last executing test programs: 9.047580363s ago: executing program 0 (id=3912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, '\x00', "03e08b113c0af5000000000000008000", "d5a8948b", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 8.996144366s ago: executing program 0 (id=3914): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3080046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@prjquota}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x9c8, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x960, 0x194, 0x194, 0x960, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x878, 0x898, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9c}, {0x6, 0x3}, {0x2f9, 0x3}, {0x0, 0x3}, {}, {0x3, 0x3}, {0xc, 0x2}, {0x1, 0x2}, {0x8000, 0x2}, {0x8}, {0x7}], [{0x2, 0x401}, {0x8, 0x6}, {0x0, 0x2}, {0x7c9d2e67, 0x200}, {0x8, 0x3}, {0x2, 0x3c}, {0x4, 0x3}, {0x81, 0x9}, {0x5, 0x6a}, {0x3}, {0x80000f, 0x876c}], 0x11, 0xa}, {[{0x6, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x100}, {0x0, 0x1}, {0xe03, 0x1}, {0x8}, {0x6, 0x3}, {0x9, 0x1}], [{0xb, 0xa}, {0xfe7, 0x10000}, {0x1, 0x77656ee}, {0xfffffffb, 0x8}, {0x4, 0xfffffffc}, {0x3, 0x9}, {0x7, 0xcccb}, {0xe, 0x1}, {0x100, 0x4}, {0x9, 0x5}, {0x800, 0x7}], 0x4, 0x6}, {[{0x5, 0x2}, {0x3ff}, {0x0, 0x2}, {0x7, 0x3}, {0xff}, {0x1, 0x2}, {0x6, 0x3}, {0x8, 0x3}, {0x81, 0x2}, {0x60dc, 0x3}, {0x5, 0x3}], [{0x4, 0x43c}, {0xe229, 0xa2e9}, {0x8a0c, 0x8a5}, {0x9}, {0x7, 0x3}, {0x8, 0x9}, {0xffff, 0x80000000}, {0x7, 0x3}, {0xfffffff8, 0x40}, {0x9, 0x1}, {0x100, 0x80}], 0xb, 0x6}, {[{0x81, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x401}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x1}], [{0x8, 0x6}, {0x3, 0x4}, {0x4, 0x10000}, {0x30, 0xffffffbc}, {0x4800000, 0x2}, {0x7, 0x7fffffff}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x80, 0x8}, {0x9, 0xffff}], 0x2, 0x1}, {[{0xcd9e, 0x3}, {0x1, 0x1}, {0xfff, 0x3}, {0x2000000, 0x2}, {0x4, 0x1}, {0x3c000000, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x1}, {0x7f}, {0x4, 0x3}], [{0x63, 0x4}, {0xd20, 0xfdcb}, {0x47, 0x9}, {0xb, 0x2}, {0x0, 0x4}, {0x6, 0x1e}, {0x1, 0x7}, {}, {0x5, 0xba07ba8}, {0xfffffff8, 0x7fffffff}, {0xd, 0x4}], 0x6, 0x3}, {[{0x430558a8, 0x2}, {0x3743, 0x3}, {0x4, 0x4}, {0x3}, {0xffff7142, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x8}, {0x12, 0x2}, {0x80, 0x3}], [{0x80, 0x4}, {0xc71e, 0x7f}, {0x441, 0x1}, {0x6, 0xffffffff}, {0xa0e, 0x9}, {0x21c, 0x200}, {0x7, 0x8a}, {0x2, 0xfffffff9}, {0x1000, 0x40}, {0x4, 0x400}, {0x408b, 0x89a}], 0x4, 0x3}, {[{0x8000}, {0x1, 0x2}, {0x1ff, 0x3}, {0xffffffff, 0x2}, {0x7}, {0x0, 0x3}, {0x58d, 0x1}, {0x7}, {0xc6, 0x2}, {0x7}, {0x3}], [{0x7, 0xe}, {0x3, 0x7}, {0x0, 0x10000}, {0x5, 0x5}, {0xf, 0x9}, {0x5, 0x1ff}, {0x9, 0x1ff}, {0x4, 0x649}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7f}], 0x8}, {[{0x8}, {0x9, 0x3}, {0x5}, {0xb, 0x3}, {0x3, 0x2}, {0x1ff, 0x1}, {0x1000, 0x1}, {0x4, 0x1}, {0xc2, 0x1}, {0xc, 0x2}, {0x5, 0x2}], [{0xf0, 0x6}, {0xfffffffc, 0x1}, {0x7f, 0x9}, {0xfffffffe, 0x2}, {0x7f, 0x4}, {0x7, 0xfffffff8}, {0x1, 0x2}, {0x400, 0x401}, {0x9, 0xf15d}, {0x2, 0x7}, {0x6, 0x3}], 0xa, 0x6}, {[{0x3f, 0xcddfd284d7cd064b}, {0x4, 0x1}, {0x101, 0x2}, {0x5}, {0x9, 0x3}, {0x100, 0x2}, {0x80, 0x3}, {0x5, 0x1}, {0xb, 0x1}, {0x1590d48c, 0x2}, {0xea9a026b, 0x3}], [{0x2, 0x3b1}, {0x6, 0x700}, {0x1, 0x6}, {0x2, 0x8001}, {0x9, 0x9}, {0x5}, {0x8fe4, 0x31b2b08f}, {0x800, 0xb0e}, {0x8c9, 0x7}, {0x1, 0x9}, {0xfffffffd, 0x2}], 0x4, 0x4}, {[{0x5, 0x2}, {0x3, 0x2}, {0xc518, 0x1}, {0x8, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0xe7a, 0x1}, {0x0, 0x3}, {0x2000000}, {0x8, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0xa4b}, {0x2, 0x568e2110}, {0x9, 0x5}, {0xfffffb66, 0x2}, {0xb8b, 0x9}, {0x2, 0x2}, {0xfffffff9, 0xffff0001}, {0x2, 0x8}, {0x3a, 0xbc}, {0xd, 0x1}, {0xc1, 0x4}], 0x8, 0x1}, {[{0x5, 0x3}, {0x10000}, {0x5, 0x2}, {0x4, 0x3}, {0xe}, {0x3ff, 0x1}, {0x1, 0x1}, {0x4}, {0x200008, 0x1}, {0x1, 0x2}, {0x7, 0x1}], [{0x6, 0x45}, {0xfffffffa, 0x6}, {0x81, 0x56}, {0x100, 0x1}, {0x5734, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x398, 0x2}, {0x2, 0x1}, {0x4, 0xb4}, {0x40, 0x603}], 0x9, 0x2}], 0x3}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa28) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) syz_emit_ethernet(0x46, &(0x7f0000001fc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x5}}}}}}}}, 0x0) pread64(r1, &(0x7f0000000a00)=""/126, 0x7e, 0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4d, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf0, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0xd8, 0xa, 0x10, 0x40}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "95d9a2eada6903f08b8382174477391e"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r7, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x2, {0x2, 0x21}}, &(0x7f00000005c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "21c6652c52ef36ae0d7578441817a70ad9972d0de986fecee165edd074ef0335804b38616915a8e1781697bb82ffeb3c08680a34465acaf6e7ae53904ea422bce2d7d069e3cb01b771c905aa0d9f0eb8dfed7631abfe367f427f9bebf6bbe10cf4717b3e56c7b0863d702a64e112e7a1463ccacdf08594cb3dd0"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x20, 0xd, 0x4d, "958a02e987c5773d38df53216636fa7b93fa6a5216c39c565941631b5180872a96620004213f0e7abdbc2b0c3a91d0d9de9fbe5f998bc8d6bba9fa8c7b2182b73a4ad34a2a03ef142d85a209ac"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x61, {0x5f, "2edcc62265b3555318655f310d4b779536bb3a90645349964f823328077f4d969b2e18cbd0aa626e117d8fe511b424e031756d8d9689a5fec2e88e2568bccb79d8468eabade74681914e2cdb81b8795e60f3c617f3b546e66062ce87fda29a"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0x1}}) 5.851518569s ago: executing program 0 (id=3933): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = memfd_create(&(0x7f0000000180)='[\vx\'\xa5)\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004840)={0x2020}, 0x2020) semget$private(0x0, 0x4, 0x4f0) read$FUSE(r4, &(0x7f0000002800)={0x2020}, 0x2073) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000002c0)=ANY=[]) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\t\t'}]}, 0xe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.373371377s ago: executing program 1 (id=3935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed00"/200], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) dup(r7) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) setresgid(0x0, 0xee00, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x5ecfb203) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 5.15243227s ago: executing program 3 (id=3941): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.15211433s ago: executing program 2 (id=3942): socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0xa, &(0x7f0000000180)=[{0x7fff, 0x1, 0x8, 0x5}, {0x1, 0x7, 0x8, 0x885}, {0x80, 0x6, 0x5, 0x7ff}, {0x4, 0xfc, 0x5, 0x2}, {0x8, 0xfb, 0x3, 0x5}, {0x6, 0x7, 0x5, 0x1}, {0x0, 0x9, 0x4, 0xfffffff9}, {0x7, 0x8, 0xd, 0x5}, {0x1, 0x0, 0x7, 0x7}, {0x1c3, 0x21, 0x8, 0x50c5}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 4.683246417s ago: executing program 0 (id=3943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3080046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@prjquota}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x9c8, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x960, 0x194, 0x194, 0x960, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x878, 0x898, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9c}, {0x6, 0x3}, {0x2f9, 0x3}, {0x0, 0x3}, {}, {0x3, 0x3}, {0xc, 0x2}, {0x1, 0x2}, {0x8000, 0x2}, {0x8}, {0x7}], [{0x2, 0x401}, {0x8, 0x6}, {0x0, 0x2}, {0x7c9d2e67, 0x200}, {0x8, 0x3}, {0x2, 0x3c}, {0x4, 0x3}, {0x81, 0x9}, {0x5, 0x6a}, {0x3}, {0x80000f, 0x876c}], 0x11, 0xa}, {[{0x6, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x100}, {0x0, 0x1}, {0xe03, 0x1}, {0x8}, {0x6, 0x3}, {0x9, 0x1}], [{0xb, 0xa}, {0xfe7, 0x10000}, {0x1, 0x77656ee}, {0xfffffffb, 0x8}, {0x4, 0xfffffffc}, {0x3, 0x9}, {0x7, 0xcccb}, {0xe, 0x1}, {0x100, 0x4}, {0x9, 0x5}, {0x800, 0x7}], 0x4, 0x6}, {[{0x5, 0x2}, {0x3ff}, {0x0, 0x2}, {0x7, 0x3}, {0xff}, {0x1, 0x2}, {0x6, 0x3}, {0x8, 0x3}, {0x81, 0x2}, {0x60dc, 0x3}, {0x5, 0x3}], [{0x4, 0x43c}, {0xe229, 0xa2e9}, {0x8a0c, 0x8a5}, {0x9}, {0x7, 0x3}, {0x8, 0x9}, {0xffff, 0x80000000}, {0x7, 0x3}, {0xfffffff8, 0x40}, {0x9, 0x1}, {0x100, 0x80}], 0xb, 0x6}, {[{0x81, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x401}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x1}], [{0x8, 0x6}, {0x3, 0x4}, {0x4, 0x10000}, {0x30, 0xffffffbc}, {0x4800000, 0x2}, {0x7, 0x7fffffff}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x80, 0x8}, {0x9, 0xffff}], 0x2, 0x1}, {[{0xcd9e, 0x3}, {0x1, 0x1}, {0xfff, 0x3}, {0x2000000, 0x2}, {0x4, 0x1}, {0x3c000000, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x1}, {0x7f}, {0x4, 0x3}], [{0x63, 0x4}, {0xd20, 0xfdcb}, {0x47, 0x9}, {0xb, 0x2}, {0x0, 0x4}, {0x6, 0x1e}, {0x1, 0x7}, {}, {0x5, 0xba07ba8}, {0xfffffff8, 0x7fffffff}, {0xd, 0x4}], 0x6, 0x3}, {[{0x430558a8, 0x2}, {0x3743, 0x3}, {0x4, 0x4}, {0x3}, {0xffff7142, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x8}, {0x12, 0x2}, {0x80, 0x3}], [{0x80, 0x4}, {0xc71e, 0x7f}, {0x441, 0x1}, {0x6, 0xffffffff}, {0xa0e, 0x9}, {0x21c, 0x200}, {0x7, 0x8a}, {0x2, 0xfffffff9}, {0x1000, 0x40}, {0x4, 0x400}, {0x408b, 0x89a}], 0x4, 0x3}, {[{0x8000}, {0x1, 0x2}, {0x1ff, 0x3}, {0xffffffff, 0x2}, {0x7}, {0x0, 0x3}, {0x58d, 0x1}, {0x7}, {0xc6, 0x2}, {0x7}, {0x3}], [{0x7, 0xe}, {0x3, 0x7}, {0x0, 0x10000}, {0x5, 0x5}, {0xf, 0x9}, {0x5, 0x1ff}, {0x9, 0x1ff}, {0x4, 0x649}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7f}], 0x8}, {[{0x8}, {0x9, 0x3}, {0x5}, {0xb, 0x3}, {0x3, 0x2}, {0x1ff, 0x1}, {0x1000, 0x1}, {0x4, 0x1}, {0xc2, 0x1}, {0xc, 0x2}, {0x5, 0x2}], [{0xf0, 0x6}, {0xfffffffc, 0x1}, {0x7f, 0x9}, {0xfffffffe, 0x2}, {0x7f, 0x4}, {0x7, 0xfffffff8}, {0x1, 0x2}, {0x400, 0x401}, {0x9, 0xf15d}, {0x2, 0x7}, {0x6, 0x3}], 0xa, 0x6}, {[{0x3f, 0xcddfd284d7cd064b}, {0x4, 0x1}, {0x101, 0x2}, {0x5}, {0x9, 0x3}, {0x100, 0x2}, {0x80, 0x3}, {0x5, 0x1}, {0xb, 0x1}, {0x1590d48c, 0x2}, {0xea9a026b, 0x3}], [{0x2, 0x3b1}, {0x6, 0x700}, {0x1, 0x6}, {0x2, 0x8001}, {0x9, 0x9}, {0x5}, {0x8fe4, 0x31b2b08f}, {0x800, 0xb0e}, {0x8c9, 0x7}, {0x1, 0x9}, {0xfffffffd, 0x2}], 0x4, 0x4}, {[{0x5, 0x2}, {0x3, 0x2}, {0xc518, 0x1}, {0x8, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0xe7a, 0x1}, {0x0, 0x3}, {0x2000000}, {0x8, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0xa4b}, {0x2, 0x568e2110}, {0x9, 0x5}, {0xfffffb66, 0x2}, {0xb8b, 0x9}, {0x2, 0x2}, {0xfffffff9, 0xffff0001}, {0x2, 0x8}, {0x3a, 0xbc}, {0xd, 0x1}, {0xc1, 0x4}], 0x8, 0x1}, {[{0x5, 0x3}, {0x10000}, {0x5, 0x2}, {0x4, 0x3}, {0xe}, {0x3ff, 0x1}, {0x1, 0x1}, {0x4}, {0x200008, 0x1}, {0x1, 0x2}, {0x7, 0x1}], [{0x6, 0x45}, {0xfffffffa, 0x6}, {0x81, 0x56}, {0x100, 0x1}, {0x5734, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x398, 0x2}, {0x2, 0x1}, {0x4, 0xb4}, {0x40, 0x603}], 0x9, 0x2}], 0x3}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa28) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) syz_emit_ethernet(0x46, &(0x7f0000001fc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x5}}}}}}}}, 0x0) pread64(r1, &(0x7f0000000a00)=""/126, 0x7e, 0x1e) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r8 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4d, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf0, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0xd8, 0xa, 0x10, 0x40}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "95d9a2eada6903f08b8382174477391e"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r8, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x2, {0x2, 0x21}}, &(0x7f00000005c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "21c6652c52ef36ae0d7578441817a70ad9972d0de986fecee165edd074ef0335804b38616915a8e1781697bb82ffeb3c08680a34465acaf6e7ae53904ea422bce2d7d069e3cb01b771c905aa0d9f0eb8dfed7631abfe367f427f9bebf6bbe10cf4717b3e56c7b0863d702a64e112e7a1463ccacdf08594cb3dd0"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x20, 0xd, 0x4d, "958a02e987c5773d38df53216636fa7b93fa6a5216c39c565941631b5180872a96620004213f0e7abdbc2b0c3a91d0d9de9fbe5f998bc8d6bba9fa8c7b2182b73a4ad34a2a03ef142d85a209ac"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x61, {0x5f, "2edcc62265b3555318655f310d4b779536bb3a90645349964f823328077f4d969b2e18cbd0aa626e117d8fe511b424e031756d8d9689a5fec2e88e2568bccb79d8468eabade74681914e2cdb81b8795e60f3c617f3b546e66062ce87fda29a"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0x1}}) 4.220919784s ago: executing program 1 (id=3944): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 4.212306645s ago: executing program 3 (id=3945): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 4.136420499s ago: executing program 3 (id=3946): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.130622729s ago: executing program 1 (id=3947): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 3.765824911s ago: executing program 1 (id=3948): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast2, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.567611242s ago: executing program 4 (id=3949): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4f21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf09000000000000"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 3.494745997s ago: executing program 4 (id=3950): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[0x0]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.459039908s ago: executing program 4 (id=3951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x51, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e9", 0x5a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822", 0x4e}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291", 0x8b}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336b", 0x78}, {&(0x7f00000021c0)="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", 0x18b}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.42966674s ago: executing program 4 (id=3952): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) readahead(r0, 0xffffffffffffff41, 0x2) 3.356316705s ago: executing program 4 (id=3953): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r7, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x40, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}]}, 0x7f}, {0x20, '\x00', @data=0xd8f, 0x3}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r4, 0x0, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 3.340775675s ago: executing program 2 (id=3954): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 3.309174637s ago: executing program 2 (id=3955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed00"/200], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) dup(r7) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[]) setresgid(0x0, 0xee00, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x5ecfb203) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 3.281819139s ago: executing program 3 (id=3956): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0x1f8a, 0x0, 0x3, 0x28c}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.177497333s ago: executing program 2 (id=3957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 2.118771317s ago: executing program 3 (id=3958): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4008080) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = io_uring_setup(0x46eb, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.110005377s ago: executing program 4 (id=3959): socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() tkill(r4, 0xb) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0xa, &(0x7f0000000180)=[{0x7fff, 0x1, 0x8, 0x5}, {0x1, 0x7, 0x8, 0x885}, {0x80, 0x6, 0x5, 0x7ff}, {0x4, 0xfc, 0x5, 0x2}, {0x8, 0xfb, 0x3, 0x5}, {0x6, 0x7, 0x5, 0x1}, {0x0, 0x9, 0x4, 0xfffffff9}, {0x7, 0x8, 0xd, 0x5}, {0x1, 0x0, 0x7, 0x7}, {0x1c3, 0x21, 0x8, 0x50c5}]}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) 2.108052057s ago: executing program 1 (id=3960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x40, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}]}, 0x7f}, {0x20, '\x00', @data=0xd8f, 0x3}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) close(r0) 859.96255ms ago: executing program 3 (id=3961): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3080046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@prjquota}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x9a0, 0xc8, 0x8, 0xfa04, 0x0, 0x6c02, 0x960, 0x194, 0x194, 0x960, 0x194, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x9c}, {0x6, 0x3}, {0x2f9, 0x3}, {0x0, 0x3}, {}, {0x3, 0x3}, {0xc, 0x2}, {0x1, 0x2}, {0x8000, 0x2}, {0x8}, {0x7}], [{0x2, 0x401}, {0x8, 0x6}, {0x0, 0x2}, {0x7c9d2e67, 0x200}, {0x8, 0x3}, {0x2, 0x3c}, {0x4, 0x3}, {0x81, 0x9}, {0x5, 0x6a}, {0x3}, {0x80000f, 0x876c}], 0x11, 0xa}, {[{0x6, 0x3}, {0x4, 0x1}, {0x4, 0x3}, {0x7, 0x3}, {0x5}, {0x100}, {0x0, 0x1}, {0xe03, 0x1}, {0x8}, {0x6, 0x3}, {0x9, 0x1}], [{0xb, 0xa}, {0xfe7, 0x10000}, {0x1, 0x77656ee}, {0xfffffffb, 0x8}, {0x4, 0xfffffffc}, {0x3, 0x9}, {0x7, 0xcccb}, {0xe, 0x1}, {0x100, 0x4}, {0x9, 0x5}, {0x800, 0x7}], 0x4, 0x6}, {[{0x5, 0x2}, {0x3ff}, {0x0, 0x2}, {0x7, 0x3}, {0xff}, {0x1, 0x2}, {0x6, 0x3}, {0x8, 0x3}, {0x81, 0x2}, {0x60dc, 0x3}, {0x5, 0x3}], [{0x4, 0x43c}, {0xe229, 0xa2e9}, {0x8a0c, 0x8a5}, {0x9}, {0x7, 0x3}, {0x8, 0x9}, {0xffff, 0x80000000}, {0x7, 0x3}, {0xfffffff8, 0x40}, {0x9, 0x1}, {0x100, 0x80}], 0xb, 0x6}, {[{0x81, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x401}, {0x0, 0x2}, {0x0, 0x3}, {0x4, 0x1}, {0x1}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x1}], [{0x8, 0x6}, {0x3, 0x4}, {0x4, 0x10000}, {0x30, 0xffffffbc}, {0x4800000, 0x2}, {0x7, 0x7fffffff}, {0x7, 0x1}, {0x7, 0x2}, {0x0, 0x6}, {0x80, 0x8}, {0x9, 0xffff}], 0x2, 0x1}, {[{0xcd9e, 0x3}, {0x1, 0x1}, {0xfff, 0x3}, {0x2000000, 0x2}, {0x4, 0x1}, {0x3c000000, 0x3}, {0x6, 0x3}, {0x3}, {0x7, 0x1}, {0x7f}, {0x4, 0x3}], [{0x63, 0x4}, {0xd20, 0xfdcb}, {0x47, 0x9}, {0xb, 0x2}, {0x0, 0x4}, {0x6, 0x1e}, {0x1, 0x7}, {}, {0x5, 0xba07ba8}, {0xfffffff8, 0x7fffffff}, {0xd, 0x4}], 0x6, 0x3}, {[{0x430558a8, 0x2}, {0x3743, 0x3}, {0x4, 0x4}, {0x3}, {0xffff7142, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x8}, {0x12, 0x2}, {0x80, 0x3}], [{0x80, 0x4}, {0xc71e, 0x7f}, {0x441, 0x1}, {0x6, 0xffffffff}, {0xa0e, 0x9}, {0x21c, 0x200}, {0x7, 0x8a}, {0x2, 0xfffffff9}, {0x1000, 0x40}, {0x4, 0x400}, {0x408b, 0x89a}], 0x4, 0x3}, {[{0x8000}, {0x1, 0x2}, {0x1ff, 0x3}, {0xffffffff, 0x2}, {0x7}, {0x0, 0x3}, {0x58d, 0x1}, {0x7}, {0xc6, 0x2}, {0x7}, {0x3}], [{0x7, 0xe}, {0x3, 0x7}, {0x0, 0x10000}, {0x5, 0x5}, {0xf, 0x9}, {0x5, 0x1ff}, {0x9, 0x1ff}, {0x4, 0x649}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7f}], 0x8}, {[{0x8}, {0x9, 0x3}, {0x5}, {0xb, 0x3}, {0x3, 0x2}, {0x1ff, 0x1}, {0x1000, 0x1}, {0x4, 0x1}, {0xc2, 0x1}, {0xc, 0x2}, {0x5, 0x2}], [{0xf0, 0x6}, {0xfffffffc, 0x1}, {0x7f, 0x9}, {0xfffffffe, 0x2}, {0x7f, 0x4}, {0x7, 0xfffffff8}, {0x1, 0x2}, {0x400, 0x401}, {0x9, 0xf15d}, {0x2, 0x7}, {0x6, 0x3}], 0xa, 0x6}, {[{0x3f, 0xcddfd284d7cd064b}, {0x4, 0x1}, {0x101, 0x2}, {0x5}, {0x9, 0x3}, {0x100, 0x2}, {0x80, 0x3}, {0x5, 0x1}, {0xb, 0x1}, {0x1590d48c, 0x2}, {0xea9a026b, 0x3}], [{0x2, 0x3b1}, {0x6, 0x700}, {0x1, 0x6}, {0x2, 0x8001}, {0x9, 0x9}, {0x5}, {0x8fe4, 0x31b2b08f}, {0x800, 0xb0e}, {0x8c9, 0x7}, {0x1, 0x9}, {0xfffffffd, 0x2}], 0x4, 0x4}, {[{0x5, 0x2}, {0x3, 0x2}, {0xc518, 0x1}, {0x8, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0xe7a, 0x1}, {0x0, 0x3}, {0x2000000}, {0x8, 0x2}, {0xfffffffd, 0x1}], [{0x3, 0xa4b}, {0x2, 0x568e2110}, {0x9, 0x5}, {0xfffffb66, 0x2}, {0xb8b, 0x9}, {0x2, 0x2}, {0xfffffff9, 0xffff0001}, {0x2, 0x8}, {0x3a, 0xbc}, {0xd, 0x1}, {0xc1, 0x4}], 0x8, 0x1}, {[{0x5, 0x3}, {0x10000}, {0x5, 0x2}, {0x4, 0x3}, {0xe}, {0x3ff, 0x1}, {0x1, 0x1}, {0x4}, {0x200008, 0x1}, {0x1, 0x2}, {0x7, 0x1}], [{0x6, 0x45}, {0xfffffffa, 0x6}, {0x81, 0x56}, {0x100, 0x1}, {0x5734, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x398, 0x2}, {0x2, 0x1}, {0x4, 0xb4}, {0x40, 0x603}], 0x9, 0x2}], 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa00) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1, 0xfffffffc, 0xfffffffe) syz_emit_ethernet(0x46, &(0x7f0000001fc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4000, 0xe22, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x5}}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2, 0x0) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x4d, 0x4, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf0, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0xd8, 0xa, 0x10, 0x40}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x3, 0x7, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0x9}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "95d9a2eada6903f08b8382174477391e"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$printer(r7, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x0, 0x3, 0x2, {0x2, 0x21}}, &(0x7f00000005c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "21c6652c52ef36ae0d7578441817a70ad9972d0de986fecee165edd074ef0335804b38616915a8e1781697bb82ffeb3c08680a34465acaf6e7ae53904ea422bce2d7d069e3cb01b771c905aa0d9f0eb8dfed7631abfe367f427f9bebf6bbe10cf4717b3e56c7b0863d702a64e112e7a1463ccacdf08594cb3dd0"}}}, &(0x7f0000000840)={0x34, &(0x7f0000000680)={0x20, 0xd, 0x4d, "958a02e987c5773d38df53216636fa7b93fa6a5216c39c565941631b5180872a96620004213f0e7abdbc2b0c3a91d0d9de9fbe5f998bc8d6bba9fa8c7b2182b73a4ad34a2a03ef142d85a209ac"}, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x0, 0x61, {0x5f, "2edcc62265b3555318655f310d4b779536bb3a90645349964f823328077f4d969b2e18cbd0aa626e117d8fe511b424e031756d8d9689a5fec2e88e2568bccb79d8468eabade74681914e2cdb81b8795e60f3c617f3b546e66062ce87fda29a"}}, &(0x7f00000007c0)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000800)={0x20, 0x0, 0x1}}) 859.25386ms ago: executing program 0 (id=3962): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x51, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c", 0x29}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e9", 0x5a}], 0x3}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a09178610090000", 0x3b}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291", 0x8b}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db23544f78bd0580b8545dde37241ced32a9e92a4295af773a12336b", 0x78}, {&(0x7f00000021c0)="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", 0x18a}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 857.75915ms ago: executing program 2 (id=3963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000001c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997", 0x27}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce7", 0xb4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea", 0x4c}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049c", 0x78}, {&(0x7f0000000a00)="a7c652df859ed2764e960e7f50a64153fba30cbb8e57f06f55dc0ae10dc21fcd48944b17170f070271208ec6eed721805abd1d46290d3fa170a218b0348a277697884eeb0682edd2e557fab3ea869c1920c576a12a3e669d3688abb7db", 0x5d}, {&(0x7f00000021c0)="d317b0ddf805c029d66c50f61f6e1b90bd02c1c2e324ab02219e3cef175c99254ff1c10c27155c41bd5cee7a3663ed4a127c6c18ebb7a51008a0053ac96edeb5843d7b59b6c02532b26ca1c490d9b8113cbdbe99a123e3d5335c531c1c50b15be67220f38338a1e7c494acc2da3b410cf4cf7129cbb5faa24dd84e800249b234bdb2e91f3af98057", 0x88}], 0x5}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) exit(0xffff) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 501.08334ms ago: executing program 1 (id=3964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x40, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}]}, 0x7f}, {0x20, '\x00', @data=0xd8f, 0x3}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) close(r0) 422.118715ms ago: executing program 0 (id=3965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}}, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x40402) ioctl$FE_GET_PROPERTY(r8, 0x80086f53, &(0x7f0000000000)={0x3, &(0x7f0000000640)=[{0x11, '\x00', @buffer={"994ac804080000000000000000cc0086f000800000000000faff00", 0x20}, 0xffff16c8}, {0x40, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}]}, 0x7f}, {0x20, '\x00', @data=0xd8f, 0x3}]}) sendmsg$SEG6_CMD_SET_TUNSRC(r5, 0x0, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) close(r0) 0s ago: executing program 2 (id=3966): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114a73a"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): terface caif0 may have been left with an inconsistent configuration, please check. [ 669.347601][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2782'. [ 669.445705][T14538] ceph: No mds server is up or the cluster is laggy [ 669.447266][T14272] libceph: connect (1)[c::]:6789 error -101 [ 669.448172][T14272] libceph: mon0 (1)[c::]:6789 connect error [ 669.482874][T14542] infiniband syz1: set active [ 669.484116][T14542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 669.516366][T14542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 669.587960][ T4323] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 669.590066][ T4323] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 669.591656][ T4323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 669.593537][ T4323] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 669.594857][ T4323] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 669.600378][ T4323] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 670.018787][ T4381] libceph: connect (1)[c::]:6789 error -101 [ 670.019839][ T4381] libceph: mon0 (1)[c::]:6789 connect error [ 670.151251][T14546] chnl_net:caif_netlink_parms(): no params data found [ 670.175231][T14549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 670.216628][T14549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.832745][ T4381] libceph: connect (1)[c::]:6789 error -101 [ 670.834083][ T4381] libceph: mon0 (1)[c::]:6789 connect error [ 670.848483][T14548] ceph: No mds server is up or the cluster is laggy [ 671.015487][T14546] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.017098][T14546] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.018637][T14546] device bridge_slave_0 entered promiscuous mode [ 671.043921][T14546] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.045124][T14546] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.052653][T14546] device bridge_slave_1 entered promiscuous mode [ 671.082366][T14546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.722996][ T4323] Bluetooth: hci3: command 0x0409 tx timeout [ 671.727560][T14546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.735363][T14546] team0: Port device team_slave_0 added [ 671.739569][T14546] team0: Port device team_slave_1 added [ 671.749812][T14546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.751660][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.756698][T14546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.760221][T14546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.761489][T14546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.769128][T14546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.625643][ T4415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.727694][T14546] device hsr_slave_0 entered promiscuous mode [ 673.733224][ T112] libceph: connect (1)[c::]:6789 error -101 [ 673.734380][ T112] libceph: mon0 (1)[c::]:6789 connect error [ 673.756387][ T4323] Bluetooth: hci3: command 0x041b tx timeout [ 673.838780][T14585] ceph: No mds server is up or the cluster is laggy [ 674.201984][ T112] libceph: connect (1)[c::]:6789 error -101 [ 674.446482][ T112] libceph: mon0 (1)[c::]:6789 connect error [ 674.458274][T14546] device hsr_slave_1 entered promiscuous mode [ 674.688116][ T4415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.694696][T14598] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 675.699801][T14598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 675.896560][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 676.018977][ T4415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.407406][ T4415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.953043][ T4381] libceph: connect (1)[c::]:6789 error -101 [ 676.954154][ T4381] libceph: mon0 (1)[c::]:6789 connect error [ 676.987862][T14630] ceph: No mds server is up or the cluster is laggy [ 676.989825][T14635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 676.994014][T14635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.172334][T14635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.775957][T14628] infiniband syz1: set active [ 677.780856][T14628] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 677.814175][T14639] ceph: No mds server is up or the cluster is laggy [ 677.815697][T14271] libceph: connect (1)[c::]:6789 error -101 [ 677.817619][T14271] libceph: mon0 (1)[c::]:6789 connect error [ 677.885001][T14628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 677.916895][ T4323] Bluetooth: hci3: command 0x0419 tx timeout [ 678.116545][T14650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.293947][T14649] ceph: No mds server is up or the cluster is laggy [ 678.294006][T14648] ceph: No mds server is up or the cluster is laggy [ 678.295426][T13371] libceph: connect (1)[c::]:6789 error -101 [ 678.297298][ T4381] libceph: connect (1)[c::]:6789 error -101 [ 678.298216][T14650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.298281][ T4381] libceph: mon0 (1)[c::]:6789 connect error [ 678.310730][T14651] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 678.314688][T14651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.317499][T13371] libceph: mon0 (1)[c::]:6789 connect error [ 678.412598][T14651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.938725][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.939934][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.896449][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 679.899258][T14683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 680.026698][T14683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.327868][ T4415] bond1: (slave ip6gretap1): Releasing active interface [ 683.328933][ T4415] device ip6gretap1 left promiscuous mode [ 683.337817][T14735] ceph: No mds server is up or the cluster is laggy [ 683.339264][T13479] libceph: connect (1)[c::]:6789 error -101 [ 683.340333][T13479] libceph: mon0 (1)[c::]:6789 connect error [ 683.407204][ T4415] bond2: (slave ip6gretap2): Releasing active interface [ 683.487281][ T4415] bond3: (slave ip6gretap3): Releasing active interface [ 683.531517][T14723] infiniband syz1: set active [ 683.532813][T14723] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.566382][T14723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.600751][T14737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 683.628528][T14737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 686.674587][T14546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 687.238927][T14546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 687.307909][T14546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 687.319662][T14272] libceph: connect (1)[c::]:6789 error -101 [ 687.320662][T14272] libceph: mon0 (1)[c::]:6789 connect error [ 687.327808][T14794] ceph: No mds server is up or the cluster is laggy [ 688.049816][T14546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 688.754065][T14546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.688850][T14546] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.715078][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.716685][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.718004][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.719474][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.720834][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.722001][T10130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.723362][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.724835][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.649017][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.650194][T10130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.651632][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.653299][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.654890][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.657833][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.665443][T14546] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.696557][T14546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 692.044233][T14856] ceph: No mds server is up or the cluster is laggy [ 692.049520][ T4740] libceph: connect (1)[c::]:6789 error -101 [ 692.051028][ T4740] libceph: mon0 (1)[c::]:6789 connect error [ 692.242625][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 692.244406][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 692.245788][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 692.247424][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 692.257417][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 692.264732][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 692.266799][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 692.268280][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 692.270701][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 692.274930][T14862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.306392][T14862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.881928][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 694.128431][T14882] ceph: No mds server is up or the cluster is laggy [ 694.132620][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 694.133745][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 694.237211][T14888] ceph: No mds server is up or the cluster is laggy [ 694.238763][T13371] libceph: connect (1)[c::]:6789 error -101 [ 694.244831][T13371] libceph: mon0 (1)[c::]:6789 connect error [ 694.808843][ T4740] libceph: connect (1)[c::]:6789 error -101 [ 694.809851][ T4740] libceph: mon0 (1)[c::]:6789 connect error [ 695.981212][T14890] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 695.982674][T14890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 696.016358][T14890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.848161][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.849446][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.853525][T14546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.295371][T14546] device veth0_vlan entered promiscuous mode [ 698.334253][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 698.336054][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 698.338722][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 698.341251][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 698.354187][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 698.374980][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 698.902573][T14546] device veth1_vlan entered promiscuous mode [ 698.972067][ T4415] device hsr_slave_0 left promiscuous mode [ 699.079891][ T4415] device hsr_slave_1 left promiscuous mode [ 699.158077][ T4415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.159306][ T4415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.160902][ T4415] device bridge_slave_1 left promiscuous mode [ 699.163026][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.262002][ T4415] device bridge_slave_0 left promiscuous mode [ 699.263355][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.026617][ T4415] device veth1_macvtap left promiscuous mode [ 701.027639][ T4415] device veth0_macvtap left promiscuous mode [ 701.028644][ T4415] device veth1_vlan left promiscuous mode [ 701.029575][ T4415] device veth0_vlan left promiscuous mode [ 703.297345][ T4415] bond3 (unregistering): Released all slaves [ 703.516289][ T4337] Bluetooth: hci0: command 0x1003 tx timeout [ 703.516320][ T4323] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 703.907305][ T4415] bond2 (unregistering): Released all slaves [ 703.910989][ T4415] bond1 (unregistering): Released all slaves [ 705.858793][ T4415] team0 (unregistering): Port device team_slave_1 removed [ 706.017725][ T4415] team0 (unregistering): Port device team_slave_0 removed [ 706.176943][ T4415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.416838][ T4415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.977239][ T4415] bond0 (unregistering): Released all slaves [ 708.348454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 708.350621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 708.355534][T14546] device veth0_macvtap entered promiscuous mode [ 708.366080][T14546] device veth1_macvtap entered promiscuous mode [ 708.375524][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.377925][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.379248][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.380798][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.382258][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.383806][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.385269][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 708.396313][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.407342][T14546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.409189][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 708.411036][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 708.412453][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 708.413786][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 708.419359][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.420848][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.422233][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.423726][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.425078][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.439569][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.441246][T14546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.442923][T14546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.446668][T14546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.449312][T14546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.450634][T14546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.451921][T14546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.453107][T14546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.467132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 708.468917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 708.473393][T15038] device syzkaller0 entered promiscuous mode [ 708.562438][ T8761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.563594][ T8761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.564844][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 709.616808][ T8761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.618021][ T8761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.774855][T15065] sctp: failed to load transform for md5: -2 [ 710.803563][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 710.832815][T15075] overlayfs: failed to clone upperpath [ 711.230105][T15079] binder: tried to use weak ref as strong ref [ 711.231268][T15079] binder: 15078:15079 Acquire 1 refcount change on invalid ref 0 ret -22 [ 711.233302][T15079] binder: 15078:15079 got transaction to invalid handle, 1 [ 711.234494][T15079] binder: 15079:15078 cannot find target node [ 711.238604][T15079] binder: 15078:15079 transaction call to 0:0 failed 3/29201/-22, size 72-24 line 3045 [ 711.243054][ T4381] binder: undelivered TRANSACTION_ERROR: 29201 [ 711.888890][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 711.890345][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 711.894448][T15105] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.895841][T15105] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.897180][T15105] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.898322][T15105] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.909236][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2899'. [ 711.912807][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 711.949865][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 711.952611][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 711.980691][T15112] loop1: detected capacity change from 0 to 164 [ 711.995369][T15108] ceph: No mds server is up or the cluster is laggy [ 712.026949][T15115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 712.028253][T15115] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 712.061962][T15115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 712.588246][T15125] binder: tried to use weak ref as strong ref [ 712.589456][T15125] binder: 15124:15125 Acquire 1 refcount change on invalid ref 0 ret -22 [ 712.595709][T15125] binder: 15124:15125 got transaction to invalid handle, 1 [ 712.597996][T15125] binder: 15125:15124 cannot find target node [ 712.605459][T15125] binder: 15124:15125 transaction call to 0:0 failed 6/29201/-22, size 72-24 line 3045 [ 712.611842][ T3898] binder: undelivered TRANSACTION_ERROR: 29201 [ 712.818829][T15141] overlayfs: failed to clone upperpath [ 712.832242][T15145] overlayfs: workdir and upperdir must reside under the same mount [ 712.943243][T15139] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.944567][T15139] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.689831][T15139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.702481][T15139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.952320][T15139] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.953854][T15139] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.955184][T15139] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.956778][T15139] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.633941][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.636497][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.108057][T15205] loop5: detected capacity change from 0 to 7 [ 715.112071][T15033] Dev loop5: unable to read RDB block 7 [ 715.113025][T15033] loop5: unable to read partition table [ 715.114442][T15033] loop5: partition table beyond EOD, truncated [ 715.140773][T15205] Dev loop5: unable to read RDB block 7 [ 715.141721][T15205] loop5: unable to read partition table [ 715.142684][T15205] loop5: partition table beyond EOD, truncated [ 715.143656][T15205] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 715.187157][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.215933][T15153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.285909][T15209] loop5: detected capacity change from 0 to 7 [ 715.288935][T15033] Dev loop5: unable to read RDB block 7 [ 715.289848][T15033] loop5: AHDI p1 p2 p3 [ 715.290520][T15033] loop5: partition table partially beyond EOD, truncated [ 715.292509][T15033] loop5: p1 start 1601398130 is beyond EOD, truncated [ 715.293667][T15033] loop5: p2 start 1702059890 is beyond EOD, truncated [ 715.308966][T15209] Dev loop5: unable to read RDB block 7 [ 715.310058][T15209] loop5: AHDI p1 p2 p3 [ 715.310726][T15209] loop5: partition table partially beyond EOD, truncated [ 715.315683][T15209] loop5: p1 start 1601398130 is beyond EOD, truncated [ 715.322512][T15209] loop5: p2 start 1702059890 is beyond EOD, truncated [ 715.583896][T15153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.586114][T15153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.588518][T15153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.590406][T15153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.068935][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.071178][ T4323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.073087][ T4323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.083808][ T4323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.085300][ T4323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 716.089549][ T4323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.100972][T15214] bridge0: port 3(syz_tun) entered disabled state [ 716.130959][T15214] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.132656][T15214] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.157448][T15233] loop3: detected capacity change from 0 to 128 [ 716.474576][T15214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.487078][T15214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.792396][T15214] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.793914][T15214] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.795339][T15214] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.796828][T15214] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.931092][T15241] loop5: detected capacity change from 0 to 7 [ 716.933721][T15241] Dev loop5: unable to read RDB block 7 [ 716.934677][T15241] loop5: unable to read partition table [ 716.935737][T15241] loop5: partition table beyond EOD, truncated [ 716.938545][T15241] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 717.042034][T15214] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.043508][T15214] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.044971][T15214] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.046532][T15214] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.099142][T11922] infiniband syz1: set down [ 717.104376][T14272] infiniband syz1: ib_query_port failed (-19) [ 717.128917][T10130] smc: removing ib device syz1 [ 717.380055][T15225] chnl_net:caif_netlink_parms(): no params data found [ 717.427289][T15269] Injecting memory failure for pfn 0x1246dc at process virtual address 0x202c7000 [ 717.540316][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.544017][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.564664][T15225] device bridge_slave_0 entered promiscuous mode [ 717.568805][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.574890][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.605677][T15225] device bridge_slave_1 entered promiscuous mode [ 717.606164][T15269] Memory failure: 0x1246dc: recovery action for dirty LRU page: Recovered [ 717.610734][T15269] Injecting memory failure for pfn 0x1246dd at process virtual address 0x202c8000 [ 717.615271][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.618326][T15269] Memory failure: 0x1246dd: recovery action for dirty LRU page: Recovered [ 717.623859][T15269] Injecting memory failure for pfn 0x13b4c0 at process virtual address 0x202c9000 [ 717.630613][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.634597][T15269] Memory failure: 0x13b4c0: recovery action for dirty LRU page: Recovered [ 717.643579][T15225] team0: Port device team_slave_0 added [ 717.653556][T15225] team0: Port device team_slave_1 added [ 717.669905][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.671197][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.680662][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.685799][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.688314][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.720539][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.797746][T15225] device hsr_slave_0 entered promiscuous mode [ 718.126102][T15225] device hsr_slave_1 entered promiscuous mode [ 718.156402][T12915] Bluetooth: hci0: command 0x0409 tx timeout [ 718.158926][T15225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 718.160020][T15225] Cannot create hsr debugfs directory [ 718.163004][T15283] Illegal XDP return value 3749993276 on prog (id 49) dev syz_tun, expect packet loss! [ 718.245319][T15287] device syzkaller0 entered promiscuous mode [ 719.589466][T15225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.691968][T15311] loop2: detected capacity change from 0 to 128 [ 719.711602][T15311] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 719.731951][T15225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.838691][T15225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.237600][ T4323] Bluetooth: hci0: command 0x041b tx timeout [ 720.250678][T15225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.733863][T15343] loop1: detected capacity change from 0 to 128 [ 720.747989][T15343] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 721.572830][T15352] fscrypt: Error allocating hmac(sha512): -2 [ 721.663330][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 721.666901][T15360] overlayfs: failed to clone upperpath [ 721.782741][T15225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.787435][T15366] loop2: detected capacity change from 0 to 128 [ 721.793679][T15366] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 721.817677][T15225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 722.154777][T15225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 722.196995][T15384] loop2: detected capacity change from 0 to 128 [ 722.222078][T15384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 722.319213][ T4323] Bluetooth: hci0: command 0x040f tx timeout [ 722.794546][ T11] bond1: (slave ip6gretap1): Releasing active interface [ 722.795886][ T11] device ip6gretap1 left promiscuous mode [ 723.338420][T15411] loop3: detected capacity change from 0 to 256 [ 723.360642][T15411] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 723.472853][T13292] EXT4-fs (loop2): unmounting filesystem. [ 723.505598][ T11] bond2: (slave ip6gretap2): Releasing active interface [ 723.506856][ T11] device ip6gretap2 left promiscuous mode [ 723.637866][ T11] bond3: (slave ip6gretap3): Releasing active interface [ 723.977343][ T11] bond4: (slave ip6gretap4): Releasing active interface [ 724.002636][ T11] device ip6gretap4 left promiscuous mode [ 724.048804][T15225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.087914][T15388] device syzkaller0 entered promiscuous mode [ 724.233807][T15423] loop2: detected capacity change from 0 to 128 [ 724.235692][T15423] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 724.406319][T12915] Bluetooth: hci0: command 0x0419 tx timeout [ 724.795402][T15441] Injecting memory failure for pfn 0x14739a at process virtual address 0x202c7000 [ 724.816942][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.822325][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.833133][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.834767][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 724.837327][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 724.876009][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.185430][ T1709] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.186712][ T1709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.195209][T15441] Memory failure: 0x14739a: recovery action for dirty LRU page: Recovered [ 725.205383][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.210019][T15441] Injecting memory failure for pfn 0x14739b at process virtual address 0x202c8000 [ 725.213181][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.218029][ T1709] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.219099][ T1709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.223434][T15441] Memory failure: 0x14739b: recovery action for dirty LRU page: Recovered [ 725.226566][T15441] Injecting memory failure for pfn 0x14c548 at process virtual address 0x202c9000 [ 725.229699][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.233501][T15441] Memory failure: 0x14c548: recovery action for dirty LRU page: Recovered [ 725.302305][T15225] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 725.305182][T15225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 725.324948][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.327041][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.328853][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 725.335021][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.338079][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.342328][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.344938][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.347255][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.349973][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.355737][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.419185][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 726.422385][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.605697][T15471] loop1: detected capacity change from 0 to 128 [ 726.654194][T15471] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 726.694407][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.695678][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.697850][ T4474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 726.701770][T15476] device syzkaller0 entered promiscuous mode [ 726.793704][T15480] loop1: detected capacity change from 0 to 1024 [ 726.800811][T15480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 726.825094][T15480] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 727.128893][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 727.130668][ T7586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 727.172470][T15491] loop2: detected capacity change from 0 to 128 [ 727.229962][T15225] device veth0_vlan entered promiscuous mode [ 727.250050][T15491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 727.711787][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 727.713517][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 727.718232][T15225] device veth1_vlan entered promiscuous mode [ 727.724586][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 727.731031][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 727.732495][ T9008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 727.744513][T15225] device veth0_macvtap entered promiscuous mode [ 727.749527][T15225] device veth1_macvtap entered promiscuous mode [ 727.754727][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.763329][T13292] EXT4-fs (loop2): unmounting filesystem. [ 727.776088][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.777899][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.779557][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.784796][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.599374][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 728.602482][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 728.610463][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 728.614371][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 728.624456][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 728.635690][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 728.764215][T15519] loop1: detected capacity change from 0 to 128 [ 728.775838][T15519] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 728.790132][T15523] loop2: detected capacity change from 0 to 1024 [ 728.798691][T15523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.078507][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.080119][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.081778][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 729.083287][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.092103][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.100372][T15225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.101852][T15225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.103353][T15225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.104655][T15225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.109946][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 729.111381][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 729.144268][T15523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 729.164278][ T4481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.164297][ T4481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.171190][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 729.259015][T13292] EXT4-fs (loop2): unmounting filesystem. [ 730.579804][T15558] loop3: detected capacity change from 0 to 128 [ 730.587033][T15558] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 730.602275][T15560] loop1: detected capacity change from 0 to 128 [ 730.621827][T15560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 730.650194][ T4452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.658624][ T4452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.660003][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 730.660557][T15564] loop3: detected capacity change from 0 to 1024 [ 730.662409][T15564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 730.820178][T15565] device syzkaller0 entered promiscuous mode [ 731.114909][T15564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 731.330844][ T4323] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 731.333847][ T4323] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 731.336909][ T4323] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 731.339817][ T4323] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 731.341415][ T4323] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 731.342824][ T4323] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.777680][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 731.817686][T14546] EXT4-fs (loop3): unmounting filesystem. [ 731.849438][T15591] loop2: detected capacity change from 0 to 128 [ 731.867230][T15591] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 732.767142][T13292] EXT4-fs (loop2): unmounting filesystem. [ 733.094285][ T6401] device syz_tun left promiscuous mode [ 733.095242][ T6401] bridge0: port 3(syz_tun) entered disabled state [ 733.201465][T15621] loop3: detected capacity change from 0 to 128 [ 733.210147][T15621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 733.235217][ T11] device hsr_slave_0 left promiscuous mode [ 733.454799][T15618] loop2: detected capacity change from 0 to 256 [ 733.460807][ T4323] Bluetooth: hci2: command 0x0409 tx timeout [ 733.751571][T15618] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 733.798509][ T11] device hsr_slave_1 left promiscuous mode [ 733.866602][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.867925][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.869443][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.870713][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.872155][ T11] device bridge_slave_1 left promiscuous mode [ 733.873202][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.906914][ T11] device bridge_slave_0 left promiscuous mode [ 733.908176][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.069322][ T11] device veth1_macvtap left promiscuous mode [ 734.070259][ T11] device veth0_macvtap left promiscuous mode [ 734.071248][ T11] device veth1_vlan left promiscuous mode [ 734.073246][T14546] EXT4-fs (loop3): unmounting filesystem. [ 734.073355][ T11] device veth0_vlan left promiscuous mode [ 734.144187][ T11] bond4 (unregistering): Released all slaves [ 734.797268][ T11] bond3 (unregistering): Released all slaves [ 734.800789][ T11] bond2 (unregistering): Released all slaves [ 734.804221][ T11] bond1 (unregistering): Released all slaves [ 735.526248][ T4323] Bluetooth: hci2: command 0x041b tx timeout [ 737.169016][ T11] team0 (unregistering): Port device team_slave_1 removed [ 737.351583][ T11] team0 (unregistering): Port device team_slave_0 removed [ 737.536806][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.596239][T12915] Bluetooth: hci2: command 0x040f tx timeout [ 737.739404][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.367334][ T11] bond0 (unregistering): Released all slaves [ 739.686347][T12915] Bluetooth: hci2: command 0x0419 tx timeout [ 739.789283][T15613] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.790966][T15613] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.135485][T15613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.148148][T15613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.327950][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 740.329006][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 740.461952][T15613] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.463302][T15613] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.464761][T15613] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.466152][T15613] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.733486][T15638] loop1: detected capacity change from 0 to 128 [ 740.802291][T15638] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 740.832726][T15582] chnl_net:caif_netlink_parms(): no params data found [ 741.625362][T15655] loop3: detected capacity change from 0 to 128 [ 741.627107][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 741.685890][T15582] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.688342][T15582] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.690941][T15582] device bridge_slave_0 entered promiscuous mode [ 741.692916][T15582] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.693959][T15582] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.699420][T15582] device bridge_slave_1 entered promiscuous mode [ 741.711084][T15655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 741.713055][T15582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.715521][T15582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.276481][ T4740] libceph: connect (1)[c::]:6789 error -101 [ 742.277934][ T4740] libceph: mon0 (1)[c::]:6789 connect error [ 742.399153][T15670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.400470][T15670] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 742.402432][T15670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.404097][T15670] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.436924][T15670] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 742.470748][T15668] ceph: No mds server is up or the cluster is laggy [ 742.507562][T14546] EXT4-fs (loop3): unmounting filesystem. [ 742.519248][T15582] team0: Port device team_slave_0 added [ 742.521060][T15582] team0: Port device team_slave_1 added [ 742.526096][T15582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.552000][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.567806][T15677] loop0: detected capacity change from 0 to 128 [ 742.574699][T15582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.597866][T15582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.598879][T15582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.604109][T15677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 742.633299][T15582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.652105][T15682] loop1: detected capacity change from 0 to 1024 [ 742.653673][T15682] EXT4-fs: Ignoring removed nomblk_io_submit option [ 742.686051][T15685] loop3: detected capacity change from 0 to 128 [ 742.702706][T15682] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 742.714045][T15685] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 742.918686][T15691] loop2: detected capacity change from 0 to 256 [ 743.078042][T15691] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 743.278517][T15582] device hsr_slave_0 entered promiscuous mode [ 743.318217][T15582] device hsr_slave_1 entered promiscuous mode [ 743.738863][T15582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.740067][T15582] Cannot create hsr debugfs directory [ 743.743705][T15225] EXT4-fs (loop0): unmounting filesystem. [ 743.803238][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 743.808732][T15700] loop0: detected capacity change from 0 to 128 [ 743.840308][T15700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 743.958464][T15706] loop5: detected capacity change from 0 to 7 [ 743.969737][T15706] Dev loop5: unable to read RDB block 7 [ 743.970680][T15706] loop5: unable to read partition table [ 743.971702][T15706] loop5: partition table beyond EOD, truncated [ 744.304815][T15706] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 744.335217][T15709] loop2: detected capacity change from 0 to 128 [ 744.363928][T15709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 744.480070][T14546] EXT4-fs (loop3): unmounting filesystem. [ 744.505161][T15714] loop3: detected capacity change from 0 to 512 [ 744.508913][T15714] EXT4-fs: Ignoring removed nobh option [ 744.512135][T15714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 744.535070][T15714] EXT4-fs (loop3): 1 truncate cleaned up [ 744.536127][T15714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 744.885778][T15225] EXT4-fs (loop0): unmounting filesystem. [ 744.921223][T15719] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 745.273764][T15724] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 745.313047][T13292] EXT4-fs (loop2): unmounting filesystem. [ 745.658887][T15729] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 745.827465][ T11] bond1: (slave ip6gretap1): Releasing active interface [ 745.828624][ T11] device ip6gretap1 left promiscuous mode [ 745.869845][T14546] EXT4-fs (loop3): unmounting filesystem. [ 745.891977][T15731] set_capacity_and_notify: 3 callbacks suppressed [ 745.891988][T15731] loop3: detected capacity change from 0 to 512 [ 745.894475][T15731] EXT4-fs: Ignoring removed nobh option [ 745.895762][T15731] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 745.899438][ T11] bond2: (slave ip6gretap2): Releasing active interface [ 745.900541][ T11] device ip6gretap2 left promiscuous mode [ 745.902688][T15731] EXT4-fs (loop3): 1 truncate cleaned up [ 745.903628][T15731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 746.006868][ T11] bond3: (slave ip6gretap3): Releasing active interface [ 746.008008][ T11] device ip6gretap3 left promiscuous mode [ 746.359475][ T11] bond4: (slave ip6gretap4): Releasing active interface [ 746.360686][ T11] device ip6gretap4 left promiscuous mode [ 746.527822][T15739] loop0: detected capacity change from 0 to 512 [ 746.534461][T15739] EXT4-fs: Ignoring removed nobh option [ 746.545116][T15739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 746.550351][T15742] loop1: detected capacity change from 0 to 512 [ 746.551750][T15742] EXT4-fs: Ignoring removed nobh option [ 746.553003][T15742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 746.553950][T15739] EXT4-fs (loop0): 1 truncate cleaned up [ 746.555461][T15739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 746.574029][T15742] EXT4-fs (loop1): 1 truncate cleaned up [ 746.587055][T15742] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 746.638472][T15582] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 746.699748][T15582] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 747.000599][T14546] EXT4-fs (loop3): unmounting filesystem. [ 747.022069][T15582] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 747.036080][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 747.045154][T15749] loop3: detected capacity change from 0 to 1024 [ 747.049307][T15749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.072245][T15754] loop1: detected capacity change from 0 to 128 [ 747.079991][T15749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 747.127411][T15754] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 747.567711][T15225] EXT4-fs (loop0): unmounting filesystem. [ 747.574272][T15582] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 747.588596][T15760] loop0: detected capacity change from 0 to 128 [ 747.593162][T15760] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 748.084495][T14546] EXT4-fs (loop3): unmounting filesystem. [ 748.150472][T15777] loop3: detected capacity change from 0 to 128 [ 748.162808][T15777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 748.171046][T15582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.174430][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.176060][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.188510][T15582] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.190998][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.192640][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.194225][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.195380][ T9562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.197413][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.206688][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.208430][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.210064][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.211145][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.215529][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 748.321209][T15582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 748.322696][T15582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.728196][T15225] EXT4-fs (loop0): unmounting filesystem. [ 748.741122][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 748.742986][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 748.744861][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 748.763034][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 748.768360][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 748.771866][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.773465][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.785446][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 748.837337][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.840610][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 748.842242][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 749.158122][T15793] loop2: detected capacity change from 0 to 256 [ 749.179547][T15793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 749.206037][T14546] EXT4-fs (loop3): unmounting filesystem. [ 749.231828][T15787] loop0: detected capacity change from 0 to 256 [ 749.235575][T15787] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 749.263507][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 749.271922][T15796] loop3: detected capacity change from 0 to 1024 [ 749.286965][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.288575][ T8761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.319033][T15647] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.334862][T15695] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.374073][T15582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.067991][T15808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 750.323915][T15813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4 [ 750.607671][T15820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 750.700294][T15829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 750.802193][T14546] EXT4-fs (loop3): unmounting filesystem. [ 750.827486][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 750.829410][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 750.868830][T15225] EXT4-fs (loop0): unmounting filesystem. [ 750.942192][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 750.943814][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 750.945326][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 750.949816][ T9562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 750.951805][T13292] EXT4-fs (loop2): unmounting filesystem. [ 751.338885][T15582] device veth0_vlan entered promiscuous mode [ 751.550947][ T11] device hsr_slave_0 left promiscuous mode [ 751.597059][ T11] device hsr_slave_1 left promiscuous mode [ 751.676335][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.678064][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.680612][ T11] device bridge_slave_1 left promiscuous mode [ 751.681800][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.717512][ T11] device bridge_slave_0 left promiscuous mode [ 751.718688][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.758808][ T11] bond4 (unregistering): Released all slaves [ 751.763062][ T11] bond3 (unregistering): Released all slaves [ 751.771526][ T11] bond2 (unregistering): Released all slaves [ 751.776068][ T11] bond1 (unregistering): Released all slaves [ 752.372826][T15860] set_capacity_and_notify: 4 callbacks suppressed [ 752.372837][T15860] loop1: detected capacity change from 0 to 1024 [ 752.463808][T15635] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 752.590026][T15864] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 752.753008][T15863] loop3: detected capacity change from 0 to 512 [ 752.845668][T15863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 753.349000][T14546] EXT4-fs (loop3): unmounting filesystem. [ 753.371957][T15873] loop3: detected capacity change from 0 to 1024 [ 753.412495][T15635] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 754.549509][ T11] team0 (unregistering): Port device team_slave_1 removed [ 754.727410][ T11] team0 (unregistering): Port device team_slave_0 removed [ 754.886731][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 755.088081][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.640126][ T11] bond0 (unregistering): Released all slaves [ 756.869945][T15582] device veth1_vlan entered promiscuous mode [ 756.883264][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 756.884923][ T1605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 756.925255][T15582] device veth0_macvtap entered promiscuous mode [ 756.952960][T15582] device veth1_macvtap entered promiscuous mode [ 756.963036][T15880] loop5: detected capacity change from 0 to 7 [ 756.970066][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.971723][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.974180][T15582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.974180][T15880] Dev loop5: unable to read RDB block 7 [ 756.978555][T15582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.978557][T15880] loop5: unable to read partition table [ 756.978640][T15880] loop5: partition table beyond EOD, [ 756.980060][T15582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.980992][T15880] truncated [ 756.982361][T15582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.983155][T15880] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 756.983857][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 757.001179][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 757.003218][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 757.004771][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 757.007661][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 757.014303][T15582] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.022749][T15582] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.024107][T15582] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.025379][T15582] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.041121][T15887] loop0: detected capacity change from 0 to 256 [ 757.074739][T15891] loop1: detected capacity change from 0 to 128 [ 757.085147][T15887] FAT-fs (loop0): Directory bread(block 64) failed [ 757.087029][ T1605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.088612][ T1605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.096850][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 757.104107][ T7526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.105345][ T7526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.110270][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 757.112621][T15887] FAT-fs (loop0): Directory bread(block 65) failed [ 757.116008][T15887] FAT-fs (loop0): Directory bread(block 66) failed [ 757.118223][T15891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 757.120168][T15887] FAT-fs (loop0): Directory bread(block 67) failed [ 757.123469][T15887] FAT-fs (loop0): Directory bread(block 68) failed [ 757.125638][T15887] FAT-fs (loop0): Directory bread(block 69) failed [ 757.198570][T15887] FAT-fs (loop0): Directory bread(block 70) failed [ 757.199528][T15887] FAT-fs (loop0): Directory bread(block 71) failed [ 757.207420][T15887] FAT-fs (loop0): Directory bread(block 72) failed [ 757.210850][T15887] FAT-fs (loop0): Directory bread(block 73) failed [ 758.274527][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 758.335525][T15909] loop2: detected capacity change from 0 to 512 [ 758.343658][T15908] loop0: detected capacity change from 0 to 1024 [ 758.345089][T15908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 758.424058][T15909] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 758.444001][T15908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 758.453776][T15909] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 758.837349][T15920] loop1: detected capacity change from 0 to 1024 [ 759.742954][T15928] loop4: detected capacity change from 0 to 1024 [ 759.780676][T15225] EXT4-fs (loop0): unmounting filesystem. [ 759.835076][T15930] loop2: detected capacity change from 0 to 1024 [ 759.849108][T15930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 759.885068][T15930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 760.650965][T15956] loop3: detected capacity change from 0 to 128 [ 760.663932][T15956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 761.336439][T13292] EXT4-fs (loop2): unmounting filesystem. [ 761.534683][T14546] EXT4-fs (loop3): unmounting filesystem. [ 761.552445][T15965] loop2: detected capacity change from 0 to 128 [ 761.565155][T15965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 761.588355][T15971] loop3: detected capacity change from 0 to 1024 [ 761.678298][T15695] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 761.706255][T15976] loop0: detected capacity change from 0 to 1024 [ 762.198577][T15635] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 762.490904][T13292] EXT4-fs (loop2): unmounting filesystem. [ 762.598014][T15988] loop4: detected capacity change from 0 to 256 [ 762.707522][T15988] FAT-fs (loop4): Directory bread(block 64) failed [ 762.708934][T15988] FAT-fs (loop4): Directory bread(block 65) failed [ 762.710048][T15988] FAT-fs (loop4): Directory bread(block 66) failed [ 762.712270][T15988] FAT-fs (loop4): Directory bread(block 67) failed [ 762.715651][T15988] FAT-fs (loop4): Directory bread(block 68) failed [ 762.726350][T15988] FAT-fs (loop4): Directory bread(block 69) failed [ 762.727573][T15988] FAT-fs (loop4): Directory bread(block 70) failed [ 762.733942][T15988] FAT-fs (loop4): Directory bread(block 71) failed [ 762.740130][T15988] FAT-fs (loop4): Directory bread(block 72) failed [ 762.741364][T15988] FAT-fs (loop4): Directory bread(block 73) failed [ 763.023927][T16002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 763.364164][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.365628][T16007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 763.368802][T16007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.371846][T16007] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.406964][T16007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 763.529572][T16004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 763.841386][T15582] EXT4-fs (loop4): unmounting filesystem. [ 764.477608][T16024] set_capacity_and_notify: 1 callbacks suppressed [ 764.477618][T16024] loop4: detected capacity change from 0 to 128 [ 764.483412][T16024] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 765.007263][T16040] loop0: detected capacity change from 0 to 256 [ 765.013591][T16040] FAT-fs (loop0): Directory bread(block 64) failed [ 765.015522][T16040] FAT-fs (loop0): Directory bread(block 65) failed [ 765.020134][T16040] FAT-fs (loop0): Directory bread(block 66) failed [ 765.026744][T16040] FAT-fs (loop0): Directory bread(block 67) failed [ 765.028066][T16040] FAT-fs (loop0): Directory bread(block 68) failed [ 765.029122][T16040] FAT-fs (loop0): Directory bread(block 69) failed [ 765.030272][T16040] FAT-fs (loop0): Directory bread(block 70) failed [ 765.031180][T16040] FAT-fs (loop0): Directory bread(block 71) failed [ 765.032259][T16040] FAT-fs (loop0): Directory bread(block 72) failed [ 765.033262][T16040] FAT-fs (loop0): Directory bread(block 73) failed [ 765.096387][T16046] loop3: detected capacity change from 0 to 512 [ 765.098153][T16046] EXT4-fs: Ignoring removed nobh option [ 765.099703][T16046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 765.119267][T16046] EXT4-fs (loop3): 1 truncate cleaned up [ 765.122737][T16046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 765.132249][T16050] loop5: detected capacity change from 0 to 7 [ 765.201491][T16051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 765.472649][T16050] Dev loop5: unable to read RDB block 7 [ 765.485176][T15582] EXT4-fs (loop4): unmounting filesystem. [ 765.501906][T16050] loop5: unable to read partition table [ 765.502997][T16050] loop5: partition table beyond EOD, truncated [ 765.503870][T16050] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 765.516452][T16051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.567923][T16055] loop4: detected capacity change from 0 to 128 [ 765.581200][T16055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 766.129917][T16064] loop2: detected capacity change from 0 to 1024 [ 766.147417][T16066] loop0: detected capacity change from 0 to 512 [ 766.155288][T16066] EXT4-fs: Ignoring removed nobh option [ 766.159614][T16066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 766.164963][T16066] EXT4-fs (loop0): 1 truncate cleaned up [ 766.166021][T16066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 766.175442][T14546] EXT4-fs (loop3): unmounting filesystem. [ 766.589238][T15582] EXT4-fs (loop4): unmounting filesystem. [ 766.646495][T16075] loop4: detected capacity change from 0 to 1024 [ 766.691607][T15896] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.069803][T15225] EXT4-fs (loop0): unmounting filesystem. [ 767.095658][T16085] loop3: detected capacity change from 0 to 256 [ 767.119060][T16085] FAT-fs (loop3): Directory bread(block 64) failed [ 767.128965][T16085] FAT-fs (loop3): Directory bread(block 65) failed [ 767.130182][T16085] FAT-fs (loop3): Directory bread(block 66) failed [ 767.135239][T16085] FAT-fs (loop3): Directory bread(block 67) failed [ 767.138734][T16085] FAT-fs (loop3): Directory bread(block 68) failed [ 767.139905][T16085] FAT-fs (loop3): Directory bread(block 69) failed [ 767.140929][T16085] FAT-fs (loop3): Directory bread(block 70) failed [ 767.146740][T16085] FAT-fs (loop3): Directory bread(block 71) failed [ 767.149183][T16085] FAT-fs (loop3): Directory bread(block 72) failed [ 767.151086][T16085] FAT-fs (loop3): Directory bread(block 73) failed [ 767.192601][T16089] loop0: detected capacity change from 0 to 1024 [ 767.226048][T16093] Dev loop5: unable to read RDB block 7 [ 767.266330][T16093] loop5: unable to read partition table [ 767.267504][T16093] loop5: partition table beyond EOD, truncated [ 767.268651][T16093] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.320860][T15635] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 767.770066][T16099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 767.772116][T16099] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 767.783800][T16099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 767.785236][T16099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 767.787569][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.790415][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.956827][T16099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 767.996014][T16096] ceph: No mds server is up or the cluster is laggy [ 767.999467][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 768.000823][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 768.076848][T16103] trusted_key: encrypted_key: insufficient parameters specified [ 768.349947][T16122] Dev loop2: unable to read RDB block 7 [ 768.350988][T16122] loop2: unable to read partition table [ 768.352054][T16122] loop2: partition table beyond EOD, truncated [ 768.358820][T16122] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 769.271291][T15635] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 769.418346][ T3898] libceph: connect (1)[c::]:6789 error -101 [ 769.419533][ T3898] libceph: mon0 (1)[c::]:6789 connect error [ 769.771611][T16137] ceph: No mds server is up or the cluster is laggy [ 769.775376][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 769.813705][T13479] libceph: connect (1)[c::]:6789 error -101 [ 769.832290][T13479] libceph: mon0 (1)[c::]:6789 connect error [ 769.846210][T16142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.117964][T16146] set_capacity_and_notify: 3 callbacks suppressed [ 770.117973][T16146] loop5: detected capacity change from 0 to 7 [ 770.120668][T16146] Dev loop5: unable to read RDB block 7 [ 770.121664][T16146] loop5: AHDI p1 p2 p3 [ 770.122352][T16146] loop5: partition table partially beyond EOD, truncated [ 770.126793][T16146] loop5: p1 start 1601398130 is beyond EOD, truncated [ 770.133045][T16146] loop5: p2 start 1702059890 is beyond EOD, truncated [ 770.242022][T16159] loop1: detected capacity change from 0 to 1024 [ 770.243847][T16158] loop0: detected capacity change from 0 to 512 [ 770.245259][T16158] EXT4-fs: Ignoring removed nobh option [ 770.248412][T16158] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.251906][T16158] EXT4-fs (loop0): 1 truncate cleaned up [ 770.252892][T16158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 770.277535][T15635] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 770.388772][T16167] loop4: detected capacity change from 0 to 1024 [ 771.066969][T16174] loop2: detected capacity change from 0 to 1024 [ 771.100309][T15225] EXT4-fs (loop0): unmounting filesystem. [ 771.148862][T15695] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.698808][T16184] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 771.813151][T16181] ceph: No mds server is up or the cluster is laggy [ 771.823482][ T4880] libceph: connect (1)[c::]:6789 error -101 [ 771.825841][ T4880] libceph: mon0 (1)[c::]:6789 connect error [ 771.843889][T16184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.075168][T16190] loop5: detected capacity change from 0 to 7 [ 772.077036][T16190] Dev loop5: unable to read RDB block 7 [ 772.078006][T16190] loop5: AHDI p1 p2 p3 [ 772.078673][T16190] loop5: partition table partially beyond EOD, truncated [ 772.079947][T16190] loop5: p1 start 1601398130 is beyond EOD, truncated [ 772.081227][T16190] loop5: p2 start 1702059890 is beyond EOD, truncated [ 772.165214][T16198] loop4: detected capacity change from 0 to 512 [ 772.167974][T16198] EXT4-fs: Ignoring removed nobh option [ 772.169630][T16198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 772.172722][T16198] EXT4-fs (loop4): 1 truncate cleaned up [ 772.173712][T16198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 772.284424][T16205] loop3: detected capacity change from 0 to 1024 [ 773.035994][T15582] EXT4-fs (loop4): unmounting filesystem. [ 773.293338][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.294807][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.296043][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.297373][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.298659][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.299885][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.301053][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.303228][T16224] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.963987][T16231] loop5: detected capacity change from 0 to 7 [ 773.976155][T16231] Dev loop5: unable to read RDB block 7 [ 773.977318][T16231] loop5: AHDI p1 p2 p3 [ 773.978034][T16231] loop5: partition table partially beyond EOD, truncated [ 773.979524][T16231] loop5: p1 start 1601398130 is beyond EOD, truncated [ 773.980632][T16231] loop5: p2 start 1702059890 is beyond EOD, truncated [ 774.001737][T14271] libceph: connect (1)[c::]:6789 error -101 [ 774.003114][T14271] libceph: mon0 (1)[c::]:6789 connect error [ 774.041931][T16229] ceph: No mds server is up or the cluster is laggy [ 774.043655][T16236] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 774.075179][T16236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 774.103880][T16241] loop4: detected capacity change from 0 to 1024 [ 774.149792][T15695] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 774.153833][T15635] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 775.089150][T16256] Dev loop2: unable to read RDB block 7 [ 775.090190][T16256] loop2: unable to read partition table [ 775.091070][T16256] loop2: partition table beyond EOD, truncated [ 775.092111][T16256] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 775.418753][T16260] set_capacity_and_notify: 3 callbacks suppressed [ 775.418782][T16260] loop1: detected capacity change from 0 to 256 [ 775.580846][T16260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 775.680456][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 775.762747][T16270] loop3: detected capacity change from 0 to 1024 [ 775.807081][T15635] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 776.952403][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 777.347258][T16314] loop0: detected capacity change from 0 to 1024 [ 777.792133][T16324] loop2: detected capacity change from 0 to 128 [ 777.812565][T16324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 777.814809][T16327] loop4: detected capacity change from 0 to 128 [ 777.824941][T16327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 778.589367][ T4323] Bluetooth: hci5: command 0x0406 tx timeout [ 778.950312][T13292] EXT4-fs (loop2): unmounting filesystem. [ 778.964958][T15582] EXT4-fs (loop4): unmounting filesystem. [ 779.624280][T16365] loop4: detected capacity change from 0 to 512 [ 779.663823][T16369] loop3: detected capacity change from 0 to 1024 [ 779.674905][T16371] loop2: detected capacity change from 0 to 1024 [ 779.708628][T15695] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 779.773293][T15647] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 780.512419][T16394] Bluetooth: MGMT ver 1.22 [ 780.514405][T16394] Bluetooth: hci0: unsupported parameter 255 [ 780.515286][T16394] Bluetooth: hci0: unsupported parameter 255 [ 781.287844][T16420] Bluetooth: hci0: unsupported parameter 255 [ 781.288906][T16420] Bluetooth: hci0: unsupported parameter 255 [ 781.495964][T16433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3288'. [ 782.214272][T16450] Bluetooth: hci0: unsupported parameter 255 [ 782.215310][T16450] Bluetooth: hci0: unsupported parameter 255 [ 782.713885][T16470] loop3: detected capacity change from 0 to 512 [ 782.725000][T16470] EXT4-fs: Ignoring removed nobh option [ 782.734212][T16470] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 782.752936][T16478] Bluetooth: hci0: unsupported parameter 255 [ 782.753143][T16470] EXT4-fs (loop3): 1 truncate cleaned up [ 782.754039][T16478] Bluetooth: hci0: unsupported parameter 255 [ 782.755056][T16470] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 782.835188][T16482] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3307'. [ 783.231792][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'. [ 783.334963][T16491] loop0: detected capacity change from 0 to 256 [ 783.522297][T16491] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 783.725832][T16503] loop4: detected capacity change from 0 to 1024 [ 784.154226][T16509] Bluetooth: hci0: unsupported parameter 255 [ 784.170215][T16509] Bluetooth: hci0: unsupported parameter 255 [ 784.335258][T14546] EXT4-fs (loop3): unmounting filesystem. [ 784.370100][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3325'. [ 784.469843][T16526] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3326'. [ 784.891465][T16530] loop5: detected capacity change from 0 to 7 [ 784.893311][T15635] Dev loop5: unable to read RDB block 7 [ 784.894348][T15635] loop5: AHDI p1 p2 p3 [ 784.895054][T15635] loop5: partition table partially beyond EOD, truncated [ 784.896338][T15635] loop5: p1 start 1601398130 is beyond EOD, truncated [ 784.898125][T15635] loop5: p2 start 1702059890 is beyond EOD, truncated [ 784.899816][T16530] Dev loop5: unable to read RDB block 7 [ 784.901010][T16530] loop5: AHDI p1 p2 p3 [ 784.901659][T16530] loop5: partition table partially beyond EOD, truncated [ 784.903045][T16530] loop5: p1 start 1601398130 is beyond EOD, truncated [ 784.904150][T16530] loop5: p2 start 1702059890 is beyond EOD, truncated [ 785.010796][T16536] loop2: detected capacity change from 0 to 7 [ 785.012407][T16536] Dev loop2: unable to read RDB block 7 [ 785.013453][T16536] loop2: unable to read partition table [ 785.014358][T16536] loop2: partition table beyond EOD, truncated [ 785.015555][T16536] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 785.089972][T16540] Bluetooth: hci0: unsupported parameter 255 [ 785.091078][T16540] Bluetooth: hci0: unsupported parameter 255 [ 785.219439][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 785.328911][T16550] loop1: detected capacity change from 0 to 256 [ 785.364237][T16550] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 785.572784][T16556] loop5: detected capacity change from 0 to 7 [ 785.582836][T16556] Dev loop5: unable to read RDB block 7 [ 785.583909][T16556] loop5: AHDI p1 p2 p3 [ 785.584714][T16556] loop5: partition table partially beyond EOD, truncated [ 785.585904][T16556] loop5: p1 start 1601398130 is beyond EOD, truncated [ 785.593221][T16556] loop5: p2 start 1702059890 is beyond EOD, truncated [ 785.648900][T16560] loop2: detected capacity change from 0 to 7 [ 785.652599][T16560] Dev loop2: unable to read RDB block 7 [ 785.653582][T16560] loop2: unable to read partition table [ 785.654744][T16560] loop2: partition table beyond EOD, truncated [ 785.656004][T16560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 785.762063][T16568] Bluetooth: hci0: unsupported parameter 255 [ 785.763272][T16568] Bluetooth: hci0: unsupported parameter 255 [ 785.894871][T16572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3347'. [ 786.504106][T16590] loop5: detected capacity change from 0 to 7 [ 786.505582][T16590] Dev loop5: unable to read RDB block 7 [ 786.523465][T16590] loop5: AHDI p1 p2 p3 [ 786.524179][T16590] loop5: partition table partially beyond EOD, truncated [ 786.529738][T16590] loop5: p1 start 1601398130 is beyond EOD, truncated [ 786.531968][T16590] loop5: p2 start 1702059890 is beyond EOD, truncated [ 786.541799][T16592] loop2: detected capacity change from 0 to 7 [ 786.544034][T16592] Dev loop2: unable to read RDB block 7 [ 786.545271][T16592] loop2: unable to read partition table [ 786.550682][T16592] loop2: partition table beyond EOD, truncated [ 786.553845][T16592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.704790][T16611] Dev loop5: unable to read RDB block 7 [ 786.705820][T16611] loop5: unable to read partition table [ 786.714560][T16611] loop5: partition table beyond EOD, truncated [ 786.748672][T16611] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.779422][T16622] Dev loop5: unable to read RDB block 7 [ 786.780372][T16622] loop5: unable to read partition table [ 786.781392][T16622] loop5: partition table beyond EOD, truncated [ 786.782595][T16622] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.859647][T16631] Dev loop2: unable to read RDB block 7 [ 786.865105][T16631] loop2: unable to read partition table [ 786.866086][T16631] loop2: partition table beyond EOD, truncated [ 786.879343][T16631] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 786.931622][ T3936] Dev loop2: unable to read RDB block 7 [ 786.932570][ T3936] loop2: unable to read partition table [ 786.933523][ T3936] loop2: partition table beyond EOD, truncated [ 787.266783][T16641] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3372'. [ 787.296126][T16640] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 787.649395][T16647] Dev loop5: unable to read RDB block 7 [ 787.650412][T16647] loop5: unable to read partition table [ 787.651281][T16647] loop5: partition table beyond EOD, truncated [ 787.653311][T16647] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 788.320342][T16680] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 788.421205][T16683] set_capacity_and_notify: 6 callbacks suppressed [ 788.421216][T16683] loop3: detected capacity change from 0 to 512 [ 788.794349][T16683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 788.921079][T16698] loop5: detected capacity change from 0 to 7 [ 788.922596][T16698] Dev loop5: unable to read RDB block 7 [ 788.923652][T16698] loop5: unable to read partition table [ 788.924768][T16698] loop5: partition table beyond EOD, truncated [ 788.925762][T16698] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 789.060910][T16702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3390'. [ 789.392101][T14546] EXT4-fs (loop3): unmounting filesystem. [ 789.734643][T16736] net_ratelimit: 5269 callbacks suppressed [ 789.734654][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.736937][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.738135][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.739321][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.740556][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.741777][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.742969][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.744151][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.745339][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 789.746647][T16736] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 790.152368][T16745] loop1: detected capacity change from 0 to 256 [ 790.202754][T16745] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 790.550688][T16763] loop2: detected capacity change from 0 to 256 [ 790.553963][T16763] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 790.839990][T16779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3413'. [ 791.412201][T16791] loop1: detected capacity change from 0 to 256 [ 791.718135][T16791] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 792.108870][T16797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3421'. [ 792.762720][T16838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3434'. [ 792.874480][T16840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 792.982099][T16842] loop1: detected capacity change from 0 to 512 [ 793.150507][T16837] loop3: detected capacity change from 0 to 256 [ 793.188255][T16842] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 793.206162][T16837] FAT-fs (loop3): Directory bread(block 64) failed [ 793.207576][T16837] FAT-fs (loop3): Directory bread(block 65) failed [ 793.208666][T16837] FAT-fs (loop3): Directory bread(block 66) failed [ 793.209760][T16837] FAT-fs (loop3): Directory bread(block 67) failed [ 793.210874][T16837] FAT-fs (loop3): Directory bread(block 68) failed [ 793.211918][T16837] FAT-fs (loop3): Directory bread(block 69) failed [ 793.218354][T16837] FAT-fs (loop3): Directory bread(block 70) failed [ 793.219528][T16837] FAT-fs (loop3): Directory bread(block 71) failed [ 793.223802][T16837] FAT-fs (loop3): Directory bread(block 72) failed [ 793.225941][T16837] FAT-fs (loop3): Directory bread(block 73) failed [ 793.345858][T16856] loop2: detected capacity change from 0 to 256 [ 793.360336][T16856] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 793.613994][ T4322] EXT4-fs (loop1): unmounting filesystem. [ 793.842497][T12915] Bluetooth: hci3: command 0x0406 tx timeout [ 794.110291][T16876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3447'. [ 795.099816][T12915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.112748][T12915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.114983][T12915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.116635][T12915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.117821][T12915] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 795.119872][T12915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 795.329696][T16917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 795.435088][T16919] loop2: detected capacity change from 0 to 512 [ 795.592967][T16919] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 795.634736][T16928] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3460'. [ 795.799456][T16900] chnl_net:caif_netlink_parms(): no params data found [ 796.163278][T16947] Bluetooth: hci0: unsupported parameter 255 [ 796.164253][T16947] Bluetooth: hci0: unsupported parameter 255 [ 796.175192][T16900] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.176490][T16900] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.177969][T16900] device bridge_slave_0 entered promiscuous mode [ 796.179928][T16900] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.181104][T16900] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.182673][T16900] device bridge_slave_1 entered promiscuous mode [ 796.193590][T16900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.196821][T16900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.200882][T13292] EXT4-fs (loop2): unmounting filesystem. [ 796.235473][T16900] team0: Port device team_slave_0 added [ 796.242086][T16900] team0: Port device team_slave_1 added [ 796.250012][T16900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.251092][T16900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.255364][T16900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.258476][T16900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.259545][T16900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.265533][T16900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.307622][T16900] device hsr_slave_0 entered promiscuous mode [ 796.347290][T16900] device hsr_slave_1 entered promiscuous mode [ 796.357819][T16900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.359030][T16900] Cannot create hsr debugfs directory [ 796.413634][T16967] loop2: detected capacity change from 0 to 7 [ 796.422120][T16967] Dev loop2: unable to read RDB block 7 [ 796.424189][T16967] loop2: unable to read partition table [ 796.427442][T16967] loop2: partition table beyond EOD, truncated [ 796.433494][T16967] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 796.678428][T16979] loop2: detected capacity change from 0 to 512 [ 797.196417][T12915] Bluetooth: hci4: command 0x0409 tx timeout [ 797.287173][T16979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 797.392741][T16987] loop4: detected capacity change from 0 to 256 [ 797.429263][T16987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 797.706037][T13292] EXT4-fs (loop2): unmounting filesystem. [ 797.849934][T17008] loop2: detected capacity change from 0 to 7 [ 797.853101][T17008] Dev loop2: unable to read RDB block 7 [ 797.858649][T17008] loop2: unable to read partition table [ 797.859658][T17008] loop2: partition table beyond EOD, truncated [ 797.860545][T17008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 798.377695][ T8761] bond1: (slave ip6gretap1): Releasing active interface [ 798.378944][ T8761] device ip6gretap1 left promiscuous mode [ 798.447081][ T8761] bond2: (slave ip6gretap2): Releasing active interface [ 798.448377][ T8761] device ip6gretap2 left promiscuous mode [ 798.547219][ T8761] bond3: (slave ip6gretap3): Releasing active interface [ 798.626868][ T8761] bond4: (slave ip6gretap4): Releasing active interface [ 799.027852][T17038] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 799.134085][T17040] loop2: detected capacity change from 0 to 512 [ 799.273769][T17040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 799.286308][ T4323] Bluetooth: hci4: command 0x041b tx timeout [ 800.089110][T13292] EXT4-fs (loop2): unmounting filesystem. [ 800.157085][T16900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 800.260236][T16900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 800.516918][T16900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 800.666709][T17070] loop2: detected capacity change from 0 to 7 [ 800.675166][T17070] Dev loop2: unable to read RDB block 7 [ 800.676067][T17070] loop2: unable to read partition table [ 800.678561][T16900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 800.686603][T17070] loop2: partition table beyond EOD, truncated [ 800.687697][T17070] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 800.839315][T17090] loop3: detected capacity change from 0 to 1024 [ 800.938591][T15635] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 801.032316][T17096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 801.138203][T17101] loop4: detected capacity change from 0 to 512 [ 801.282035][T17101] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 801.366487][T12915] Bluetooth: hci4: command 0x040f tx timeout [ 801.446570][T16900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.451157][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 801.452722][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 801.455923][T16900] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.461050][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 801.463847][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 801.469508][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.470692][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.472401][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 801.610353][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 801.612178][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 801.613664][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.614814][ T5605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.624295][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 801.637285][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 801.639063][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 801.642179][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 801.644052][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 801.651162][T16900] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.660492][T16900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.664102][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 801.665990][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 801.670713][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 801.679651][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 801.685852][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 801.692773][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 801.754494][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 801.756911][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 801.758934][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 801.808919][T15582] EXT4-fs (loop4): unmounting filesystem. [ 803.435721][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.441587][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.446400][T12915] Bluetooth: hci4: command 0x0419 tx timeout [ 803.451143][T16900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.514686][T17144] loop4: detected capacity change from 0 to 256 [ 803.519912][T17144] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.027559][T17146] netlink: 'syz.0.3520': attribute type 3 has an invalid length. [ 804.029573][T17146] netlink: 'syz.0.3520': attribute type 3 has an invalid length. [ 804.033856][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 804.035651][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.045296][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.056589][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.063773][T16900] device veth0_vlan entered promiscuous mode [ 804.067672][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.078174][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.110537][ T8761] device hsr_slave_0 left promiscuous mode [ 804.121740][T17155] loop3: detected capacity change from 0 to 256 [ 804.124017][T17155] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.141311][ T8761] device hsr_slave_1 left promiscuous mode [ 804.206666][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.208463][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.209895][ T8761] device bridge_slave_1 left promiscuous mode [ 804.211027][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.266901][ T8761] device bridge_slave_0 left promiscuous mode [ 804.268097][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.482990][T17161] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 804.589378][T17164] loop4: detected capacity change from 0 to 512 [ 804.702630][T17164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 805.827943][T15582] EXT4-fs (loop4): unmounting filesystem. [ 806.162804][T17190] loop4: detected capacity change from 0 to 256 [ 806.251816][T17190] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 806.647272][ T8761] bond4 (unregistering): Released all slaves [ 807.327292][ T8761] bond3 (unregistering): Released all slaves [ 807.331673][ T8761] bond2 (unregistering): Released all slaves [ 807.335097][ T8761] bond1 (unregistering): Released all slaves [ 809.812130][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 809.979528][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 810.147234][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.377181][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.917675][ T8761] bond0 (unregistering): Released all slaves [ 812.234101][T16900] device veth1_vlan entered promiscuous mode [ 812.240976][T17157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3524'. [ 812.249409][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 812.250945][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 812.375043][T16900] device veth0_macvtap entered promiscuous mode [ 812.377141][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 812.379613][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 812.381860][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 812.384545][T16900] device veth1_macvtap entered promiscuous mode [ 812.787318][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.788756][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.790084][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.791516][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.793606][T16900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.795433][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 812.797633][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 812.799350][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 812.813259][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.814828][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.816141][T16900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.818263][T16900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.820444][T16900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.821648][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 812.823875][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 812.826913][T16900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.828259][T16900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.830192][T16900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.831482][T16900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.876127][T17217] loop4: detected capacity change from 0 to 1024 [ 812.917196][ T5605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.919105][ T1709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.926763][ T5605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.928721][ T1709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.930317][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 812.932473][ T5605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 813.333487][T17221] loop1: detected capacity change from 0 to 256 [ 813.343229][T17223] loop2: detected capacity change from 0 to 1024 [ 813.358520][T17221] FAT-fs (loop1): Directory bread(block 64) failed [ 813.359517][T17221] FAT-fs (loop1): Directory bread(block 65) failed [ 813.360717][T17221] FAT-fs (loop1): Directory bread(block 66) failed [ 813.361704][T17221] FAT-fs (loop1): Directory bread(block 67) failed [ 813.362666][T17221] FAT-fs (loop1): Directory bread(block 68) failed [ 813.363668][T17221] FAT-fs (loop1): Directory bread(block 69) failed [ 813.364661][T17221] FAT-fs (loop1): Directory bread(block 70) failed [ 813.365610][T17221] FAT-fs (loop1): Directory bread(block 71) failed [ 813.370851][T17221] FAT-fs (loop1): Directory bread(block 72) failed [ 813.371830][T17221] FAT-fs (loop1): Directory bread(block 73) failed [ 813.382503][T17209] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 815.231151][T17247] netlink: 'syz.0.3545': attribute type 3 has an invalid length. [ 815.232538][T17247] netlink: 'syz.0.3545': attribute type 3 has an invalid length. [ 815.243512][T17247] loop0: detected capacity change from 0 to 128 [ 817.131970][T17270] netlink: 'syz.2.3551': attribute type 3 has an invalid length. [ 817.134299][T17270] netlink: 'syz.2.3551': attribute type 3 has an invalid length. [ 818.316459][T17282] netlink: 'syz.4.3553': attribute type 3 has an invalid length. [ 818.317773][T17282] netlink: 'syz.4.3553': attribute type 3 has an invalid length. [ 818.376083][T17281] netlink: 'syz.0.3552': attribute type 3 has an invalid length. [ 818.377555][T17281] netlink: 'syz.0.3552': attribute type 3 has an invalid length. [ 818.387428][T17281] loop0: detected capacity change from 0 to 128 [ 820.395051][T17298] netlink: 'syz.2.3558': attribute type 3 has an invalid length. [ 820.396505][T17298] netlink: 'syz.2.3558': attribute type 3 has an invalid length. [ 821.262750][T17299] netlink: 'syz.4.3556': attribute type 3 has an invalid length. [ 821.264056][T17299] netlink: 'syz.4.3556': attribute type 3 has an invalid length. [ 821.272525][T17299] loop4: detected capacity change from 0 to 128 [ 821.472287][T17303] loop2: detected capacity change from 0 to 512 [ 821.522225][T17303] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 821.568758][T17303] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 823.238553][T17319] loop0: detected capacity change from 0 to 128 [ 823.326547][T17320] netlink: 'syz.0.3565': attribute type 3 has an invalid length. [ 823.328557][T17320] netlink: 'syz.0.3565': attribute type 3 has an invalid length. [ 823.775454][T17335] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 823.776853][T17335] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 823.800221][T17335] loop2: detected capacity change from 0 to 128 [ 824.784158][T17329] loop1: detected capacity change from 0 to 1024 [ 824.844839][T17209] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 827.231429][T17351] loop3: detected capacity change from 0 to 128 [ 827.250561][T17360] loop2: detected capacity change from 0 to 128 [ 827.407493][T17356] netlink: 'syz.2.3571': attribute type 3 has an invalid length. [ 827.408797][T17356] netlink: 'syz.2.3571': attribute type 3 has an invalid length. [ 827.410042][T17354] netlink: 'syz.3.3572': attribute type 3 has an invalid length. [ 827.411398][T17354] netlink: 'syz.3.3572': attribute type 3 has an invalid length. [ 827.767450][T17368] netlink: 'syz.1.3575': attribute type 3 has an invalid length. [ 827.768777][T17368] netlink: 'syz.1.3575': attribute type 3 has an invalid length. [ 827.778649][T17368] loop1: detected capacity change from 0 to 128 [ 828.163789][T17369] netlink: 'syz.4.3574': attribute type 3 has an invalid length. [ 828.165175][T17369] netlink: 'syz.4.3574': attribute type 3 has an invalid length. [ 828.575950][T17372] tap0: tun_chr_ioctl cmd 1074025678 [ 828.577468][T17372] tap0: group set to 0 [ 828.584522][T17372] tap0: tun_chr_ioctl cmd 35108 [ 828.586582][T17372] tap0: tun_chr_ioctl cmd 1074812117 [ 828.913612][T17384] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 828.914851][T17384] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 828.933667][T17384] loop1: detected capacity change from 0 to 128 [ 832.316298][T17418] loop3: detected capacity change from 0 to 128 [ 833.832341][T17427] validate_nla: 4 callbacks suppressed [ 833.832352][T17427] netlink: 'syz.4.3592': attribute type 3 has an invalid length. [ 833.836914][T17427] netlink: 'syz.4.3592': attribute type 3 has an invalid length. [ 834.508191][T17451] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 834.509560][T17451] netlink: 'syz.2.3601': attribute type 3 has an invalid length. [ 834.546690][T17451] loop2: detected capacity change from 0 to 128 [ 836.183230][T17479] loop3: detected capacity change from 0 to 1024 [ 837.876361][T17202] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 838.467059][T17502] netlink: 'syz.4.3615': attribute type 3 has an invalid length. [ 838.468442][T17502] netlink: 'syz.4.3615': attribute type 3 has an invalid length. [ 838.489801][T17502] loop4: detected capacity change from 0 to 128 [ 838.827435][T17503] netlink: 'syz.2.3614': attribute type 3 has an invalid length. [ 838.828767][T17503] netlink: 'syz.2.3614': attribute type 3 has an invalid length. [ 838.856681][T17503] loop2: detected capacity change from 0 to 128 [ 839.895072][T17506] netlink: 'syz.0.3616': attribute type 3 has an invalid length. [ 839.896298][T17506] netlink: 'syz.0.3616': attribute type 3 has an invalid length. [ 839.910440][T17506] loop0: detected capacity change from 0 to 128 [ 839.916489][T12915] Bluetooth: hci0: command 0x0406 tx timeout [ 839.993929][T17513] loop4: detected capacity change from 0 to 128 [ 840.000249][T17513] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 840.055205][ T4415] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 840.181847][T17517] loop2: detected capacity change from 0 to 128 [ 841.672763][T17534] loop2: detected capacity change from 0 to 1024 [ 841.806215][T17545] netlink: 'syz.4.3630': attribute type 3 has an invalid length. [ 841.807619][T17545] netlink: 'syz.4.3630': attribute type 3 has an invalid length. [ 841.830155][T17545] loop4: detected capacity change from 0 to 128 [ 841.963055][T17202] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 843.044996][T17560] loop2: detected capacity change from 0 to 7 [ 843.071692][T17560] Dev loop2: unable to read RDB block 7 [ 843.076848][T17560] loop2: AHDI p1 p2 p3 [ 843.077547][T17560] loop2: partition table partially beyond EOD, truncated [ 843.078739][T17560] loop2: p1 start 1601398130 is beyond EOD, truncated [ 843.079689][T17560] loop2: p2 start 1702059890 is beyond EOD, truncated [ 843.103894][T17566] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 843.105474][T17566] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 844.383859][T17589] fuse: Unknown parameter 'grou00000000000000000000' [ 844.480809][T17601] loop2: detected capacity change from 0 to 7 [ 844.483892][T17601] Dev loop2: unable to read RDB block 7 [ 844.484733][T17601] loop2: AHDI p1 p2 p3 [ 844.485368][T17601] loop2: partition table partially beyond EOD, truncated [ 844.486598][T17601] loop2: p1 start 1601398130 is beyond EOD, truncated [ 844.487530][T17601] loop2: p2 start 1702059890 is beyond EOD, truncated [ 844.799577][T17608] loop4: detected capacity change from 0 to 512 [ 845.389223][T17608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 845.883257][T15582] EXT4-fs (loop4): unmounting filesystem. [ 845.923339][T17632] fuse: Unknown parameter 'group_i00000000000000000000' [ 846.625717][T17656] loop5: detected capacity change from 0 to 7 [ 846.631864][T17202] Dev loop5: unable to read RDB block 7 [ 846.632955][T17202] loop5: unable to read partition table [ 846.633830][T17202] loop5: partition table beyond EOD, truncated [ 846.637539][T17656] Dev loop5: unable to read RDB block 7 [ 846.638674][T17656] loop5: unable to read partition table [ 846.639689][T17656] loop5: partition table beyond EOD, truncated [ 846.641486][T17656] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 846.697729][T17663] fuse: Unknown parameter 'group_i00000000000000000000' [ 846.924106][T17672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 847.032096][T17674] loop4: detected capacity change from 0 to 512 [ 847.259870][T17674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 847.274679][T17687] loop5: detected capacity change from 0 to 7 [ 847.277041][T17687] Dev loop5: unable to read RDB block 7 [ 847.277968][T17687] loop5: unable to read partition table [ 847.278890][T17687] loop5: partition table beyond EOD, truncated [ 847.279904][T17687] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 847.812338][T15582] EXT4-fs (loop4): unmounting filesystem. [ 848.194538][T17723] loop5: detected capacity change from 0 to 7 [ 848.197068][T17723] Dev loop5: unable to read RDB block 7 [ 848.198108][T17723] loop5: unable to read partition table [ 848.199197][T17723] loop5: partition table beyond EOD, truncated [ 848.200256][T17723] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.686130][T17736] loop2: detected capacity change from 0 to 7 [ 848.698145][T17736] Dev loop2: unable to read RDB block 7 [ 848.699060][T17736] loop2: AHDI p1 p2 p3 [ 848.699790][T17736] loop2: partition table partially beyond EOD, truncated [ 848.700996][T17736] loop2: p1 start 1601398130 is beyond EOD, truncated [ 848.702038][T17736] loop2: p2 start 1702059890 is beyond EOD, truncated [ 848.770889][T17748] loop5: detected capacity change from 0 to 7 [ 848.775457][T17748] Dev loop5: unable to read RDB block 7 [ 848.782395][T17748] loop5: unable to read partition table [ 848.783310][T17748] loop5: partition table beyond EOD, truncated [ 848.784283][T17748] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.810660][T17753] loop4: detected capacity change from 0 to 1024 [ 848.952956][T17757] loop3: detected capacity change from 0 to 128 [ 850.220950][T17782] loop2: detected capacity change from 0 to 7 [ 850.222411][T17782] Dev loop2: unable to read RDB block 7 [ 850.223460][T17782] loop2: AHDI p1 p2 p3 [ 850.224085][T17782] loop2: partition table partially beyond EOD, truncated [ 850.225588][T17782] loop2: p1 start 1601398130 is beyond EOD, truncated [ 850.227012][T17782] loop2: p2 start 1702059890 is beyond EOD, truncated [ 850.267806][T17787] loop5: detected capacity change from 0 to 7 [ 850.272132][T17787] Dev loop5: unable to read RDB block 7 [ 850.274160][T17787] loop5: unable to read partition table [ 850.275087][T17787] loop5: partition table beyond EOD, truncated [ 850.283114][T17787] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 850.357268][T17798] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms [ 851.892790][T17817] set_capacity_and_notify: 1 callbacks suppressed [ 851.892802][T17817] loop2: detected capacity change from 0 to 7 [ 851.908174][T17202] Dev loop2: unable to read RDB block 7 [ 851.909344][T17202] loop2: AHDI p1 p2 p3 [ 851.910002][T17202] loop2: partition table partially beyond EOD, truncated [ 851.911647][T17202] loop2: p1 start 1601398130 is beyond EOD, truncated [ 851.912876][T17202] loop2: p2 start 1702059890 is beyond EOD, truncated [ 851.914397][T17817] Dev loop2: unable to read RDB block 7 [ 851.915370][T17817] loop2: AHDI p1 p2 p3 [ 851.915978][T17817] loop2: partition table partially beyond EOD, truncated [ 851.920442][T17817] loop2: p1 start 1601398130 is beyond EOD, truncated [ 851.921685][T17817] loop2: p2 start 1702059890 is beyond EOD, truncated [ 852.086838][T17833] loop5: detected capacity change from 0 to 7 [ 852.088205][T17833] Dev loop5: unable to read RDB block 7 [ 852.089088][T17833] loop5: unable to read partition table [ 852.090099][T17833] loop5: partition table beyond EOD, truncated [ 852.090988][T17833] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 853.207753][T17848] loop2: detected capacity change from 0 to 7 [ 853.220557][T17848] Dev loop2: unable to read RDB block 7 [ 853.221487][T17848] loop2: AHDI p1 p2 p3 [ 853.222260][T17848] loop2: partition table partially beyond EOD, truncated [ 853.239668][T17848] loop2: p1 start 1601398130 is beyond EOD, truncated [ 853.240846][T17848] loop2: p2 start 1702059890 is beyond EOD, truncated [ 853.436844][T17862] netlink: 'syz.1.3743': attribute type 3 has an invalid length. [ 853.438292][T17862] netlink: 'syz.1.3743': attribute type 3 has an invalid length. [ 853.460476][T17862] loop1: detected capacity change from 0 to 128 [ 854.113530][T17878] loop4: detected capacity change from 0 to 128 [ 854.512969][T17887] loop2: detected capacity change from 0 to 7 [ 854.514305][T17887] Dev loop2: unable to read RDB block 7 [ 854.515157][T17887] loop2: AHDI p1 p2 p3 [ 854.515796][T17887] loop2: partition table partially beyond EOD, truncated [ 854.517370][T17887] loop2: p1 start 1601398130 is beyond EOD, truncated [ 854.518403][T17887] loop2: p2 start 1702059890 is beyond EOD, truncated [ 855.173960][T17918] loop2: detected capacity change from 0 to 7 [ 855.178727][T17918] Dev loop2: unable to read RDB block 7 [ 855.179800][T17918] loop2: AHDI p1 p2 p3 [ 855.180530][T17918] loop2: partition table partially beyond EOD, truncated [ 855.184161][T17918] loop2: p1 start 1601398130 is beyond EOD, truncated [ 855.186991][T17918] loop2: p2 start 1702059890 is beyond EOD, truncated [ 855.975729][T17947] loop2: detected capacity change from 0 to 7 [ 855.977421][T17947] Dev loop2: unable to read RDB block 7 [ 855.978410][T17947] loop2: AHDI p1 p2 p3 [ 855.979088][T17947] loop2: partition table partially beyond EOD, truncated [ 855.980520][T17947] loop2: p1 start 1601398130 is beyond EOD, truncated [ 855.981736][T17947] loop2: p2 start 1702059890 is beyond EOD, truncated [ 856.600324][T17973] loop2: detected capacity change from 0 to 7 [ 856.602597][T17973] Dev loop2: unable to read RDB block 7 [ 856.603594][T17973] loop2: unable to read partition table [ 856.604741][T17973] loop2: partition table beyond EOD, truncated [ 856.605954][T17973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 857.614088][T17994] netlink: 'syz.1.3798': attribute type 3 has an invalid length. [ 857.615447][T17994] netlink: 'syz.1.3798': attribute type 3 has an invalid length. [ 857.637202][T17994] loop1: detected capacity change from 0 to 128 [ 857.835231][T17995] netlink: 'syz.0.3799': attribute type 3 has an invalid length. [ 857.836671][T17995] netlink: 'syz.0.3799': attribute type 3 has an invalid length. [ 857.864788][T17995] loop0: detected capacity change from 0 to 128 [ 858.884451][T18011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3802'. [ 859.269098][T18014] loop2: detected capacity change from 0 to 7 [ 859.273878][T18014] Dev loop2: unable to read RDB block 7 [ 859.274922][T18014] loop2: unable to read partition table [ 859.276010][T18014] loop2: partition table beyond EOD, truncated [ 859.282638][T18014] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.508741][T18022] netlink: 'syz.3.3808': attribute type 3 has an invalid length. [ 859.510064][T18022] netlink: 'syz.3.3808': attribute type 3 has an invalid length. [ 859.534041][T18022] loop3: detected capacity change from 0 to 128 [ 859.951582][T18024] loop0: detected capacity change from 0 to 1024 [ 859.986150][T17209] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 860.616441][T18042] sp0: Synchronizing with TNC [ 860.778007][T18050] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3820'. [ 861.174540][T18057] loop2: detected capacity change from 0 to 7 [ 861.176062][T18057] Dev loop2: unable to read RDB block 7 [ 861.177743][T18057] loop2: unable to read partition table [ 861.178856][T18057] loop2: partition table beyond EOD, truncated [ 861.179976][T18057] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 861.253868][T18061] netlink: 'syz.1.3822': attribute type 3 has an invalid length. [ 861.255188][T18061] netlink: 'syz.1.3822': attribute type 3 has an invalid length. [ 861.269567][T18061] loop1: detected capacity change from 0 to 128 [ 862.017018][T18081] netlink: 'syz.3.3833': attribute type 3 has an invalid length. [ 862.018526][T18081] netlink: 'syz.3.3833': attribute type 3 has an invalid length. [ 862.042978][T18081] loop3: detected capacity change from 0 to 128 [ 862.714153][T18089] loop2: detected capacity change from 0 to 7 [ 862.715569][T18089] Dev loop2: unable to read RDB block 7 [ 862.717132][T18089] loop2: unable to read partition table [ 862.718585][T18089] loop2: partition table beyond EOD, truncated [ 862.719672][T18089] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 862.722542][ T3936] Dev loop2: unable to read RDB block 7 [ 862.723501][ T3936] loop2: unable to read partition table [ 862.724534][ T3936] loop2: partition table beyond EOD, truncated [ 862.840616][T18093] loop4: detected capacity change from 0 to 512 [ 863.064230][T18102] netlink: 'syz.2.3841': attribute type 4 has an invalid length. [ 863.071204][T18093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 863.083590][T18102] netlink: 'syz.2.3841': attribute type 4 has an invalid length. [ 863.213366][T18107] netlink: 'syz.0.3840': attribute type 3 has an invalid length. [ 863.214773][T18107] netlink: 'syz.0.3840': attribute type 3 has an invalid length. [ 863.240124][T18107] loop0: detected capacity change from 0 to 128 [ 863.255353][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 863.272521][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 863.560766][T18111] fuse: Bad value for 'fd' [ 863.641614][T18113] loop2: detected capacity change from 0 to 128 [ 863.916108][T15582] EXT4-fs (loop4): unmounting filesystem. [ 864.012123][T18121] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 864.132928][T18126] loop4: detected capacity change from 0 to 1024 [ 864.158381][T17202] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 865.003293][T18137] (unnamed net_device) (uninitialized): up delay (129) is not a multiple of miimon (9), value rounded to 126 ms [ 865.620159][T18157] validate_nla: 4 callbacks suppressed [ 865.620172][T18157] netlink: 'syz.1.3856': attribute type 3 has an invalid length. [ 865.622490][T18157] netlink: 'syz.1.3856': attribute type 3 has an invalid length. [ 866.212425][T18171] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 867.243348][T18187] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 867.245412][T18187] SQUASHFS error: Failed to read block 0x0: -5 [ 867.809192][T18224] netlink: 'syz.1.3870': attribute type 3 has an invalid length. [ 867.810593][T18224] netlink: 'syz.1.3870': attribute type 3 has an invalid length. [ 868.128807][T18233] loop2: detected capacity change from 0 to 1024 [ 868.199620][T18235] netlink: 'syz.0.3877': attribute type 3 has an invalid length. [ 868.201062][T18235] netlink: 'syz.0.3877': attribute type 3 has an invalid length. [ 868.224893][T18235] loop0: detected capacity change from 0 to 128 [ 868.536025][T17202] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 868.636023][T18241] overlayfs: failed to resolve './bus': -2 [ 869.894917][T18272] netlink: 'syz.1.3891': attribute type 3 has an invalid length. [ 869.896451][T18272] netlink: 'syz.1.3891': attribute type 3 has an invalid length. [ 872.657560][T18333] loop0: detected capacity change from 0 to 1024 [ 875.145875][T18364] loop2: detected capacity change from 0 to 7 [ 875.148907][T18364] Dev loop2: unable to read RDB block 7 [ 875.149822][T18364] loop2: unable to read partition table [ 875.150744][T18364] loop2: partition table beyond EOD, truncated [ 875.154686][T18364] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 875.195005][T18369] loop5: detected capacity change from 0 to 7 [ 875.201299][T18369] Dev loop5: unable to read RDB block 7 [ 875.202320][T18369] loop5: unable to read partition table [ 875.203328][T18369] loop5: partition table beyond EOD, truncated [ 875.205723][T18369] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 875.334794][T18384] netlink: 'syz.4.3927': attribute type 3 has an invalid length. [ 875.336119][T18384] netlink: 'syz.4.3927': attribute type 3 has an invalid length. [ 875.809044][T18384] loop4: detected capacity change from 0 to 128 [ 876.314943][T18400] loop2: detected capacity change from 0 to 7 [ 876.328718][T18400] Dev loop2: unable to read RDB block 7 [ 876.331980][T18400] loop2: unable to read partition table [ 876.333533][T18400] loop2: partition table beyond EOD, truncated [ 876.338632][T18400] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 876.400854][T18403] loop5: detected capacity change from 0 to 7 [ 876.407529][T18403] Dev loop5: unable to read RDB block 7 [ 876.408506][T18403] loop5: unable to read partition table [ 876.411910][T18403] loop5: partition table beyond EOD, truncated [ 876.412868][T18403] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 876.972174][T18418] loop0: detected capacity change from 0 to 1024 [ 878.085207][T18436] loop2: detected capacity change from 0 to 7 [ 878.087711][T17202] Dev loop2: unable to read RDB block 7 [ 878.088755][T17202] loop2: unable to read partition table [ 878.089762][T17202] loop2: partition table beyond EOD, truncated [ 878.093144][T18436] Dev loop2: unable to read RDB block 7 [ 878.094079][T18436] loop2: unable to read partition table [ 878.098924][T18436] loop2: partition table beyond EOD, truncated [ 878.107497][T18436] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 878.113503][ T3936] Dev loop2: unable to read RDB block 7 [ 878.114596][ T3936] loop2: unable to read partition table [ 878.115822][ T3936] loop2: partition table beyond EOD, truncated [ 878.157239][T18438] loop5: detected capacity change from 0 to 7 [ 878.159059][T18438] Dev loop5: unable to read RDB block 7 [ 878.160160][T18438] loop5: unable to read partition table [ 878.161285][T18438] loop5: partition table beyond EOD, truncated [ 878.162383][T18438] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 878.977116][T18457] netlink: 'syz.4.3953': attribute type 10 has an invalid length. [ 879.009542][T18457] team0: Port device dummy0 added [ 879.048580][T18457] netlink: 'syz.4.3953': attribute type 10 has an invalid length. [ 879.400312][T18455] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 879.477125][T18457] team0: Port device dummy0 removed [ 879.479626][T18457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 880.644984][T18476] netlink: 'syz.1.3960': attribute type 10 has an invalid length. [ 880.764012][T18476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 880.926862][T18474] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 881.129143][T18484] loop3: detected capacity change from 0 to 1024 [ 882.103757][T18499] ================================================================== [ 882.104956][T18499] BUG: KASAN: use-after-free in dvb_device_open+0xd4/0x388 [ 882.105987][T18499] Read of size 8 at addr ffff0000d3312418 by task syz.1.3964/18499 [ 882.107129][T18499] [ 882.107472][T18499] CPU: 1 PID: 18499 Comm: syz.1.3964 Not tainted syzkaller #0 [ 882.108560][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 882.110024][T18499] Call trace: [ 882.110500][T18499] dump_backtrace+0x1c0/0x1ec [ 882.111181][T18499] show_stack+0x2c/0x3c [ 882.111769][T18499] __dump_stack+0x30/0x40 [ 882.112392][T18499] dump_stack_lvl+0xf4/0x15c [ 882.113078][T18499] print_address_description+0x88/0x218 [ 882.113877][T18499] print_report+0x50/0x68 [ 882.114503][T18499] kasan_report+0xa8/0xfc [ 882.115162][T18499] __asan_report_load8_noabort+0x2c/0x38 [ 882.115993][T18499] dvb_device_open+0xd4/0x388 [ 882.116666][T18499] chrdev_open+0x3d4/0x518 [ 882.117354][T18499] do_dentry_open+0x72c/0xf98 [ 882.118018][T18499] vfs_open+0x7c/0x90 [ 882.118573][T18499] path_openat+0x1f8c/0x26bc [ 882.119207][T18499] do_filp_open+0x194/0x384 [ 882.119848][T18499] do_sys_openat2+0x134/0x3f4 [ 882.120541][T18499] __arm64_sys_openat+0x118/0x14c [ 882.121263][T18499] invoke_syscall+0x98/0x2b4 [ 882.121925][T18499] el0_svc_common+0x138/0x258 [ 882.122598][T18499] do_el0_svc+0x58/0x130 [ 882.123206][T18499] el0_svc+0x58/0x128 [ 882.123801][T18499] el0t_64_sync_handler+0x84/0xf0 [ 882.124514][T18499] el0t_64_sync+0x18c/0x190 [ 882.125153][T18499] [ 882.125512][T18499] Allocated by task 1: [ 882.126097][T18499] kasan_set_track+0x4c/0x80 [ 882.126784][T18499] kasan_save_alloc_info+0x24/0x30 [ 882.127520][T18499] __kasan_kmalloc+0xa0/0xb8 [ 882.128182][T18499] kmalloc_trace+0x7c/0x94 [ 882.128822][T18499] dvb_register_device+0x1a0/0x17a8 [ 882.129586][T18499] dvb_register_frontend+0x4c0/0x720 [ 882.130351][T18499] vidtv_bridge_probe+0x9ac/0xe34 [ 882.131076][T18499] platform_probe+0x13c/0x1b4 [ 882.131752][T18499] really_probe+0x39c/0xacc [ 882.132410][T18499] __driver_probe_device+0x180/0x310 [ 882.133179][T18499] driver_probe_device+0x78/0x324 [ 882.133902][T18499] __driver_attach+0x3bc/0x60c [ 882.134602][T18499] bus_for_each_dev+0x148/0x1d0 [ 882.135305][T18499] driver_attach+0x4c/0x5c [ 882.135936][T18499] bus_add_driver+0x2d8/0x554 [ 882.136601][T18499] driver_register+0x200/0x378 [ 882.137289][T18499] __platform_driver_register+0x6c/0x80 [ 882.138090][T18499] vidtv_bridge_init+0x4c/0x8c [ 882.138774][T18499] do_one_initcall+0x278/0x9e0 [ 882.139463][T18499] do_initcall_level+0x154/0x214 [ 882.140175][T18499] do_initcalls+0x58/0xac [ 882.140802][T18499] do_basic_setup+0x8c/0xa0 [ 882.141452][T18499] kernel_init_freeable+0x35c/0x4f0 [ 882.142176][T18499] kernel_init+0x24/0x1d8 [ 882.142779][T18499] ret_from_fork+0x10/0x20 [ 882.143407][T18499] [ 882.143741][T18499] Freed by task 18474: [ 882.144303][T18499] kasan_set_track+0x4c/0x80 [ 882.144950][T18499] kasan_save_free_info+0x38/0x5c [ 882.145658][T18499] ____kasan_slab_free+0x148/0x1b0 [ 882.146377][T18499] __kasan_slab_free+0x18/0x28 [ 882.147039][T18499] slab_free_freelist_hook+0x16c/0x1e8 [ 882.147830][T18499] __kmem_cache_free+0xbc/0x218 [ 882.148530][T18499] kfree+0xd0/0x1a8 [ 882.149062][T18499] dvb_device_open+0x2dc/0x388 [ 882.149744][T18499] chrdev_open+0x3d4/0x518 [ 882.150385][T18499] do_dentry_open+0x72c/0xf98 [ 882.151044][T18499] vfs_open+0x7c/0x90 [ 882.151613][T18499] path_openat+0x1f8c/0x26bc [ 882.152255][T18499] do_filp_open+0x194/0x384 [ 882.152893][T18499] do_sys_openat2+0x134/0x3f4 [ 882.153572][T18499] __arm64_sys_openat+0x118/0x14c [ 882.154253][T18499] invoke_syscall+0x98/0x2b4 [ 882.154888][T18499] el0_svc_common+0x138/0x258 [ 882.155529][T18499] do_el0_svc+0x58/0x130 [ 882.156121][T18499] el0_svc+0x58/0x128 [ 882.156681][T18499] el0t_64_sync_handler+0x84/0xf0 [ 882.157375][T18499] el0t_64_sync+0x18c/0x190 [ 882.157992][T18499] [ 882.158313][T18499] The buggy address belongs to the object at ffff0000d3312400 [ 882.158313][T18499] which belongs to the cache kmalloc-256 of size 256 [ 882.160210][T18499] The buggy address is located 24 bytes inside of [ 882.160210][T18499] 256-byte region [ffff0000d3312400, ffff0000d3312500) [ 882.162002][T18499] [ 882.162327][T18499] The buggy address belongs to the physical page: [ 882.163183][T18499] page:0000000095a63144 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d3312a00 pfn:0x113312 [ 882.164769][T18499] head:0000000095a63144 order:1 compound_mapcount:0 compound_pincount:0 [ 882.165897][T18499] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 882.167038][T18499] raw: 05ffc00000010200 fffffc00030c2008 fffffc000349dc08 ffff0000c0002480 [ 882.168226][T18499] raw: ffff0000d3312a00 000000000010000f 00000001ffffffff 0000000000000000 [ 882.169406][T18499] page dumped because: kasan: bad access detected [ 882.170283][T18499] [ 882.170607][T18499] Memory state around the buggy address: [ 882.171396][T18499] ffff0000d3312300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 882.172504][T18499] ffff0000d3312380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 882.173615][T18499] >ffff0000d3312400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 882.174723][T18499] ^ [ 882.175397][T18499] ffff0000d3312480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 882.176510][T18499] ffff0000d3312500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 882.177599][T18499] ================================================================== [ 882.178806][T18499] Disabling lock debugging due to kernel taint [ 882.179707][T18499] ------------[ cut here ]------------ [ 882.180467][T18499] refcount_t: addition on 0; use-after-free. [ 882.181470][T18499] WARNING: CPU: 1 PID: 18499 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 882.182750][T18499] Modules linked in: [ 882.183271][T18499] CPU: 1 PID: 18499 Comm: syz.1.3964 Tainted: G B syzkaller #0 [ 882.184467][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 882.185787][T18499] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 882.186825][T18499] pc : refcount_warn_saturate+0x134/0x1f8 [ 882.187617][T18499] lr : refcount_warn_saturate+0x134/0x1f8 [ 882.188410][T18499] sp : ffff800020b075c0 [ 882.188972][T18499] x29: ffff800020b075c0 x28: ffff0000dd82cf28 x27: dfff800000000000 [ 882.190093][T18499] x26: ffff0000d3468c00 x25: dfff800000000000 x24: 1fffe0001a662483 [ 882.191250][T18499] x23: 0000000000000000 x22: ffff0000d3312410 x21: ffff0000d2696c90 [ 882.192381][T18499] x20: ffff0000d3312410 x19: ffff800017bd9000 x18: ffff800011b8bf60 [ 882.193542][T18499] x17: 1fffe00033eac97e x16: ffff80000804309c x15: ffff80001520d000 [ 882.194725][T18499] x14: 0000000000000001 x13: 1fffe00033eaf030 x12: 0000000000ff0100 [ 882.195854][T18499] x11: ff00800008048348 x10: 0000000040000002 x9 : 8dda69c3c7a82900 [ 882.196987][T18499] x8 : 8dda69c3c7a82900 x7 : 0000000000000004 x6 : ffff80000825796c [ 882.198111][T18499] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 882.199266][T18499] x2 : ffff800020b07160 x1 : 0000000000000000 x0 : ffff800008257a00 [ 882.200396][T18499] Call trace: [ 882.200864][T18499] refcount_warn_saturate+0x134/0x1f8 [ 882.201618][T18499] dvb_device_open+0x328/0x388 [ 882.202299][T18499] chrdev_open+0x3d4/0x518 [ 882.202947][T18499] do_dentry_open+0x72c/0xf98 [ 882.203630][T18499] vfs_open+0x7c/0x90 [ 882.204212][T18499] path_openat+0x1f8c/0x26bc [ 882.204920][T18499] do_filp_open+0x194/0x384 [ 882.205632][T18499] do_sys_openat2+0x134/0x3f4 [ 882.206343][T18499] __arm64_sys_openat+0x118/0x14c [ 882.207055][T18499] invoke_syscall+0x98/0x2b4 [ 882.207721][T18499] el0_svc_common+0x138/0x258 [ 882.208376][T18499] do_el0_svc+0x58/0x130 [ 882.208989][T18499] el0_svc+0x58/0x128 [ 882.209544][T18499] el0t_64_sync_handler+0x84/0xf0 [ 882.210267][T18499] el0t_64_sync+0x18c/0x190 [ 882.210906][T18499] irq event stamp: 1799 [ 882.211496][T18499] hardirqs last enabled at (1799): [] finish_lock_switch+0xb0/0x1c4 [ 882.212829][T18499] hardirqs last disabled at (1798): [] __schedule+0x298/0x1b0c [ 882.214108][T18499] softirqs last enabled at (1652): [] local_bh_enable+0x10/0x34 [ 882.215406][T18499] softirqs last disabled at (1650): [] local_bh_disable+0x10/0x34 [ 882.216716][T18499] ---[ end trace 0000000000000000 ]--- [ 882.240039][T18487] netlink: 'syz.1.3964': attribute type 10 has an invalid length. [ 882.254751][T18496] ------------[ cut here ]------------ [ 882.255642][T18496] refcount_t: saturated; leaking memory. [ 882.256833][T18496] WARNING: CPU: 0 PID: 18496 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 882.258220][T18496] Modules linked in: [ 882.258818][T18496] CPU: 0 PID: 18496 Comm: syz.0.3965 Tainted: G B W syzkaller #0 [ 882.260182][T18496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 882.261725][T18496] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 882.262939][T18496] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 882.263840][T18496] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 882.264737][T18496] sp : ffff8000211775c0 [ 882.265380][T18496] x29: ffff8000211775c0 x28: ffff0000e552b6a8 x27: dfff800000000000 [ 882.266590][T18496] x26: ffff0000d3468c00 x25: dfff800000000000 x24: 000000007ffffffe [ 882.267801][T18496] x23: 00000000c0000000 x22: ffff0000d3312410 x21: ffff0000d2696c90 [ 882.269017][T18496] x20: ffff0000d3312410 x19: ffff800017bd9000 x18: ffff800011b8bf60 [ 882.270243][T18496] x17: 1fffe00033ea877e x16: ffff80000804309c x15: 0000000040000000 [ 882.271472][T18496] x14: 0000000000000001 x13: 1fffe00033eaae30 x12: 0000000000ff0100 [ 882.272663][T18496] x11: ff00800008048348 x10: 0000000040000002 x9 : c422bb6338f71d00 [ 882.273862][T18496] x8 : c422bb6338f71d00 x7 : 0000000000000004 x6 : ffff80000825796c [ 882.275042][T18496] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 882.276154][T18496] x2 : ffff800021177160 x1 : 0000000000000000 x0 : ffff800008257a00 [ 882.277306][T18496] Call trace: [ 882.277784][T18496] refcount_warn_saturate+0x1b4/0x1f8 [ 882.278552][T18496] dvb_device_open+0x328/0x388 [ 882.279222][T18496] chrdev_open+0x3d4/0x518 [ 882.279854][T18496] do_dentry_open+0x72c/0xf98 [ 882.280523][T18496] vfs_open+0x7c/0x90 [ 882.281084][T18496] path_openat+0x1f8c/0x26bc [ 882.281733][T18496] do_filp_open+0x194/0x384 [ 882.282370][T18496] do_sys_openat2+0x134/0x3f4 [ 882.283024][T18496] __arm64_sys_openat+0x118/0x14c [ 882.283737][T18496] invoke_syscall+0x98/0x2b4 [ 882.284392][T18496] el0_svc_common+0x138/0x258 [ 882.285041][T18496] do_el0_svc+0x58/0x130 [ 882.285627][T18496] el0_svc+0x58/0x128 [ 882.286182][T18496] el0t_64_sync_handler+0x84/0xf0 [ 882.286889][T18496] el0t_64_sync+0x18c/0x190 [ 882.287506][T18496] irq event stamp: 173672 [ 882.288075][T18496] hardirqs last enabled at (173671): [] el0_svc_common+0x9c/0x258 [ 882.289345][T18496] hardirqs last disabled at (173672): [] __schedule+0x298/0x1b0c [ 882.290618][T18496] softirqs last enabled at (173662): [] local_bh_enable+0x10/0x34 [ 882.290754][T18498] netlink: 'syz.0.3965': attribute type 10 has an invalid length. [ 882.291924][T18496] softirqs last disabled at (173660): [] local_bh_disable+0x10/0x34 [ 882.294402][T18496] ---[ end trace 0000000000000000 ]--- [ 882.295357][T18496] ------------[ cut here ]------------ [ 882.296309][T18496] refcount_t: underflow; use-after-free. [ 882.297320][T18496] WARNING: CPU: 0 PID: 18496 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 882.298748][T18496] Modules linked in: [ 882.298769][T18498] team0: Port device dummy0 added [ 882.299329][T18496] CPU: 0 PID: 18496 Comm: syz.0.3965 Tainted: G B W syzkaller #0 [ 882.301390][T18496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 882.302844][T18496] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 882.303994][T18496] pc : refcount_warn_saturate+0x154/0x1f8 [ 882.304863][T18496] lr : refcount_warn_saturate+0x154/0x1f8 [ 882.305695][T18496] sp : ffff8000211775c0 [ 882.306319][T18496] x29: ffff8000211775c0 x28: ffff0000e552b6a8 x27: 1fffe0001caa56d5 [ 882.307537][T18496] x26: ffff0000d3468c00 x25: dfff800000000000 x24: ffff0000d3468c70 [ 882.308747][T18496] x23: ffff80000e177b50 x22: ffff0000d3312410 x21: 00000000c0000000 [ 882.309902][T18496] x20: ffff0000d3312410 x19: ffff800017bd9000 x18: ffff800011b8bf60 [ 882.311108][T18496] x17: ffff80018a3de000 x16: ffff80000804309c x15: 0000000000010000 [ 882.312355][T18496] x14: 0000000000000001 x13: 1fffe0001a472f10 x12: 0000000000000000 [ 882.313582][T18496] x11: 0000000000000000 x10: ffff60001a472f11 x9 : c422bb6338f71d00 [ 882.314769][T18496] x8 : c422bb6338f71d00 x7 : 0000000000000000 x6 : ffff80000825796c [ 882.316087][T18496] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800008246798 [ 882.317429][T18496] x2 : 0000000000000001 x1 : 0000000000000004 x0 : 0000000000000001 [ 882.318638][T18496] Call trace: [ 882.319154][T18496] refcount_warn_saturate+0x154/0x1f8 [ 882.319945][T18496] dvb_device_open+0x33c/0x388 [ 882.320689][T18496] chrdev_open+0x3d4/0x518 [ 882.321317][T18496] do_dentry_open+0x72c/0xf98 [ 882.322028][T18496] vfs_open+0x7c/0x90 [ 882.322617][T18496] path_openat+0x1f8c/0x26bc [ 882.323281][T18496] do_filp_open+0x194/0x384 [ 882.323951][T18496] do_sys_openat2+0x134/0x3f4 [ 882.324659][T18496] __arm64_sys_openat+0x118/0x14c [ 882.325426][T18496] invoke_syscall+0x98/0x2b4 [ 882.326133][T18496] el0_svc_common+0x138/0x258 [ 882.326855][T18496] do_el0_svc+0x58/0x130 [ 882.327490][T18496] el0_svc+0x58/0x128 [ 882.328095][T18496] el0t_64_sync_handler+0x84/0xf0 [ 882.328872][T18496] el0t_64_sync+0x18c/0x190 [ 882.329527][T18496] irq event stamp: 173672 [ 882.330117][T18496] hardirqs last enabled at (173671): [] el0_svc_common+0x9c/0x258 [ 882.331536][T18496] hardirqs last disabled at (173672): [] __schedule+0x298/0x1b0c [ 882.332905][T18496] softirqs last enabled at (173662): [] local_bh_enable+0x10/0x34 [ 882.334272][T18496] softirqs last disabled at (173660): [] local_bh_disable+0x10/0x34 [ 882.335659][T18496] ---[ end trace 0000000000000000 ]--- [ 882.337009][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready