last executing test programs: 1m6.565474351s ago: executing program 1 (id=124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x33}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) ppoll(&(0x7f0000000140)=[{r1, 0x242}], 0x1, &(0x7f0000000280), 0x0, 0x0) 1m6.475100933s ago: executing program 1 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) 1m5.469434828s ago: executing program 1 (id=126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xffe0}, {0xa, 0x1}, {0xf, 0x11}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0300"/13, @ANYRES32=0x0, @ANYBLOB], 0x50) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x6f, 0x11, 0x0, @empty, @multicast1}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 1m5.33502029s ago: executing program 3 (id=129): execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xeb, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m5.310005551s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1ae48000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) 1m5.281359471s ago: executing program 3 (id=132): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 1m4.230695677s ago: executing program 1 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3000, 0x10, 0x0) 1m3.342472061s ago: executing program 1 (id=138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000150019092dbd7000fddbdf250a"], 0x50}, 0x1, 0x0, 0x0, 0x80cf}, 0x400c040) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 1m3.250906002s ago: executing program 3 (id=139): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)=""/46, 0x18}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x7fffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m3.100348724s ago: executing program 3 (id=140): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 1m2.904647767s ago: executing program 3 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 1m2.783031329s ago: executing program 3 (id=143): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$revoke(0x3, r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 47.708965037s ago: executing program 32 (id=138): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="50000000150019092dbd7000fddbdf250a"], 0x50}, 0x1, 0x0, 0x0, 0x80cf}, 0x400c040) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 47.627741598s ago: executing program 33 (id=143): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) keyctl$revoke(0x3, r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 39.391420733s ago: executing program 2 (id=254): syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r3, 0x41045508, &(0x7f0000000000)) 37.093815388s ago: executing program 2 (id=259): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 36.994935509s ago: executing program 2 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) 36.010286365s ago: executing program 2 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmmsg$sock(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x824) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f00000001c0)='./file0/file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x0) 35.963422175s ago: executing program 2 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 35.082850889s ago: executing program 2 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 34.858011722s ago: executing program 34 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 11.835306971s ago: executing program 0 (id=317): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.651008384s ago: executing program 0 (id=318): pipe2$9p(0x0, 0x90000) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0xb, &(0x7f0000000000)=ANY=[], 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 10.593224439s ago: executing program 5 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB, @ANYBLOB], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9.285261189s ago: executing program 5 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 8.400344493s ago: executing program 5 (id=326): timer_create(0x1, &(0x7f0000000c80)={0x0, 0x5, 0x1}, &(0x7f0000000cc0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)) timer_gettime(r0, &(0x7f0000000540)) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xa72, 0x0) ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f00000002c0)={0x0, 0x1}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x100000000, 0x401e8da248cfb239}) gettid() r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7d8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x4, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x03\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 7.580434435s ago: executing program 0 (id=327): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0'}, 0xb) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xffffffffa003e45b, 0x700000000000000) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xffffffffa003e45b, 0x700000000000000) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x4}, 0x2) 7.579998105s ago: executing program 5 (id=328): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 7.534990306s ago: executing program 4 (id=329): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f00000001c0), &(0x7f0000000080)=r2}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 6.510944541s ago: executing program 4 (id=332): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4880) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) 5.457697167s ago: executing program 7 (id=334): keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0xfc}, 0x0, &(0x7f0000000280)) io_uring_enter(r1, 0x1dd7, 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 5.27062026s ago: executing program 7 (id=335): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a124eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead86c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a15c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d08519714cbfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af30041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4cb0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x3c9}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) bind$netlink(r3, 0x0, 0x0) 5.224823841s ago: executing program 6 (id=336): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x2803, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x169702, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x200000000000005d) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="14fd07088c3dc22168997a066c6b2c41b6722da843427bcecdbe493300b7020000006486", 0x144, 0x0, 0x0, 0x0) 5.091472863s ago: executing program 6 (id=337): socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfe, 0x558, &(0x7f00000002c0)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 5.010823654s ago: executing program 4 (id=338): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r6, {0xfff3, 0x3}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.875598176s ago: executing program 4 (id=339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nodioread_nolock}, {@nouser_xattr}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000080)) 4.650043769s ago: executing program 7 (id=340): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 4.461567783s ago: executing program 6 (id=341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 4.408022343s ago: executing program 0 (id=342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) 3.92917417s ago: executing program 4 (id=343): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000240)={[{@data_err_abort}, {@noinit_itable}, {@i_version}, {@data_err_ignore}, {@noload}, {}]}, 0x1, 0x4dc, &(0x7f0000000540)="$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") setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), 0xe) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.410762969s ago: executing program 5 (id=344): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "304fc2", 0x0, 0x2, 0x0, @private2, @local}}}}, 0x0) 3.410324738s ago: executing program 6 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x5e22, 0xa224, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) listen(r2, 0x0) 3.399670899s ago: executing program 7 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000100)) 2.823812417s ago: executing program 6 (id=347): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x101c08a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2.281083595s ago: executing program 0 (id=348): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) setxattr$security_ima(0x0, &(0x7f0000000140), 0x0, 0x700, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f000000a440)=ANY=[], 0x90f, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r0, 0x13}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x0, 0x7ffffffffffffffd, 0x0, 0x2000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8d000003}) brk(0x4) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 2.280570425s ago: executing program 5 (id=349): unshare(0x30000a00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JrsQ2JQeSqGBQHtOYmTFpJatYMkhNoYklEIvPbT0UGguOTdtesuhl/64tpf+DT2UhLR1QlN6KC4jjRL5hxw7seQ0/nxgrPdmRnrvO2/mzfPMIAWwZw2nf3IRByN60uRgNj+JbEZ0R5yor/dgeamQTkmsrLz6Q1Jb5/7yUiGa3pPan2X+GhFfvBlxKLe+3MrC4vREqVScy/Kj1ZkLo5WFxcPnZyamilPF2aNj4+NHjv3n2NGdi/WnrxcP3HnnpX9+fOKXN/5y8+0vkzgRB7JlzXHslOEYzrZJT7oJV3lxpwvbZcluV4Ankh6aXfWjPA7GYHRt0pL/72jNAIB2uRwRKwDAHpM4/wPAHtO4DnB/eanQmKJ+P+fK464dHG/3xYkOuPtCRPTX42/c36wv6a7fs/umv3YfdOB+UrtH0pBExNAOlD8cEddunb6RTtGm+5AAG7lyNSLODg2v7f/THm7tMwvb9a8trDPcSHxaf9H/Qed8lo5//rt+/BeRy47//trfteOfvuZj9yms/Yz1x3/u9qpszw4U2iQd/x1verbtQVP8maGuLPeH2pivJzl3vlRM+7Y/RsRI9PSl+bFNyhi59+u9Vsuax38/vvv6h2n56eujNXK3u/tWv2dyojrxNDE3u3s14m/dG8WfPGz/pMX499QWy3j5f2990GpZGn8ab2NaH397rVyP+MeG7f/oOahk0+cTR2u7w2hjp9hg//zk2/cHWpXf3P7XbqUlLRUa/wt0Qtr+A5vHP5Q0P69Z2X4ZX10f/LzVstXxn76Rlr86/o33/97ktVq6N5t3aaJanRuL6E1eWT//yKP3NvKN9dP4R/6+Kv6sBXOb7v/pSmez9MpjHn7svvP9R08ef3ul8U+m7Z9kQTy2/befuPlguqtV+Vtr//FaaiSbs77/6173uVut4FNtPAAAAAAAAAAAAAAAAAAAAAAAAADYolxEHIgkl3+YzuXy+fpveP85BnKlcqV66Fx5fnYyar+VPRQ9ucZXXQ42fR/qWPZ9+I38kTX5f0fEnyLivb59tXy+UC5N7nbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDZ3+L3/1Pf9e127QCAtunf7QoAAB23rfO/wQIAPBdanNJ7N569r611AQA6o3b+T7p3uxoAQAe5pA8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG126uTJdFr5eXmpkOYnLy7MT5cvHp4sVqbzM/OFfKE8dyE/VS5PlYr5Qnmm5Qddqb+UyuUL4zE7f2m0WqxURysLi2dmyvOz1TPnZyamimeKPR2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2rrKwOD1RKhXnJDZPXH4mqnE1a7bd3hrPU+Jstk2flfpsI9EXEe0qormX2Nf5jgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd+K3AAAA//+aBB1p") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000000c0)=""/85, 0x55) 2.235044706s ago: executing program 7 (id=350): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400080000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100000000000800074000000000100005800a00010051"], 0xa4}}, 0x0) 1.165466422s ago: executing program 7 (id=351): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0xa00010, &(0x7f0000000000)=ANY=[], 0x1, 0x63c, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iV1Kq0MoIT30LGw5Fl4rQVKKEkpR36GnHvIHpAfdeir0bkjP7S1XHQOFXnLSTWVmZ6W1vZL1Fq8Ufz5m9nmefWae+c1vZ2Z3di0mwHNrfiLNhykyP/H2etne2pxpb23OXKi720nKeiNpdooUy0nxWXIznSnfLJ+s5y/2W88nS3Pvfv7l1hedVrOenr7c4WzUU8aTDNXlY1p/Ocp4w51KOc7t/uMdxc+6W1gm7Fo3cTBoO72qJzYGHRLwjBWd980njCUXk4zUnwNSnx0azza60+csBwAAwPPghe1sZz2XBh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnCf1/f+Lemp06+Mpuvf/byW5Vc/eGnC4J/Zw0AEAAAAAAAAAwCn49na2s55L3fZOUf3m/3rVuFw9fiMfZjWLWcn1rGcha1nLSqaSjPUM1FpfWFtbmTrEktN9l5x+NtsLAAAAAAAAAF9Tv8v83u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwSEN1WXSqRT1d7tbH0mgmGenOv5H8J0lrcBEfWdHvyYfPPg4AAAA4kZFjLPPCdraznkvd9k5RXfO/Ul0vj+TDLGctS1lLO4u5U19Dl1f9ja3NmfbW5syDcnpy3Fv/O1IY1Yi7X0P0W/PVao7R3M1S9cz13K6CuZNGtWTpajee/nH9toypeKt2yMju1GW5sr/u9y3CQIxVGRnezchkHVuZjRcPzsRTX53mgWuaSmP3m5/LX0HOL9ZluT1/Ops5b6TKxHTP3vfKwZlIvvPPv//yXnv5/r27qxNnZ5OO6fF9YqYnE6+e60w0jzj/ZJWJK7vt+fw0v8hExvNOVrKUX2Uha1nMTt2/UO/P5ePYwZm6+UjrnadF0qpfl85Z9DAxjecnVW0hr1fLXspSiryfO1nMm9W/6UzlB5nNbOZ6XuEr+8ZdbVt11DeOdtRf+25dGU3y57octM5bapnXF3vy2nvOHav6ep/Zy9JLp39ubH6rrpTr+H1dng2PZ2KqJxMvH5yJv1XHxmp7+f7KvYUP9hl/47H2G3VZ7nF/PFPvEuX+8lJG6jPJo3tH2ffy7lnm0Xy16l9cOn2NJ/quVH1F0T1Sf77vkdqqP8M9OdJ01fdq376Zqu9qT98jn7fyftq7n4cAOMMufu9ia/S/o/8e/XT0D6P3Rt8e+fGFH154rZXhfw3/qDk59EbjteIf+TS/2bv+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjm/1o4/vL7Tbiyv9K439u063UtQ38jlonubhYlY585XuTQRPPODNgW3FrUHn8LQqQ0n6ddUv0XFuLgqcCzfWHnxwY/Wjj7+/9GDhvcX3FpeHZ2fnJudm35y5cXepvTjZeRx0lMBXYe9Nv39/caZusAkAAAAAAAAAAADkcH9Ls1P//79j/6XBoLcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAON/mJ9J8mCJTk9cny/bW5ky7nLr1vTmbSRqNpPh1UnyW3ExnyljPcMVb+6znk6W5dz//cuuLvbGa1fzloHV5Ahv1lPEkQ3V5WuPdPvF4xe4Wlgm71k0cDNr/AwAA///K2/nA") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) 844.99µs ago: executing program 6 (id=352): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x3, 0x80000003) lseek(r0, 0x2000, 0x0) truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000280)={[{@gid_ignore}, {@volume}, {@utf8}, {@adinicb}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@mode={'mode', 0x3d, 0x8}}, {@dmode={'dmode', 0x3d, 0x4}}, {@adinicb}, {@gid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uid}, {}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$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") r2 = open(0x0, 0x64042, 0x169) pwritev2(r2, 0x0, 0x0, 0x2000, 0x0, 0x3) getdents64(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 329.58µs ago: executing program 4 (id=353): r0 = socket(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x4, 0x0, 0x6fb, 0x8, 0xfcf, 0x7, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 0 (id=354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xc8, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) kernel console output (not intermixed with test programs): 48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.720967][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.724921][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.727656][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.757400][ T4029] device veth0_vlan entered promiscuous mode [ 47.774866][ T4028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.780577][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.782750][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.793628][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.796483][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.799723][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.802316][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.814951][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.817873][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.831699][ T4023] device veth0_macvtap entered promiscuous mode [ 47.838775][ T4025] device veth0_vlan entered promiscuous mode [ 47.845749][ T4029] device veth1_vlan entered promiscuous mode [ 47.857534][ T4023] device veth1_macvtap entered promiscuous mode [ 47.861536][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.864766][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.867381][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.869854][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.872026][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.876749][ T4025] device veth1_vlan entered promiscuous mode [ 47.892084][ T4024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.906209][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.917128][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.919898][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.922688][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.927610][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.931836][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.937229][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.939790][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.943386][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.951770][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.958889][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.965951][ T4023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.968515][ T4023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.971106][ T4023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.980747][ T4023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.992204][ T4029] device veth0_macvtap entered promiscuous mode [ 47.996137][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.998914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.001745][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.034972][ T4029] device veth1_macvtap entered promiscuous mode [ 48.040938][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.045844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.049488][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.079888][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.082696][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.090957][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.094064][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.102276][ T4025] device veth0_macvtap entered promiscuous mode [ 48.107034][ T4028] device veth0_vlan entered promiscuous mode [ 48.112721][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.117306][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.120111][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.134062][ T4024] device veth0_vlan entered promiscuous mode [ 48.141380][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.146053][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.156580][ T4025] device veth1_macvtap entered promiscuous mode [ 48.166690][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.169826][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.174213][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.177008][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.179701][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.182504][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.188557][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.191412][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.198678][ T4028] device veth1_vlan entered promiscuous mode [ 48.229562][ T4024] device veth1_vlan entered promiscuous mode [ 48.234836][ T4029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.237831][ T4029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.241793][ T4029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.265502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.268221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.271120][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.274756][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.277687][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.286153][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.289135][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.291855][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.296106][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.302579][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.309729][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.312056][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.318317][ T4029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.320901][ T4029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.325587][ T4029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.328056][ T4029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.331881][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.336338][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.341490][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.345601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.354882][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.357846][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.360466][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.364473][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.368399][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.384586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.387598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.390427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.393642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.408753][ T4028] device veth0_macvtap entered promiscuous mode [ 48.418079][ T4025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.420603][ T4025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.423777][ T4025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.426266][ T4025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.449998][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.452284][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.455746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.458601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.465486][ T4028] device veth1_macvtap entered promiscuous mode [ 48.518725][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.521528][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.528209][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.539033][ T4024] device veth0_macvtap entered promiscuous mode [ 48.553619][ T4024] device veth1_macvtap entered promiscuous mode [ 48.612455][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.623493][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.626067][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.628907][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.631552][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.634998][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.639333][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.641410][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.654226][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.657448][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.660325][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.671621][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.675391][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.678577][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.681720][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.690510][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.695654][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.698392][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.701648][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.710622][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.724498][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.729669][ T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.731980][ T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.744386][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.747132][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.749994][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.760057][ T4028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.765104][ T4028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.769124][ T4028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.784865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.787715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.790463][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.796479][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.803828][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.834563][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.837639][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.840218][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.851607][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.862288][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.867357][ T4104] loop0: detected capacity change from 0 to 32768 [ 48.871331][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.882824][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.883891][ T4104] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4104) [ 48.886005][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.894013][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.907828][ T4104] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 48.911602][ T4104] BTRFS info (device loop0): enabling disk space caching [ 48.913756][ T4104] BTRFS info (device loop0): force clearing of disk cache [ 48.915750][ T4104] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 48.918542][ T4104] BTRFS info (device loop0): use lzo compression, level 0 [ 48.920536][ T4104] BTRFS info (device loop0): disk space caching is enabled [ 48.922562][ T4104] BTRFS info (device loop0): has skinny extents [ 48.927654][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.931827][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.938734][ T4024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.941242][ T4024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.945401][ T4024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.948110][ T4024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.961427][ T4028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.967628][ T4028] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.970109][ T4028] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972479][ T4028] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.992419][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.995874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.018034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.075915][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.078260][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.082228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.146562][ T4121] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 49.189810][ T4104] BTRFS info (device loop0): enabling ssd optimizations [ 49.203669][ T4104] BTRFS info (device loop0): clearing free space tree [ 49.206189][ T4104] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.209054][ T4104] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.256861][ T334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.259096][ T334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.262155][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.284924][ T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.287565][ T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.302311][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.326487][ T334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.328910][ T334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.331921][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.345212][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.347440][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.389209][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.455689][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.458030][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.491878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.530367][ T4131] loop2: detected capacity change from 0 to 8192 [ 49.607045][ T4131] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 49.609963][ T4131] REISERFS (device loop2): using ordered data mode [ 49.611829][ T4131] reiserfs: using flush barriers [ 49.632266][ T4131] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.653662][ T4075] Bluetooth: hci1: command 0x040f tx timeout [ 49.655483][ T4075] Bluetooth: hci0: command 0x040f tx timeout [ 49.657595][ T4075] Bluetooth: hci4: command 0x040f tx timeout [ 49.659572][ T4075] Bluetooth: hci2: command 0x040f tx timeout [ 49.669917][ T4131] REISERFS (device loop2): checking transaction log (loop2) [ 49.689977][ T26] audit: type=1326 audit(49.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4138 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8a419a8 code=0x0 [ 49.694908][ T4137] loop9: detected capacity change from 0 to 7 [ 49.704794][ T4137] Dev loop9: unable to read RDB block 7 [ 49.706493][ T4137] loop9: unable to read partition table [ 49.708208][ T4137] loop9: partition table beyond EOD, truncated [ 49.709957][ T4137] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 49.784967][ T4128] Bluetooth: hci3: command 0x040f tx timeout [ 50.003437][ T4131] REISERFS (device loop2): Using tea hash to sort names [ 50.006534][ T4131] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 50.142703][ T4134] loop4: detected capacity change from 0 to 32768 [ 50.188142][ T4134] ======================================================= [ 50.188142][ T4134] WARNING: The mand mount option has been deprecated and [ 50.188142][ T4134] and is ignored by this kernel. Remove the mand [ 50.188142][ T4134] option from the mount to silence this warning. [ 50.188142][ T4134] ======================================================= [ 50.207683][ T4134] XFS: ikeep mount option is deprecated. [ 50.210438][ T4134] XFS: noikeep mount option is deprecated. [ 50.292523][ T4134] XFS (loop4): Mounting V5 Filesystem [ 50.426441][ T4134] XFS (loop4): Ending clean mount [ 50.447302][ T4134] XFS (loop4): Quotacheck needed: Please wait. [ 50.503867][ T4134] XFS (loop4): Quotacheck: Done. [ 50.609721][ T4167] loop3: detected capacity change from 0 to 47 [ 50.687972][ T4025] XFS (loop4): Unmounting Filesystem [ 50.783676][ T4167] attempt to access beyond end of device [ 50.783676][ T4167] loop3: rw=2049, want=50, limit=47 [ 50.786832][ T4167] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 50.789270][ T4167] attempt to access beyond end of device [ 50.789270][ T4167] loop3: rw=2049, want=52, limit=47 [ 50.792117][ T4167] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 50.862513][ T4173] binder: 4172:4173 tried to acquire reference to desc 0, got 1 instead [ 50.866175][ T4173] binder: 4172:4173 ioctl c0306201 200003c0 returned -14 [ 50.886832][ T4169] loop2: detected capacity change from 0 to 8192 [ 50.887393][ T4173] binder: 4172:4173 got transaction with out-of-order buffer fixup [ 50.891769][ T4173] binder: 4172:4173 transaction failed 29201/-22, size 96-24 line 3299 [ 50.898546][ T4071] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.935912][ T4169] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 50.938443][ T4169] REISERFS (device loop2): using ordered data mode [ 50.940316][ T4169] reiserfs: using flush barriers [ 50.961992][ T4169] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 50.980465][ T4169] REISERFS (device loop2): checking transaction log (loop2) [ 51.033621][ T4180] binder: 4179:4180 tried to acquire reference to desc 0, got 1 instead [ 51.062566][ T4180] binder: 4179:4180 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 51.079013][ T4180] binder: 4180 RLIMIT_NICE not set [ 51.080452][ T4180] binder: 4180 RLIMIT_NICE not set [ 51.132606][ T4069] binder: release 4179:4180 transaction 11 out, still active [ 51.135144][ T4069] binder: undelivered TRANSACTION_COMPLETE [ 51.185443][ T7] binder: release 4179:4180 transaction 11 in, still active [ 51.187623][ T7] binder: send failed reply for transaction 11, target dead [ 51.295149][ T4169] REISERFS (device loop2): Using tea hash to sort names [ 51.297524][ T4169] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 51.424766][ T4169] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 8 0x0 SD] (nlink == 2) not found (pos 2) [ 51.609227][ T4201] binder: 4200:4201 tried to acquire reference to desc 0, got 1 instead [ 51.629915][ T4201] binder_alloc: 4200: binder_alloc_buf size 8 failed, no address space [ 51.647739][ T4201] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 51.650586][ T4201] binder: 4200:4201 transaction failed 29201/-28, size 0-0 line 3085 [ 51.666436][ T4203] netlink: 88 bytes leftover after parsing attributes in process `syz.3.27'. [ 51.674910][ T4145] binder: release 4200:4201 transaction 16 out, still active [ 51.682846][ T4145] binder: undelivered TRANSACTION_COMPLETE [ 51.684632][ T4145] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.688103][ T4145] binder: send failed reply for transaction 16, target dead [ 51.732932][ T25] Bluetooth: hci2: command 0x0419 tx timeout [ 51.734813][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 51.737199][ T25] Bluetooth: hci1: command 0x0419 tx timeout [ 51.745020][ T4206] loop4: detected capacity change from 0 to 256 [ 51.813625][ T4145] Bluetooth: hci3: command 0x0419 tx timeout [ 51.818909][ T4206] FAT-fs (loop4): Directory bread(block 64) failed [ 51.820991][ T4206] FAT-fs (loop4): Directory bread(block 65) failed [ 51.844907][ T4206] FAT-fs (loop4): Directory bread(block 66) failed [ 51.846784][ T4206] FAT-fs (loop4): Directory bread(block 67) failed [ 51.848694][ T4206] FAT-fs (loop4): Directory bread(block 68) failed [ 51.850490][ T4206] FAT-fs (loop4): Directory bread(block 69) failed [ 51.852325][ T4206] FAT-fs (loop4): Directory bread(block 70) failed [ 51.858440][ T4206] FAT-fs (loop4): Directory bread(block 71) failed [ 51.862453][ T4206] FAT-fs (loop4): Directory bread(block 72) failed [ 51.866643][ T4206] FAT-fs (loop4): Directory bread(block 73) failed [ 51.871273][ T4209] tipc: Started in network mode [ 51.873281][ T4209] tipc: Node identity bafd99778848, cluster identity 4711 [ 51.875361][ T4209] tipc: Enabled bearer , priority 0 [ 51.878805][ T4213] loop2: detected capacity change from 0 to 128 [ 51.956939][ T4209] device syzkaller0 entered promiscuous mode [ 52.017383][ T4208] tipc: Resetting bearer [ 52.054953][ T4208] tipc: Disabling bearer [ 52.284839][ T4225] binder: 4222:4225 tried to acquire reference to desc 0, got 1 instead [ 52.290691][ T4225] binder: 4222:4225 got transaction with invalid offset (21, min 0 max 72) or object. [ 52.294351][ T4225] binder: 4222:4225 transaction failed 29201/-22, size 72-24 line 3199 [ 52.297970][ T3605] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.357823][ T334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.424919][ T334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.498892][ T4232] loop2: detected capacity change from 0 to 1024 [ 52.512744][ T334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.582447][ T4232] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,user_xattr,. Quota mode: none. [ 52.672009][ T4227] loop4: detected capacity change from 0 to 32768 [ 52.699964][ T334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.705300][ T4227] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.37 (4227) [ 52.755188][ T4227] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 52.757601][ T4227] BTRFS info (device loop4): enabling auto defrag [ 52.759432][ T4227] BTRFS info (device loop4): doing ref verification [ 52.761215][ T4227] BTRFS info (device loop4): max_inline at 0 [ 52.786143][ T4227] BTRFS info (device loop4): force clearing of disk cache [ 52.788441][ T4227] BTRFS info (device loop4): turning on sync discard [ 52.791263][ T4227] BTRFS info (device loop4): disabling free space tree [ 52.795783][ T4227] BTRFS info (device loop4): has skinny extents [ 52.894738][ T4229] chnl_net:caif_netlink_parms(): no params data found [ 53.051853][ T4227] BTRFS info (device loop4): enabling ssd optimizations [ 53.065304][ T4227] BTRFS info (device loop4): clearing free space tree [ 53.067204][ T4227] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.069814][ T4227] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.147657][ T4272] loop1: detected capacity change from 0 to 8192 [ 53.181584][ T4272] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 53.186172][ T4272] REISERFS (device loop1): using ordered data mode [ 53.206325][ T4272] reiserfs: using flush barriers [ 53.220379][ T4272] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 53.234393][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.236713][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.239537][ T4229] device bridge_slave_0 entered promiscuous mode [ 53.246519][ T4272] REISERFS (device loop1): checking transaction log (loop1) [ 53.257452][ T4229] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.261366][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.276802][ T4229] device bridge_slave_1 entered promiscuous mode [ 53.378101][ T4229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.395285][ T4229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.562604][ T4015] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (4015) [ 53.597304][ T4229] team0: Port device team_slave_0 added [ 53.601177][ T4229] team0: Port device team_slave_1 added [ 53.658864][ T4272] REISERFS (device loop1): Using tea hash to sort names [ 53.663626][ T4272] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 53.723217][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.725137][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.732234][ T4229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.769187][ T4229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.778907][ T4229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.839041][ T4305] loop3: detected capacity change from 0 to 128 [ 53.845614][ T4229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.736468][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 54.742131][ T4229] device hsr_slave_0 entered promiscuous mode [ 54.804353][ T4305] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 54.843270][ T4229] device hsr_slave_1 entered promiscuous mode [ 54.894173][ T4229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.896343][ T4229] Cannot create hsr debugfs directory [ 54.958805][ T4316] nbd2: detected capacity change from 0 to 4294967296 [ 55.043858][ T4318] block nbd2: shutting down sockets [ 55.052244][ C1] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.055370][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 55.076563][ T4255] ldm_validate_partition_table(): Disk read failed. [ 55.082932][ T4255] Dev nbd2: unable to read RDB block 0 [ 55.086678][ T4255] nbd2: unable to read partition table [ 55.088263][ T4255] nbd2: partition table beyond EOD, truncated [ 57.662792][ C1] sched: RT throttling activated [ 57.662926][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 57.848797][ T4340] udc-core: couldn't find an available UDC or it's busy [ 57.848823][ T4340] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 57.883622][ T4344] loop4: detected capacity change from 0 to 512 [ 57.920839][ T4339] loop3: detected capacity change from 0 to 8192 [ 58.043390][ T4349] bridge0: port 3(syz_tun) entered blocking state [ 58.050704][ T4349] bridge0: port 3(syz_tun) entered disabled state [ 58.062733][ T4349] device syz_tun entered promiscuous mode [ 58.080132][ T4349] bridge0: port 3(syz_tun) entered blocking state [ 58.082252][ T4349] bridge0: port 3(syz_tun) entered forwarding state [ 58.234907][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 59.303227][ T4370] loop4: detected capacity change from 0 to 8192 [ 59.370716][ T4370] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 59.373529][ T4370] REISERFS (device loop4): using ordered data mode [ 59.386473][ T4370] reiserfs: using flush barriers [ 59.402250][ T4370] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 59.487935][ T4370] REISERFS (device loop4): checking transaction log (loop4) [ 59.993973][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 60.498715][ T334] device hsr_slave_0 left promiscuous mode [ 60.530769][ T4370] REISERFS (device loop4): Using tea hash to sort names [ 60.533481][ T4370] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 60.540962][ T4384] loop3: detected capacity change from 0 to 512 [ 60.543917][ T334] device hsr_slave_1 left promiscuous mode [ 60.603572][ T334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.605770][ T334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.608862][ T334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.610298][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.610887][ T334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.626012][ T334] device bridge_slave_1 left promiscuous mode [ 60.628643][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.698395][ T334] device bridge_slave_0 left promiscuous mode [ 60.700479][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.827301][ T4398] loop2: detected capacity change from 0 to 512 [ 60.834076][ T334] device veth1_macvtap left promiscuous mode [ 60.836156][ T334] device veth0_macvtap left promiscuous mode [ 60.837949][ T334] device veth1_vlan left promiscuous mode [ 60.839763][ T334] device veth0_vlan left promiscuous mode [ 60.870479][ T4398] EXT4-fs (loop2): Unrecognized mount option "smackfsfloor=minixdf" or missing value [ 61.373974][ T334] team0 (unregistering): Port device team_slave_1 removed [ 62.040574][ T334] team0 (unregistering): Port device team_slave_0 removed [ 62.053133][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 62.089323][ T334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.178150][ T334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.369917][ T4435] binder: 4434:4435 tried to acquire reference to desc 0, got 1 instead [ 63.127652][ T4435] binder: 4434:4435 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 63.130910][ T4145] binder: undelivered TRANSACTION_COMPLETE [ 63.147775][ T334] bond0 (unregistering): Released all slaves [ 63.173193][ T4145] binder: undelivered transaction 27, process died. [ 63.221531][ T4439] capability: warning: `syz.2.78' uses deprecated v2 capabilities in a way that may be insecure [ 64.251205][ T3605] Bluetooth: hci0: command 0x0405 tx timeout [ 64.304309][ T4229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.307392][ T4449] loop4: detected capacity change from 0 to 16 [ 64.316494][ T4451] loop3: detected capacity change from 0 to 2048 [ 64.318718][ T4439] loop2: detected capacity change from 0 to 32768 [ 64.337993][ T4229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.342306][ T4449] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xde366481, 0xc32427af expected [ 64.357983][ T4451] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 64.385002][ T4229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.414765][ T4229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.425566][ T4439] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 64.446611][ T4449] binder: 4448:4449 tried to acquire reference to desc 0, got 1 instead [ 64.451973][ T4449] binder: 4448:4449 got transaction with invalid fd, 1377316925 [ 64.454432][ T4449] binder: 4448:4449 transaction failed 29201/-9, size 96-24 line 3331 [ 64.457358][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.729408][ T26] audit: type=1326 audit(64.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4450 comm="syz.3.82" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8a419a8 code=0x0 [ 64.746065][ T4029] ocfs2: Unmounting device (7,2) on (node local) [ 64.766310][ T4229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.837626][ T4229] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.850138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.852725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.877904][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.881226][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.890833][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.892938][ T4241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.914739][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.917496][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.923487][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.930136][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.932243][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.940442][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.954250][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.976099][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.981029][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.985082][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.991372][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.999221][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.005852][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.018092][ T4229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.023581][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.029596][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.032433][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.037721][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.261327][ T4490] process 'syz.2.87' launched './file0' with NULL argv: empty string added [ 65.277657][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.279962][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.306899][ T4464] loop4: detected capacity change from 0 to 32768 [ 65.311199][ T4229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.372184][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.393816][ T4464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.84 (4464) [ 65.399291][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.412936][ T4464] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 65.427113][ T4464] BTRFS info (device loop4): using free space tree [ 65.429088][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.432038][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.436744][ T4464] BTRFS info (device loop4): has skinny extents [ 65.450158][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.476777][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.490970][ T4229] device veth0_vlan entered promiscuous mode [ 65.505519][ T4229] device veth1_vlan entered promiscuous mode [ 65.551694][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.554668][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.557515][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.577054][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.604968][ T4229] device veth0_macvtap entered promiscuous mode [ 65.620933][ T4229] device veth1_macvtap entered promiscuous mode [ 65.690129][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.710370][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.715012][ T4464] BTRFS info (device loop4): enabling ssd optimizations [ 65.737328][ T4490] loop2: detected capacity change from 0 to 32768 [ 65.746254][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.749187][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.751868][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.795085][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.814435][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.817460][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.838858][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.849537][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.852465][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.862417][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.866635][ T4490] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.87 (4490) [ 65.917808][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.939576][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.956297][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.959170][ T4229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.996584][ T4229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.018338][ T4229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.043021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.045664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.048936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.068022][ T4522] loop3: detected capacity change from 0 to 1024 [ 66.076309][ T4490] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 66.078962][ T4490] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 66.081931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.085738][ T4490] BTRFS info (device loop2): use zstd compression, level 3 [ 66.099355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.103280][ T4490] BTRFS info (device loop2): using free space tree [ 66.105197][ T4490] BTRFS info (device loop2): has skinny extents [ 66.119792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.159737][ T4229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.162309][ T4229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176259][ T4229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.194661][ T4229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.449463][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.451870][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.458456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.460733][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.464970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.516385][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.593409][ T4543] device syz_tun entered promiscuous mode [ 66.595539][ T4543] device vlan2 entered promiscuous mode [ 66.711537][ T4015] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4015) [ 66.776136][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 66.785564][ T4490] BTRFS info (device loop2): enabling ssd optimizations [ 67.055951][ T4553] tipc: Enabled bearer , priority 0 [ 67.117314][ T4553] device syzkaller0 entered promiscuous mode [ 67.131321][ T4560] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET) [ 67.241149][ T4564] binder: 4563:4564 got transaction to invalid handle, 1 [ 67.250211][ T4564] binder: 4563:4564 transaction failed 29201/-22, size 0-0 line 2917 [ 67.266693][ T4552] tipc: Resetting bearer [ 67.333734][ T4557] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.355798][ T4552] tipc: Disabling bearer [ 67.411514][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 67.503495][ T4382] hfsplus: b-tree write err: -5, ino 4 [ 67.892896][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 67.915074][ T4575] tipc: Enabling of bearer rejected, failed to enable media [ 68.693118][ T4070] Bluetooth: hci5: command 0x1003 tx timeout [ 68.695140][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 68.854914][ T4583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 69.001386][ T4587] loop3: detected capacity change from 0 to 512 [ 69.770936][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.773030][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.776948][ T4587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.780565][ T4587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.906647][ T4594] binder: 4590:4594 tried to acquire reference to desc 0, got 1 instead [ 69.909512][ T4594] binder: 4590:4594 got transaction with invalid parent offset [ 69.911878][ T4594] binder: 4590:4594 transaction failed 29201/-22, size 104-24 line 3381 [ 69.916063][ T4587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.105: bg 0: block 384: padding at end of block bitmap is not set [ 69.945060][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 69.946977][ T4587] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 69.950858][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 69.952625][ T4587] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.105: attempt to clear invalid blocks 983260 len 1 [ 69.959959][ T4557] binder: undelivered TRANSACTION_ERROR: 29201 [ 69.969700][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 69.971559][ T4587] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.105: Invalid inode table block 0 in block_group 0 [ 69.979416][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 69.980749][ T4596] loop1: detected capacity change from 0 to 1024 [ 69.981214][ T4587] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 69.987056][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 69.989106][ T4587] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.998829][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 70.000729][ T4587] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.105: Invalid inode table block 0 in block_group 0 [ 70.002874][ T4596] EXT4-fs (loop1): inline encryption not supported [ 70.007806][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 70.008126][ T4596] EXT4-fs (loop1): Ignoring removed bh option [ 70.009537][ T4587] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem [ 70.017091][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 70.019100][ T4587] EXT4-fs error (device loop3): ext4_truncate:4273: inode #11: comm syz.3.105: mark_inode_dirty error [ 70.023011][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 70.024918][ T4587] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 70.028982][ T4587] EXT4-fs (loop3): Remounting filesystem read-only [ 70.030835][ T4587] EXT4-fs (loop3): 1 truncate cleaned up [ 70.032375][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 70.110123][ T4587] udc-core: couldn't find an available UDC or it's busy [ 70.112245][ T4587] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 70.143535][ T4596] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 70.382585][ T4610] Zero length message leads to an empty skb [ 70.587484][ T4605] loop0: detected capacity change from 0 to 32768 [ 70.648475][ T4605] XFS (loop0): Mounting V5 Filesystem [ 70.685820][ T4605] XFS (loop0): Ending clean mount [ 70.693458][ T4605] XFS (loop0): Quotacheck needed: Please wait. [ 70.717066][ T4605] XFS (loop0): Quotacheck: Done. [ 70.779112][ T4072] Bluetooth: hci5: command 0x1001 tx timeout [ 70.779972][ T4291] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 70.781008][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 70.797910][ T4291] XFS (loop0): Unmount and run xfs_repair [ 70.802062][ T4291] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.826735][ T4291] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 70.837471][ T4291] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 70.847988][ T4291] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 70.857377][ T4291] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 70.864550][ T4291] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.875238][ T4291] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.879817][ T4291] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.882732][ T4291] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.886387][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 70.898430][ T4291] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 70.901774][ T4291] XFS (loop0): Unmount and run xfs_repair [ 70.903826][ T4291] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.908230][ T4291] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 70.913168][ T4291] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 70.918267][ T4291] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 70.920790][ T4291] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 70.929779][ T4291] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.932435][ T4291] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.939930][ T4291] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.944732][ T4291] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.948273][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 70.952143][ T4069] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 70.960908][ T4069] XFS (loop0): Unmount and run xfs_repair [ 70.962591][ T4069] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 70.966443][ T4069] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 70.969028][ T4069] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 70.971634][ T4069] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 70.979341][ T4069] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 70.986266][ T4069] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.988897][ T4069] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.991466][ T4069] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 70.999468][ T4069] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.002088][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.010767][ T4603] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.021866][ T4603] XFS (loop0): Unmount and run xfs_repair [ 71.025603][ T4603] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.027887][ T4603] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.036771][ T4603] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.039458][ T4603] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.042246][ T4603] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.044813][ T4603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.047249][ T4603] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.049680][ T4603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.052138][ T4603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.054646][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.058462][ T4072] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.061773][ T4072] XFS (loop0): Unmount and run xfs_repair [ 71.067590][ T4072] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.069727][ T4072] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.072118][ T4072] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.075049][ T4072] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.077574][ T4072] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.079939][ T4072] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.082382][ T4072] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.085416][ T4072] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.087890][ T4072] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.090437][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.600541][ T4603] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.609738][ T4603] XFS (loop0): Unmount and run xfs_repair [ 71.611351][ T4603] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.625331][ T4603] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.627994][ T4603] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.636563][ T4603] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.639200][ T4603] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.641859][ T4603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.645571][ T4603] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.648002][ T4603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.650517][ T4603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.653677][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.657984][ T4145] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.663752][ T4145] XFS (loop0): Unmount and run xfs_repair [ 71.667557][ T4145] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.677255][ T4145] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.682053][ T4145] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.695387][ T4145] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.698504][ T4145] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.770392][ T4145] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.773339][ T4145] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.775756][ T4145] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.778266][ T4145] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.780741][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.786951][ T4603] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.794992][ T4603] XFS (loop0): Unmount and run xfs_repair [ 71.797859][ T4603] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.810829][ T4603] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.818406][ T4603] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.832656][ T4603] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.837721][ T4603] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.840340][ T4603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.843061][ T4603] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.845473][ T4603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.847835][ T4651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.122'. [ 71.847888][ T4603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.854219][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.857799][ T4603] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.861122][ T4603] XFS (loop0): Unmount and run xfs_repair [ 71.862659][ T4603] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.866367][ T4603] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.868710][ T4603] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.871250][ T4603] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.874388][ T4603] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.890678][ T4653] binder: 4652:4653 tried to acquire reference to desc 0, got 1 instead [ 71.894931][ T4653] binder: 4652:4653 got transaction with invalid data ptr [ 71.896609][ T4603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.897045][ T4653] binder: 4652:4653 transaction failed 29201/-14, size 0-24 line 3186 [ 71.905734][ T13] binder: undelivered TRANSACTION_COMPLETE [ 71.912667][ T4603] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.915628][ T13] binder: undelivered transaction 50, process died. [ 71.929765][ T4603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.933980][ T4603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.936528][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 71.941172][ T13] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 71.946836][ T4655] binder: 4654:4655 tried to acquire reference to desc 0, got 1 instead [ 71.949834][ T13] XFS (loop0): Unmount and run xfs_repair [ 71.950394][ T4072] binder: release 4654:4655 transaction 55 out, still active [ 71.952561][ T13] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.956885][ T13] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 71.959383][ T13] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 71.961916][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 71.979385][ T13] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 71.981990][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 71.999821][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.002232][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.010593][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.017248][ T4603] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x28 len 8 error 74 [ 72.020905][ T4603] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 72.028877][ T4603] XFS (loop0): Unmount and run xfs_repair [ 72.030635][ T4603] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 72.033235][ T4603] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 72.035896][ T4603] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 72.038629][ T4603] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 72.041926][ T4603] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 72.053385][ T4603] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.055965][ T4603] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.058532][ T4603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.061338][ T4603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.070945][ T13] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 72.076305][ T13] XFS (loop0): Unmount and run xfs_repair [ 72.079123][ T13] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 72.081596][ T13] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 72.089823][ T13] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 72.093313][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 72.096063][ T13] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 72.098586][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.101074][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.109449][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.112045][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.117031][ T13] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 72.120548][ T13] XFS (loop0): Unmount and run xfs_repair [ 72.122313][ T13] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 72.129837][ T13] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 72.132629][ T13] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 72.137693][ T4072] binder: undelivered TRANSACTION_COMPLETE [ 72.139592][ T4072] binder: send failed reply for transaction 55, target dead [ 72.142120][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 72.145398][ T13] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 72.147822][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.150131][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.152687][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.155344][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.158393][ T4072] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 72.161871][ T4072] XFS (loop0): Unmount and run xfs_repair [ 72.163694][ T4072] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 72.165902][ T4072] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 72.168346][ T4072] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 72.170867][ T4072] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 72.173478][ T4072] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 72.176013][ T4072] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.178466][ T4072] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.180837][ T4072] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.183350][ T4072] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 72.186746][ T13] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 72.190242][ T13] XFS (loop0): Unmount and run xfs_repair [ 72.191812][ T13] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 72.194118][ T13] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 72.948731][ T13] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 72.963432][ T4072] Bluetooth: hci5: command 0x1009 tx timeout [ 73.014685][ T13] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 73.017833][ T13] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 73.020318][ T13] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.022688][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.025300][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.027734][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.032550][ T21] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x54/0x3e4, xfs_refcountbt block 0x28 [ 73.036618][ T21] XFS (loop0): Unmount and run xfs_repair [ 73.038343][ T21] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 73.040407][ T21] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 73.062972][ T21] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 73.075067][ T21] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 73.079501][ T21] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 73.081958][ T21] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.097447][ T21] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.101832][ T21] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.112918][ T21] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 73.160010][ T4229] XFS (loop0): Unmounting Filesystem [ 74.217192][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 74.253842][ T4677] device team1 entered promiscuous mode [ 74.370429][ T4684] udc-core: couldn't find an available UDC or it's busy [ 74.372342][ T4684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 74.779552][ T1534] cfg80211: failed to load regulatory.db [ 75.246263][ T4693] netlink: 'syz.3.139': attribute type 10 has an invalid length. [ 75.254738][ T4693] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 75.483909][ T4696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.495360][ T4699] loop2: detected capacity change from 0 to 128 [ 75.511053][ T4696] device bond_slave_0 entered promiscuous mode [ 75.513127][ T4696] device bond_slave_1 entered promiscuous mode [ 75.514886][ T4696] device netdevsim0 entered promiscuous mode [ 75.521275][ T4696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.530064][ T4696] bond1: (slave macvlan2): making interface the new active one [ 75.538331][ T4696] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 75.541338][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 75.572978][ T4699] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 77.251403][ T4719] loop0: detected capacity change from 0 to 32768 [ 77.472682][ T4723] binder: 4722:4723 tried to acquire reference to desc 0, got 1 instead [ 77.487082][ T4723] binder: 4722:4723 got transaction with invalid data ptr [ 77.489255][ T4723] binder: 4722:4723 transaction failed 29201/-14, size 0-24 line 3186 [ 77.506996][ T13] binder: release 4722:4723 transaction 60 out, still active [ 77.509261][ T13] binder: undelivered TRANSACTION_COMPLETE [ 77.510861][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.528722][ T13] binder: send failed reply for transaction 60, target dead [ 77.557991][ T4725] loop2: detected capacity change from 0 to 64 [ 77.707735][ T4720] syz.0.148 (4720): drop_caches: 2 [ 77.742076][ T4728] loop4: detected capacity change from 0 to 2048 [ 77.778248][ T4029] Trying to free block not in datazone [ 77.785791][ T4728] GPT:first_usable_lbas don't match. [ 77.787262][ T4728] GPT:34 != 290 [ 77.788327][ T4728] GPT: Use GNU Parted to correct GPT errors. [ 77.790010][ T4728] loop4: p1 p2 p3 [ 78.458821][ T4745] binder: 4743:4745 tried to acquire reference to desc 0, got 1 instead [ 78.461542][ T4745] binder: 4743:4745 ioctl c0306201 200003c0 returned -14 [ 78.482454][ T4745] binder: 4743:4745 got transaction with invalid offsets ptr [ 78.490410][ T4745] binder: 4743:4745 transaction failed 29201/-22, size 120-24 line 3417 [ 78.536749][ T4069] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.627597][ T4255] udevd[4255]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 78.921854][ T4761] binder: 4760:4761 ioctl c0306201 20000080 returned -14 [ 78.927452][ T4761] binder: 4760:4761 tried to acquire reference to desc 0, got 1 instead [ 78.930362][ T4761] binder: 4760:4761 got transaction with fd, 3, but target does not allow fds [ 78.933507][ T4761] binder: 4760:4761 transaction failed 29201/-1, size 96-24 line 3262 [ 78.936442][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.971252][ T4763] loop4: detected capacity change from 0 to 512 [ 79.063328][ T4763] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.322652][ T4770] netlink: 'syz.4.165': attribute type 39 has an invalid length. [ 79.516633][ T4773] loop2: detected capacity change from 0 to 2048 [ 79.613833][ T4773] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.577086][ T4783] loop2: detected capacity change from 0 to 2048 [ 80.621667][ T4783] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 80.631925][ T4783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.888699][ T4786] loop2: detected capacity change from 0 to 1024 [ 81.060237][ T4786] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 81.070555][ T4786] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 81.106261][ T148] hfsplus: b-tree write err: -5, ino 4 [ 81.800376][ T4778] Set syz1 is full, maxelem 65536 reached [ 81.809863][ T4798] Bluetooth: hci5: Frame reassembly failed (-90) [ 82.569394][ T4809] tipc: Started in network mode [ 82.570950][ T4809] tipc: Node identity ac1414aa, cluster identity 4711 [ 82.578158][ T4809] tipc: Enabled bearer , priority 10 [ 82.580943][ T4809] tipc: Enabled bearer , priority 0 [ 83.439212][ T4824] binder: 4823:4824 tried to acquire reference to desc 0, got 1 instead [ 83.442566][ T4824] binder: 4823:4824 BC_FREE_BUFFER u0000000000000000 no match [ 83.695596][ T21] tipc: Node number set to 2886997162 [ 83.813069][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 83.816858][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 84.214013][ T13] binder: release 4823:4824 transaction 76 out, still active [ 84.216185][ T13] binder: undelivered TRANSACTION_COMPLETE [ 84.233503][ T13] binder: send failed reply for transaction 76, target dead [ 85.355328][ T4836] binder: 4835:4836 tried to acquire reference to desc 0, got 1 instead [ 85.361981][ T4836] binder: 4835:4836 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.367200][ T4836] binder: 4836 RLIMIT_NICE not set [ 85.369128][ T21] binder: undelivered TRANSACTION_COMPLETE [ 85.951635][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 85.960001][ T1534] Bluetooth: hci5: command 0x1001 tx timeout [ 85.961848][ T4037] Bluetooth: hci5: sending frame failed (-49) [ 85.965281][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.221296][ T4844] loop4: detected capacity change from 0 to 40427 [ 86.275439][ T4844] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 86.277863][ T4844] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.323840][ T4844] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.370614][ T4844] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 86.381827][ T4844] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 86.428479][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.428527][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.430833][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.433580][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.435618][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.437684][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.439763][ T4844] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 86.451671][ T4844] attempt to access beyond end of device [ 86.451671][ T4844] loop4: rw=2049, want=45168, limit=40427 [ 86.835765][ T136] attempt to access beyond end of device [ 86.835765][ T136] loop4: rw=1, want=45176, limit=40427 [ 86.850615][ T4844] F2FS-fs (loop4): Start checkpoint disabled! [ 87.088613][ T4857] binder: 4856:4857 tried to acquire reference to desc 0, got 1 instead [ 87.091886][ T4857] binder_alloc: 4856: pid 4856 spamming oneway? 1 buffers allocated for a total size of 5184 [ 87.106949][ T13] binder: undelivered TRANSACTION_COMPLETE [ 87.129461][ T13] binder: undelivered transaction 86, process died. [ 87.306343][ T4863] loop0: detected capacity change from 0 to 8192 [ 87.334251][ T4863] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 87.336895][ T4863] REISERFS (device loop0): using ordered data mode [ 87.338638][ T4863] reiserfs: using flush barriers [ 87.341389][ T4863] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.360680][ T4863] REISERFS (device loop0): checking transaction log (loop0) [ 87.364361][ T4863] REISERFS (device loop0): Using r5 hash to sort names [ 87.366725][ T4863] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 87.376121][ T4866] loop4: detected capacity change from 0 to 24 [ 87.421126][ T4866] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 87.444770][ T4866] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 87.489405][ T4866] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.647203][ T4145] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.660207][ T4145] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.670224][ T4870] loop0: detected capacity change from 0 to 1024 [ 87.761684][ T4870] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 87.764678][ T4870] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 87.766866][ T4870] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.789229][ T4870] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 87.880348][ T4872] fido_id[4872]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.976946][ T1534] Bluetooth: hci5: command 0x1009 tx timeout [ 87.996069][ T4876] binder: 4875:4876 tried to acquire reference to desc 0, got 1 instead [ 87.999124][ T4876] binder: 4875:4876 ioctl c0306201 20000180 returned -14 [ 88.001450][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 88.011026][ T13] binder: undelivered transaction 91, process died. [ 88.338586][ T4886] loop0: detected capacity change from 0 to 8 [ 88.368547][ T4886] SQUASHFS error: zlib decompression failed, data probably corrupt [ 88.371230][ T4886] SQUASHFS error: Failed to read block 0x9b: -5 [ 88.374373][ T4886] SQUASHFS error: Unable to read metadata cache entry [99] [ 88.376593][ T4886] SQUASHFS error: Unable to read inode 0x127 [ 88.448297][ T4888] netlink: 'syz.4.208': attribute type 10 has an invalid length. [ 88.455436][ T4888] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.500244][ T4886] loop0: detected capacity change from 0 to 512 [ 88.559931][ T26] audit: type=1326 audit(88.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4889 comm="syz.4.209" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9230a9a8 code=0x0 [ 88.567994][ T4886] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 88.966542][ T4899] loop0: detected capacity change from 0 to 32768 [ 88.982099][ T4899] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.211 (4899) [ 88.990373][ T4899] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 88.993884][ T4899] BTRFS info (device loop0): force zlib compression, level 3 [ 88.995959][ T4899] BTRFS info (device loop0): force clearing of disk cache [ 88.997922][ T4899] BTRFS info (device loop0): setting nodatasum [ 88.999583][ T4899] BTRFS info (device loop0): use zlib compression, level 3 [ 89.001553][ T4899] BTRFS info (device loop0): allowing degraded mounts [ 89.003980][ T4899] BTRFS info (device loop0): enabling disk space caching [ 89.006025][ T4899] BTRFS info (device loop0): disk space caching is enabled [ 89.008146][ T4899] BTRFS info (device loop0): has skinny extents [ 89.036697][ T4899] BTRFS info (device loop0): enabling ssd optimizations [ 89.040785][ T4899] BTRFS info (device loop0): clearing free space tree [ 89.047502][ T4899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 89.050477][ T4899] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 89.368867][ T4925] binder: 4924:4925 tried to acquire reference to desc 0, got 1 instead [ 89.371722][ T4925] binder: 4924:4925 got transaction with invalid data ptr [ 89.376767][ T4925] binder: 4924:4925 transaction failed 29201/-14, size 0-24 line 3186 [ 89.377799][ T4923] device syzkaller0 entered promiscuous mode [ 89.379674][ T4925] binder: 4924:4925 got transaction with invalid offset (48, min 48 max 72) or object. [ 89.387959][ T4925] binder: 4924:4925 transaction failed 29201/-22, size 72-72 line 3199 [ 89.390544][ T4925] binder: 4924:4925 ioctl c0306201 200001c0 returned -14 [ 89.396980][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.457466][ T4927] tipc: Started in network mode [ 89.458903][ T4927] tipc: Node identity 4, cluster identity 4711 [ 89.460551][ T4927] tipc: Node number set to 4 [ 89.901829][ T4939] loop0: detected capacity change from 0 to 512 [ 89.933080][ T4939] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 89.935689][ T4939] EXT4-fs (loop0): Unrecognized mount option "obj_type=dax=always" or missing value [ 91.816330][ T136] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.931873][ T4972] netlink: 'syz.4.228': attribute type 10 has an invalid length. [ 91.970126][ T4972] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.974216][ T4972] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.998556][ T136] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.155485][ T136] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.181849][ T4981] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 92.313370][ T136] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.518765][ T4991] Dead loop on virtual device ip6_vti0, fix it urgently! [ 93.268501][ T4954] chnl_net:caif_netlink_parms(): no params data found [ 93.586947][ T4128] Bluetooth: hci6: command 0x0409 tx timeout [ 93.589026][ T4128] Bluetooth: hci2: command 0x0409 tx timeout [ 93.605120][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 93.635227][ T26] audit: type=1326 audit(93.580:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4998 comm="syz.2.236" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffba3969a8 code=0x0 [ 93.712538][ T5006] binder: 5004:5006 tried to acquire reference to desc 0, got 1 instead [ 93.721342][ T5006] binder: 5004:5006 got new transaction with bad transaction stack, transaction 110 has target 5004:0 [ 93.730174][ T5006] binder: 5004:5006 transaction failed 29201/-71, size 0-48 line 2973 [ 93.748388][ T4128] binder: release 5004:5006 transaction 110 out, still active [ 93.750838][ T4128] binder: undelivered TRANSACTION_COMPLETE [ 93.752473][ T4128] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.762965][ T4954] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.771809][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.784404][ T4954] device bridge_slave_0 entered promiscuous mode [ 93.787560][ T21] binder: send failed reply for transaction 110, target dead [ 93.832335][ T4954] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.839639][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.858251][ T4954] device bridge_slave_1 entered promiscuous mode [ 94.083079][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.086531][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.862640][ T4947] device bridge_slave_0 entered promiscuous mode [ 95.155981][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.158319][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.169130][ T4947] device bridge_slave_1 entered promiscuous mode [ 95.180072][ T5016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 95.206625][ T4954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.212412][ T4954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.279588][ T136] tipc: Left network mode [ 95.316226][ T5031] loop0: detected capacity change from 0 to 512 [ 95.344928][ T5031] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 95.344928][ T5031] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 95.344928][ T5031] [ 95.350141][ T5031] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.415476][ T4954] team0: Port device team_slave_0 added [ 95.420875][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.440504][ T5031] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #17: comm syz.0.240: iget: bad i_size value: -6917529027641081756 [ 95.448185][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.453359][ T5031] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.240: couldn't read orphan inode 17 (err -117) [ 95.457173][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nouser_xattr,resgid=0x000000000000ee00,nombcache,noload,,errors=continue. Quota mode: writeback. [ 95.474118][ T4954] team0: Port device team_slave_1 added [ 95.602598][ T4947] team0: Port device team_slave_0 added [ 95.635565][ T4947] team0: Port device team_slave_1 added [ 95.665347][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 95.668145][ T21] Bluetooth: hci6: command 0x041b tx timeout [ 95.721614][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.733731][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.803838][ T4954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.812691][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.817284][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.843546][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.856984][ T4954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.871862][ T4954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.923567][ T4954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.953110][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.955687][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.971283][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.238183][ T4954] device hsr_slave_0 entered promiscuous mode [ 96.274331][ T4954] device hsr_slave_1 entered promiscuous mode [ 96.321750][ T4954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.394054][ T4954] Cannot create hsr debugfs directory [ 97.064305][ T4947] device hsr_slave_0 entered promiscuous mode [ 97.118996][ T5064] loop2: detected capacity change from 0 to 8 [ 97.124531][ T4947] device hsr_slave_1 entered promiscuous mode [ 97.173511][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.175672][ T4947] Cannot create hsr debugfs directory [ 97.262004][ T5064] udc-core: couldn't find an available UDC or it's busy [ 97.264336][ T5064] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.278048][ T5064] SQUASHFS error: Unable to read directory block [629:2b] [ 97.430733][ T5075] binder: 5074:5075 ioctl c0306201 20000080 returned -14 [ 97.435271][ T5075] binder: 5074:5075 tried to acquire reference to desc 0, got 1 instead [ 97.439043][ T5075] binder: 5074:5075 got transaction with invalid handle, 2 [ 97.441121][ T5075] binder: 5074:5075 transaction failed 29201/-22, size 88-24 line 3242 [ 97.449083][ T21] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.573744][ T5077] loop4: detected capacity change from 0 to 4096 [ 97.730034][ T4954] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.733783][ T4128] Bluetooth: hci6: command 0x040f tx timeout [ 97.735658][ T4128] Bluetooth: hci2: command 0x040f tx timeout [ 97.760512][ T4954] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.784825][ T4954] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.864310][ T4954] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.079523][ T4947] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.929284][ T4025] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 98.931439][ T4025] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 99.089831][ T136] device hsr_slave_0 left promiscuous mode [ 99.134614][ T136] device hsr_slave_1 left promiscuous mode [ 100.972987][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.975078][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.977178][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 100.983273][ T21] Bluetooth: hci6: command 0x0419 tx timeout [ 100.997422][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.999638][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.016642][ T136] device bridge_slave_1 left promiscuous mode [ 101.018368][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.418734][ T5123] binder: 5122:5123 tried to acquire reference to desc 0, got 1 instead [ 101.421895][ T4070] binder: release 5122:5123 transaction 121 out, still active [ 101.424677][ T4070] binder: undelivered TRANSACTION_COMPLETE [ 101.435554][ T13] binder: send failed reply for transaction 121, target dead [ 101.441221][ T136] device bridge_slave_0 left promiscuous mode [ 101.445901][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.653683][ T136] device veth1_macvtap left promiscuous mode [ 101.655530][ T136] device veth0_macvtap left promiscuous mode [ 101.657434][ T136] device veth1_vlan left promiscuous mode [ 101.659155][ T136] device veth0_vlan left promiscuous mode [ 102.738718][ T136] team0 (unregistering): Port device team_slave_1 removed [ 102.749845][ T136] team0 (unregistering): Port device team_slave_0 removed [ 102.764090][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.801217][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.932007][ T136] bond0 (unregistering): Released all slaves [ 103.033317][ T4947] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.094444][ T4947] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.172354][ T4029] bridge0: port 3(syz_tun) entered disabled state [ 103.194597][ T4029] device syz_tun left promiscuous mode [ 103.197272][ T4029] bridge0: port 3(syz_tun) entered disabled state [ 103.261113][ T4947] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.366563][ T5141] netlink: 'syz.4.266': attribute type 10 has an invalid length. [ 103.369194][ T4311] bond0: (slave bond_slave_0): interface is now down [ 103.371337][ T4311] bond0: (slave bond_slave_1): interface is now down [ 103.373361][ T4311] bond0: (slave wlan1): interface is now down [ 103.375260][ T4311] bond0: (slave team0): interface is now down [ 103.390142][ T5141] device syz_tun entered promiscuous mode [ 103.393662][ T4311] bond0: (slave bond_slave_0): interface is now down [ 103.395597][ T4311] bond0: (slave bond_slave_1): interface is now down [ 103.397511][ T4311] bond0: (slave wlan1): interface is now down [ 103.399099][ T4311] bond0: (slave team0): interface is now down [ 103.405894][ T5141] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 103.415615][ T4311] bond0: (slave bond_slave_0): interface is now down [ 103.417502][ T4311] bond0: (slave bond_slave_1): interface is now down [ 103.419367][ T4311] bond0: (slave wlan1): interface is now down [ 103.432249][ T4311] bond0: (slave team0): interface is now down [ 103.436632][ T4311] bond0: (slave syz_tun): interface is now down [ 103.452953][ T4311] bond0: (slave bond_slave_0): interface is now down [ 103.454877][ T4311] bond0: (slave bond_slave_1): interface is now down [ 103.456749][ T4311] bond0: (slave wlan1): interface is now down [ 103.458504][ T4311] bond0: (slave team0): interface is now down [ 103.460149][ T4311] bond0: (slave syz_tun): interface is now down [ 103.483918][ T4382] bond0: (slave bond_slave_0): interface is now down [ 103.485824][ T4382] bond0: (slave bond_slave_1): interface is now down [ 103.487693][ T4382] bond0: (slave wlan1): interface is now down [ 103.489392][ T4382] bond0: (slave team0): interface is now down [ 103.491000][ T4382] bond0: (slave syz_tun): interface is now down [ 103.528831][ T4382] bond0: now running without any active interface! [ 103.638949][ T4954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.649062][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.651645][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.700599][ T4954] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.703333][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.271'. [ 103.708439][ T5158] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 103.727572][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 103.780036][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.799525][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.802278][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.804366][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.833295][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 103.859666][ T5165] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.881548][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.891889][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.895047][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.897691][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.899598][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.921126][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.942234][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.962394][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.973421][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.984290][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 103.989873][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 103.993357][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.005291][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.009002][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.012070][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.041464][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.048371][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.058519][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.065543][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.070740][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.072745][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.087132][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.089938][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.109161][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.127006][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.129108][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.150655][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.155322][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.171802][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.190302][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.254784][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.301917][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.063064][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.066013][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.073646][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.089379][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.108277][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.119644][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.559361][ T4147] Bluetooth: hci3: command 0x0409 tx timeout [ 106.598265][ T4947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.660224][ T5194] loop0: detected capacity change from 0 to 256 [ 106.683019][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.685857][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.782285][ T5194] FAT-fs (loop0): Directory bread(block 64) failed [ 106.799587][ T5194] FAT-fs (loop0): Directory bread(block 65) failed [ 106.803490][ T5194] FAT-fs (loop0): Directory bread(block 66) failed [ 106.805932][ T5194] FAT-fs (loop0): Directory bread(block 67) failed [ 106.807765][ T5194] FAT-fs (loop0): Directory bread(block 68) failed [ 106.809575][ T5194] FAT-fs (loop0): Directory bread(block 69) failed [ 106.833107][ T5194] FAT-fs (loop0): Directory bread(block 70) failed [ 106.835043][ T5194] FAT-fs (loop0): Directory bread(block 71) failed [ 106.836917][ T5194] FAT-fs (loop0): Directory bread(block 72) failed [ 106.838721][ T5194] FAT-fs (loop0): Directory bread(block 73) failed [ 107.815052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.817429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.023464][ T4954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.727555][ T4072] Bluetooth: hci3: command 0x041b tx timeout [ 108.766562][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.769413][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.771664][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.842604][ T5169] chnl_net:caif_netlink_parms(): no params data found [ 108.992942][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.995236][ T5169] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.005714][ T5169] device bridge_slave_0 entered promiscuous mode [ 109.010729][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.033105][ T5169] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.060659][ T5169] device bridge_slave_1 entered promiscuous mode [ 109.185369][ T5169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.200078][ T5169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.325764][ T5169] team0: Port device team_slave_0 added [ 110.003743][ T5169] team0: Port device team_slave_1 added [ 111.284573][ T4072] Bluetooth: hci3: command 0x040f tx timeout [ 111.393032][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.398631][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.204093][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.214736][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.245947][ T5169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.319696][ T5169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.321688][ T5169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.328985][ T5169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.477871][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.481015][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.503789][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.515725][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.539399][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.553701][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.562465][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.569736][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.583566][ T4947] device veth0_vlan entered promiscuous mode [ 112.591307][ T4947] device veth1_vlan entered promiscuous mode [ 112.655868][ T5169] device hsr_slave_0 entered promiscuous mode [ 112.709105][ T5169] device hsr_slave_1 entered promiscuous mode [ 112.749997][ T5169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.752318][ T5169] Cannot create hsr debugfs directory [ 112.758716][ T4954] device veth0_vlan entered promiscuous mode [ 112.767135][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.769925][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.772600][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.848861][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.851741][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.855332][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.869745][ T4947] device veth0_macvtap entered promiscuous mode [ 112.886314][ T4954] device veth1_vlan entered promiscuous mode [ 112.909112][ T4947] device veth1_macvtap entered promiscuous mode [ 113.451247][ T5169] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.547496][ T4147] Bluetooth: hci3: command 0x0419 tx timeout [ 113.575304][ T5169] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.642989][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.645830][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.648630][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.651375][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.693837][ T5169] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.758045][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.767816][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.771106][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.780595][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.785764][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.789938][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.794227][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.799441][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.806596][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.825678][ T5169] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.878022][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.880895][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.910410][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.928967][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.931881][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.947973][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.950735][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.962443][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.966653][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.969583][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.987826][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.997603][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.000383][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.009364][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.016990][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.037124][ T4954] device veth0_macvtap entered promiscuous mode [ 114.043218][ T4954] device veth1_macvtap entered promiscuous mode [ 114.065833][ T4947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.074247][ T4947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.079608][ T4947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.085559][ T4947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.472413][ T5307] loop0: detected capacity change from 0 to 32768 [ 114.479563][ T5307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.290 (5307) [ 114.491394][ T5307] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 114.494249][ T5307] BTRFS info (device loop0): turning off barriers [ 114.495967][ T5307] BTRFS info (device loop0): setting nodatasum [ 114.497647][ T5307] BTRFS info (device loop0): use zlib compression, level 3 [ 114.499731][ T5307] BTRFS info (device loop0): using free space tree [ 114.501512][ T5307] BTRFS info (device loop0): has skinny extents [ 114.669770][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.689327][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.697206][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.699885][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.709290][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.711970][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.729115][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.795857][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.798699][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.801362][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.805887][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.812356][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.823133][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.825822][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.859137][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.862020][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.892585][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.991830][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.003746][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.006394][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.009298][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.050663][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.058725][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.061816][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.065087][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.070640][ T4954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.074174][ T4954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.078665][ T4954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.082206][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.085975][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.810704][ T5169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.832199][ T5169] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.898046][ T5169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.906398][ T5169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.922473][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.947883][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.950490][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.953356][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.957632][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.960252][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.962191][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.965222][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.967950][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.970751][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.972738][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.977178][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.980079][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.985215][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.989543][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.992441][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.996379][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.999102][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.999890][ T5337] loop0: detected capacity change from 0 to 4096 [ 116.001889][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.014000][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.017933][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.034397][ T5337] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 116.037256][ T5337] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 116.039542][ T5337] ntfs3: loop0: Failed to load $MFTMirr. [ 116.040243][ T4954] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.041267][ T5337] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 116.047393][ T5337] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 116.048163][ T4954] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.051672][ T4954] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.062918][ T4954] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.114677][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.125221][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.128159][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.130801][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.285025][ T4241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.287520][ T4241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.301815][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.306625][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.309441][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.330834][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.749292][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.752220][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.097424][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.211006][ T5349] loop0: detected capacity change from 0 to 512 [ 117.228870][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.232371][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.242103][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.265131][ T5349] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 117.299917][ T5349] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,bsddf,commit=0x0000000000000000,mblk_io_submit,barrier=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 117.320866][ T136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.505306][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.510430][ T5057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.573276][ T5169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.621763][ T136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.726947][ T136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.604081][ T136] bond0: (slave netdevsim0): Releasing backup interface [ 118.660474][ T136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.331587][ T5169] device veth0_vlan entered promiscuous mode [ 120.354122][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 120.357192][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.363643][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 120.378610][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.395947][ T5169] device veth1_vlan entered promiscuous mode [ 120.724082][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.801979][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.218834][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 121.224128][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.235129][ T5169] device veth0_macvtap entered promiscuous mode [ 121.242543][ T5169] device veth1_macvtap entered promiscuous mode [ 121.317518][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.320430][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.341826][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.350534][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.362427][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.383414][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.386351][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.389734][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.392510][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.395499][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.399110][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.402151][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.408146][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.410709][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 121.432631][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 121.448574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 121.938988][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.952378][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.967922][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.982714][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.011631][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.014842][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.017672][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.152446][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.160625][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.166527][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.169387][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.172092][ T5169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.196895][ T5169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.201058][ T5169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.094042][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.097463][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.243582][ T5432] bpf_jit: unknown atomic op code a0 [ 125.795273][ T5444] binder: 5443:5444 tried to acquire reference to desc 0, got 1 instead [ 125.798491][ T5444] binder: 5443:5444 got transaction with unaligned buffers size, 4127 [ 125.801414][ T5444] binder: 5443:5444 transaction failed 29201/-22, size 0-0 line 3141 [ 125.816597][ T5446] binder: 5445:5446 tried to acquire reference to desc 0, got 1 instead [ 125.819066][ T5446] binder: 5445:5446 ioctl c0306201 200003c0 returned -14 [ 125.821679][ T5446] binder: 5445:5446 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.826522][ T5446] binder: 5446 RLIMIT_NICE not set [ 125.827946][ T5446] binder: 5446 RLIMIT_NICE not set [ 125.829938][ T1959] binder: release 5445:5446 transaction 131 out, still active [ 125.831944][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 125.853177][ T5169] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.855675][ T5169] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.858065][ T5169] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.860359][ T5169] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.899213][ T4291] binder: release 5445:5446 transaction 131 in, still active [ 125.901341][ T4291] binder: send failed reply for transaction 131, target dead [ 126.045328][ T5057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.047821][ T5057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.067400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.120817][ T5057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.123355][ T5057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.132917][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.537463][ T5461] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 126.539690][ T5461] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 126.541736][ T5461] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.316'. [ 126.557254][ T5461] netlink: 'syz.0.316': attribute type 1 has an invalid length. [ 126.567931][ T5461] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 126.585512][ T5461] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.316'. [ 126.629075][ T3605] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.718841][ T5467] binder: 5466:5467 tried to acquire reference to desc 0, got 1 instead [ 126.729520][ T1959] binder: release 5466:5467 transaction 137 out, still active [ 126.731795][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 126.738323][ T1959] binder: undelivered TRANSACTION_COMPLETE [ 126.780058][ T25] binder: undelivered transaction 136, process died. [ 126.782078][ T25] binder: send failed reply for transaction 137, target dead [ 127.027447][ T5444] ODEBUG: Out of memory. ODEBUG disabled [ 129.427690][ T5444] syz.6.313 (5444): drop_caches: 2 [ 130.804191][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.826731][ T5510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.095902][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.097815][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.107374][ T5529] binder: 5527:5529 tried to acquire reference to desc 0, got 1 instead [ 131.139342][ T4142] binder: undelivered TRANSACTION_COMPLETE [ 131.170516][ T4142] binder: undelivered transaction 142, process died. [ 132.864125][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 133.573533][ T5521] loop0: detected capacity change from 0 to 32768 [ 133.609513][ T5521] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.327 (5521) [ 133.649745][ T5521] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 133.659604][ T5565] loop6: detected capacity change from 0 to 1024 [ 133.665447][ T5521] BTRFS info (device loop0): setting nodatacow, compression disabled [ 133.667649][ T5521] BTRFS info (device loop0): turning on flush-on-commit [ 133.682997][ T5521] BTRFS info (device loop0): using free space tree [ 133.693253][ T5521] BTRFS info (device loop0): has skinny extents [ 133.729394][ T4069] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.734117][ T4069] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.768464][ T5565] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.781500][ T5568] loop4: detected capacity change from 0 to 1024 [ 133.863262][ T5568] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 133.863262][ T5568] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 133.863262][ T5568] [ 133.868442][ T5568] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 133.886107][ T5521] BTRFS error (device loop0): open_ctree failed: -12 [ 133.915986][ T5568] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 133.987213][ T5568] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.088015][ T5568] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,nouser_xattr,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 134.414971][ T4015] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by udevd (4015) [ 135.209486][ T5611] loop4: detected capacity change from 0 to 512 [ 136.212579][ T5619] loop6: detected capacity change from 0 to 256 [ 136.221310][ T5611] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,noinit_itable,i_version,data_err=ignore,noload,bsddf,,errors=continue. Quota mode: writeback. [ 136.314596][ T5633] loop5: detected capacity change from 0 to 2048 [ 138.268031][ T5649] loop7: detected capacity change from 0 to 1024 [ 138.285157][ T5633] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.372775][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 243.374646][ C0] rcu: 0-...!: (1 GPs behind) idle=b6b/1/0x4000000000000002 softirq=13018/13019 fqs=39 [ 243.378617][ C0] (t=10501 jiffies g=13017 q=525) [ 243.380041][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 8225 jiffies! g13017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 243.383279][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=8533 [ 243.385281][ C0] rcu: rcu_preempt kthread starved for 8227 jiffies! g13017 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 243.388300][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 243.391052][ C0] rcu: RCU grace-period kthread stack dump: [ 243.392625][ C0] task:rcu_preempt state:I stack: 0 pid: 15 ppid: 2 flags:0x00000008 [ 243.395016][ C0] Call trace: [ 243.395883][ C0] __switch_to+0x2f4/0x558 [ 243.397080][ C0] __schedule+0xe00/0x1c0c [ 243.398233][ C0] schedule+0x11c/0x1c8 [ 243.399357][ C0] schedule_timeout+0x180/0x2c8 [ 243.400647][ C0] rcu_gp_fqs_loop+0x25c/0x11f0 [ 243.401956][ C0] rcu_gp_kthread+0xc4/0x2a8 [ 243.403121][ C0] kthread+0x374/0x454 [ 243.404187][ C0] ret_from_fork+0x10/0x20 [ 243.405363][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 243.407036][ C0] Task dump for CPU 1: [ 243.408129][ C0] task:syz.5.349 state:R running task stack: 0 pid: 5633 ppid: 4947 flags:0x00000000 [ 243.411008][ C0] Call trace: [ 243.411872][ C0] __switch_to+0x2f4/0x558 [ 243.413059][ C0] 0xffff80001fb17540 [ 243.414122][ C0] Task dump for CPU 0: [ 243.415216][ C0] task:syz.5.349 state:R running task stack: 0 pid: 5627 ppid: 4947 flags:0x00000001 [ 243.418054][ C0] Call trace: [ 243.418901][ C0] dump_backtrace+0x0/0x43c [ 243.420092][ C0] show_stack+0x2c/0x3c [ 243.421280][ C0] sched_show_task+0x3c8/0x4b4 [ 243.422593][ C0] dump_cpu_task+0x84/0xa8 [ 243.423798][ C0] rcu_dump_cpu_stacks+0x2bc/0x4b0 [ 243.425189][ C0] print_cpu_stall+0x4e8/0xa74 [ 243.426494][ C0] rcu_sched_clock_irq+0xbb4/0x1810 [ 243.427911][ C0] update_process_times+0x1c4/0x260 [ 243.429332][ C0] tick_sched_timer+0x30c/0x4bc [ 243.430713][ C0] __hrtimer_run_queues+0x3fc/0xb6c [ 243.432195][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 243.433553][ C0] arch_timer_handler_virt+0x74/0x88 [ 243.434966][ C0] handle_percpu_devid_irq+0x29c/0x76c [ 243.436487][ C0] handle_domain_irq+0x144/0x1fc [ 243.437840][ C0] gic_handle_irq+0x78/0x1c8 [ 243.439106][ C0] call_on_irq_stack+0x24/0x4c [ 243.440434][ C0] do_interrupt_handler+0x6c/0x88 [ 243.441838][ C0] el1_interrupt+0x30/0x58 [ 243.443016][ C0] el1h_64_irq_handler+0x18/0x24 [ 243.444437][ C0] el1h_64_irq+0x78/0x7c [ 243.445620][ C0] __percpu_read_32+0xc/0x58 [ 243.446922][ C0] ___might_sleep+0x48/0x4d4 [ 243.448223][ C0] __might_sleep+0x98/0x124 [ 243.449530][ C0] __might_fault+0x80/0x128 [ 243.450823][ C0] __arm64_sys_rt_sigreturn+0x298/0x1fec [ 243.452377][ C0] invoke_syscall+0x98/0x2b8 [ 243.453688][ C0] el0_svc_common+0x138/0x258 [ 243.454977][ C0] do_el0_svc+0x58/0x14c [ 243.456220][ C0] el0_svc+0x78/0x1e0 [ 243.457380][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 243.458724][ C0] el0t_64_sync+0x1a0/0x1a4