last executing test programs: 14.132520216s ago: executing program 0 (id=761): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r2, 0x107, 0x17, 0x0, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x78, 0x10, 0x421, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x88a8bfa5, 0x1003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKMODE={0x5, 0x11, 0x81}, @IFLA_IFALIASn={0x4}, @IFLA_EVENT={0x8, 0x2c, 0x2}]}, 0x78}}, 0x0) 12.232011721s ago: executing program 0 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f, 0x30]}}, &(0x7f0000000400)=""/188, 0x45, 0xbc, 0x1, 0x0, 0x0, @void, @value}, 0x20) 9.934888503s ago: executing program 0 (id=770): close(0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f000000a740)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8.438042581s ago: executing program 2 (id=776): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10542, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)='y5', 0x2}], 0x1, 0x7fff, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000280)="6755fa2a14f4", 0x6}]) 8.336601231s ago: executing program 0 (id=778): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 8.273062986s ago: executing program 1 (id=780): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x6e832027, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 7.388677198s ago: executing program 4 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x4040, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 7.387199898s ago: executing program 1 (id=792): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmc(0x0, 0x80, 0x131100) fcntl$setflags(r0, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.343434712s ago: executing program 0 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) 6.055562091s ago: executing program 4 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup(r3) listen(r4, 0x0) 5.645270819s ago: executing program 1 (id=785): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x8, 0x3a, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f280db17ab50b5432b18faa02276ec9cdef5c9e647ff1a5b72438a5c0ba2c885e64e225db0393da557da605ce470e", 0x0, 0xffc5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 5.642541949s ago: executing program 3 (id=786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x20000000}, &(0x7f0000000100)=0x108) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d7", 0x3a}, {&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48", 0x22}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888e", 0x9f}, {&(0x7f00000010c0)="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", 0x1ad}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b", 0x33}], 0x1}}], 0x4, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000540)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834f5425a3a07e7580444ea6f7ae55d88fecf90b1a7511bf746bec8cba00000000000000000000000000000900eed27fce5e74cf8ddb6a7b0a78d2e0cb0564132338b04c360e4067346e77b05748245aca652ecfef16ccb67c45e1a052f4f14aae11a8880aae3bf8919f0268d1ef010c0b2088d3c3abb83e900f5e8b", 0x9b, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) 5.380634663s ago: executing program 1 (id=787): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000000000000000000001c00000061111300000000009500000000000000bba4fb3396373c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='9\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0xff, 0x493, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x0, '\x00', @a}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000140)='./file1\x00') 4.524226853s ago: executing program 4 (id=788): r0 = syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x1, "4f954bc017c4c443cb7c92003ae74d9ebe0ba3c2a6c2cf0535e61884587ac9e1"}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r2, 0x84, 0x6c, 0xfffffffffffffffe, &(0x7f0000000040)=0x41) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa00b3461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x2000000}, 0x2c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x0, 0x8}}}}}, 0x0) 4.485793986s ago: executing program 2 (id=789): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x0, 0xa2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100), 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x9, 0x6, [0x0, 0x6, 0x2, 0x6, 0x2, 0x46]}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003680)={'wpan4\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000bc0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x107, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008050}, 0x8880) 4.369430787s ago: executing program 3 (id=790): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nombcache}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") open_tree(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) 4.136693308s ago: executing program 4 (id=791): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x880, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0xe, 0x8}, {0x6, 0x1}}}, 0x24}}, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}}, 0x44050) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)=0x9ff) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) 4.136228418s ago: executing program 1 (id=793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") socket(0x10, 0x803, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@errors_continue}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x4, 0x54f, &(0x7f0000000b00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r1, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup(r1, 0x0, 0x1ff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) migrate_pages(0x0, 0x6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) 4.132689858s ago: executing program 2 (id=794): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$packet(0x11, 0x0, 0x300) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 3.930652927s ago: executing program 2 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000040)) 3.880586912s ago: executing program 3 (id=796): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 3.68112311s ago: executing program 3 (id=797): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'vlan0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2, 0x6, 0x0) listen(r1, 0x0) shutdown(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 2.744619257s ago: executing program 4 (id=798): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x4000000000001a7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x100000008, &(0x7f0000000040)="d5", 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000000)) 2.714819869s ago: executing program 2 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000580)={0x1, 0x40000000000000, 0x0, 0x7}) 2.620799518s ago: executing program 3 (id=800): r0 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 664.369238ms ago: executing program 4 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x8, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b00)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 660.531609ms ago: executing program 1 (id=802): signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 654.431219ms ago: executing program 2 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r2 = socket(0x10, 0x3, 0x0) r3 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x9, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$userns(r3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00050300", @ANYBLOB], 0x24}}, 0x0) 5.278159ms ago: executing program 0 (id=804): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540), 0x3, 0x455, &(0x7f0000000640)="$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") r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f00000005c0)='./file0\x00') r4 = dup(r0) write$cgroup_pid(r4, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r4, &(0x7f0000000100), 0x6c03) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101443, 0x0) 0s ago: executing program 3 (id=805): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @multicast2, {[@lsrr={0x83, 0x3}]}}}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)={[{@gid}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@discard}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x5}}, {@allow_utime={'allow_utime', 0x3d, 0x12}}, {@errors_remount}, {@namecase}]}, 0x1, 0x150a, &(0x7f0000002c80)="$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") mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0xa, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, 0x0, 0x0) kernel console output (not intermixed with test programs): 5731][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.200476][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.203316][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.206214][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.207267][ T4628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.215978][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.219301][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.221844][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.224413][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.236916][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.300561][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.303774][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.309140][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.311780][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.313025][ T4628] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.108: Directory hole found for htree leaf block 0 [ 83.314364][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.314404][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.314417][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.335374][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.340219][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.344723][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.353545][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.356356][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.359931][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.362950][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.368922][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.372644][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.375668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.420578][ T4379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.422883][ T4379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.425091][ T4379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.431120][ T4379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.743615][ T4644] binder: 4643:4644 tried to acquire reference to desc 0, got 1 instead [ 83.762717][ T4334] binder: undelivered TRANSACTION_COMPLETE [ 83.785930][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790878][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.820156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.717553][ T21] binder: undelivered transaction 21, process died. [ 84.838955][ T4653] loop0: detected capacity change from 0 to 2048 [ 84.860114][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.862656][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.077484][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.174817][ T4653] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.326671][ T305] device hsr_slave_0 left promiscuous mode [ 85.368435][ T305] device hsr_slave_1 left promiscuous mode [ 85.372986][ T4672] loop1: detected capacity change from 0 to 1024 [ 85.429233][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.431291][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.434074][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.443730][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.468862][ T4672] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.479839][ T305] device team0 left promiscuous mode [ 85.481359][ T305] device team_slave_0 left promiscuous mode [ 85.483350][ T305] device team_slave_1 left promiscuous mode [ 85.500056][ T305] bridge0: port 3(team0) entered disabled state [ 85.640588][ T4670] binder: tried to use weak ref as strong ref [ 85.650829][ T4670] binder: 4669:4670 Acquire 1 refcount change on invalid ref 0 ret -22 [ 85.669571][ T4670] binder: 4669:4670 got transaction to invalid handle, 1 [ 85.676414][ T4670] binder: 4669:4670 transaction failed 29201/-22, size 0-0 line 2917 [ 85.693095][ T305] device bridge_slave_1 left promiscuous mode [ 85.694804][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.655890][ T305] device bridge_slave_0 left promiscuous mode [ 86.662409][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.724331][ T305] device hsr_slave_0 left promiscuous mode [ 86.768286][ T4687] loop0: detected capacity change from 0 to 1024 [ 86.820541][ T305] device hsr_slave_1 left promiscuous mode [ 87.055349][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000082,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,data=ordered,init_itable=0x0000000000000003,usrquota,max_dir_size_kb=0x00000000000040d2,,errors=continue. Quota mode: writeback. [ 87.107976][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.110094][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.122193][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.124411][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.133175][ T305] device bridge_slave_1 left promiscuous mode [ 87.135201][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.597871][ T305] device bridge_slave_0 left promiscuous mode [ 87.654495][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.334366][ T4706] loop0: detected capacity change from 0 to 64 [ 88.353439][ T4707] loop1: detected capacity change from 0 to 64 [ 88.489246][ T4707] hfs: unable to open extent tree [ 88.490883][ T4707] hfs: can't find a HFS filesystem on dev loop1 [ 88.518512][ T305] device veth0_macvtap left promiscuous mode [ 88.520320][ T305] device veth1_vlan left promiscuous mode [ 88.521916][ T305] device veth0_vlan left promiscuous mode [ 88.898435][ T305] device veth1_macvtap left promiscuous mode [ 88.902056][ T305] device veth0_macvtap left promiscuous mode [ 88.978325][ T305] device veth1_vlan left promiscuous mode [ 89.089123][ T305] device veth0_vlan left promiscuous mode [ 89.364102][ T4706] hfs: unable to locate alternate MDB [ 89.365561][ T4706] hfs: continuing without an alternate MDB [ 89.498745][ T4711] loop4: detected capacity change from 0 to 128 [ 89.593978][ T4711] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.008527][ T305] team0 (unregistering): Port device team_slave_1 removed [ 90.019535][ T305] team0 (unregistering): Port device team_slave_0 removed [ 90.033117][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.101221][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.260915][ T305] bond0 (unregistering): Released all slaves [ 90.473762][ T305] team0 (unregistering): Port device team_slave_1 removed [ 90.484762][ T305] team0 (unregistering): Port device team_slave_0 removed [ 90.494480][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.537194][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.709282][ T305] bond0 (unregistering): Released all slaves [ 90.934349][ T4721] loop0: detected capacity change from 0 to 8 [ 90.947512][ T4721] squashfs: Unknown parameter 'obj_role' [ 95.194509][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 95.343439][ T4782] loop3: detected capacity change from 0 to 256 [ 95.434790][ T4782] exfat: Unknown parameter '18446744073709551615' [ 96.250455][ T4789] loop0: detected capacity change from 0 to 256 [ 96.256111][ T4793] udc-core: couldn't find an available UDC or it's busy [ 96.290824][ T4793] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.340876][ T4793] netlink: 'syz.3.157': attribute type 21 has an invalid length. [ 97.342949][ T4793] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 97.658798][ T4808] xt_socket: unknown flags 0x50 [ 98.624185][ T4812] loop0: detected capacity change from 0 to 2048 [ 98.889489][ T4812] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 99.155215][ T4029] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /37/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 99.356292][ T4828] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 99.488688][ T4828] netlink: 'syz.2.169': attribute type 4 has an invalid length. [ 99.490682][ T4828] netlink: 152 bytes leftover after parsing attributes in process `syz.2.169'. [ 99.525815][ T4828] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 101.118284][ T4860] tipc: Started in network mode [ 101.119914][ T4860] tipc: Node identity f7, cluster identity 4711 [ 101.121554][ T4860] tipc: Node number set to 247 [ 103.377912][ T4884] loop2: detected capacity change from 0 to 256 [ 103.424528][ T4884] exfat: Deprecated parameter 'utf8' [ 103.436415][ T4884] exfat: Deprecated parameter 'namecase' [ 103.457422][ T4884] exfat: Deprecated parameter 'utf8' [ 103.505735][ T4894] sctp: [Deprecated]: syz.4.181 (pid 4894) Use of int in maxseg socket option. [ 103.505735][ T4894] Use struct sctp_assoc_value instead [ 103.643633][ T4884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 103.672410][ T4898] netlink: 24 bytes leftover after parsing attributes in process `syz.4.181'. [ 103.733001][ T4897] syz.0.183 uses obsolete (PF_INET,SOCK_PACKET) [ 105.482533][ T4917] loop4: detected capacity change from 0 to 64 [ 105.633340][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 105.742297][ T4920] loop2: detected capacity change from 0 to 4096 [ 105.849245][ T4920] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 105.865610][ T4920] ntfs3: loop2: Failed to load $BadClus. [ 106.053831][ T4935] ODEBUG: Out of memory. ODEBUG disabled [ 106.848864][ T4939] loop1: detected capacity change from 0 to 128 [ 106.884975][ T4941] loop4: detected capacity change from 0 to 128 [ 107.305160][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 107.409909][ T4941] Cannot find add_set index 0 as target [ 107.526651][ T4956] loop4: detected capacity change from 0 to 512 [ 107.555589][ T4956] EXT4-fs (loop4): old and new quota format mixing [ 107.899619][ T4964] binder: 4963:4964 tried to acquire reference to desc 0, got 1 instead [ 107.912026][ T4964] binder: 4963:4964 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 107.928507][ T4964] binder: 4964 RLIMIT_NICE not set [ 107.934537][ T4964] binder: 4964 RLIMIT_NICE not set [ 107.940831][ T4964] binder: send failed reply for transaction 31 to 4963:4964 [ 107.949102][ T4964] binder: 4963:4964 ioctl c0306201 20000140 returned -14 [ 107.959634][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 107.961375][ T1534] binder: undelivered TRANSACTION_ERROR: 29201 [ 108.075577][ T4965] loop4: detected capacity change from 0 to 8192 [ 108.166672][ T4965] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 108.170146][ T4965] REISERFS (device loop4): using ordered data mode [ 108.320828][ T4965] reiserfs: using flush barriers [ 108.342586][ T4965] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.347195][ T4965] REISERFS (device loop4): checking transaction log (loop4) [ 108.386861][ T4965] REISERFS (device loop4): Using rupasov hash to sort names [ 108.389435][ T4965] REISERFS (device loop4): using 3.5.x disk format [ 108.396128][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 108.415127][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.222952][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.225863][ T4965] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 109.266320][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.294125][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.336302][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.361138][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.417831][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.424096][ T4965] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 109.601632][ T26] audit: type=1326 audit(109.560:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4985 comm="syz.0.216" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d94728 code=0x0 [ 109.725026][ T305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.758715][ T4968] chnl_net:caif_netlink_parms(): no params data found [ 109.801609][ T305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.824874][ T4968] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.826800][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.834863][ T4968] device bridge_slave_0 entered promiscuous mode [ 109.854057][ T4968] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.860649][ T4968] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.868646][ T4968] device bridge_slave_1 entered promiscuous mode [ 109.908725][ T305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.926691][ T4968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.940518][ T4968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.975514][ T4968] team0: Port device team_slave_0 added [ 109.983989][ T305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.010513][ T4968] team0: Port device team_slave_1 added [ 110.030971][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.036284][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.054715][ T4968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.060370][ T4968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.062406][ T4968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.074138][ T4968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.108302][ T4099] Bluetooth: hci2: command 0x0409 tx timeout [ 110.149820][ T4968] device hsr_slave_0 entered promiscuous mode [ 110.188022][ T4968] device hsr_slave_1 entered promiscuous mode [ 110.227551][ T4968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.234118][ T4968] Cannot create hsr debugfs directory [ 110.248213][ T4021] bridge0: port 3(syz_tun) entered disabled state [ 110.276053][ T4021] device syz_tun left promiscuous mode [ 110.283033][ T4021] bridge0: port 3(syz_tun) entered disabled state [ 110.434102][ T5007] binder: 5006:5007 tried to acquire reference to desc 0, got 1 instead [ 110.584111][ T5007] binder: 5006:5007 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 110.589919][ T5007] binder: 5007 RLIMIT_NICE not set [ 110.592343][ T5007] binder: 5007 RLIMIT_NICE not set [ 110.630725][ T5007] binder: send failed reply for transaction 36 to 5006:5007 [ 110.632727][ T5007] binder: 5006:5007 ioctl c0306201 20000140 returned -14 [ 110.661308][ T1534] binder: undelivered TRANSACTION_COMPLETE [ 110.662898][ T1534] binder: undelivered TRANSACTION_ERROR: 29201 [ 110.806499][ T5017] loop3: detected capacity change from 0 to 1024 [ 110.894051][ T5017] hfsplus: invalid btree flag [ 110.895912][ T5017] hfsplus: failed to load catalog file [ 111.048038][ T5017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.153120][ T5029] chnl_net:caif_netlink_parms(): no params data found [ 111.282611][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.284497][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.287132][ T5029] device bridge_slave_0 entered promiscuous mode [ 111.300450][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.302452][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.305059][ T5029] device bridge_slave_1 entered promiscuous mode [ 111.379189][ T5029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.541803][ T5029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.098950][ T4429] Bluetooth: hci0: command 0x0c20 tx timeout [ 113.114910][ T4429] Bluetooth: hci2: command 0x041b tx timeout [ 113.219048][ T5029] team0: Port device team_slave_0 added [ 113.256904][ T4068] Bluetooth: hci1: command 0x0409 tx timeout [ 114.464241][ T5029] team0: Port device team_slave_1 added [ 114.797497][ T26] audit: type=1326 audit(114.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.0.238" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80d94728 code=0x0 [ 115.389323][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.391187][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.409111][ T5029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.476167][ T5029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.480407][ T5029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.518643][ T4429] Bluetooth: hci2: command 0x040f tx timeout [ 115.524172][ T5029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.537866][ T4968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.547678][ T4068] Bluetooth: hci1: command 0x041b tx timeout [ 115.656678][ T4968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.689487][ T4968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.768813][ T4968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.893214][ T5029] device hsr_slave_0 entered promiscuous mode [ 115.919026][ T5029] device hsr_slave_1 entered promiscuous mode [ 115.963499][ T5029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.965708][ T5029] Cannot create hsr debugfs directory [ 116.156159][ T5091] loop0: detected capacity change from 0 to 32768 [ 116.206468][ T4968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.252673][ T5091] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 116.255572][ T5091] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 116.268838][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.269420][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.276509][ T4968] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.336064][ T5091] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 116.340269][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.346571][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.354485][ T4131] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 116.356660][ T4131] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 116.374395][ T4154] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.376239][ T4154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.397994][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.402329][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.404986][ T4154] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.406797][ T4154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.415086][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.451664][ T4131] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 116.455537][ T4131] gfs2: fsid=syz:syz.0: jid=0: Done [ 116.457870][ T5091] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 116.501015][ T5029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.601462][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.604761][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.608227][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.621993][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.631904][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.648911][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.658421][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.661169][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.668320][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.678304][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.681042][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.792468][ T5029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.832923][ T4968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.860123][ T5095] loop0: detected capacity change from 0 to 512 [ 116.976510][ T5029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.001791][ T5095] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 117.003933][ T5095] System zones: 1-12 [ 117.017753][ T5095] EXT4-fs error (device loop0): __ext4_iget:4872: inode #11: block 393240: comm syz.0.241: invalid block [ 117.027017][ T5095] EXT4-fs (loop0): Remounting filesystem read-only [ 117.029027][ T5095] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.241: couldn't read orphan inode 11 (err -117) [ 117.041818][ T5095] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,min_batch_time=0x0000000000000001,errors=remount-ro,errors=remount-ro,max_batch_time=0x0000000000000001. Quota mode: none. [ 117.106361][ T5029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.221647][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.223735][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.249521][ T4968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.270559][ T5105] loop0: detected capacity change from 0 to 64 [ 117.369016][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.371793][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.563745][ T4068] Bluetooth: hci2: command 0x0419 tx timeout [ 117.627455][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 117.767371][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.827454][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.318441][ T4968] device veth0_vlan entered promiscuous mode [ 118.325161][ T4968] device veth1_vlan entered promiscuous mode [ 118.327767][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.330132][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.332383][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.402871][ T5113] loop0: detected capacity change from 0 to 1024 [ 118.404719][ T5029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.438966][ T4968] device veth0_macvtap entered promiscuous mode [ 118.461828][ T5113] EXT4-fs (loop0): Ignoring removed oldalloc option [ 118.497076][ T5029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.538249][ T5113] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 118.559296][ T5029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.713564][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.730918][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.735713][ T4968] device veth1_macvtap entered promiscuous mode [ 118.750631][ T305] device hsr_slave_0 left promiscuous mode [ 118.924625][ T305] device hsr_slave_1 left promiscuous mode [ 119.147582][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.151213][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.238942][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.330735][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.633654][ T305] device bridge_slave_1 left promiscuous mode [ 119.635325][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.707752][ T305] device bridge_slave_0 left promiscuous mode [ 119.709528][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.712811][ T5124] loop4: detected capacity change from 0 to 2048 [ 119.718003][ T4022] Bluetooth: hci1: command 0x0419 tx timeout [ 119.760255][ T5124] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 119.769466][ T5124] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.867796][ T305] device veth1_macvtap left promiscuous mode [ 119.869432][ T305] device veth0_macvtap left promiscuous mode [ 119.871069][ T305] device veth0_vlan left promiscuous mode [ 120.111774][ T305] team0 (unregistering): Port device team_slave_1 removed [ 120.121682][ T305] team0 (unregistering): Port device team_slave_0 removed [ 120.130584][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.145142][ T4379] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 120.148944][ T4379] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 120.179041][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.250486][ T5136] netlink: 872 bytes leftover after parsing attributes in process `syz.0.252'. [ 120.325121][ T305] bond0 (unregistering): Released all slaves [ 120.417841][ T5029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.466290][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.469319][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.472835][ T5136] netlink: 'syz.0.252': attribute type 7 has an invalid length. [ 120.475000][ T5136] netlink: 15 bytes leftover after parsing attributes in process `syz.0.252'. [ 120.509010][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.513339][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.515896][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.519021][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.522089][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.525267][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.537489][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.540172][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.566713][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.578391][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 120.582659][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.585486][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.599976][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.602483][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.605044][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.618112][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.620797][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.623495][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.625994][ T4968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.651870][ T4968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.655799][ T4968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.668891][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.671634][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.681138][ T4968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.683553][ T4968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.685972][ T4968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.698811][ T4968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.874786][ T5029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.885131][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.887851][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.921571][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.938921][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.941012][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.948592][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.956549][ T5029] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.969309][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.972659][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.982838][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 120.985629][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.988304][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.989967][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.009203][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.011943][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.015451][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.021172][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.022911][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.055783][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.059508][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.066160][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.097501][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.105289][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.112839][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.121223][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 121.151399][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.205682][ T5029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.209746][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 121.212957][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 121.215608][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 121.219336][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.447031][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.455920][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.626494][ T5029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.557439][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.560037][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.629928][ T5166] loop0: detected capacity change from 0 to 8192 [ 122.655224][ T5029] device veth0_vlan entered promiscuous mode [ 122.680105][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.688071][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.703887][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.706268][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.726714][ T5029] device veth1_vlan entered promiscuous mode [ 122.740061][ T5166] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 122.742394][ T5166] REISERFS (device loop0): using ordered data mode [ 122.744115][ T5166] reiserfs: using flush barriers [ 122.771568][ T5166] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.776423][ T5166] REISERFS (device loop0): checking transaction log (loop0) [ 122.832891][ T5166] REISERFS (device loop0): Using rupasov hash to sort names [ 122.834762][ T5166] REISERFS (device loop0): using 3.5.x disk format [ 122.836594][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.842581][ T5148] chnl_net:caif_netlink_parms(): no params data found [ 122.850857][ T5174] xt_hashlimit: max too large, truncated to 1048576 [ 122.865650][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.869028][ T4154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.881796][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.884454][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.887852][ T5166] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 122.954541][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.957592][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.969157][ T5029] device veth0_macvtap entered promiscuous mode [ 122.982996][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.986067][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 122.986971][ T5029] device veth1_macvtap entered promiscuous mode [ 123.005574][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 123.010652][ T5166] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 123.035467][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.041871][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.044316][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.046836][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.052450][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.056080][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.060947][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.064100][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.067245][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.072495][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.082040][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.094077][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.097134][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.100816][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.118238][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.145720][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.149255][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.162087][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.164584][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.166860][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.175634][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.178855][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.181730][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.184352][ T5029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.187251][ T5029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.202080][ T5029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.204480][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.206225][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.209569][ T5148] device bridge_slave_0 entered promiscuous mode [ 123.213840][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.216637][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.227859][ T4068] Bluetooth: hci4: command 0x0409 tx timeout [ 123.235305][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.237055][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.245677][ T5148] device bridge_slave_1 entered promiscuous mode [ 123.289425][ T5029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.295975][ T5029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.301969][ T5029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.314211][ T5029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.391279][ T5148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.409722][ T5148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.443321][ T5188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.468263][ T5148] team0: Port device team_slave_0 added [ 123.475690][ T5148] team0: Port device team_slave_1 added [ 123.536266][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.538464][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.544605][ T5148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.576511][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.579832][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.586114][ T5148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.652883][ T4154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.665034][ T4154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.709981][ T5148] device hsr_slave_0 entered promiscuous mode [ 123.747742][ T5148] device hsr_slave_1 entered promiscuous mode [ 123.787390][ T5148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.789303][ T5148] Cannot create hsr debugfs directory [ 123.800291][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 123.811235][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.820546][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.862917][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.021900][ T5148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.411608][ T4335] Bluetooth: hci4: command 0x041b tx timeout [ 125.633614][ T5148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.797274][ T5217] loop2: detected capacity change from 0 to 64 [ 125.820735][ T5221] udc-core: couldn't find an available UDC or it's busy [ 125.822337][ T5221] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 125.837573][ T5220] loop3: detected capacity change from 0 to 8 [ 125.875076][ T5220] SQUASHFS error: zlib decompression failed, data probably corrupt [ 125.878060][ T5220] SQUASHFS error: Failed to read block 0x9b: -5 [ 125.879778][ T5220] SQUASHFS error: Unable to read metadata cache entry [99] [ 125.909037][ T5220] SQUASHFS error: Unable to read inode 0x127 [ 125.962033][ T5148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.061196][ T5148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.325265][ T5227] loop3: detected capacity change from 0 to 4096 [ 126.385433][ T5227] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 127.156530][ T5148] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.175258][ T5227] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 127.272157][ T5148] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.467630][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 127.471301][ T5148] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.575689][ T4022] Bluetooth: hci4: command 0x0419 tx timeout [ 129.578939][ T5148] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.730546][ T5254] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.856593][ T5259] loop2: detected capacity change from 0 to 1024 [ 129.890939][ T5259] EXT4-fs (loop2): Ignoring removed oldalloc option [ 129.909500][ T5148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.913304][ T5262] netlink: 'syz.1.285': attribute type 4 has an invalid length. [ 129.969143][ T5148] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.005243][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.009479][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.015353][ T5259] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 130.028443][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.050782][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.053303][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.055134][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.076876][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.082629][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.085056][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.086888][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.090476][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.095154][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.069237][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.070978][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.083272][ T5272] input: syz0 as /devices/virtual/input/input3 [ 131.115508][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.120291][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.133144][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.156337][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.164814][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.172607][ T5282] loop3: detected capacity change from 0 to 512 [ 131.184899][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.192044][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.195173][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.211647][ T5282] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.228674][ T5148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.232076][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 131.245103][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.248463][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.337481][ T5282] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.290: invalid block [ 131.357051][ T5286] loop2: detected capacity change from 0 to 4096 [ 131.370712][ T5282] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.290: invalid indirect mapped block 4294967295 (level 1) [ 131.389329][ T5282] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.290: invalid indirect mapped block 4294967295 (level 1) [ 131.395950][ T5286] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 131.445310][ T5282] EXT4-fs (loop3): 2 truncates cleaned up [ 131.446891][ T5282] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 131.486184][ T5286] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 131.584685][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.587114][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.601865][ T5148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.793633][ T5266] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 134.440934][ T5307] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 134.471716][ T5307] team0: Device hsr_slave_0 failed to register rx_handler [ 134.804383][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 135.518038][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.520215][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.569123][ T5314] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.242933][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 137.245761][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 137.254163][ T5148] device veth0_vlan entered promiscuous mode [ 137.306779][ T5344] dlm: dev_write: no op 0 74000000000000 [ 137.419592][ T5345] llcp: llcp_sock_recvmsg: Recv datagram failed state 5 -107 0 [ 137.476611][ T5355] trusted_key: encrypted_key: hex blob is missing [ 137.622825][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 137.625586][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 137.718994][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 137.732195][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 137.736743][ T5148] device veth1_vlan entered promiscuous mode [ 137.797964][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 137.800581][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 137.803325][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.823214][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.959177][ T5148] device veth0_macvtap entered promiscuous mode [ 137.978546][ T5148] device veth1_macvtap entered promiscuous mode [ 138.053286][ T5366] device syzkaller0 entered promiscuous mode [ 138.152669][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.155445][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.163315][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.172573][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.183591][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.193989][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.205321][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.208243][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.210763][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.213388][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.215979][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.218793][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.222864][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.231142][ T4683] device hsr_slave_0 left promiscuous mode [ 138.277237][ T4683] device hsr_slave_1 left promiscuous mode [ 138.357942][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.359982][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.362891][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.366312][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.373431][ T4683] device bridge_slave_1 left promiscuous mode [ 138.379025][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.444445][ T4683] device bridge_slave_0 left promiscuous mode [ 138.446539][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.567920][ T4683] device veth1_macvtap left promiscuous mode [ 138.569654][ T4683] device veth0_macvtap left promiscuous mode [ 138.571252][ T4683] device veth1_vlan left promiscuous mode [ 138.572785][ T4683] device veth0_vlan left promiscuous mode [ 138.883791][ T4683] team0 (unregistering): Port device team_slave_1 removed [ 138.894913][ T4683] team0 (unregistering): Port device team_slave_0 removed [ 138.905825][ T4683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.955710][ T4683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.085245][ T4683] bond0 (unregistering): Released all slaves [ 139.181660][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.185705][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.197998][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.203047][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.207730][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.211386][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.213862][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.216535][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.229308][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.232119][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.234628][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.237236][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.240667][ T5148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.243134][ T5148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.247148][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.367121][ T5381] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.379976][ T5381] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 139.402782][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.406075][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.414641][ T5148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.416813][ T5148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.421207][ T5148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.423619][ T5148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.360317][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.362586][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.367240][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.474406][ T5244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.476774][ T5244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.482011][ T5244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.276239][ T5398] Restarting kernel threads ... done. [ 142.140293][ T5399] loop3: detected capacity change from 0 to 764 [ 143.304396][ T5409] tipc: Started in network mode [ 143.305763][ T5409] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 143.477913][ T5409] tipc: Enabling of bearer rejected, failed to enable media [ 143.723142][ T5432] loop2: detected capacity change from 0 to 512 [ 143.772494][ T5433] loop1: detected capacity change from 0 to 1024 [ 144.067927][ T5432] EXT4-fs (loop2): Ignoring removed oldalloc option [ 145.007700][ T5432] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.010059][ T5432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=80fc01c, mo2=0002] [ 145.012840][ T5432] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 145.015373][ T5432] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 145.019613][ T5444] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 145.027996][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noinit_itable,noauto_da_alloc,noblock_validity,usrquota,oldalloc,jqfmt=vfsv0,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 145.053533][ T5441] loop0: detected capacity change from 0 to 1024 [ 145.325872][ T5029] hfsplus: walked past end of dir [ 145.399523][ T5447] loop2: detected capacity change from 0 to 512 [ 145.465605][ T5029] hfsplus: xattr search failed [ 145.529681][ T4029] hfsplus: walked past end of dir [ 145.542838][ T5447] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.600783][ T26] audit: type=1326 audit(145.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5449 comm="syz.4.336" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc270728 code=0x0 [ 146.027900][ C0] IPVS: fo: TCP 172.20.20.170:0 - no destination available [ 148.847888][ T5470] kernel read not supported for file /L (pid: 5470 comm: syz.3.340) [ 149.059767][ T5477] loop2: detected capacity change from 0 to 1024 [ 149.070060][ T4029] hfsplus: xattr search failed [ 149.978669][ T5474] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.982015][ T5474] FAT-fs (loop3): unable to read boot sector [ 150.077638][ T5477] EXT4-fs (loop2): Ignoring removed orlov option [ 150.079520][ T5477] EXT4-fs (loop2): Ignoring removed orlov option [ 150.132936][ T5477] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 150.134928][ T5477] EXT4-fs (loop2): mount failed [ 150.166991][ T5488] loop3: detected capacity change from 0 to 1024 [ 151.402766][ T4202] hfsplus: walked past end of dir [ 152.387221][ T4202] hfsplus: xattr search failed [ 152.902636][ T5514] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 152.904856][ T5514] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 152.906980][ T5514] ALSA: mixer_oss: invalid OSS volume 'lg' [ 152.908679][ T5514] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 152.910784][ T5514] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 152.912744][ T5514] ALSA: mixer_oss: invalid OSS volume '' [ 152.914164][ T5514] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 152.915949][ T5514] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 152.917901][ T5514] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 152.920059][ T5514] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 152.922164][ T5514] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 152.923929][ T5514] ALSA: mixer_oss: invalid OSS volume 'SQF?`*]5S' [ 154.340326][ T5520] device syzkaller0 entered promiscuous mode [ 154.795528][ T5532] loop0: detected capacity change from 0 to 512 [ 154.940676][ T5532] EXT4-fs (loop0): Test dummy encryption mode enabled [ 154.976986][ T5532] EXT4-fs error (device loop0): ext4_fill_super:4840: inode #2: comm syz.0.357: casefold flag without casefold feature [ 154.987099][ T5532] EXT4-fs (loop0): get root inode failed [ 154.997193][ T5532] EXT4-fs (loop0): mount failed [ 155.341757][ T5540] loop2: detected capacity change from 0 to 1024 [ 156.316547][ T4968] hfsplus: walked past end of dir [ 156.406372][ T4968] hfsplus: xattr search failed [ 157.713713][ T5568] binder: 5566:5568 tried to acquire reference to desc 0, got 1 instead [ 157.727931][ T5568] binder_alloc: 5566: pid 5566 spamming oneway? 1 buffers allocated for a total size of 4096 [ 157.759001][ T5568] binder: 5566:5568 ioctl c0306201 20000380 returned -14 [ 157.762406][ T5574] binder: 5572:5574 ioctl c0189374 20000040 returned -22 [ 157.783672][ T5574] binder: 5572:5574 got reply transaction with no transaction stack [ 157.786014][ T5574] binder: 5572:5574 transaction failed 29201/-71, size 0-0 line 2822 [ 157.821224][ T4335] binder: undelivered transaction 41, process died. [ 157.893460][ T5579] loop2: detected capacity change from 0 to 512 [ 158.048167][ T5579] EXT4-fs (loop2): Test dummy encryption mode enabled [ 158.076076][ T5579] EXT4-fs error (device loop2): ext4_fill_super:4840: inode #2: comm syz.2.375: casefold flag without casefold feature [ 158.098474][ T5579] EXT4-fs (loop2): get root inode failed [ 158.100093][ T5579] EXT4-fs (loop2): mount failed [ 159.488670][ T4071] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.492048][ T5592] loop2: detected capacity change from 0 to 512 [ 159.532282][ T5592] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.534921][ T5595] xt_ipcomp: unknown flags B [ 159.596965][ T5592] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.379: invalid block [ 159.609302][ T5592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.379: invalid indirect mapped block 4294967295 (level 1) [ 159.621619][ T5592] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.379: invalid indirect mapped block 4294967295 (level 1) [ 159.687304][ T5592] EXT4-fs (loop2): 2 truncates cleaned up [ 159.689382][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback. [ 159.924348][ T5608] No such timeout policy "syz0" [ 162.088845][ T5618] netdevsim netdevsim4: Direct firmware load for r failed with error -2 [ 162.091151][ T5618] netdevsim netdevsim4: Falling back to sysfs fallback for: r [ 162.093752][ T5619] loop1: detected capacity change from 0 to 512 [ 162.826022][ T5619] EXT4-fs (loop1): journaled quota format not specified [ 164.300859][ T5641] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.498384][ T5638] udc-core: couldn't find an available UDC or it's busy [ 164.500152][ T5638] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.295844][ T5654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 165.366911][ T26] audit: type=1326 audit(165.310:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5657 comm="syz.4.399" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc270728 code=0x0 [ 166.697066][ T4683] device hsr_slave_0 left promiscuous mode [ 167.846346][ T4683] device hsr_slave_1 left promiscuous mode [ 168.823656][ T5695] loop3: detected capacity change from 0 to 128 [ 169.047730][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.203534][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.203957][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.205932][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.451266][ T4022] Bluetooth: hci3: command 0x0406 tx timeout [ 170.854722][ T4683] device bridge_slave_1 left promiscuous mode [ 170.859835][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.981690][ T4683] device bridge_slave_0 left promiscuous mode [ 170.983831][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.785463][ T5719] loop3: detected capacity change from 0 to 1024 [ 174.984260][ T4683] device veth1_macvtap left promiscuous mode [ 174.985960][ T4683] device veth0_macvtap left promiscuous mode [ 174.997825][ T4683] device veth1_vlan left promiscuous mode [ 174.999873][ T4683] device veth0_vlan left promiscuous mode [ 175.137958][ T5719] EXT4-fs (loop3): Ignoring removed orlov option [ 175.139913][ T5719] EXT4-fs (loop3): Ignoring removed orlov option [ 175.143977][ T5719] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 175.171290][ T5732] input: syz0 as /devices/virtual/input/input5 [ 175.705662][ T4683] team0 (unregistering): Port device team_slave_1 removed [ 176.090108][ T4683] team0 (unregistering): Port device team_slave_0 removed [ 176.134825][ T4683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.164256][ T4683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.202424][ T5755] loop2: detected capacity change from 0 to 256 [ 176.307543][ T5755] FAT-fs (loop2): Directory bread(block 64) failed [ 176.309231][ T5755] FAT-fs (loop2): Directory bread(block 65) failed [ 176.312375][ T5755] FAT-fs (loop2): Directory bread(block 66) failed [ 176.314159][ T5755] FAT-fs (loop2): Directory bread(block 67) failed [ 176.315875][ T5755] FAT-fs (loop2): Directory bread(block 68) failed [ 176.353805][ T5755] FAT-fs (loop2): Directory bread(block 69) failed [ 176.355615][ T5755] FAT-fs (loop2): Directory bread(block 70) failed [ 176.357276][ T5755] FAT-fs (loop2): Directory bread(block 71) failed [ 176.360956][ T5755] FAT-fs (loop2): Directory bread(block 72) failed [ 176.362681][ T5755] FAT-fs (loop2): Directory bread(block 73) failed [ 176.375773][ T4683] bond0 (unregistering): Released all slaves [ 176.585502][ T5711] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 176.618892][ T5711] team0: Device hsr_slave_0 failed to register rx_handler [ 177.591421][ T5771] loop1: detected capacity change from 0 to 1024 [ 177.829447][ T5771] EXT4-fs (loop1): Ignoring removed orlov option [ 177.831675][ T5771] EXT4-fs (loop1): Ignoring removed orlov option [ 178.508654][ T5771] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 178.510387][ T5771] EXT4-fs (loop1): mount failed [ 178.609796][ T5789] loop4: detected capacity change from 0 to 764 [ 181.333882][ T5808] loop2: detected capacity change from 0 to 1024 [ 181.598903][ T5817] xt_ecn: cannot match TCP bits for non-tcp packets [ 181.684099][ T5808] EXT4-fs (loop2): Ignoring removed orlov option [ 181.686164][ T5808] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 181.989570][ T5808] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 186.614044][ T5829] device bond_slave_0 entered promiscuous mode [ 186.616376][ T5829] device bond_slave_1 entered promiscuous mode [ 186.653919][ T5829] device bond_slave_0 left promiscuous mode [ 186.655619][ T5829] device bond_slave_1 left promiscuous mode [ 186.884233][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.266385][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.286270][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.455'. [ 188.299901][ T5829] bond0 (unregistering): Released all slaves [ 188.384364][ T5844] input: syz0 as /devices/virtual/input/input7 [ 189.747501][ T5854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'. [ 190.124284][ T5856] loop1: detected capacity change from 0 to 1024 [ 190.257298][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 190.284197][ T5860] loop4: detected capacity change from 0 to 1024 [ 190.324113][ T5856] EXT4-fs (loop1): Ignoring removed oldalloc option [ 191.467936][ T5860] EXT4-fs (loop4): Ignoring removed orlov option [ 191.580774][ T5856] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 191.617518][ T5860] EXT4-fs (loop4): Ignoring removed orlov option [ 191.646983][ T5874] loop0: detected capacity change from 0 to 256 [ 191.671436][ T5860] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 191.673201][ T5860] EXT4-fs (loop4): mount failed [ 193.096128][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.098073][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.416987][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 195.420723][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.469'. [ 195.423050][ T5895] tipc: Started in network mode [ 195.424119][ T5895] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 195.457775][ T5895] tipc: Enabled bearer , priority 10 [ 196.595018][ T4067] tipc: Node number set to 8432298 [ 196.638113][ T5919] raw_sendmsg: syz.3.473 forgot to set AF_INET. Fix it! [ 196.732446][ T5924] "syz.1.477" (5924) uses obsolete ecb(arc4) skcipher [ 196.899402][ T5930] ptrace attach of "./syz-executor exec"[4202] was attempted by ""[5930] [ 197.817785][ T5942] loop0: detected capacity change from 0 to 1024 [ 197.962428][ T5942] EXT4-fs (loop0): Ignoring removed orlov option [ 197.964196][ T5942] EXT4-fs (loop0): Ignoring removed orlov option [ 198.842438][ T5942] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 198.844360][ T5942] EXT4-fs (loop0): mount failed [ 201.285061][ T4431] Bluetooth: hci2: command 0x0409 tx timeout [ 201.334149][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 201.429477][ T5961] loop1: detected capacity change from 0 to 512 [ 201.459749][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.461628][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.464249][ T5943] device bridge_slave_0 entered promiscuous mode [ 201.482733][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 201.494362][ T5961] SET target dimension over the limit! [ 201.537772][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.539804][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.542439][ T5943] device bridge_slave_1 entered promiscuous mode [ 201.621274][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.640380][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.773648][ T5943] team0: Port device team_slave_0 added [ 201.777073][ T5943] team0: Port device team_slave_1 added [ 201.827878][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.845550][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.873145][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.900206][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.902216][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.924228][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.823356][ T5943] device hsr_slave_0 entered promiscuous mode [ 202.927887][ T5943] device hsr_slave_1 entered promiscuous mode [ 202.993231][ T5996] input: syz0 as /devices/virtual/input/input8 [ 203.147347][ T6000] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 203.248999][ T6001] binder: 5999:6001 tried to acquire reference to desc 0, got 1 instead [ 203.505858][ T4022] Bluetooth: hci2: command 0x041b tx timeout [ 204.469343][ T4431] binder: release 5999:6001 transaction 49 out, still active [ 204.870372][ T4431] binder: undelivered TRANSACTION_COMPLETE [ 204.872005][ T4431] binder: send failed reply for transaction 49, target dead [ 205.150383][ T6020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.505'. [ 205.869283][ T4022] Bluetooth: hci2: command 0x040f tx timeout [ 206.031138][ T5943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.039008][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 206.148717][ T5943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.236053][ T5943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.378906][ T5943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.499126][ T6038] loop3: detected capacity change from 0 to 256 [ 207.511175][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.550742][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.680861][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.729201][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.958068][ T4334] Bluetooth: hci2: command 0x0419 tx timeout [ 208.794832][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.824097][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.826617][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.834747][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.859948][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.863437][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.865973][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.867902][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.914774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.918061][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.920776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.923342][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.925146][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.948196][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.951105][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.962912][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.966454][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.979279][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.982037][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.984693][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.998093][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.003889][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.006993][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.012000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.014776][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.017286][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.186350][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.198252][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.200314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.233675][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.236406][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.269851][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.272470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.284495][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.304794][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.309058][ T5943] device veth0_vlan entered promiscuous mode [ 209.330557][ T5943] device veth1_vlan entered promiscuous mode [ 209.362508][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.385013][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.388099][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.390843][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.395406][ T5943] device veth0_macvtap entered promiscuous mode [ 209.400992][ T5943] device veth1_macvtap entered promiscuous mode [ 209.422686][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.425679][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.437778][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.440485][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.443014][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.446300][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.467990][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.470914][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.473403][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.476088][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.488688][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.492937][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.495790][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.502131][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.504682][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.507004][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.510332][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.512817][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.515578][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.529023][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.531836][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.535459][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.546431][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.551058][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.553657][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.556366][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.560167][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.562715][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.569723][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.572001][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.574286][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.576589][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.653357][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.655631][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.662626][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.682249][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.684833][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.691092][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 209.776063][ T6063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.526'. [ 211.519075][ T6085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.516'. [ 212.395915][ T6094] loop1: detected capacity change from 0 to 256 [ 212.494459][ T6096] netlink: 'syz.3.518': attribute type 4 has an invalid length. [ 212.496565][ T6096] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.518'. [ 213.919752][ T6104] loop3: detected capacity change from 0 to 764 [ 214.376787][ T6108] xt_TCPMSS: Only works on TCP SYN packets [ 214.392766][ T6104] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 215.637023][ T6108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.642881][ T6111] netlink: 'syz.1.522': attribute type 15 has an invalid length. [ 215.645458][ T4683] tipc: Left network mode [ 215.967438][ T4431] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 215.984155][ T6128] netlink: 'syz.4.535': attribute type 30 has an invalid length. [ 216.042117][ T6116] loop3: detected capacity change from 0 to 32768 [ 217.003383][ T6138] loop2: detected capacity change from 0 to 256 [ 217.237512][ T4431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 217.240928][ T4431] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 218.195564][ T6147] loop1: detected capacity change from 0 to 512 [ 218.397661][ T4431] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 218.400401][ T4431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.402519][ T4431] usb 1-1: Product: syz [ 218.403586][ T4431] usb 1-1: Manufacturer: syz [ 218.404736][ T4431] usb 1-1: SerialNumber: syz [ 218.411052][ T6147] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 218.414453][ T6147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.421857][ T6147] EXT4-fs (loop1): 1 truncate cleaned up [ 218.423493][ T6147] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,resgid=0x0000000000000000,data=journal,nombcache,block_validity,,errors=continue. Quota mode: none. [ 219.767026][ T4431] usb 1-1: config 0 descriptor?? [ 219.834999][ T4431] usb 1-1: can't set config #0, error -71 [ 219.869683][ T4431] usb 1-1: USB disconnect, device number 2 [ 220.065026][ T5029] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 221.026254][ T5029] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 221.044024][ T5029] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 221.582939][ T6172] loop4: detected capacity change from 0 to 128 [ 221.585229][ T5029] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 221.602230][ T5029] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 221.609147][ T6175] binder: 6169:6175 tried to acquire reference to desc 0, got 1 instead [ 221.620903][ T5029] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 221.797924][ T5029] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 221.808780][ T5029] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 221.853593][ T5029] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /62/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 221.865832][ T5029] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 222.765704][ T6179] loop0: detected capacity change from 0 to 4096 [ 222.840482][ T6182] loop2: detected capacity change from 0 to 256 [ 222.847781][ T4068] binder: release 6169:6175 transaction 58 out, still active [ 222.849700][ T4068] binder: undelivered TRANSACTION_COMPLETE [ 222.875206][ T4068] binder: send failed reply for transaction 58, target dead [ 222.887874][ T6179] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 222.890703][ T6179] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 222.892956][ T6179] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 222.895766][ T6179] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 223.105353][ T6188] loop3: detected capacity change from 0 to 512 [ 224.113132][ T6179] ntfs: volume version 3.1. [ 224.237237][ T6188] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 224.434577][ T6188] kAFS: unparsable volume name [ 224.771973][ T6200] netlink: 'syz.0.557': attribute type 17 has an invalid length. [ 224.774070][ T6200] netlink: 152 bytes leftover after parsing attributes in process `syz.0.557'. [ 224.776799][ T6200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.266403][ T6215] loop4: detected capacity change from 0 to 764 [ 227.053056][ T6215] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.168848][ T4683] device hsr_slave_0 left promiscuous mode [ 227.260659][ T4683] device hsr_slave_1 left promiscuous mode [ 227.317659][ T6229] loop4: detected capacity change from 0 to 512 [ 227.327666][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.329869][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.332545][ T4683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.334897][ T4683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.339406][ T6229] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.340784][ T4683] device bridge_slave_1 left promiscuous mode [ 227.346210][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.409737][ T6237] loop3: detected capacity change from 0 to 128 [ 227.458943][ T4683] device bridge_slave_0 left promiscuous mode [ 227.460946][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.525152][ T6237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.656166][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 228.559356][ T4683] device veth1_macvtap left promiscuous mode [ 228.561007][ T4683] device veth0_macvtap left promiscuous mode [ 228.562659][ T4683] device veth1_vlan left promiscuous mode [ 228.564193][ T4683] device veth0_vlan left promiscuous mode [ 229.774492][ T4683] team0 (unregistering): Port device team_slave_1 removed [ 229.783271][ T4683] team0 (unregistering): Port device team_slave_0 removed [ 229.790777][ T4683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.826533][ T4683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.983499][ T4683] bond0 (unregistering): Released all slaves [ 230.495296][ T6258] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 231.432241][ T6266] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 231.480937][ T136] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 231.481131][ T6270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.486595][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 231.601483][ T4154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.339912][ T6274] loop0: detected capacity change from 0 to 6 [ 233.346516][ T6284] loop3: detected capacity change from 0 to 1024 [ 233.349348][ T6274] Dev loop0: unable to read RDB block 6 [ 233.350867][ T6274] loop0: unable to read partition table [ 233.352403][ T6274] loop0: partition table beyond EOD, truncated [ 233.354062][ T6274] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 233.354062][ T6274] ) failed (rc=-5) [ 233.450369][ T4072] Bluetooth: hci1: command 0x0409 tx timeout [ 233.450418][ T6260] chnl_net:caif_netlink_parms(): no params data found [ 233.509938][ T6284] hfsplus: unable to parse mount options [ 233.946804][ T6291] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 234.086802][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.095594][ T6260] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.102784][ T6260] device bridge_slave_0 entered promiscuous mode [ 234.111676][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 234.129387][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.131721][ T6260] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.191847][ T6260] device bridge_slave_1 entered promiscuous mode [ 234.567884][ T6260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.580243][ T6260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.675018][ T6260] team0: Port device team_slave_0 added [ 234.696380][ T6260] team0: Port device team_slave_1 added [ 235.467907][ T4022] Bluetooth: hci1: command 0x041b tx timeout [ 235.669455][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.671641][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.721679][ T6260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.725966][ T6260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.736460][ T6324] loop3: detected capacity change from 0 to 256 [ 235.742191][ T6260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.806808][ T6260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.811909][ T6326] loop2: detected capacity change from 0 to 256 [ 235.886177][ T6324] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 235.889648][ T6260] device hsr_slave_0 entered promiscuous mode [ 236.827919][ T6260] device hsr_slave_1 entered promiscuous mode [ 236.870174][ T6260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.873802][ T6260] Cannot create hsr debugfs directory [ 239.955015][ T4072] Bluetooth: hci1: command 0x040f tx timeout [ 240.213851][ T6345] netlink: 'syz.2.596': attribute type 21 has an invalid length. [ 240.215916][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 241.128530][ T6260] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.279258][ T6353] loop2: detected capacity change from 0 to 64 [ 241.286917][ T6356] loop0: detected capacity change from 0 to 256 [ 241.317892][ T6260] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.365955][ T6356] exfat: Deprecated parameter 'namecase' [ 241.372522][ T6356] exfat: Unknown parameter 'subj_role' [ 241.701784][ T6260] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.246760][ T4072] Bluetooth: hci1: command 0x0419 tx timeout [ 242.529909][ T6260] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.467568][ T6364] loop3: detected capacity change from 0 to 2048 [ 243.706112][ T6364] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 243.708338][ T6364] UDF-fs: Scanning with blocksize 512 failed [ 243.739139][ T6364] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 243.744526][ T6364] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.346664][ T6260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 244.401127][ T6260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 244.449303][ T6260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 244.490028][ T6260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.586066][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.593539][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.596185][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.608769][ T6260] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.619817][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.622698][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.625529][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.627429][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.631074][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.633748][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.636132][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.638060][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.648567][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.651322][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.654068][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.659461][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.663796][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.677091][ T6260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.682676][ T6260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.687164][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.690200][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.692892][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.695913][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.699311][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.701950][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.704444][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.708062][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.784675][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.786980][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.795153][ T6260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.815451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.818256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.831801][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.834493][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.838628][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.841176][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.845334][ T6260] device veth0_vlan entered promiscuous mode [ 244.854596][ T6260] device veth1_vlan entered promiscuous mode [ 244.870389][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.873066][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.875743][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.879870][ T6191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.884644][ T6260] device veth0_macvtap entered promiscuous mode [ 244.899256][ T6260] device veth1_macvtap entered promiscuous mode [ 244.909669][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.912430][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.914963][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.918068][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.920572][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.923235][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.925532][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.928209][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.930587][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.933130][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.937060][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.942362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.944744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.953477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.956305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.965148][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.967993][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.970526][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.973228][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.975724][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.980401][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.982743][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.985396][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.988069][ T6260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.990895][ T6260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.994676][ T6260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.996778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.011701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.016704][ T6260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.019202][ T6260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.021427][ T6260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.023564][ T6260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.069812][ T4683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.072214][ T4683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.091323][ T4683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.093702][ T4683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.389662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.392346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.484850][ T6378] netlink: 'syz.4.616': attribute type 4 has an invalid length. [ 245.674879][ T6384] loop0: detected capacity change from 0 to 4096 [ 246.638303][ T6384] loop0: detected capacity change from 0 to 1024 [ 246.691523][ T6394] autofs4:pid:6394:autofs_fill_super: called with bogus options [ 246.733161][ T6384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 246.742855][ T6398] loop1: detected capacity change from 0 to 512 [ 246.796478][ T6398] EXT4-fs (loop1): Ignoring removed nobh option [ 246.798443][ T6398] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.809220][ T6399] loop4: detected capacity change from 0 to 256 [ 246.866804][ T6398] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 247.313881][ T6411] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.608: bg 0: block 224: padding at end of block bitmap is not set [ 247.558927][ T6411] EXT4-fs (loop1): Remounting filesystem read-only [ 248.040810][ T6416] MTD: Couldn't look up '': -22 [ 248.045595][ T6416] loop4: detected capacity change from 0 to 64 [ 248.163425][ T4200] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 248.169007][ T4200] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 248.183521][ T4200] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 248.194993][ T4200] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 248.201017][ T6420] loop3: detected capacity change from 0 to 256 [ 248.955523][ T6433] mmap: syz.0.621 (6433) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 249.272961][ T6416] loop4: detected capacity change from 0 to 8 [ 249.292148][ T6434] udc-core: couldn't find an available UDC or it's busy [ 249.307843][ T6434] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 249.362490][ T6416] unable to read xattr id index table [ 249.365109][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 249.668539][ T6442] device syzkaller0 entered promiscuous mode [ 250.683822][ T6455] loop3: detected capacity change from 0 to 512 [ 252.052757][ T26] audit: type=1326 audit(252.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.077845][ T6455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 252.079313][ T26] audit: type=1326 audit(252.020:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.088165][ T26] audit: type=1326 audit(252.020:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.093507][ T26] audit: type=1326 audit(252.020:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.138206][ T26] audit: type=1326 audit(252.020:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=134 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.139429][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 252.143808][ T26] audit: type=1326 audit(252.020:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.143848][ T26] audit: type=1326 audit(252.020:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.1.633" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1f64728 code=0x7ffc0000 [ 252.196959][ T6476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.636'. [ 252.285775][ T6473] loop2: detected capacity change from 0 to 1024 [ 252.363927][ T6473] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 252.369908][ T6473] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 252.385975][ T6483] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 252.401346][ T6473] EXT4-fs error (device loop2): ext4_get_journal_inode:5159: inode #5: comm syz.2.634: casefold flag without casefold feature [ 252.419579][ T6473] EXT4-fs (loop2): no journal found [ 252.450338][ T6485] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 252.503509][ T6339] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.511312][ T6487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.611821][ T6491] netlink: 'syz.4.639': attribute type 9 has an invalid length. [ 252.623449][ T153] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 252.642278][ T6492] loop2: detected capacity change from 0 to 256 [ 252.708194][ T6492] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 252.771587][ T6499] loop1: detected capacity change from 0 to 256 [ 252.893343][ T6499] exFAT-fs (loop1): bogus data start sector [ 252.894908][ T6499] exFAT-fs (loop1): failed to read boot sector [ 252.896466][ T6499] exFAT-fs (loop1): failed to recognize exfat type [ 252.924212][ T6191] device hsr_slave_0 left promiscuous mode [ 253.409995][ T6191] device hsr_slave_1 left promiscuous mode [ 253.888783][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.890819][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.893833][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.895825][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.922040][ T6191] device bridge_slave_1 left promiscuous mode [ 253.923932][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.949743][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.958794][ T6191] device bridge_slave_0 left promiscuous mode [ 253.960576][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.089166][ T6191] device veth1_macvtap left promiscuous mode [ 254.090885][ T6191] device veth0_macvtap left promiscuous mode [ 254.092929][ T6191] device veth1_vlan left promiscuous mode [ 254.094467][ T6191] device veth0_vlan left promiscuous mode [ 255.263068][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 255.295267][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 256.767582][ T6545] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 258.575029][ T6545] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 258.641784][ T6553] loop1: detected capacity change from 0 to 256 [ 258.658897][ T9] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.677917][ T6545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.680676][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 258.751035][ T6552] loop4: detected capacity change from 0 to 4096 [ 258.767547][ T4683] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 258.916751][ T6555] netlink: 'syz.3.658': attribute type 9 has an invalid length. [ 258.983662][ T6553] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 259.024576][ T6552] loop4: detected capacity change from 0 to 1024 [ 259.218485][ T6552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 259.317406][ T4501] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 261.440055][ T4501] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice= a.f0 [ 261.442811][ T4501] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.445098][ T4501] usb 1-1: Product: syz [ 261.446375][ T4501] usb 1-1: Manufacturer: syz [ 261.460489][ T4501] usb 1-1: SerialNumber: syz [ 262.190205][ T4501] usb 1-1: config 0 descriptor?? [ 262.231718][ T4501] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 262.234379][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 84 [ 262.243052][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 262.251625][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 82 [ 262.253561][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 262.255594][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 262.297432][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 262.299631][ T4501] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 262.476035][ T4501] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 263.408072][ T4501] usb 1-1: USB disconnect, device number 3 [ 263.419592][ T4501] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 263.422749][ T4501] keyspan 1-1:0.0: device disconnected [ 263.477233][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.670'. [ 263.590872][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 263.594408][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 265.894714][ T6626] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.683' sets config #1 [ 266.034916][ T6628] loop2: detected capacity change from 0 to 512 [ 266.039244][ T6631] loop1: detected capacity change from 0 to 128 [ 266.990415][ T6628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.056594][ T6639] ptrace attach of "./syz-executor exec"[4029] was attempted by "./syz-executor exec"[6639] [ 267.173009][ T6628] udc-core: couldn't find an available UDC or it's busy [ 267.174963][ T6628] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 267.184329][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 270.253175][ T6668] loop1: detected capacity change from 0 to 64 [ 270.454134][ T6671] loop2: detected capacity change from 0 to 256 [ 270.456223][ T6671] exfat: Deprecated parameter 'namecase' [ 270.507848][ T6671] exfat: Unknown parameter 'subj_role' [ 270.510299][ T6668] minix_free_block (loop1:2): bit already cleared [ 270.512417][ T6668] minix_free_block (loop1:3): bit already cleared [ 270.514122][ T6668] minix_free_block (loop1:4): bit already cleared [ 270.529271][ T6673] loop4: detected capacity change from 0 to 256 [ 270.536146][ T6668] minix_free_block (loop1:1): bit already cleared [ 270.549633][ T6668] minix_free_block (loop1:4): bit already cleared [ 270.551404][ T6668] minix_free_block (loop1:3): bit already cleared [ 270.577446][ T6668] minix_free_block (loop1:2): bit already cleared [ 270.626460][ T6673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 270.841557][ T6668] minix_free_block (loop1:1): bit already cleared [ 272.742337][ T6693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'. [ 275.696705][ T6719] loop2: detected capacity change from 0 to 1024 [ 275.768222][ T6720] loop1: detected capacity change from 0 to 8192 [ 275.837131][ T6720] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 275.841952][ T6719] hfsplus: request for non-existent node 3 in B*Tree [ 275.843990][ T6719] hfsplus: request for non-existent node 3 in B*Tree [ 275.852896][ T6720] REISERFS (device loop1): using ordered data mode [ 275.854568][ T6720] reiserfs: using flush barriers [ 275.890650][ T6720] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.895107][ T6720] REISERFS (device loop1): checking transaction log (loop1) [ 275.939060][ T6720] REISERFS (device loop1): Using r5 hash to sort names [ 275.946374][ T6719] hfsplus: xattr searching failed [ 275.968101][ T6727] loop3: detected capacity change from 0 to 256 [ 275.988330][ T6726] loop0: detected capacity change from 0 to 256 [ 276.012751][ T6720] reiserfs: enabling write barrier flush mode [ 276.015071][ T6729] batman_adv: Cannot find parent device [ 276.046372][ T6720] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 276.050877][ T6726] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 276.208812][ T6727] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 279.224439][ T6747] loop0: detected capacity change from 0 to 4096 [ 279.233040][ T6751] loop3: detected capacity change from 0 to 512 [ 279.303937][ T6747] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 279.465563][ T6751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e02c, mo2=0002] [ 279.469030][ T6751] System zones: 1-12 [ 279.484569][ T6751] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.716: inline data xattr refers to an external xattr inode [ 279.492956][ T6751] EXT4-fs (loop3): Remounting filesystem read-only [ 279.495385][ T6751] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.716: couldn't read orphan inode 12 (err -117) [ 279.794598][ T6751] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,nojournal_checksum,resuid=0x0000000000000000,debug,usrjquota=,usrjquota=,errors=remount-ro,max_batch_time=0x0000000000000000,. Quota mode: none. [ 280.217535][ T6751] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.716: Directory hole found for htree leaf block 0 [ 280.231049][ T6751] EXT4-fs (loop3): Remounting filesystem read-only [ 280.285827][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 280.602250][ T6775] loop3: detected capacity change from 0 to 512 [ 280.693641][ T6783] xt_l2tp: v2 doesn't support IP mode [ 281.615509][ T6786] loop2: detected capacity change from 0 to 256 [ 281.696397][ T6792] loop1: detected capacity change from 0 to 128 [ 282.002662][ T4034] Bluetooth: hci1: link tx timeout [ 282.004667][ T4034] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.484384][ T4034] Bluetooth: hci1: link tx timeout [ 282.485872][ T4034] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 282.498070][ T6792] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 282.674928][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.736'. [ 282.803356][ T6808] loop2: detected capacity change from 0 to 2048 [ 283.688240][ T6808] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.544590][ T1534] Bluetooth: hci1: command 0x0406 tx timeout [ 284.677228][ T148] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 284.764789][ T148] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 284.788978][ T148] EXT4-fs (loop2): This should not happen!! Data will be lost [ 284.788978][ T148] [ 284.800775][ T148] EXT4-fs (loop2): Total free blocks count 0 [ 284.808107][ T148] EXT4-fs (loop2): Free/Dirty block details [ 284.816490][ T148] EXT4-fs (loop2): free_blocks=2415919104 [ 284.824896][ T148] EXT4-fs (loop2): dirty_blocks=48 [ 284.831698][ T148] EXT4-fs (loop2): Block reservation details [ 284.838990][ T148] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 285.000297][ T6813] loop0: detected capacity change from 0 to 32768 [ 285.103392][ T6813] XFS (loop0): Mounting V5 Filesystem [ 285.111045][ T6818] loop3: detected capacity change from 0 to 40427 [ 285.159870][ T6813] XFS (loop0): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50. [ 285.180775][ T6818] F2FS-fs (loop3): Found nat_bits in checkpoint [ 285.195968][ T6813] XFS (loop0): Starting recovery (logdev: internal) [ 285.215506][ T6813] XFS (loop0): Ending recovery (logdev: internal) [ 285.225444][ T6818] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 285.240929][ T6813] XFS (loop0): Quotacheck needed: Please wait. [ 285.410314][ T6813] XFS (loop0): Quotacheck: Done. [ 285.592314][ T4029] XFS (loop0): Unmounting Filesystem [ 285.713249][ T4202] attempt to access beyond end of device [ 285.713249][ T4202] loop3: rw=2049, want=45104, limit=40427 [ 286.703034][ T6858] udc-core: couldn't find an available UDC or it's busy [ 286.704980][ T6858] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 286.827484][ T4068] Bluetooth: hci4: command 0x0406 tx timeout [ 288.408766][ T6878] loop3: detected capacity change from 0 to 256 [ 288.490416][ T6853] loop1: detected capacity change from 0 to 32768 [ 290.496377][ T6900] loop2: detected capacity change from 0 to 4096 [ 290.557560][ T6900] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 290.635040][ T6900] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 290.650025][ T6900] ntfs3: loop2: mft corrupted [ 290.660953][ T6900] ntfs3: loop2: Failed to load $Extend. [ 293.049861][ T6922] loop3: detected capacity change from 0 to 512 [ 293.139517][ T6922] EXT4-fs (loop3): Ignoring removed nobh option [ 293.141281][ T6922] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.179700][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 293.232473][ T6922] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 293.590554][ T6938] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.773: bg 0: block 224: padding at end of block bitmap is not set [ 293.597242][ T6938] EXT4-fs (loop3): Remounting filesystem read-only [ 294.357830][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 294.357864][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 294.377882][ T6939] device bridge1 entered promiscuous mode [ 294.396641][ T4683] __quota_error: 3 callbacks suppressed [ 294.396658][ T4683] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 294.396717][ T4683] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 294.396858][ T4683] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 294.396909][ T4683] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 294.416084][ T6941] loop2: detected capacity change from 0 to 512 [ 294.622181][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.780'. [ 294.638219][ T6952] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 294.646898][ T6941] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 298.341915][ T6984] fuse: Unknown parameter '0x0000000000000003' [ 298.390663][ T6984] loop1: detected capacity change from 0 to 512 [ 298.451326][ T6984] EXT4-fs (loop1): Ignoring removed orlov option [ 298.487882][ T6984] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.534361][ T6984] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.787: casefold flag without casefold feature [ 298.540599][ T6984] EXT4-fs (loop1): Remounting filesystem read-only [ 298.542474][ T6984] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.787: couldn't read orphan inode 15 (err -117) [ 298.548850][ T6984] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000,. Quota mode: writeback. [ 298.665013][ T6998] loop3: detected capacity change from 0 to 512 [ 298.712204][ T6998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 298.768392][ T6998] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 298.801798][ T6998] EXT4-fs (loop3): 1 truncate cleaned up [ 298.803331][ T6998] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,journal_ioprio=0x0000000000000003,nombcache,quota,,errors=continue. Quota mode: writeback. [ 298.814969][ T7005] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 298.931150][ T7007] loop1: detected capacity change from 0 to 512 [ 298.985575][ T7007] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 299.124590][ T7007] EXT4-fs (loop1): 1 orphan inode deleted [ 299.138560][ T7007] EXT4-fs (loop1): 1 truncate cleaned up [ 299.140008][ T7007] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,block_validity,quota,. Quota mode: writeback. [ 300.131201][ T7007] EXT4-fs (loop1): shut down requested (0) [ 300.140699][ T7018] loop2: detected capacity change from 0 to 512 [ 300.187254][ T7018] EXT4-fs (loop2): Ignoring removed nobh option [ 300.189182][ T7018] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.238233][ T7018] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 300.336043][ T7022] EXT4-fs error (device loop1): ext4_lookup:1856: inode #15: comm syz.1.793: iget: bad extra_isize 46 (inode size 256) [ 300.355190][ T7022] EXT4-fs (loop1): Remounting filesystem read-only [ 301.937891][ T7030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.799: bg 0: block 224: padding at end of block bitmap is not set [ 301.942078][ T7030] EXT4-fs (loop2): Remounting filesystem read-only [ 302.188692][ T1638] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 302.194216][ T1638] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 302.197144][ T1638] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 302.235013][ T1638] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 302.519336][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 302.526971][ T7033] device bridge_slave_1 left promiscuous mode [ 302.532087][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.901334][ T7038] loop0: detected capacity change from 0 to 512 [ 302.920232][ T4068] ------------[ cut here ]------------ [ 302.922160][ T4068] WARNING: CPU: 1 PID: 4068 at kernel/rcu/sync.c:193 rcu_sync_dtor+0x14c/0x170 [ 302.924688][ T4068] Modules linked in: [ 302.925790][ T4068] CPU: 1 PID: 4068 Comm: kworker/1:4 Not tainted 5.15.167-syzkaller #0 [ 302.928113][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.930899][ T4068] Workqueue: events destroy_super_work [ 302.932395][ T4068] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 302.934392][ T4068] pc : rcu_sync_dtor+0x14c/0x170 [ 302.935817][ T4068] lr : percpu_free_rwsem+0x48/0x88 [ 302.937146][ T4068] sp : ffff800020107ad0 [ 302.938285][ T4068] x29: ffff800020107ad0 x28: ffff0001b41c1100 x27: ffff0000c95b4e18 [ 302.940395][ T4068] x26: ffff0000d0012848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 302.942019][ T7042] loop1: detected capacity change from 0 to 2048 [ 302.942409][ T4068] x23: 1fffe0001a002509 x22: 1fffe0001a00247f x21: dfff800000000000 [ 302.946183][ T4068] x20: ffff0000d0012394 x19: ffff0000d0012390 x18: 1fffe00036835d8e [ 302.948356][ T4068] x17: 1fffe00036835d8e x16: ffff800011ac23e0 x15: ffff800014b5ef40 [ 302.950529][ T4068] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000a0543f5e [ 302.952603][ T4068] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 302.954702][ T4068] x8 : 0000000000000001 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 302.956916][ T4068] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 302.959222][ T4068] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d0012390 [ 302.961342][ T4068] Call trace: [ 302.962236][ T4068] rcu_sync_dtor+0x14c/0x170 [ 302.963474][ T4068] percpu_free_rwsem+0x48/0x88 [ 302.964785][ T4068] destroy_super_work+0x20/0x48 [ 302.966044][ T4068] process_one_work+0x790/0x11b8 [ 302.967389][ T4068] worker_thread+0x910/0x1034 [ 302.968703][ T4068] kthread+0x37c/0x45c [ 302.969775][ T4068] ret_from_fork+0x10/0x20 [ 302.971025][ T4068] irq event stamp: 448010 [ 302.972234][ T4068] hardirqs last enabled at (448009): [] exit_to_kernel_mode+0x100/0x178 [ 302.974846][ T4068] hardirqs last disabled at (448010): [] el1_dbg+0x24/0x80 [ 302.977282][ T4068] softirqs last enabled at (447986): [] local_bh_enable+0xc/0x2c [ 302.979885][ T4068] softirqs last disabled at (447980): [] local_bh_disable+0xc/0x2c [ 302.982436][ T4068] ---[ end trace 542955cfe0d3a0a6 ]--- [ 302.985847][ T4068] ------------[ cut here ]------------ [ 302.987401][ T4068] WARNING: CPU: 1 PID: 4068 at kernel/rcu/sync.c:194 rcu_sync_dtor+0xd8/0x170 [ 302.989909][ T4068] Modules linked in: [ 302.990905][ T4068] CPU: 1 PID: 4068 Comm: kworker/1:4 Tainted: G W 5.15.167-syzkaller #0 [ 302.993522][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.996300][ T4068] Workqueue: events destroy_super_work [ 302.997658][ T7038] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 302.997765][ T4068] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 303.002313][ T4068] pc : rcu_sync_dtor+0xd8/0x170 [ 303.003550][ T4068] lr : percpu_free_rwsem+0x48/0x88 [ 303.004932][ T4068] sp : ffff800020107ad0 [ 303.006026][ T4068] x29: ffff800020107ad0 x28: ffff0001b41c1100 x27: ffff0000c95b4e18 [ 303.008017][ T4068] x26: ffff0000d0012848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 303.010169][ T4068] x23: 1fffe0001a002509 x22: 1fffe0001a002472 x21: dfff800000000000 [ 303.012161][ T4068] x20: ffff0000d0012394 x19: ffff0000d0012390 x18: 1fffe00036835d8e [ 303.014371][ T4068] x17: 1fffe00036835d8e x16: ffff800011ac23e0 x15: ffff800014b5ef40 [ 303.016499][ T4068] x14: 1ffff0000295806a x13: dfff800000000000 x12: 00000000a0543f5e [ 303.018641][ T4068] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000007 [ 303.020767][ T4068] x8 : 0000000000000002 x7 : ffff80000821a1b8 x6 : 0000000000000000 [ 303.022980][ T4068] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 303.025096][ T4068] x2 : 0000000000000008 x1 : ffff8000120c8040 x0 : ffff0000d0012390 [ 303.027157][ T4068] Call trace: [ 303.028005][ T4068] rcu_sync_dtor+0xd8/0x170 [ 303.029186][ T4068] percpu_free_rwsem+0x48/0x88 [ 303.030507][ T4068] destroy_super_work+0x20/0x48 [ 303.031710][ T4068] process_one_work+0x790/0x11b8 [ 303.032975][ T4068] worker_thread+0x910/0x1034 [ 303.034176][ T4068] kthread+0x37c/0x45c [ 303.035253][ T4068] ret_from_fork+0x10/0x20 [ 303.036385][ T4068] irq event stamp: 448238 [ 303.037519][ T4068] hardirqs last enabled at (448237): [] exit_to_kernel_mode+0x100/0x178 [ 303.039992][ T4068] hardirqs last disabled at (448238): [] el1_dbg+0x24/0x80 [ 303.042367][ T4068] softirqs last enabled at (448232): [] handle_softirqs+0xb88/0xdbc [ 303.044909][ T4068] softirqs last disabled at (448015): [] __irq_exit_rcu+0x268/0x4d8 [ 303.046496][ T7043] loop3: detected capacity change from 0 to 256 [ 303.047280][ T4068] ---[ end trace 542955cfe0d3a0a7 ]--- [ 303.056107][ T7033] device bridge_slave_0 left promiscuous mode [ 303.057807][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.066079][ T7038] EXT4-fs (loop0): 1 truncate cleaned up [ 303.067654][ T7038] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.098386][ T7042] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 303.098753][ T7043] exfat: Deprecated parameter 'namecase' [ 303.103628][ T4068] ------------[ cut here ]------------ [ 303.105043][ T4068] WARNING: CPU: 1 PID: 4068 at kernel/rcu/sync.c:204 rcu_sync_dtor+0xe0/0x170 [ 303.107317][ T4068] Modules linked in: [ 303.108322][ T4068] CPU: 1 PID: 4068 Comm: kworker/1:4 Tainted: G W 5.15.167-syzkaller #0 [ 303.110978][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.113719][ T4068] Workqueue: events destroy_super_work [ 303.115269][ T4068] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 303.117404][ T4068] pc : rcu_sync_dtor+0xe0/0x170 [ 303.118663][ T4068] lr : rcu_sync_dtor+0xb0/0x170 [ 303.119962][ T4068] sp : ffff800020107ad0 [ 303.121016][ T4068] x29: ffff800020107ad0 x28: ffff0001b41c1100 x27: ffff0000c95b4e18 [ 303.123346][ T4068] x26: ffff0000d0012848 x25: ffff0001b41c5e00 x24: dfff800000000000 [ 303.125488][ T4068] x23: 0000000000000002 x22: 1fffe0001a002472 x21: dfff800000000000 [ 303.127790][ T4068] x20: ffff0000d0012398 x19: ffff0000d0012390 x18: ffff800020107240 [ 303.130079][ T4068] x17: 1fffe00036835d8e x16: ffff8000088d66a0 x15: 0000000000045e5d [ 303.132258][ T4068] x14: 1ffff0000295806a x13: dfff800000000000 x12: 0000000000000001 [ 303.134458][ T4068] x11: 1ffff00004020f34 x10: 0000000000000000 x9 : bc5b50bd45e84f00 [ 303.136730][ T4068] x8 : 0000000000000002 x7 : 0000000000000000 x6 : 0000000000000000 [ 303.138831][ T4068] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff800011b88df4 [ 303.140863][ T4068] x2 : 0000000000000000 x1 : ffff0000ce6a9b40 x0 : ffff0000ce6a9b40 [ 303.143009][ T4068] Call trace: [ 303.143888][ T4068] rcu_sync_dtor+0xe0/0x170 [ 303.145009][ T4068] percpu_free_rwsem+0x48/0x88 [ 303.146215][ T4068] destroy_super_work+0x20/0x48 [ 303.147435][ T4068] process_one_work+0x790/0x11b8 [ 303.148912][ T4068] worker_thread+0x910/0x1034 [ 303.150366][ T4068] kthread+0x37c/0x45c [ 303.151577][ T4068] ret_from_fork+0x10/0x20 [ 303.152769][ T4068] irq event stamp: 448452 [ 303.153898][ T4068] hardirqs last enabled at (448451): [] _raw_spin_unlock_irq+0x9c/0x134 [ 303.156569][ T4068] hardirqs last disabled at (448452): [] el1_dbg+0x24/0x80 [ 303.158807][ T4068] softirqs last enabled at (448426): [] handle_softirqs+0xb88/0xdbc [ 303.161358][ T4068] softirqs last disabled at (448245): [] __irq_exit_rcu+0x268/0x4d8 [ 303.163982][ T4068] ---[ end trace 542955cfe0d3a0a8 ]--- [ 303.167542][ T7033] BUG: MAX_LOCKDEP_CHAINS too low! [ 303.168782][ T7033] turning off the locking correctness validator. [ 303.170324][ T7033] CPU: 1 PID: 7033 Comm: syz.4.801 Tainted: G W 5.15.167-syzkaller #0 [ 303.172711][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.175356][ T7033] Call trace: [ 303.176238][ T7033] dump_backtrace+0x0/0x530 [ 303.177482][ T7033] show_stack+0x2c/0x3c [ 303.178670][ T7033] dump_stack_lvl+0x108/0x170 [ 303.179901][ T7033] dump_stack+0x1c/0x58 [ 303.181080][ T7033] __lock_acquire+0x1b64/0x7638 [ 303.182329][ T7033] lock_acquire+0x240/0x77c [ 303.183478][ T7033] __kernfs_remove+0x64c/0xd50 [ 303.184785][ T7033] kernfs_remove_by_name_ns+0xa8/0x158 [ 303.186230][ T7033] sysfs_remove_group+0xf8/0x288 [ 303.187500][ T7033] br_sysfs_delbr+0x68/0x78 [ 303.188719][ T7033] br_dev_delete+0xdc/0x110 [ 303.189937][ T7033] rtnl_dellink+0x420/0x6ec [ 303.191184][ T7033] rtnetlink_rcv_msg+0xa74/0xdac [ 303.192452][ T7033] netlink_rcv_skb+0x20c/0x3b8 [ 303.193705][ T7033] rtnetlink_rcv+0x28/0x38 [ 303.194843][ T7033] netlink_unicast+0x664/0x938 [ 303.196083][ T7033] netlink_sendmsg+0x844/0xb38 [ 303.197347][ T7033] ____sys_sendmsg+0x584/0x870 [ 303.198559][ T7033] ___sys_sendmsg+0x214/0x294 [ 303.199820][ T7033] __arm64_sys_sendmsg+0x1ac/0x25c [ 303.201132][ T7033] invoke_syscall+0x98/0x2b8 [ 303.202301][ T7033] el0_svc_common+0x138/0x258 [ 303.203614][ T7033] do_el0_svc+0x58/0x14c [ 303.204734][ T7033] el0_svc+0x7c/0x1f0 [ 303.205821][ T7033] el0t_64_sync_handler+0x84/0xe4 [ 303.207173][ T7033] el0t_64_sync+0x1a0/0x1a4 [ 303.240566][ T7043] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 303.313541][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.