][ T6591] veth1_vlan: left promiscuous mode [ 644.820964][ T6591] veth0_vlan: left promiscuous mode [ 644.928864][ T6591] veth1_macvtap: left promiscuous mode [ 644.934546][ T6591] veth0_macvtap: left promiscuous mode [ 644.944756][ T6591] veth1_vlan: left promiscuous mode [ 644.952307][ T6591] veth0_vlan: left promiscuous mode [ 647.715677][ T5288] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000c7: 0000 [#1] PREEMPT SMP KASAN PTI [ 647.728299][ T5288] KASAN: null-ptr-deref in range [0x0000000000000638-0x000000000000063f] [ 647.736732][ T5288] CPU: 1 UID: 0 PID: 5288 Comm: kworker/1:4 Not tainted 6.12.0-rc1-next-20241002-syzkaller #0 [ 647.746984][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.757051][ T5288] Workqueue: events_long flush_mdb [ 647.762210][ T5288] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 647.767607][ T5288] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 1c 0e 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 7a fb 73 ff 4d 8b 34 24 49 8d 6e [ 647.787222][ T5288] RSP: 0018:ffffc90004abfb40 EFLAGS: 00010202 [ 647.793314][ T5288] RAX: ffffffff828ac794 RBX: 00000000000000c7 RCX: ffff888031ddbc00 [ 647.801310][ T5288] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 647.809294][ T5288] RBP: ffffc90004abfdc0 R08: ffff88807936f1eb R09: 1ffff1100f26de3d [ 647.817279][ T5288] R10: dffffc0000000000 R11: ffffed100f26de3e R12: 0000000000000638 [ 647.825267][ T5288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 647.833258][ T5288] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 647.842213][ T5288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.848817][ T5288] CR2: 00000000204ee000 CR3: 000000007ad24000 CR4: 00000000003526f0 [ 647.856805][ T5288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 647.864791][ T5288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 647.872775][ T5288] Call Trace: [ 647.876065][ T5288] [ 647.879002][ T5288] ? __die_body+0x5f/0xb0 [ 647.883353][ T5288] ? die_addr+0xb0/0xe0 [ 647.887529][ T5288] ? exc_general_protection+0x3dd/0x5d0 [ 647.893115][ T5288] ? process_scheduled_works+0x976/0x1850 [ 647.898858][ T5288] ? asm_exc_general_protection+0x26/0x30 [ 647.904610][ T5288] ? hfs_mdb_commit+0x24/0xfd0 [ 647.909389][ T5288] ? hfs_mdb_commit+0x37/0xfd0 [ 647.914154][ T5288] ? _raw_spin_unlock+0x3e/0x50 [ 647.918995][ T5288] ? process_scheduled_works+0x976/0x1850 [ 647.924711][ T5288] process_scheduled_works+0xa63/0x1850 [ 647.930269][ T5288] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.936248][ T5288] ? assign_work+0x364/0x3d0 [ 647.940837][ T5288] worker_thread+0x870/0xd30 [ 647.945441][ T5288] ? __kthread_parkme+0x169/0x1d0 [ 647.950465][ T5288] ? __pfx_worker_thread+0x10/0x10 [ 647.955576][ T5288] kthread+0x2f0/0x390 [ 647.959653][ T5288] ? __pfx_worker_thread+0x10/0x10 [ 647.964794][ T5288] ? __pfx_kthread+0x10/0x10 [ 647.969374][ T5288] ret_from_fork+0x4b/0x80 [ 647.973780][ T5288] ? __pfx_kthread+0x10/0x10 [ 647.978366][ T5288] ret_from_fork_asm+0x1a/0x30 [ 647.983154][ T5288] [ 647.986160][ T5288] Modules linked in: [ 647.990907][ T5288] ---[ end trace 0000000000000000 ]--- [ 648.012682][ T5288] RIP: 0010:hfs_mdb_commit+0x37/0xfd0 [ 648.018953][ T5288] Code: 53 48 83 ec 48 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 1c 0e 0a ff 48 89 5c 24 08 4c 8d a3 38 06 00 00 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 7a fb 73 ff 4d 8b 34 24 49 8d 6e [ 648.041842][ T5288] RSP: 0018:ffffc90004abfb40 EFLAGS: 00010202 [ 648.048653][ T5288] RAX: ffffffff828ac794 RBX: 00000000000000c7 RCX: ffff888031ddbc00 [ 648.058642][ T5288] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 648.104549][ T5288] RBP: ffffc90004abfdc0 R08: ffff88807936f1eb R09: 1ffff1100f26de3d [ 648.125545][ T5288] R10: dffffc0000000000 R11: ffffed100f26de3e R12: 0000000000000638 [ 648.133911][ T5288] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000001800000 [ 648.143228][ T5288] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 648.153820][ T5288] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.160571][ T5288] CR2: 00000000204f3000 CR3: 000000007ad24000 CR4: 00000000003526f0 [ 648.168766][ T5288] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.176779][ T5288] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.184961][ T5288] Kernel panic - not syncing: Fatal exception [ 648.195103][ T5288] Kernel Offset: disabled [ 648.199428][ T5288] Rebooting in 86400 seconds..