last executing test programs: 8.433501025s ago: executing program 1 (id=1716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000008000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29"], 0x154}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 8.059883476s ago: executing program 1 (id=1718): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbc, 0x9c, 0xbf, 0x40, 0xb48, 0x2003, 0x7194, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x4f, 0xc2, 0x52, 0x0, [], [{{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x6}}]}}]}}]}}, 0x0) 6.07358616s ago: executing program 1 (id=1729): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 5.321633682s ago: executing program 1 (id=1732): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40f}}]}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.00654033s ago: executing program 3 (id=1736): r0 = io_uring_setup(0x1699, &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) 3.850675013s ago: executing program 3 (id=1738): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) 3.581567065s ago: executing program 0 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000028000000030a01020000000000000000010100000900030073797a320000000008000b400000000334000000080a010100000000000000000100000008000940000000000900020073797a32000000000900010073797a30"], 0xa4}}, 0x0) 3.471417544s ago: executing program 3 (id=1743): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'wg2\x00', 0x2000}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='fib_table_lookup\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r4, 0x0, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r7) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x20, r12, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x20}}, 0x804) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r12, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc0000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) tee(r3, r8, 0xaf6, 0x0) write$binfmt_elf64(r5, &(0x7f0000000040)=ANY=[], 0x18c6) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @remote}, 0x10) r13 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x2, 0x0, 0x1}) syz_usb_control_io$hid(r13, 0x0, 0x0) syz_usb_control_io$hid(r13, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "319bca0f"}]}}, 0x0}, 0x0) 3.336229955s ago: executing program 0 (id=1745): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x60042) recvmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000200)}, {&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000000440)=""/39, 0x27}], 0x6, &(0x7f00000016c0)}, 0x80000061) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) bind$can_j1939(r1, &(0x7f00000002c0)={0x1d, r3, 0x2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000680)={0x1d, r3, 0xfffffffffffffffc}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, 0x0, 0x2}, 0x18, &(0x7f0000000240)={&(0x7f00000000c0)='z', 0x1}}, 0x0) 3.190118897s ago: executing program 0 (id=1747): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000069111a00000000008510000002000000850000000500000095000000000000009500a50500000000c8e659c9774bca170c0c94cfee800f545c38c675fd6403f226a7571fc00148cf20010815305b22fd1b5457ce8518aaef2112989a04bca24cc53293d8ac3d97b9e3251ad5964b9ebfc80b5b19b3072fe5fb4b8f989ec46fbfde8fb68ea241219512a3a3c4a0b8cc14ae53c3635ff91db67c15"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') socket$inet(0x2, 0x2, 0x0) inotify_init() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 3.064360268s ago: executing program 0 (id=1749): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="361f66feda74ce0000000000000000b73c7b9f363b558a51b336ff3e73f12ea634c2513716abc13f14cf746da5a51c2743910f99c4c8b8704d0efc169e258e7d9c88b6841e7c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_team\x00'}]}, 0x30}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0x8, 0x3, 0x2}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='host1x_syncpt_load_min\x00', r6}, 0x10) close(r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='ext4_allocate_inode\x00', r8}, 0x10) 2.330546838s ago: executing program 2 (id=1752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb00000000d799b8b8202b173404002b81"], 0x28}}, 0x0) 2.009280305s ago: executing program 4 (id=1753): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.961260289s ago: executing program 0 (id=1754): mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x65) madvise(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xc) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/14) r0 = socket(0x2, 0xa, 0x5) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800004, 0x13, r0, 0x3f425000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x8, 0x1, 0x1, 0x8, {{0xb, 0x4, 0x2, 0x5, 0x2c, 0x65, 0x0, 0x80, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, {[@noop, @lsrr={0x83, 0x7, 0x73, [@broadcast]}, @end, @generic={0x94, 0xe, "970c399b616b49878d46506d"}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newneigh={0x24, 0x1c, 0x10, 0x70bd29, 0x25dfdbfc, {0xd, 0x0, 0x0, r1, 0x40, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0xef382b13a9b96e54) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f00000004c0)=""/150, 0x96}], 0x6, &(0x7f0000000600)=""/90, 0x5a}, 0x40000001) remap_file_pages(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x100000a, 0xe7, 0x800) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000006c0)) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) r3 = accept4$inet6(r2, &(0x7f0000000700)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000740)=0x1c, 0xc0000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x20, 0x1, 0x9, 0x3, 0x2000, 0xffffffffffffffff, 0xffffff7f, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2}, 0x48) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2, 0x84, 0x3, 0x81, r5, 0x1, '\x00', r1, r6, 0x5, 0x4, 0x1, 0xe}, 0x48) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/power/wakeup_count', 0x0, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xa, 0x17, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb99, 0x0, 0x0, 0x0, 0x6df8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x4, 0x1, 0x7, 0x0, 0xc, 0x5a6809772713ea25, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='syzkaller\x00', 0x9, 0xa8, &(0x7f0000000a40)=""/168, 0x41000, 0x44, '\x00', r4, 0x31, r6, 0x8, &(0x7f0000000b00)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x6, 0x80000001, 0x80000001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000b80)=[r2, r5, r7], &(0x7f0000000bc0)=[{0x5, 0x0, 0x8}, {0x0, 0x3, 0x9, 0x6}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e00)={@cgroup=r8, r9, 0x11, 0x10, 0x0, @prog_id=0xffffffffffffffff}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x12, 0x8000, 0x9, 0x4, 0x2300, r7, 0x5, '\x00', r1}, 0x48) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r6, 0x412c9000) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xc, 0x14, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='syzkaller\x00', 0x3, 0xa3, &(0x7f0000001040)=""/163, 0x41000, 0x6, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x4, 0x0, 0x2b67, 0x3}, 0x10, 0x0, r8, 0xa, 0x0, &(0x7f00000014c0)=[{0x2, 0x1, 0x3, 0x3}, {0x5, 0x2, 0x1, 0x2}, {0x5, 0x3, 0xc, 0x8}, {0x2, 0x4, 0x8, 0x2}, {0x0, 0x5, 0x2, 0x3}, {0x2, 0x4, 0x1, 0xb}, {0x1, 0x2, 0x9, 0x7}, {0x1, 0x1, 0x7, 0x8}, {0x3, 0x3, 0x7, 0x6}, {0x5, 0x2, 0x9, 0x4}], 0x10, 0x9}, 0x90) 1.911490113s ago: executing program 2 (id=1755): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.745339537s ago: executing program 4 (id=1756): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0xf0, 0x0) 1.70540494s ago: executing program 2 (id=1757): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[], 0x6, 0x2d0, &(0x7f0000000740)="$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") r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) utimensat(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 1.609994688s ago: executing program 0 (id=1758): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x5, &(0x7f0000005840)=ANY=[@ANYBLOB="000020d50f80e302da4bb42df00320ffbf53f2abe301fc4368c5bfdcc1acf9966c6112acbe9d429df07e852d8fcc003244e4db9f6628525589b10d5ed9438d333bd2ccc9f144956033d25d91e27eaef43f3ca65a857ab036228ce36fbd31825a98bbb41fc432a26393e0553e7bd9eded25450cbb9ee8ec0d1de81f6da2e8b9974b", @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="30ba448d53c7bf34bf28"], 0x1, 0x552f, &(0x7f0000000300)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.404012325s ago: executing program 2 (id=1759): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000001c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='./bus\x00', r0, &(0x7f0000000140)='./file1\x00', 0x0) unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.304555103s ago: executing program 4 (id=1760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240000000032c000000030a01030000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x68}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.049240634s ago: executing program 4 (id=1761): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12, 0x400, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000270000009500000000000000db4c6131724072293a9c1fe8b3632d90bff0d046f3a226256e"], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r4}, 0xffffffffffffff6f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @link_id}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x0, &(0x7f0000000280)=[{&(0x7f00000008c0)="4d2458121007ba2fd5df0f6eb13bebd820764e36fcb12ec164c892ec92a1bfcc92b4671d53936f9445929ee858b3cef2c5cc397a287515103946bd1f2302df782441046b228eeea0035b7a8f049f81b5b17e84a2b4f9e5015d103716418c42891451fdefca642fb085c1ad26fc44c1f77e84dff53cce48fd1f102e961c291614ea8dd0bd9c30c84fd8c74f74e27e646dbdd7d2a7f54a62f8e52101ea1ed36ebe2bee8ecd4f03b248d6d237d021749951d14b1c507324bbde7cff7410b5d920fed4edb2c706f71abc579e848c3f4d5ce2919ac0339117eb72e69b1d843262d466f3e75738b3abe5c2ebb30cc77016c97ae07d05523e6650bfc569d1358ba23e4b9f78e72d11b54644cb6a8e4f4be9d8d9a15d297d35d6a7d8f9d186417662849178f7c2a2497c9da21d6e534ef1668c86961a1d0c4aa90ab603e79546f64c10a42e15e814610bcde72d896cb7dd002608c74f4b98e92076cd310de4f64224fe344f035246d166f0ebd58b70648483fa79e6ede58efdb8504bff5e1cdfb9509e87ee6c988ddf1f0a5c3c1f69f1c9f1f90b2c1ba76c1f27e9cea55f68b878fd086bd44064c9703ff71777c548e880ee5b86890ede0072f7ad0cb9af74769397e1bbd8cc6fb6bd697e3fa22d7cc6b1d50d8fd9214fe339466a43f7f3be6d40a27beca2816b0626343d11e0235adb33fb763fcae17175cf55c27ee39697b6bb7e2332a7c384c32f01020c94c2e6187364fd8920b321a54216fd7dc5f46576b76095d2a7dd9521dcb56fd50bd1bc636fd44c1fb8152bb5d029b23de628a6554249655fbff75304a1e905efa768cb99a2bc856c78b343f1084345690568b3c69aba7c742d20625b9fa44f4cac417b95322dfc1eab9d394ef8002855b368780305444f8d2d4e0b38226c4c96de9e4675938842635428e7c003f53044a2f93f8df3a86a1e4d3186c9fb0ec7ed291fee6c57fab2bae959e318c356415528aedb8a74c2776fd887fda964a2a833cd66d670bb548e6040b7c1ab8505669d50d0c498efc8e9f81caadeec140196420b4768a1eba41038c474296151892d2232e20d78afa1b9a22d58afc179829e99501b66b82b55d0f47dc313f8e7eae07f0b08d39cf19363d277d27b279d5cd3541c4a80a5c41343266d68112739c82855712955efc5443a3f07104dde61b6eb9ef1f2f0176b0cc345dcc54a926af2a9ca58789e573ce10825e560e054a64e8810d394b7feb072931ed2579d9731477c491d3382f2f7b6bf74156e4083cb96a246c307b6696992cbe6a74b5a55e12c224f7e74e43dc1a42c71783c3c48ccd1dc5dce0fb11c8e1ab1316e98c96fe971dcf9fa0d153091552f01be3ca0b47fb44117e09812600d6f3c5e5dbe16fa61b5eea792ea468fc159dc7dcdd845a1cb8f61a3bdb9c28d89e9d41514c417fd13fed03ba173ffe09ef40fe479283e99a148a1a4e87bca8e670a2843b00c5922b8278e5748c491fa4f0c10a9c1ed7ad061652a83ad88cf8571ff223df3c6b6b46d07a0cb48dab7c0483f00e5a7d96f385b76d90879cb0489ea3c83052178861d332434ce3588a9ab968f3e6b08618879936dfe3d8d3f9111bb396b28d80605236ba3cc4d05390b6f5f45453bfb68787a4da01c881ada96f2c644d67889402311ac7ed3896f6a5cf9b3cef18addfb4ffb3fe71ccab8490d87fa4710a424bc2d448b123ae2c581d54bd70a8fde51d0f4691339bd883b76a3485e8d73da9ff78a98b4a809f57f599b18a55dfd6aac68f63866ad4bcd45d85fda1704bd30a5b4994896fbd4049dfc47b536f30822479a8e120cdbebfa5b90e057da50aff93d5c4102f0e29dc952c4063f51df7a00cbadb5bdc4605b5cbe1e354d4fdd6d50618399ffd5c8037a547120be4d5af83fe8d2b3cbb6044aab12b07ba3655878c45ad03ac0c188990cea8744b42ba4deb15ed13a009fd2bd84e99c40d4006684bb2e1c596f6474ed0a4661db82a51f0ce2fb532da37f3ef8e89885decf82a36bb2a30c8fb14275f68db170ca5c360183dd88d71f85c7981dc57c5f81c8067614ce4f278dbaede9b2754356a04968026cf5040511d49314220e777d8086be6a286135ee6825b09082dbbcbe689bfe1d028949df7a562e57efcdfc36c305aa7043a4b506bed86489fdc9412a16217e4375366ce1fd66197359a2134e19d5cfe72576ba110a7883e8d5e50770c171ac0a526d35dd10c1b631fa7e61652513af8d3dd7bee2a71773b208ed4705adf7a72c5b3a28a624648f376cc03416feaaa822700c04ffd0c7c98740ec1e12911a97753df1ed996adb09622c8287b516abbe53e88fbdb7f4f2282e2a05497b978fe1110f45a9a9ecbbd58ff79a9215e64c82c85c00a9b2089bab200a40c25046270f8288138b1245ea281b7e7059b6f9b498ba06a5560ff553a9fc66524d250b175744e11c2fd8a12128ec263fb4d4685c83d32b45fc0a287c775f61274782ecdfcb04a624c9ae69b6c6cd189cb552b02fdfd4958cca6cf027d502e05e37593076d39cfa219f0501fdc08054b6124eb110698fe89af39a26897854551e23e99af0e05fc67647af7a1eb14170105cabb91ffe20e5f264c076c56abf2779d8fd7dca71acf7e93fb51a0ec4be7f4dc6a6e0c5fb645c00efc1efbb60633b09bd7ccc359eb044b7a79211dca2b5819b7cff696c6a466e7a4e2f9b5abea72c7f468df4678a3953b43d7275b853838ae8247fc8e66d4e6170c842a8c284d80a4b0bb3d434a77b0744d25c7ebf9ff5cb1cf13ef3ac7f8747e3e4c6d30673c22869f89d6a2459766b657790109525668150ee8efa0b7ddb0010388847069515f76da090570d7b8fb6279929ada8bb6f47faad26516e8236b64a315960ac2bbd5bca0c7faee73063b21e63e9f1b8bff2c75dbeb92136ede76a4a492dc0efe772f5980db2981913d585ed9f046eb99d9a62cc9ca36f595b09c0fc65afd42bae331c2dcec447b73d00a92ed1df16a51c598d24af9c02283ab550aceffe8e7f98c287c077dcc85e08719bc9e2ec28092eb9054f58d6519b1cc327ffc8b10b95c4779b890c3e701676bdb3a3585ff1518cb8268de46ba1a4f4c7101296e489e86b5b70d1eed2766f13c9898a17eda637f9f0983f620a5d7d5617870b43a2244746e0e2ea2f82588a21bc78357d4fa2dc699f44af1e0e4829774106281c6c8238c34f6ccacb851edc1d8d20a9b925431d958db08a8287dddad5d7905fdaa2c458c8c5b00a4af44d60f10b4a425c764389c8aa2db480053446a23709082e593c9bb426451583c9d0787bce049a22eb4ee8dc0db2aa6c750f1bed3e1b81f7c881e619fec2aa4f89833a5d022d8aabce659af8c7d0d27f7ff3268cd28c739ac207eca7fdb8c57ee012d6c435d7f0b2f1fc4effed789a0f28ed31eef10b8e640875a05d84d82938f3c732fbe3396eae43cfbcd73588f734c55d6f365baf1863ce245b11b432ff8b62361350ebb050c7b0f34ea7eba83678ce9771d46fc9784c06a8079b35f955bb2e3ffb2e9bce2e9e557ec7fdc77b5fe999eec3d19037c66418aa6084951f8b3d1375d362cbf6439b9224d5bb4e389049946c8c2a7efee9ec62e7c8f5a0d9bb3d57bb8455dd1b62bc5861644e93e2a1493da0cde838ef2e09307cb64cf0132551eb2a8dbd0d9c81983eee6201357734a37dd54e547bdf3d226af1e3fed47a523bc4838aaba466b5aaa5703d5561f96fd0a0f70671144c5ee30c7b91575491dd512e67238a3ef1f05d8c7bc7de6f5a767e9f1600bd2f80201d72e1e3c0f585854da742000773deab92d3c2123ac05174cda74c233bbbe09e1e836e7ef0f36257bb7b7c9a70df8981f87a7441b49ed9e29b8d8a71c8a198a04e552f8c112eab2013412da0e26f38ab647410d6c0a184522c0dca5cbf559a97e0a9ea433f9850879d59af648184338f26556a3619aa2303f7dfb7699a73dd8c28257a90312c202663c0047f55b40916d69299e1b88edf3bc69bd4129cdce95f05e1a0a844307d1224a1c8c28a606d6c7dab0de65691a031349a15a2cfc336b9ed1b77b2b26d0042bac259f2db7525996266878771ae5efdda199e58623c0340576ffd3802066b43631e01e912bc57a9d42796433b850812e38674095b9446204a9a272fed2485de3f4e1891cec2c9a20c6b5abdf072a0f2fb5cc3303f23f4d57314b9dc11fd6aa0fd51e2a92568468b6d831d6745c1c5e1d6afa2096dfd532344ff671b3e6d6357c2ae634fa69f914a914aa32f7a89c9bb4900731b91eefd9db4da146d5b98cabd45f43fc540f8c449daaf66c178c78f854cfbc8e6bf309d975e4ab17beb4ba9ae652df307544bc3a43c1b73227bda6399f5fa31d8ef1e2c561c7e9a3517b2e49a6a059702ae6a0b87b484a89d70c08f67ac13659952c127d284270b917c751cde45a96e776dc507d24b12f13201eafe4ad7274e8471da5e11fb4a2e7d274a6a9c54969df3367e9ec099b9d44ccce5a7b58104ebe92101ea60d951dee2334fab5afe0d143217f815df5e38fc29656458295c149c6c0daeffec0dfd4f59916bc5dcb77ee76fd4a5d89f7ae4510f3d0a6c3b40f55754bd71c72a98e81575bbd79e170f3dd22d475fedb1b0bfc7468b99e3e2f6d8ae217e26c0afbd722d6425ff0f16638b007b8f7099907076ec4f2eac0d986491177a812097e2cc492d57b5da1e4a01c99639c649b29612d28b661ac42d453cf09ebba8edeb11fa6ca8845127fa76db229b144828ca91ca2d555ad69b0411a7346156584902eb319fc7e735c1472dc05b77e61e86514d28ef5e243c9f7913bdfc1208eb4a522ff7c6a2225f2110610adba7a3387af034a4952ce70b0686303729a839d01fdda4a23961197d4af8cb5649c7754a8f6d670be6373573d381dff513afe4f64db102fad5eaae9666a712ebb60678e2334762539585c007f0689ff555d749abd8e6300f781d5315a94ed05942df6910151a9b522e2b51fac4ea819d84472ec18e7f374bd8efb46a117722300f6a7de348c9cc1a17301ed6c6f20a7327bc409e84460da42952fe4c984c0be9473b3ce3c7ac0466eab173187abcf5f9a4d20336196cf69679eecad37e1beff3a03f445b3a377c5c9e9c220e1ae243774e3e2d0245c57e6bdf9bb0f3a1584905e7faa24e1c92dd9b98613fafc546932889413717bb1eb098d96a4970e64ede40b0046754aeef8f4b6be81efcc2bb055c3cb496c165d00db33eca4399f0a1f035ce2b57a4dca792284ad7d1d90cb1a4debce219377261f28f1677b3ab8fb1c688638b1daafd1ffd15eb08eb9994b07f3a393a7852404542ac8212ad0a718cbd3592490dc74a997fe9e3c5e939bd5ecfd4442b006afb75f3ed30105fa0a61ee88eb1b75e26d66dde7048015419c33bd337cd7c772be234d7ca6a70c1899ca2a9895a9690e57723c0f1f5399008b9d38d01419cf9adabf244ec7b5f6c4bb691cc33ccd11a6323ca1db55dc07a64b66012c8a1c2be6b1ce9f4ef8902c1221e3145cf78c9cd9d9cd635f5572fc95c0139bddb1c627bc2e6fe5e26c9ef161ace10485cbec20880c9513182243f850e9e2b8bcfdf6cad543fbfeafbf3f03945f6399628f750fcbe8cf69b3a0899a0df9d014925972483a0a6c8d931f0320d92203972ff56a300a088bf89e1ed3bb35324a36fc39b6c7667fc2d17c4b70d680daaf6ba5ae1dd73f34275e9d8d9691eb390a1c3e6decc192da5ee3bb94afc42343188b5189bba7690d86280da25668332218514fb3e95aeacd8d967b35bf797bac1d6268a3e455eab734488"}]}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="32390e494e3957892dcfe0aaad0ec846447218cc5a3035382f517afb92a8e25b16f5a4112a8cdbd99022321ea60635e9040c1fa8d9871429a56c8bb86851e3a97a5f48567c62a90d2305165846436fea6448d73d0891d6c30aec2fc1f921edc0e8aa71ee12032a8d1e2c0e24c8e78cbc1c889716fe54283ab1e566255342840a617bd5b98d4138e706301f3973a0328463719330e2d2d9b462fc418ebabcbe3958634c37ac9aa1"}], 0x0, &(0x7f00000004c0)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x6}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x2, [{0x1, 0x0, "c34f2828a2"}, {0x7}, {0x6, 0x0, "85901cd54fe6d56772"}]}]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0xe7}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x12}}]}}], 0x1, 0x20008015) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000600)={'bridge_slave_0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x2) read(r8, 0x0, 0x2006) dup2(r8, r7) 1.024936316s ago: executing program 2 (id=1762): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 760.277647ms ago: executing program 1 (id=1763): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf040000000000f100001200000008000300", @ANYRES32=r3, @ANYBLOB="0400130006001200000000000600b500850100000a000600080211000001"], 0x78}}, 0x0) 446.572064ms ago: executing program 4 (id=1764): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@check_strict}, {@overriderock}, {@nojoliet}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@check_relaxed}, {@nojoliet}, {@check_relaxed}, {@map_off}]}, 0x3d, 0x549, &(0x7f0000000c40)="$eJzs3WFv00YYwPHHpYUukxAaE0JVgaNsUpFKcBwIinjlOZf0wLEj20HtK1TRFFWkMFEmrX2z8YZt0vYheLsPsW+E9hGYbCeloU0DlDao+/8iuIt99j3nRn7kNj4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy6vZdskS3wTtJTWcV4vC5ru3va33LJDrA8UB/YpY6T+ZnpaL+aKL375bfSH9b05m83ezMp0W07L99YVzd89PTvS3PyDgY7G5tf1kpdvtPB93IEfo0pnh6xo6MHFomm5DKxOHqlqp2DcX67GqG1/Hy3Gim8qLtJuEkZr3rqtStVpWurgctoNGzfV1f+GdG45tV9S9Yku7URwGN+8VY2/R+L4JGlmbdHXa5k76QbxvEpVot6nU2nq3Ux41gLRR6UMaOaMaObbjlEqOU6rcrt6+Y9uTexbY75E9Lcb/ocV4fcazN3A4E738L74YCaQtS6L2fXlSk0hCaQ5Z39PP/9/f1Af2uzv/97P8xXerZyTL/5fzd5eH5f8hsRzfa1O2ZFueyIp0pSsdeT72iI731RAtgRiJJRQjTXGzJaq3RElVKlIRWx7KotQlFiV1MeKLlliWJZZEdPaJ8iQSLa4kEkokSubFk+uipCRVqUpZlGgpyrKE0pZAGlITN9vLmqxnx70syhoW406j0tBhFPqfu444B4yW/I/D+6znb+Aw3vbzPwAAAAAAOLGs7Lfv6fX/lFzKanXja3vcYQEAAAAAgM8o+8v/bFpMpbVLYnH9DwAAAADASWNl99hZIlKQK3ltTazsdil+CQAAAAAAwAmR/f3/clpkc6BcEWtnuhSu/wEAAAAAOCF+HznHftw6Y/3zr0TRlPWytfSdteGm7dyNU/l2p97fY1Kfsc72dpIVlbyYnPT0rDWdN9qZBPNNr1gbFYe1XwC/fkwA5yflT7mat7m6mper/TV5L4W68XXRC/27JXHdsxOJXkp+err+s2TD/yNonrVkbb3bKT561l3NYnmZ7uXlRm8CxT3zKB4Qy4tsvoXsnot9RzyV3YjR67eQ92vvHv9EvvnER/T5SubyNnO9GW8Lg+OfTvssFQdGn67biWJa1rud0iFH/kqu5W2uzV/Li32icIrDfga9Y+HsjuKTjsXeKKz3oyiPiqJ8yCgAYFzWRmQha2/i/4Sz3Kdld/nI7P5K5vM28zPZiXVyZp+8Yo86o9uHzG5/73kG0rAcm/b7106/eVZ9nW7wemi/se9Y6SE89WLjR7mwubV9Y31j5XHnceep45Qr9i3bvu3IVDaMXrEr0rdnyD0AgNzoZ+yMbGHdyq+qz4nsf1X9zc5XCorySJ5JV1ZlIbvbIPvGwb57Lez6GsLCiKvWQpYm8ye8LBxwbXk6u8uhv1/nwLaDMZSP40cBAMCxmRuRhz8k/y+MuO4ezOWDV8enZVjb0rEfCwAA/i909MYqJL9ZUWRaD0vVaslNFrWKQu++ikytoZUJEh15i27Q0KoVhUnohX5aeWBqOlZxu9UKo0TVw0i1wtgsZU9+V71Hv8e66QaJ8eKWr91YKy8MEtdLVM3EX6lW+wffxIs6yjaOW9ozdeO5iQkDFYftyNNFpWKtdzU0NR0kpm7SaqBakWm60bJ6EPrtplaWWBKZVhLmO+z3ZYJ6GDWz3RbHfbABAPhCbG5tP1npdjvPj7Ay7jECAIBBZGkAAAAAAAAAAAAAAAAAAAAAAL58x3H/H5UTXulPBf2lxHNEFeukD3CgMvLU8cuRn5wAHKn/AgAA//9FAkx+") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 353.483361ms ago: executing program 3 (id=1765): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752424760608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) 207.004933ms ago: executing program 1 (id=1766): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) 185.701155ms ago: executing program 3 (id=1767): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000880)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) 163.627547ms ago: executing program 4 (id=1768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000004c0), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 114.996581ms ago: executing program 2 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 0s ago: executing program 3 (id=1770): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000240)=""/191, 0x2b, 0xbf, 0x3}, 0x20) kernel console output (not intermixed with test programs): 0][ T8993] syz.2.1264: attempt to access beyond end of device [ 584.444130][ T8993] loop2: rw=3, sector=23750467019408, nr_sectors = 8388600 limit=2048 [ 584.464546][ T8993] syz.2.1264: attempt to access beyond end of device [ 584.464546][ T8993] loop2: rw=3, sector=23750475408008, nr_sectors = 8388600 limit=2048 [ 584.481805][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 584.507645][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 584.521317][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 584.531175][ T8993] syz.2.1264: attempt to access beyond end of device [ 584.531175][ T8993] loop2: rw=3, sector=23750483796608, nr_sectors = 8388600 limit=2048 [ 584.546454][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 584.547523][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 584.566591][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 584.575385][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 584.676924][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 584.686494][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 584.696386][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 584.708573][T10139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.966612][T10240] loop3: detected capacity change from 0 to 32768 [ 585.057081][T10240] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1564 (10240) [ 585.254368][T10240] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 585.286265][T10240] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 585.382470][T10240] BTRFS info (device loop3): setting nodatasum [ 585.443898][T10240] BTRFS info (device loop3): enabling auto defrag [ 585.582652][T10240] BTRFS info (device loop3): disabling tree log [ 585.700646][T10240] BTRFS info (device loop3): using free space tree [ 586.644247][T10240] BTRFS info (device loop3): enabling ssd optimizations [ 586.878928][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 586.906576][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.006035][ T4086] device hsr_slave_0 left promiscuous mode [ 587.025389][ T4086] device hsr_slave_1 left promiscuous mode [ 587.069651][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.087762][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.123318][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.154938][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.189502][T10277] loop1: detected capacity change from 0 to 128 [ 587.215942][ T4086] device bridge_slave_1 left promiscuous mode [ 587.227819][T10277] FAT-fs (loop1): bogus number of FAT structure [ 587.234110][T10277] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 587.245124][T10003] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 587.276196][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.297121][T10277] FAT-fs (loop1): Can't find a valid FAT filesystem [ 587.321436][ T4086] device bridge_slave_0 left promiscuous mode [ 587.332013][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.872402][ T4086] device veth1_macvtap left promiscuous mode [ 587.889093][ T4086] device veth0_macvtap left promiscuous mode [ 587.895264][ T4086] device veth1_vlan left promiscuous mode [ 587.947147][ T4086] device veth0_vlan left promiscuous mode [ 588.166859][ T3643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 588.193232][ T3643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 588.202301][ T3643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 588.210369][ T3643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 588.218125][ T3643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 588.225424][ T3643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.076856][T10306] block device autoloading is deprecated and will be removed. [ 589.293633][ T8993] bio_check_eod: 62458 callbacks suppressed [ 589.293654][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.293654][ T8993] loop2: rw=3, sector=24274427364008, nr_sectors = 8388600 limit=2048 [ 589.331841][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.331841][ T8993] loop2: rw=3, sector=24274435752608, nr_sectors = 8388600 limit=2048 [ 589.354415][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.354415][ T8993] loop2: rw=3, sector=24274444141208, nr_sectors = 8388600 limit=2048 [ 589.369838][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.369838][ T8993] loop2: rw=3, sector=24274452529808, nr_sectors = 8388600 limit=2048 [ 589.385573][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.385573][ T8993] loop2: rw=3, sector=24274460918408, nr_sectors = 8388600 limit=2048 [ 589.400613][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.400613][ T8993] loop2: rw=3, sector=24274469307008, nr_sectors = 8388600 limit=2048 [ 589.415540][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.415540][ T8993] loop2: rw=3, sector=24274477695608, nr_sectors = 8388600 limit=2048 [ 589.446254][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.446254][ T8993] loop2: rw=3, sector=24274486084208, nr_sectors = 8388600 limit=2048 [ 589.476284][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.476284][ T8993] loop2: rw=3, sector=24274494472808, nr_sectors = 8388600 limit=2048 [ 589.511921][ T8993] syz.2.1264: attempt to access beyond end of device [ 589.511921][ T8993] loop2: rw=3, sector=24274502861408, nr_sectors = 8388600 limit=2048 [ 589.713450][T10308] loop1: detected capacity change from 0 to 32768 [ 590.057491][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 590.352622][ T3643] Bluetooth: hci5: command tx timeout [ 590.383997][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 591.178381][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.317240][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.596292][T10319] loop3: detected capacity change from 0 to 32768 [ 591.684336][T10319] XFS (loop3): Mounting V5 Filesystem [ 591.810688][T10319] XFS (loop3): Ending clean mount [ 591.827040][T10319] XFS (loop3): Quotacheck needed: Please wait. [ 591.961304][T10319] XFS (loop3): Quotacheck: Done. [ 592.426145][ T3643] Bluetooth: hci5: command tx timeout [ 593.034185][T10003] XFS (loop3): Unmounting Filesystem [ 593.538551][ T4086] bond0 (unregistering): Released all slaves [ 593.726689][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.766693][T10320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1577'. [ 593.967726][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.006023][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.066676][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.086957][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.112248][T10139] device veth0_vlan entered promiscuous mode [ 594.153291][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.172575][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 594.211083][T10139] device veth1_vlan entered promiscuous mode [ 594.306469][ T8993] bio_check_eod: 122278 callbacks suppressed [ 594.306490][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.306490][ T8993] loop2: rw=3, sector=25300252480808, nr_sectors = 8388600 limit=2048 [ 594.346396][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.346396][ T8993] loop2: rw=3, sector=25300260869408, nr_sectors = 8388600 limit=2048 [ 594.361559][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.361559][ T8993] loop2: rw=3, sector=25300269258008, nr_sectors = 8388600 limit=2048 [ 594.376659][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.376659][ T8993] loop2: rw=3, sector=25300277646608, nr_sectors = 8388600 limit=2048 [ 594.393243][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.393243][ T8993] loop2: rw=3, sector=25300286035208, nr_sectors = 8388600 limit=2048 [ 594.408578][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.408578][ T8993] loop2: rw=3, sector=25300294423808, nr_sectors = 8388600 limit=2048 [ 594.424210][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.424210][ T8993] loop2: rw=3, sector=25300302812408, nr_sectors = 8388600 limit=2048 [ 594.439335][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.439335][ T8993] loop2: rw=3, sector=25300311201008, nr_sectors = 8388600 limit=2048 [ 594.454179][T10139] device veth0_macvtap entered promiscuous mode [ 594.456381][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 594.464570][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.464570][ T8993] loop2: rw=3, sector=25300319589608, nr_sectors = 8388600 limit=2048 [ 594.483955][ T3643] Bluetooth: hci5: command tx timeout [ 594.489696][ T8993] syz.2.1264: attempt to access beyond end of device [ 594.489696][ T8993] loop2: rw=3, sector=25300327978208, nr_sectors = 8388600 limit=2048 [ 594.497201][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 594.575660][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 594.617197][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 594.631390][T10139] device veth1_macvtap entered promiscuous mode [ 594.675252][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.736379][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.784133][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.816553][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.864257][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.895540][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.926265][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.964438][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.984966][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.024689][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.052185][T10339] loop0: detected capacity change from 0 to 32768 [ 595.058439][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.088808][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.106437][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.115005][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.146276][T10339] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1582 (10339) [ 595.168393][T10341] loop1: detected capacity change from 0 to 32768 [ 595.175740][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 595.223466][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.267819][T10339] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 595.278276][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.289288][T10339] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 595.326176][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.344114][T10339] BTRFS info (device loop0): setting nodatasum [ 595.376337][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.396165][T10339] BTRFS info (device loop0): enabling auto defrag [ 595.402658][T10339] BTRFS info (device loop0): disabling tree log [ 595.426934][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.443488][T10337] loop3: detected capacity change from 0 to 40427 [ 595.456150][T10339] BTRFS info (device loop0): using free space tree [ 595.464747][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.478872][T10337] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 595.487225][T10337] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 595.507083][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.523416][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.533407][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.544799][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.584288][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.601925][T10337] F2FS-fs (loop3): Found nat_bits in checkpoint [ 595.615426][T10283] chnl_net:caif_netlink_parms(): no params data found [ 595.646641][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 595.656047][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 595.679747][T10139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.716212][T10139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.736301][T10139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.745054][T10139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.838914][T10337] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 595.856236][T10337] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 595.936039][T10339] BTRFS info (device loop0): enabling ssd optimizations [ 596.192343][T10283] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.218303][T10283] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.247630][T10283] device bridge_slave_0 entered promiscuous mode [ 596.277227][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.285929][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.295575][T10283] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.310848][T10283] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.347043][T10283] device bridge_slave_1 entered promiscuous mode [ 596.370643][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.420099][ T9947] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 596.451031][ T3753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.476598][ T3753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.520037][T10283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.556959][ T3643] Bluetooth: hci5: command tx timeout [ 596.916216][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.927578][T10283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.074557][T10283] team0: Port device team_slave_0 added [ 597.126920][T10373] loop1: detected capacity change from 0 to 256 [ 597.144497][T10283] team0: Port device team_slave_1 added [ 597.222328][T10373] FAT-fs (loop1): Directory bread(block 64) failed [ 597.248241][T10373] FAT-fs (loop1): Directory bread(block 65) failed [ 597.255364][T10373] FAT-fs (loop1): Directory bread(block 66) failed [ 597.269532][T10283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.291406][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'. [ 597.292656][T10373] FAT-fs (loop1): Directory bread(block 67) failed [ 597.300936][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.316215][T10373] FAT-fs (loop1): Directory bread(block 68) failed [ 597.351308][T10373] FAT-fs (loop1): Directory bread(block 69) failed [ 597.365268][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 597.382783][T10373] FAT-fs (loop1): Directory bread(block 70) failed [ 597.389530][T10283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.391083][T10373] FAT-fs (loop1): Directory bread(block 71) failed [ 597.415164][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1546'. [ 597.417840][T10283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.424767][T10373] FAT-fs (loop1): Directory bread(block 72) failed [ 597.447352][T10373] FAT-fs (loop1): Directory bread(block 73) failed [ 597.460459][T10283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.546311][T10283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.712428][T10283] device hsr_slave_0 entered promiscuous mode [ 597.744196][T10283] device hsr_slave_1 entered promiscuous mode [ 598.198918][T10387] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 599.172694][T10283] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.324053][ T8993] bio_check_eod: 65586 callbacks suppressed [ 599.324076][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.324076][ T8993] loop2: rw=3, sector=25850502697808, nr_sectors = 8388600 limit=2048 [ 599.420381][T10283] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.436714][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.436714][ T8993] loop2: rw=3, sector=25850511086408, nr_sectors = 8388600 limit=2048 [ 599.467162][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.467162][ T8993] loop2: rw=3, sector=25850519475008, nr_sectors = 8388600 limit=2048 [ 599.482729][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.482729][ T8993] loop2: rw=3, sector=25850527863608, nr_sectors = 8388600 limit=2048 [ 599.515669][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.515669][ T8993] loop2: rw=3, sector=25850536252208, nr_sectors = 8388600 limit=2048 [ 599.576291][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.576291][ T8993] loop2: rw=3, sector=25850544640808, nr_sectors = 8388600 limit=2048 [ 599.614696][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.614696][ T8993] loop2: rw=3, sector=25850553029408, nr_sectors = 8388600 limit=2048 [ 599.653107][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.653107][ T8993] loop2: rw=3, sector=25850561418008, nr_sectors = 8388600 limit=2048 [ 599.701260][T10283] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.716199][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.716199][ T8993] loop2: rw=3, sector=25850569806608, nr_sectors = 8388600 limit=2048 [ 599.750983][ T8993] syz.2.1264: attempt to access beyond end of device [ 599.750983][ T8993] loop2: rw=3, sector=25850578195208, nr_sectors = 8388600 limit=2048 [ 599.890406][T10283] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.327319][T10283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.390792][T10283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.479764][T10283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.574965][T10283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.597346][ C0] eth0: bad gso: type: 1, size: 1408 [ 600.813544][T10283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.863433][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.876556][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.894972][ T3647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.899305][T10283] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.909538][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.936829][ T3649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.944807][ T3649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.957117][ T3649] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 600.964620][ T3649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.035038][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.044737][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.075392][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.082642][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.108601][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.118229][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.136716][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.144033][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.184049][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.202898][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.227080][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.372031][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.389869][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.426516][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.455194][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.475480][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.537515][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.597200][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.694962][T10428] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 601.890514][ T4086] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.041919][T10283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.109059][T10283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.259336][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.281795][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.681248][ T4086] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.052245][ T3643] Bluetooth: hci0: command tx timeout [ 603.481411][T10418] loop0: detected capacity change from 0 to 32768 [ 603.488315][T10435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1607'. [ 603.762611][T10443] loop3: detected capacity change from 0 to 16 [ 603.774457][T10443] erofs: (device loop3): mounted with root inode @ nid 36. [ 604.004481][T10418] XFS (loop0): Mounting V5 Filesystem [ 604.227596][ T4086] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.503226][ T8993] bio_check_eod: 33244 callbacks suppressed [ 604.503246][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.503246][ T8993] loop2: rw=3, sector=26129440425008, nr_sectors = 8388600 limit=2048 [ 604.533898][T10418] XFS (loop0): log mount failed [ 604.623812][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.623812][ T8993] loop2: rw=3, sector=26129448813608, nr_sectors = 8388600 limit=2048 [ 604.696059][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.696059][ T8993] loop2: rw=3, sector=26129457202208, nr_sectors = 8388600 limit=2048 [ 604.734594][T10452] loop3: detected capacity change from 0 to 1024 [ 604.742502][T10452] EXT4-fs: Ignoring removed oldalloc option [ 604.756419][T10452] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 604.764825][T10452] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 604.768872][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.768872][ T8993] loop2: rw=3, sector=26129465590808, nr_sectors = 8388600 limit=2048 [ 604.775994][T10452] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 604.801179][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.801179][ T8993] loop2: rw=3, sector=26129473979408, nr_sectors = 8388600 limit=2048 [ 604.840462][T10452] journal_init_common: Cannot get buffer for journal superblock [ 604.850457][ T4086] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.869079][T10452] EXT4-fs (loop3): Could not load journal inode [ 604.918515][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.918515][ T8993] loop2: rw=3, sector=26129482368008, nr_sectors = 8388600 limit=2048 [ 604.961941][ T8993] syz.2.1264: attempt to access beyond end of device [ 604.961941][ T8993] loop2: rw=3, sector=26129490756608, nr_sectors = 8388600 limit=2048 [ 604.999987][T10413] chnl_net:caif_netlink_parms(): no params data found [ 605.007743][ T8993] syz.2.1264: attempt to access beyond end of device [ 605.007743][ T8993] loop2: rw=3, sector=26129499145208, nr_sectors = 8388600 limit=2048 [ 605.054083][ T8993] syz.2.1264: attempt to access beyond end of device [ 605.054083][ T8993] loop2: rw=3, sector=26129507533808, nr_sectors = 8388600 limit=2048 [ 605.059413][T10283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.071718][ T8993] syz.2.1264: attempt to access beyond end of device [ 605.071718][ T8993] loop2: rw=3, sector=26129515922408, nr_sectors = 8388600 limit=2048 [ 605.116503][ T3649] Bluetooth: hci0: command tx timeout [ 605.129516][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.137911][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.920226][T10461] loop0: detected capacity change from 0 to 512 [ 605.959081][T10461] EXT4-fs: Ignoring removed i_version option [ 605.966076][T10461] journal_path: Lookup failure for './file0' [ 605.990647][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.026350][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.036305][T10461] EXT4-fs: error: could not find journal device path [ 606.076302][T10413] device bridge_slave_0 entered promiscuous mode [ 606.115821][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.156382][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.164694][T10413] device bridge_slave_1 entered promiscuous mode [ 606.235537][T10457] loop3: detected capacity change from 0 to 32768 [ 606.630506][T10413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.825902][ T3643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 606.848237][ T3643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 606.858520][ T3643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 606.869227][ T3643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 606.903659][ T3643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 606.911512][ T3643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 607.002275][T10413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.135414][T10489] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 607.172538][T10489] CIFS mount error: No usable UNC path provided in device string! [ 607.172538][T10489] [ 607.196535][ T3643] Bluetooth: hci0: command tx timeout [ 607.286633][T10489] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 607.440286][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 607.449378][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.513118][T10413] team0: Port device team_slave_0 added [ 607.568202][ C0] eth0: bad gso: type: 1, size: 1408 [ 607.724401][T10413] team0: Port device team_slave_1 added [ 607.839600][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 607.857080][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.892030][T10283] device veth0_vlan entered promiscuous mode [ 607.980791][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 607.989135][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.038108][T10413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.045112][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.126636][T10413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.152514][T10283] device veth1_vlan entered promiscuous mode [ 608.961822][ T3643] Bluetooth: hci3: command tx timeout [ 609.106386][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.117550][T10413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.134800][T10413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.161872][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 609.174241][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 609.182798][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 609.190853][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 609.198638][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 609.205967][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 609.216307][T10413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.276235][ T3649] Bluetooth: hci0: command tx timeout [ 609.506195][ T8993] bio_check_eod: 79109 callbacks suppressed [ 609.506213][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.506213][ T8993] loop2: rw=3, sector=26793138068408, nr_sectors = 8388600 limit=2048 [ 609.529577][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.538873][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.548967][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.548967][ T8993] loop2: rw=3, sector=26793146457008, nr_sectors = 8388600 limit=2048 [ 609.575337][T10283] device veth0_macvtap entered promiscuous mode [ 609.591958][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.591958][ T8993] loop2: rw=3, sector=26793154845608, nr_sectors = 8388600 limit=2048 [ 609.608072][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.608072][ T8993] loop2: rw=3, sector=26793163234208, nr_sectors = 8388600 limit=2048 [ 609.623628][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.623628][ T8993] loop2: rw=3, sector=26793171622808, nr_sectors = 8388600 limit=2048 [ 609.639095][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.639095][ T8993] loop2: rw=3, sector=26793180011408, nr_sectors = 8388600 limit=2048 [ 609.676740][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.676740][ T8993] loop2: rw=3, sector=26793188400008, nr_sectors = 8388600 limit=2048 [ 609.716183][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.716183][ T8993] loop2: rw=3, sector=26793196788608, nr_sectors = 8388600 limit=2048 [ 609.759741][T10413] device hsr_slave_0 entered promiscuous mode [ 609.766548][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.766548][ T8993] loop2: rw=3, sector=26793205177208, nr_sectors = 8388600 limit=2048 [ 609.781446][ T8993] syz.2.1264: attempt to access beyond end of device [ 609.781446][ T8993] loop2: rw=3, sector=26793213565808, nr_sectors = 8388600 limit=2048 [ 609.796760][T10413] device hsr_slave_1 entered promiscuous mode [ 609.817864][T10413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.825545][T10413] Cannot create hsr debugfs directory [ 609.960723][T10283] device veth1_macvtap entered promiscuous mode [ 610.056055][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.072144][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.093128][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.113061][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.145240][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.176157][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.186018][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.233908][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.265701][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.286146][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.296011][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.326159][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.356341][T10283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.464226][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.474921][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.494524][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.507380][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.527728][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.538913][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.558627][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.573923][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.584180][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.595070][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.605158][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.616289][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.626558][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.637362][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.647464][T10283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.658156][T10283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.669974][T10283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.826802][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.835673][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.845117][T10479] chnl_net:caif_netlink_parms(): no params data found [ 610.862596][T10283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.874412][T10283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.884378][T10283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.893411][T10283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.046364][ T3649] Bluetooth: hci3: command tx timeout [ 611.286488][ T3649] Bluetooth: hci2: command tx timeout [ 611.622388][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.627695][T10479] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.641045][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.656339][T10479] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.686338][T10479] device bridge_slave_0 entered promiscuous mode [ 611.707900][T10479] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.715100][T10479] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.758148][T10479] device bridge_slave_1 entered promiscuous mode [ 611.885117][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.975470][ T4086] device hsr_slave_0 left promiscuous mode [ 611.983435][ T4086] device hsr_slave_1 left promiscuous mode [ 612.002247][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.016632][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.025406][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.043625][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.063646][ T4086] device bridge_slave_1 left promiscuous mode [ 612.077134][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.086942][ T4086] device bridge_slave_0 left promiscuous mode [ 612.093206][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.131659][ T4086] device hsr_slave_0 left promiscuous mode [ 612.147115][ T4086] device hsr_slave_1 left promiscuous mode [ 612.186504][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.193995][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.217323][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.224916][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.234074][ T4086] device bridge_slave_1 left promiscuous mode [ 612.243393][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.263462][ T4086] device bridge_slave_0 left promiscuous mode [ 612.273373][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.364322][ T4086] device veth1_macvtap left promiscuous mode [ 612.370576][ T4086] device veth0_macvtap left promiscuous mode [ 612.377894][ T4086] device veth1_vlan left promiscuous mode [ 612.383741][ T4086] device veth0_vlan left promiscuous mode [ 612.391814][ T4086] device veth1_macvtap left promiscuous mode [ 612.406453][ T4086] device veth0_macvtap left promiscuous mode [ 612.412670][ T4086] device veth1_vlan left promiscuous mode [ 612.429104][ T4086] device veth0_vlan left promiscuous mode [ 613.122091][ T3649] Bluetooth: hci3: command tx timeout [ 613.374413][ T3649] Bluetooth: hci2: command tx timeout [ 613.546373][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 613.662059][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 613.720478][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.780451][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.516270][ T8993] bio_check_eod: 204909 callbacks suppressed [ 614.516296][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.516296][ T8993] loop2: rw=3, sector=28512121591808, nr_sectors = 8388600 limit=2048 [ 614.537245][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.537245][ T8993] loop2: rw=3, sector=28512129980408, nr_sectors = 8388600 limit=2048 [ 614.552050][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.552050][ T8993] loop2: rw=3, sector=28512138369008, nr_sectors = 8388600 limit=2048 [ 614.568114][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.568114][ T8993] loop2: rw=3, sector=28512146757608, nr_sectors = 8388600 limit=2048 [ 614.584162][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.584162][ T8993] loop2: rw=3, sector=28512155146208, nr_sectors = 8388600 limit=2048 [ 614.600667][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.600667][ T8993] loop2: rw=3, sector=28512163534808, nr_sectors = 8388600 limit=2048 [ 614.615847][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.615847][ T8993] loop2: rw=3, sector=28512171923408, nr_sectors = 8388600 limit=2048 [ 614.630941][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.630941][ T8993] loop2: rw=3, sector=28512180312008, nr_sectors = 8388600 limit=2048 [ 614.646561][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.646561][ T8993] loop2: rw=3, sector=28512188700608, nr_sectors = 8388600 limit=2048 [ 614.661440][ T8993] syz.2.1264: attempt to access beyond end of device [ 614.661440][ T8993] loop2: rw=3, sector=28512197089208, nr_sectors = 8388600 limit=2048 [ 614.851979][ T4086] bond0 (unregistering): Released all slaves [ 615.211152][ T3649] Bluetooth: hci3: command tx timeout [ 615.436963][ T3649] Bluetooth: hci2: command tx timeout [ 615.751998][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 615.819905][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 615.919531][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.003915][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.000754][ T4086] bond0 (unregistering): Released all slaves [ 617.195948][T10502] chnl_net:caif_netlink_parms(): no params data found [ 617.240230][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.407387][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.426573][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.451186][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.516433][ T3649] Bluetooth: hci2: command tx timeout [ 617.638800][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.675271][T10479] team0: Port device team_slave_0 added [ 617.848108][T10548] loop0: detected capacity change from 0 to 128 [ 617.964208][T10479] team0: Port device team_slave_1 added [ 618.023540][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.030657][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.153892][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.038576][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.052060][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.116383][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.158157][T10559] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1625'. [ 619.305684][T10502] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.317316][T10502] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.325722][T10502] device bridge_slave_0 entered promiscuous mode [ 619.348581][T10502] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.355686][T10502] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.365702][T10502] device bridge_slave_1 entered promiscuous mode [ 619.526407][ T8993] bio_check_eod: 182867 callbacks suppressed [ 619.526429][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.526429][ T8993] loop2: rw=3, sector=30046203594008, nr_sectors = 8388600 limit=2048 [ 619.576444][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.576444][ T8993] loop2: rw=3, sector=30046211982608, nr_sectors = 8388600 limit=2048 [ 619.594041][T10479] device hsr_slave_0 entered promiscuous mode [ 619.606675][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.606675][ T8993] loop2: rw=3, sector=30046220371208, nr_sectors = 8388600 limit=2048 [ 619.646665][T10479] device hsr_slave_1 entered promiscuous mode [ 619.655638][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.655638][ T8993] loop2: rw=3, sector=30046228759808, nr_sectors = 8388600 limit=2048 [ 619.664165][T10479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.671373][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.671373][ T8993] loop2: rw=3, sector=30046237148408, nr_sectors = 8388600 limit=2048 [ 619.713025][T10479] Cannot create hsr debugfs directory [ 619.716293][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.716293][ T8993] loop2: rw=3, sector=30046245537008, nr_sectors = 8388600 limit=2048 [ 619.736791][T10502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.757632][T10569] loop4: detected capacity change from 0 to 1024 [ 619.789204][T10569] EXT4-fs: Ignoring removed oldalloc option [ 619.795566][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.795566][ T8993] loop2: rw=3, sector=30046253925608, nr_sectors = 8388600 limit=2048 [ 619.859458][T10569] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 619.874341][T10502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.886810][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.886810][ T8993] loop2: rw=3, sector=30046262314208, nr_sectors = 8388600 limit=2048 [ 619.934797][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.934797][ T8993] loop2: rw=3, sector=30046270702808, nr_sectors = 8388600 limit=2048 [ 619.949933][ T8993] syz.2.1264: attempt to access beyond end of device [ 619.949933][ T8993] loop2: rw=3, sector=30046279091408, nr_sectors = 8388600 limit=2048 [ 619.986467][T10569] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 620.001236][T10569] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 620.160038][T10569] journal_init_common: Cannot get buffer for journal superblock [ 620.291345][T10569] EXT4-fs (loop4): Could not load journal inode [ 620.935939][T10502] team0: Port device team_slave_0 added [ 620.999964][T10502] team0: Port device team_slave_1 added [ 621.189602][T10581] loop4: detected capacity change from 0 to 1024 [ 621.218569][T10581] EXT4-fs (loop4): Test dummy encryption mode enabled [ 621.307034][T10413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.318093][T10581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 621.392574][T10502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.436547][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.539053][T10502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.577330][T10283] EXT4-fs (loop4): unmounting filesystem. [ 621.584650][T10413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.630547][T10502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.669480][T10502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.776213][T10502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.807463][T10413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.842892][T10413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.058077][T10479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.130892][T10594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1633'. [ 622.242969][T10502] device hsr_slave_0 entered promiscuous mode [ 622.286902][T10502] device hsr_slave_1 entered promiscuous mode [ 622.364783][T10502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.372737][T10502] Cannot create hsr debugfs directory [ 622.485544][T10479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.527912][ T3643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.542656][ T3643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.551483][ T3643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.562840][ T3643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.570935][ T3643] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 622.578275][ T3643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.820797][T10479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.988632][T10479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.210518][T10600] loop4: detected capacity change from 0 to 32768 [ 623.248777][T10600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1634 (10600) [ 623.377751][T10600] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 623.426286][T10600] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 623.435055][T10600] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 623.464946][T10413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.472493][T10600] BTRFS info (device loop4): use zstd compression, level 3 [ 623.496273][T10600] BTRFS info (device loop4): using free space tree [ 623.566683][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.574616][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.588031][T10413] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.699654][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.718507][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.776820][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.783973][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.805610][T10600] BTRFS info (device loop4): enabling ssd optimizations [ 623.824122][T10601] chnl_net:caif_netlink_parms(): no params data found [ 623.838286][T10600] BTRFS info (device loop4): checking UUID tree [ 623.918257][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.937404][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.966672][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.996864][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.004011][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.047198][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.096907][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.158026][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.279675][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.338525][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.397233][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.426358][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 624.456899][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 624.486730][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.499860][T10413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.536375][T10413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.544865][ T8993] bio_check_eod: 77977 callbacks suppressed [ 624.544883][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.544883][ T8993] loop2: rw=3, sector=30700405342208, nr_sectors = 8388600 limit=2048 [ 624.578802][T10283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 624.614042][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.614042][ T8993] loop2: rw=3, sector=30700413730808, nr_sectors = 8388600 limit=2048 [ 624.629459][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.629459][ T8993] loop2: rw=3, sector=30700422119408, nr_sectors = 8388600 limit=2048 [ 624.644994][ T3649] Bluetooth: hci1: command tx timeout [ 624.657827][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.657827][ T8993] loop2: rw=3, sector=30700430508008, nr_sectors = 8388600 limit=2048 [ 624.683648][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.683648][ T8993] loop2: rw=3, sector=30700438896608, nr_sectors = 8388600 limit=2048 [ 624.699390][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.699390][ T8993] loop2: rw=3, sector=30700447285208, nr_sectors = 8388600 limit=2048 [ 624.726494][T10502] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.731154][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.731154][ T8993] loop2: rw=3, sector=30700455673808, nr_sectors = 8388600 limit=2048 [ 624.762290][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.762290][ T8993] loop2: rw=3, sector=30700464062408, nr_sectors = 8388600 limit=2048 [ 624.788595][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.788595][ T8993] loop2: rw=3, sector=30700472451008, nr_sectors = 8388600 limit=2048 [ 624.807035][ T8993] syz.2.1264: attempt to access beyond end of device [ 624.807035][ T8993] loop2: rw=3, sector=30700480839608, nr_sectors = 8388600 limit=2048 [ 624.984905][T10479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 625.057855][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.077145][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.086932][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.116244][T10479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 625.279066][T10502] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.200023][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.210072][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.219429][T10601] device bridge_slave_0 entered promiscuous mode [ 626.227809][T10479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 626.247404][T10479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 626.413222][T10502] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.497902][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.505014][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.538052][T10601] device bridge_slave_1 entered promiscuous mode [ 626.688657][T10502] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.716685][ T3649] Bluetooth: hci1: command tx timeout [ 626.753712][T10413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.815779][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.826467][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.867111][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.939123][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.978945][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.001833][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.134821][T10413] device veth0_vlan entered promiscuous mode [ 627.191403][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.202883][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.245158][T10601] team0: Port device team_slave_0 added [ 627.281730][T10413] device veth1_vlan entered promiscuous mode [ 627.320400][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.333829][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.368485][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.442783][T10601] team0: Port device team_slave_1 added [ 627.669088][ T4086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.746643][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.831021][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.851265][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.925109][T10413] device veth0_macvtap entered promiscuous mode [ 628.010022][ T4086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.067130][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.078430][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.089734][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.171913][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.215848][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.232144][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.325283][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.430368][ T4086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.479278][T10413] device veth1_macvtap entered promiscuous mode [ 628.591050][ T4086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.654521][T10479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.680364][T10502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 628.737501][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.760093][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.780022][T10479] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.796530][ T3649] Bluetooth: hci1: command tx timeout [ 628.806976][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.824250][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.844932][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.880074][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.910720][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.921810][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.932441][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.944002][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.954541][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.966706][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.985181][T10413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.999738][T10502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 629.040167][T10601] device hsr_slave_0 entered promiscuous mode [ 629.052676][T10601] device hsr_slave_1 entered promiscuous mode [ 629.091152][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.105884][T10601] Cannot create hsr debugfs directory [ 629.161467][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.171885][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.185903][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.199280][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.211282][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.222357][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.233880][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.245081][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.255408][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.266789][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.279885][T10413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.290915][T10413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.307911][T10413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.320953][T10502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 629.427087][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.435902][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.470557][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.489665][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.514225][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.521437][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.563381][ T8993] bio_check_eod: 86548 callbacks suppressed [ 629.563401][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.563401][ T8993] loop2: rw=3, sector=31426505781008, nr_sectors = 8388600 limit=2048 [ 629.569275][T10413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.584273][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.584273][ T8993] loop2: rw=3, sector=31426514169608, nr_sectors = 8388600 limit=2048 [ 629.686204][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.686204][ T8993] loop2: rw=3, sector=31426522558208, nr_sectors = 8388600 limit=2048 [ 629.699615][T10413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.746248][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.746248][ T8993] loop2: rw=3, sector=31426530946808, nr_sectors = 8388600 limit=2048 [ 629.752192][T10413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.771864][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.771864][ T8993] loop2: rw=3, sector=31426539335408, nr_sectors = 8388600 limit=2048 [ 629.784496][T10413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.808506][T10502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 629.816569][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.816569][ T8993] loop2: rw=3, sector=31426547724008, nr_sectors = 8388600 limit=2048 [ 629.838764][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 629.857058][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.865881][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.876292][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.876292][ T8993] loop2: rw=3, sector=31426556112608, nr_sectors = 8388600 limit=2048 [ 629.886151][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.898151][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.906651][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.906651][ T8993] loop2: rw=3, sector=31426564501208, nr_sectors = 8388600 limit=2048 [ 629.996761][ T8993] syz.2.1264: attempt to access beyond end of device [ 629.996761][ T8993] loop2: rw=3, sector=31426572889808, nr_sectors = 8388600 limit=2048 [ 630.096439][ T8993] syz.2.1264: attempt to access beyond end of device [ 630.096439][ T8993] loop2: rw=3, sector=31426581278408, nr_sectors = 8388600 limit=2048 [ 630.113624][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 630.123610][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 630.263947][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 630.275028][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 630.313764][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 630.338268][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 630.357184][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 630.524290][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 630.537672][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 630.586932][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 630.607153][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 630.651550][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 630.690756][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.727584][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.872593][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.886479][ T3649] Bluetooth: hci1: command tx timeout [ 632.170728][T10502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.188504][ T5152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.226800][ T5152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.367439][T10502] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.396469][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.429104][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.447671][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.455622][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.477948][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.507509][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.957122][ T3698] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 632.989046][T10502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 633.039141][T10502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.316358][ T3698] usb 5-1: config 0 has no interfaces? [ 633.322013][ T3698] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 633.366323][ T3698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.445568][ T3698] usb 5-1: config 0 descriptor?? [ 633.669953][T10718] loop1: detected capacity change from 0 to 131072 [ 633.686927][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.696515][T10718] F2FS-fs (loop1): invalid crc value [ 633.702729][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.711485][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.718620][ T6182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.730428][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.739416][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.756697][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.763833][ T6182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.776229][T10718] F2FS-fs (loop1): Found nat_bits in checkpoint [ 633.840685][T10718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 633.879216][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.897261][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.920535][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.970513][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.017185][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.047445][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.066567][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.106840][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.115621][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.166994][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.242432][ T3698] usb 5-1: USB disconnect, device number 12 [ 634.508612][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 634.537102][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.545237][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.568889][ T8993] bio_check_eod: 65914 callbacks suppressed [ 634.568913][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.568913][ T8993] loop2: rw=3, sector=31979515847408, nr_sectors = 8388600 limit=2048 [ 634.587004][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.597473][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.597473][ T8993] loop2: rw=3, sector=31979524236008, nr_sectors = 8388600 limit=2048 [ 634.627697][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.629536][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.629536][ T8993] loop2: rw=3, sector=31979532624608, nr_sectors = 8388600 limit=2048 [ 634.663316][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.663316][ T8993] loop2: rw=3, sector=31979541013208, nr_sectors = 8388600 limit=2048 [ 634.688557][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.688557][ T8993] loop2: rw=3, sector=31979549401808, nr_sectors = 8388600 limit=2048 [ 634.744402][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.744402][ T8993] loop2: rw=3, sector=31979557790408, nr_sectors = 8388600 limit=2048 [ 634.785428][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.785428][ T8993] loop2: rw=3, sector=31979566179008, nr_sectors = 8388600 limit=2048 [ 634.813896][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.813896][ T8993] loop2: rw=3, sector=31979574567608, nr_sectors = 8388600 limit=2048 [ 634.836336][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.836336][ T8993] loop2: rw=3, sector=31979582956208, nr_sectors = 8388600 limit=2048 [ 634.860642][T10479] device veth0_vlan entered promiscuous mode [ 634.864099][ T8993] syz.2.1264: attempt to access beyond end of device [ 634.864099][ T8993] loop2: rw=3, sector=31979591344808, nr_sectors = 8388600 limit=2048 [ 634.878244][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.892125][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.917195][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.924771][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.117697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.125736][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.159398][T10745] loop4: detected capacity change from 0 to 1024 [ 635.180187][T10745] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 635.276405][T10745] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 635.314426][T10745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 635.461234][T10479] device veth1_vlan entered promiscuous mode [ 635.517503][T10745] loop4: detected capacity change from 1024 to 0 [ 637.346221][ T4390] loop: Write error at byte offset 9223372036854776831, length 1024. [ 637.359039][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.390164][T10752] syz.4.1645 sent an empty control message without MSG_MORE. [ 637.401042][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 637.410473][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 637.420617][T10745] EXT4-fs (loop4): I/O error while writing superblock [ 637.508970][ C1] I/O error, dev loop4, sector 160 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 637.519350][T10745] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-5 [ 637.561331][ C1] I/O error, dev loop4, sector 192 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 637.586209][T10745] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-5 [ 637.690611][T10283] EXT4-fs (loop4): unmounting filesystem. [ 637.735303][ T5152] loop: Write error at byte offset 9223372036854776831, length 1024. [ 637.776581][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 637.785464][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.806259][ C0] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 637.815735][ C0] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 637.824224][T10283] EXT4-fs (loop4): I/O error while writing superblock [ 637.984045][T10759] loop1: detected capacity change from 0 to 16 [ 637.993564][T10759] erofs: (device loop1): mounted with root inode @ nid 36. [ 638.038977][T10601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 638.080892][T10601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.311159][T10601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.362550][T10479] device veth0_macvtap entered promiscuous mode [ 638.393220][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 638.418679][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.457242][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.465713][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.487071][T10601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.636174][T10769] loop1: detected capacity change from 0 to 2048 [ 638.704924][T10769] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 639.038001][T10502] device veth0_vlan entered promiscuous mode [ 639.447609][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.463528][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.472318][ T6182] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.500504][T10479] device veth1_macvtap entered promiscuous mode [ 639.565785][T10502] device veth1_vlan entered promiscuous mode [ 639.576208][ T8993] bio_check_eod: 48329 callbacks suppressed [ 639.576226][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.576226][ T8993] loop2: rw=3, sector=32385012382808, nr_sectors = 8388600 limit=2048 [ 639.599032][T10774] loop1: detected capacity change from 0 to 512 [ 639.636885][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.636885][ T8993] loop2: rw=3, sector=32385020771408, nr_sectors = 8388600 limit=2048 [ 639.654595][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.654595][ T8993] loop2: rw=3, sector=32385029160008, nr_sectors = 8388600 limit=2048 [ 639.673144][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.673144][ T8993] loop2: rw=3, sector=32385037548608, nr_sectors = 8388600 limit=2048 [ 639.700750][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.700750][ T8993] loop2: rw=3, sector=32385045937208, nr_sectors = 8388600 limit=2048 [ 639.728415][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.728415][ T8993] loop2: rw=3, sector=32385054325808, nr_sectors = 8388600 limit=2048 [ 639.741225][T10774] EXT4-fs error (device loop1): __ext4_iget:5044: inode #14: block 1886221359: comm syz.1.1660: invalid block [ 639.745282][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.745282][ T8993] loop2: rw=3, sector=32385062714408, nr_sectors = 8388600 limit=2048 [ 639.772151][ T27] audit: type=1326 audit(1723058257.198:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10775 comm="syz.4.1653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f701cf779f9 code=0x0 [ 639.772173][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.772173][ T8993] loop2: rw=3, sector=32385071103008, nr_sectors = 8388600 limit=2048 [ 639.808973][T10774] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1660: couldn't read orphan inode 14 (err -117) [ 639.822003][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.822003][ T8993] loop2: rw=3, sector=32385079491608, nr_sectors = 8388600 limit=2048 [ 639.839936][ T8993] syz.2.1264: attempt to access beyond end of device [ 639.839936][ T8993] loop2: rw=3, sector=32385087880208, nr_sectors = 8388600 limit=2048 [ 639.854761][T10774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 639.864764][T10774] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 639.944110][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.969608][ T27] audit: type=1800 audit(1723058257.408:171): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1660" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 639.970732][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.011519][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.031984][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.045269][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.086397][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.125982][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.178783][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.200433][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.210992][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.220863][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.232156][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.244166][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.264281][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.275784][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.287075][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.302355][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.313232][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.324144][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.481723][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.756504][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.796123][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.848214][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.883611][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.934138][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.974889][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.987312][T10413] EXT4-fs (loop1): unmounting filesystem. [ 641.117429][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 641.137076][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.165269][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.174442][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.215793][T10479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.225724][T10479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.245683][T10479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.257371][T10479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.292811][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.302186][ T3662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.313342][T10502] device veth0_macvtap entered promiscuous mode [ 641.480740][T10502] device veth1_macvtap entered promiscuous mode [ 641.536770][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.747441][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.786495][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.826150][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.854518][T10786] loop1: detected capacity change from 0 to 40427 [ 641.861111][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.872161][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.889242][T10786] F2FS-fs (loop1): invalid crc value [ 641.894698][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.909423][T10786] F2FS-fs (loop1): Found nat_bits in checkpoint [ 641.917289][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.946164][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.956469][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 641.976191][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.986047][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.005533][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.027596][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.038867][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.050795][T10502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.058414][T10786] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 642.112027][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.130433][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.157936][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 642.166007][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 642.206704][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.216081][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.282395][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.315242][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.354132][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.369437][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.396279][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.407023][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.433925][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.477725][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.516220][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.536118][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.555864][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.580076][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.596315][T10502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.615827][T10502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.630139][T10502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.659690][T10601] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.780731][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.926768][T10793] loop4: detected capacity change from 0 to 2048 [ 643.002593][T10793] loop4: p1 < > p4 [ 643.018234][T10793] loop4: p4 size 8388608 extends beyond EOD, truncated [ 643.329677][ T3092] loop4: p1 < > p4 [ 643.542510][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.552480][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.563107][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.571868][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.577694][ T3092] loop4: p4 size 8388608 extends beyond EOD, truncated [ 643.579055][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.617216][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.656263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.696475][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.703615][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.740318][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 643.779783][T10502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.797095][T10283] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 643.805321][T10541] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.805352][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.846349][T10502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.855442][T10502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.856227][T10541] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.873501][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.905094][T10540] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 643.913480][T10502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.926429][T10541] Buffer I/O error on dev loop4p4, logical block 1, async page read [ 643.949224][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.975008][T10540] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 644.003385][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.026175][T10540] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 644.066365][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.075575][T10540] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 644.116453][T10540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.125644][T10540] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 644.137147][T10800] loop4: detected capacity change from 0 to 2048 [ 644.196395][T10800] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 644.231475][T10800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 644.250653][T10541] udevd[10541]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 644.276690][T10540] udevd[10540]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 644.379703][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 644.391964][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 644.434084][T10541] udevd[10541]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 644.450306][T10540] udevd[10540]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 644.485545][ T4793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.514973][T10541] udevd[10541]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 644.516800][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 644.530200][T10540] udevd[10540]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 644.535569][ T4793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.552594][T10283] EXT4-fs (loop4): unmounting filesystem. [ 644.569914][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 644.596227][ T8993] bio_check_eod: 78436 callbacks suppressed [ 644.596248][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.596248][ T8993] loop2: rw=3, sector=33043047721208, nr_sectors = 8388600 limit=2048 [ 644.598132][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 644.602205][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.602205][ T8993] loop2: rw=3, sector=33043056109808, nr_sectors = 8388600 limit=2048 [ 644.634738][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 644.676605][T10541] udevd[10541]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 644.689985][T10540] udevd[10540]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 644.715366][ T4086] device hsr_slave_0 left promiscuous mode [ 644.741500][ T4086] device hsr_slave_1 left promiscuous mode [ 644.759400][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.759400][ T8993] loop2: rw=3, sector=33043064498408, nr_sectors = 8388600 limit=2048 [ 644.775046][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.791908][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.813642][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.826220][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.826220][ T8993] loop2: rw=3, sector=33043072887008, nr_sectors = 8388600 limit=2048 [ 644.831702][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.851968][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.851968][ T8993] loop2: rw=3, sector=33043081275608, nr_sectors = 8388600 limit=2048 [ 644.876580][ T4086] device bridge_slave_1 left promiscuous mode [ 644.882800][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.890724][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.890724][ T8993] loop2: rw=3, sector=33043089664208, nr_sectors = 8388600 limit=2048 [ 644.921926][ T4086] device bridge_slave_0 left promiscuous mode [ 644.933839][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.936252][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.936252][ T8993] loop2: rw=3, sector=33043098052808, nr_sectors = 8388600 limit=2048 [ 644.979884][ T4086] device hsr_slave_0 left promiscuous mode [ 644.981097][ T8993] syz.2.1264: attempt to access beyond end of device [ 644.981097][ T8993] loop2: rw=3, sector=33043106441408, nr_sectors = 8388600 limit=2048 [ 645.000729][ T4086] device hsr_slave_1 left promiscuous mode [ 645.018908][ T8993] syz.2.1264: attempt to access beyond end of device [ 645.018908][ T8993] loop2: rw=3, sector=33043114830008, nr_sectors = 8388600 limit=2048 [ 645.034189][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.056394][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.059506][ T8993] syz.2.1264: attempt to access beyond end of device [ 645.059506][ T8993] loop2: rw=3, sector=33043123218608, nr_sectors = 8388600 limit=2048 [ 645.080258][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.085159][T10802] loop1: detected capacity change from 0 to 32768 [ 645.109788][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.157857][ T4086] device bridge_slave_1 left promiscuous mode [ 645.175679][T10802] XFS (loop1): Mounting V5 Filesystem [ 645.188236][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.207406][ T4086] device bridge_slave_0 left promiscuous mode [ 645.213708][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.229910][ T4086] device hsr_slave_0 left promiscuous mode [ 645.240624][ T4086] device hsr_slave_1 left promiscuous mode [ 645.283918][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.318437][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.350290][T10802] XFS (loop1): Ending clean mount [ 645.360653][T10802] XFS (loop1): Quotacheck needed: Please wait. [ 645.377007][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.384651][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.416640][ T4086] device bridge_slave_1 left promiscuous mode [ 645.433118][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.468504][ T4086] device bridge_slave_0 left promiscuous mode [ 645.474789][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.480661][T10802] XFS (loop1): Quotacheck: Done. [ 645.655710][T10807] loop4: detected capacity change from 0 to 32768 [ 645.699619][T10413] XFS (loop1): Unmounting Filesystem [ 645.710390][T10807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1659 (10807) [ 645.748832][T10807] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 645.786537][T10807] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 645.795285][T10807] BTRFS info (device loop4): using free space tree [ 645.858755][ T4086] device veth1_macvtap left promiscuous mode [ 645.864833][ T4086] device veth0_macvtap left promiscuous mode [ 645.896406][ T4086] device veth1_vlan left promiscuous mode [ 645.920655][ T4086] device veth0_vlan left promiscuous mode [ 645.957953][ T4086] device veth1_macvtap left promiscuous mode [ 645.964044][ T4086] device veth0_macvtap left promiscuous mode [ 646.026308][ T4086] device veth1_vlan left promiscuous mode [ 646.046299][ T4086] device veth0_vlan left promiscuous mode [ 646.107258][ T4086] device veth1_macvtap left promiscuous mode [ 646.113346][ T4086] device veth0_macvtap left promiscuous mode [ 646.146471][T10807] BTRFS info (device loop4): enabling ssd optimizations [ 646.160271][ T4086] device veth1_vlan left promiscuous mode [ 646.186276][ T4086] device veth0_vlan left promiscuous mode [ 646.217696][T10283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.086473][T10846] loop4: detected capacity change from 0 to 2048 [ 647.127707][T10846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 648.982614][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 649.058680][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 649.119505][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.177377][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.596185][ T8993] bio_check_eod: 145359 callbacks suppressed [ 649.596206][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.596206][ T8993] loop2: rw=3, sector=34262490114608, nr_sectors = 8388600 limit=2048 [ 649.617521][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.617521][ T8993] loop2: rw=3, sector=34262498503208, nr_sectors = 8388600 limit=2048 [ 649.632830][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.632830][ T8993] loop2: rw=3, sector=34262506891808, nr_sectors = 8388600 limit=2048 [ 649.648124][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.648124][ T8993] loop2: rw=3, sector=34262515280408, nr_sectors = 8388600 limit=2048 [ 649.666473][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.666473][ T8993] loop2: rw=3, sector=34262523669008, nr_sectors = 8388600 limit=2048 [ 649.681657][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.681657][ T8993] loop2: rw=3, sector=34262532057608, nr_sectors = 8388600 limit=2048 [ 649.697276][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.697276][ T8993] loop2: rw=3, sector=34262540446208, nr_sectors = 8388600 limit=2048 [ 649.712488][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.712488][ T8993] loop2: rw=3, sector=34262548834808, nr_sectors = 8388600 limit=2048 [ 649.728817][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.728817][ T8993] loop2: rw=3, sector=34262557223408, nr_sectors = 8388600 limit=2048 [ 649.743975][ T8993] syz.2.1264: attempt to access beyond end of device [ 649.743975][ T8993] loop2: rw=3, sector=34262565612008, nr_sectors = 8388600 limit=2048 [ 650.290583][ T4086] bond0 (unregistering): Released all slaves [ 651.187256][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 651.252240][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 651.339283][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.433334][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.249965][ T4086] bond0 (unregistering): Released all slaves [ 653.011305][ T4086] team0 (unregistering): Port device team_slave_1 removed [ 653.080601][ T4086] team0 (unregistering): Port device team_slave_0 removed [ 653.139817][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.246783][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.129647][ T4086] bond0 (unregistering): Released all slaves [ 654.263211][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.307313][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 654.315577][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.327047][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.337781][T10839] device team_slave_0 entered promiscuous mode [ 654.344477][T10839] device team_slave_1 entered promiscuous mode [ 654.383363][T10841] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 654.422792][T10841] device team_slave_0 left promiscuous mode [ 654.446417][T10841] device team_slave_1 left promiscuous mode [ 654.514047][T10841] device team_slave_0 entered promiscuous mode [ 654.520428][T10841] device team_slave_1 entered promiscuous mode [ 654.548091][T10841] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.587207][T10841] bond0: (slave team0): Enslaving as an active interface with an up link [ 654.601232][T10601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.613787][ T8993] bio_check_eod: 245565 callbacks suppressed [ 654.613804][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.613804][ T8993] loop2: rw=3, sector=36322520559608, nr_sectors = 8388600 limit=2048 [ 654.614924][T10601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.630130][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.630130][ T8993] loop2: rw=3, sector=36322528948208, nr_sectors = 8388600 limit=2048 [ 654.648009][ T3748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.674548][T10839] device team_slave_0 left promiscuous mode [ 654.680841][T10839] device team_slave_1 left promiscuous mode [ 654.695068][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.705653][ T3748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.707685][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.730721][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.730721][ T8993] loop2: rw=3, sector=36322537336808, nr_sectors = 8388600 limit=2048 [ 654.759368][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 654.826010][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.826010][ T8993] loop2: rw=3, sector=36322545725408, nr_sectors = 8388600 limit=2048 [ 654.873983][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.919606][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.919606][ T8993] loop2: rw=3, sector=36322554114008, nr_sectors = 8388600 limit=2048 [ 654.961793][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.996712][ T8993] syz.2.1264: attempt to access beyond end of device [ 654.996712][ T8993] loop2: rw=3, sector=36322562502608, nr_sectors = 8388600 limit=2048 [ 655.018229][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.052253][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.076754][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.107609][ T8993] syz.2.1264: attempt to access beyond end of device [ 655.107609][ T8993] loop2: rw=3, sector=36322570891208, nr_sectors = 8388600 limit=2048 [ 655.137227][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 655.210468][ T8993] syz.2.1264: attempt to access beyond end of device [ 655.210468][ T8993] loop2: rw=3, sector=36322579279808, nr_sectors = 8388600 limit=2048 [ 655.263672][ T8993] syz.2.1264: attempt to access beyond end of device [ 655.263672][ T8993] loop2: rw=3, sector=36322587668408, nr_sectors = 8388600 limit=2048 [ 655.332808][T10871] loop4: detected capacity change from 0 to 1024 [ 655.365323][ T8993] syz.2.1264: attempt to access beyond end of device [ 655.365323][ T8993] loop2: rw=3, sector=36322596057008, nr_sectors = 8388600 limit=2048 [ 655.411474][T10871] hfsplus: bad catalog entry type [ 655.560754][ T5152] hfsplus: b-tree write err: -5, ino 4 [ 655.623280][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.636222][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.649864][T10882] loop1: detected capacity change from 0 to 190 [ 655.661457][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.712902][T10882] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 655.721386][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.744458][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.778046][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 655.807296][T10884] loop4: detected capacity change from 0 to 2048 [ 655.816268][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 655.834978][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.845040][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.877480][T10601] device veth0_vlan entered promiscuous mode [ 655.877517][T10882] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 655.898604][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.909359][T10882] ntfs: volume version 3.1. [ 655.911177][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.916901][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 655.922824][T10884] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.1674: bad orphan inode 8192 [ 655.936402][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 655.953487][T10882] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 655.972558][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 655.996058][T10884] EXT4-fs (loop4): Remounting filesystem read-only [ 656.002514][T10601] device veth1_vlan entered promiscuous mode [ 656.009502][T10884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 656.075765][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 656.084225][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.093159][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.110423][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.112226][T10882] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 656.138237][T10882] ntfs: (device loop1): load_system_files(): Failed to load root directory. [ 656.138378][T10601] device veth0_macvtap entered promiscuous mode [ 656.148787][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 656.205748][T10601] device veth1_macvtap entered promiscuous mode [ 656.280361][T10882] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 656.315992][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.324127][T10283] EXT4-fs (loop4): unmounting filesystem. [ 656.338261][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.430513][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.487938][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.498568][T10890] Failed to get privilege flags for destination (handle=0x0:0x0) [ 656.514548][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.519773][T10893] loop4: detected capacity change from 0 to 256 [ 656.525056][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.547930][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.586699][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.597559][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.604534][T10893] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 656.621390][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.641626][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.686305][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.844753][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.926403][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.966161][ T4058] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 656.989128][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.263922][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.679637][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.689643][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.700228][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.710152][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.754618][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.774986][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.807311][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.932108][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.949492][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.984303][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.996397][ T4058] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=f0.db [ 658.005474][ T4058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.015168][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.035298][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.043303][ T4058] usb 3-1: Product: syz [ 658.056170][ T4058] usb 3-1: Manufacturer: syz [ 658.064011][T10601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.081370][ T4058] usb 3-1: SerialNumber: syz [ 658.089089][T10601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.109090][ T4058] usb 3-1: config 0 descriptor?? [ 658.114234][T10601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.130722][T10601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.575365][ T3748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.623710][ T3748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.656107][ T4061] usb 3-1: USB disconnect, device number 14 [ 658.691851][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.718218][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.744577][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.757161][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 658.796641][ T5069] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 658.829295][T10922] loop3: detected capacity change from 0 to 4096 [ 658.870781][T10922] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 659.042850][T10926] loop0: detected capacity change from 0 to 128 [ 659.070923][ T5069] usb 2-1: Using ep0 maxpacket: 16 [ 659.088976][T10926] EXT4-fs (loop0): DAX unsupported by block device. [ 659.216420][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 659.236676][ T5069] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 659.260654][T10929] netlink: 'syz.4.1688': attribute type 6 has an invalid length. [ 659.271821][ T5069] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 659.319019][T10926] loop0: detected capacity change from 0 to 128 [ 659.466530][ T5069] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 659.475711][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 659.533286][ T5069] usb 2-1: Product: syz [ 659.546600][ T5069] usb 2-1: Manufacturer: syz [ 659.551246][ T5069] usb 2-1: SerialNumber: syz [ 659.594652][ T5069] usb 2-1: config 0 descriptor?? [ 659.635907][T10937] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 659.687145][ T5069] usb 2-1: NFC: intf ffff888061513000 id ffffffff8dbda1e0 [ 659.706366][ T8993] bio_check_eod: 45340 callbacks suppressed [ 659.706386][ T8993] syz.2.1264: attempt to access beyond end of device [ 659.706386][ T8993] loop2: rw=3, sector=36702935181008, nr_sectors = 8388600 limit=2048 [ 659.832696][ T8993] syz.2.1264: attempt to access beyond end of device [ 659.832696][ T8993] loop2: rw=3, sector=36702943569608, nr_sectors = 8388600 limit=2048 [ 659.956623][ T8993] syz.2.1264: attempt to access beyond end of device [ 659.956623][ T8993] loop2: rw=3, sector=36702951958208, nr_sectors = 8388600 limit=2048 [ 660.055856][T10944] netlink: 'syz.0.1691': attribute type 4 has an invalid length. [ 660.687523][ T8993] syz.2.1264: attempt to access beyond end of device [ 660.687523][ T8993] loop2: rw=3, sector=36702960346808, nr_sectors = 8388600 limit=2048 [ 660.712661][ T4061] usb 2-1: USB disconnect, device number 15 [ 660.736435][ T8993] syz.2.1264: attempt to access beyond end of device [ 660.736435][ T8993] loop2: rw=3, sector=36702968735408, nr_sectors = 8388600 limit=2048 [ 660.883560][ T8993] syz.2.1264: attempt to access beyond end of device [ 660.883560][ T8993] loop2: rw=3, sector=36702977124008, nr_sectors = 8388600 limit=2048 [ 660.919225][ T8993] syz.2.1264: attempt to access beyond end of device [ 660.919225][ T8993] loop2: rw=3, sector=36702985512608, nr_sectors = 8388600 limit=2048 [ 661.014005][ T8993] syz.2.1264: attempt to access beyond end of device [ 661.014005][ T8993] loop2: rw=3, sector=36702993901208, nr_sectors = 8388600 limit=2048 [ 661.065386][ T8993] syz.2.1264: attempt to access beyond end of device [ 661.065386][ T8993] loop2: rw=3, sector=36703002289808, nr_sectors = 8388600 limit=2048 [ 661.136277][ T8993] syz.2.1264: attempt to access beyond end of device [ 661.136277][ T8993] loop2: rw=3, sector=36703010678408, nr_sectors = 8388600 limit=2048 [ 661.625493][T10967] loop4: detected capacity change from 0 to 1024 [ 661.871535][ T9] hfsplus: b-tree write err: -5, ino 4 [ 662.011645][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 662.011664][ T27] audit: type=1326 audit(1723058279.448:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf779f9 code=0x7ffc0000 [ 662.127550][ T27] audit: type=1326 audit(1723058279.458:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f701cf779f9 code=0x7ffc0000 [ 662.212724][ T27] audit: type=1326 audit(1723058279.458:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf779f9 code=0x7ffc0000 [ 662.220995][T10958] loop3: detected capacity change from 0 to 32768 [ 662.326177][ T27] audit: type=1326 audit(1723058279.468:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.4.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f701cf779f9 code=0x7ffc0000 [ 662.452389][T10958] XFS (loop3): Mounting V5 Filesystem [ 662.576560][T10989] loop1: detected capacity change from 0 to 256 [ 662.670798][T10989] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 662.684264][T10958] XFS (loop3): Ending clean mount [ 662.713954][T10958] XFS (loop3): Quotacheck needed: Please wait. [ 662.862414][T10958] XFS (loop3): Quotacheck: Done. [ 663.134484][T10983] loop4: detected capacity change from 0 to 32768 [ 663.178308][T10502] XFS (loop3): Unmounting Filesystem [ 663.235003][T10983] XFS (loop4): Mounting V5 Filesystem [ 663.274958][ C0] eth0: bad gso: type: 1, size: 1408 [ 663.474494][T10983] XFS (loop4): Ending clean mount [ 663.809113][T10283] XFS (loop4): Unmounting Filesystem [ 663.825715][T11012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 663.946477][ T5069] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 664.316297][ T5069] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.351052][ T5069] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.456337][ T5069] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.501202][ T5069] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.506200][ T4058] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 664.526138][ T5069] usb 3-1: SerialNumber: syz [ 664.717219][ T8993] bio_check_eod: 39746 callbacks suppressed [ 664.717238][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.717238][ T8993] loop2: rw=3, sector=37036432362608, nr_sectors = 8388600 limit=2048 [ 664.773960][T11024] loop3: detected capacity change from 0 to 16 [ 664.790641][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.790641][ T8993] loop2: rw=3, sector=37036440751208, nr_sectors = 8388600 limit=2048 [ 664.850213][T11024] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 664.862994][ T5069] usb 3-1: 0:2 : does not exist [ 664.873689][ T5069] usb 3-1: unit 255 not found! [ 664.906345][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.906345][ T8993] loop2: rw=3, sector=37036449139808, nr_sectors = 8388600 limit=2048 [ 664.926701][ T4058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 664.953608][ T4058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 664.959005][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.959005][ T8993] loop2: rw=3, sector=37036457528408, nr_sectors = 8388600 limit=2048 [ 664.978727][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.978727][ T8993] loop2: rw=3, sector=37036465917008, nr_sectors = 8388600 limit=2048 [ 664.998058][ T8993] syz.2.1264: attempt to access beyond end of device [ 664.998058][ T8993] loop2: rw=3, sector=37036474305608, nr_sectors = 8388600 limit=2048 [ 665.004102][ T4058] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=71.94 [ 665.013647][ T8993] syz.2.1264: attempt to access beyond end of device [ 665.013647][ T8993] loop2: rw=3, sector=37036482694208, nr_sectors = 8388600 limit=2048 [ 665.029506][ T4058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.042948][ T8993] syz.2.1264: attempt to access beyond end of device [ 665.042948][ T8993] loop2: rw=3, sector=37036491082808, nr_sectors = 8388600 limit=2048 [ 665.056418][ T4058] usb 2-1: config 0 descriptor?? [ 665.066468][ T8993] syz.2.1264: attempt to access beyond end of device [ 665.066468][ T8993] loop2: rw=3, sector=37036499471408, nr_sectors = 8388600 limit=2048 [ 665.103580][T10853] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 665.136613][ T5069] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 665.148153][ T4058] ttusbir 2-1:0.0: cannot find expected altsetting [ 665.228268][ T5069] usb 3-1: USB disconnect, device number 15 [ 665.244640][ T8993] syz.2.1264: attempt to access beyond end of device [ 665.244640][ T8993] loop2: rw=3, sector=37036507860008, nr_sectors = 8388600 limit=2048 [ 665.439031][ T4058] usb 2-1: USB disconnect, device number 16 [ 665.579192][T10916] udevd[10916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.610377][T11033] loop4: detected capacity change from 0 to 2048 [ 665.620284][T11036] loop3: detected capacity change from 0 to 16 [ 665.671555][T11033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 665.712268][T11036] erofs: (device loop3): mounted with root inode @ nid 36. [ 666.326109][T11045] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.342019][T11045] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.355030][T11045] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 666.366385][T11046] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.378044][T11046] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.389703][T11046] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 666.448418][T11045] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.466109][T11045] erofs: (device loop3): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 666.478337][T11045] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-95] [ 667.182820][ T4058] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 667.321106][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 668.071142][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1734'. [ 668.166611][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1734'. [ 668.266276][ T4058] usb 2-1: Using ep0 maxpacket: 32 [ 668.416544][ T4058] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 668.426056][T10283] EXT4-fs (loop4): unmounting filesystem. [ 668.435880][ T4058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.451647][T11079] loop3: detected capacity change from 0 to 2048 [ 668.502638][ T4058] usb 2-1: config 0 descriptor?? [ 668.566564][ T4058] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 668.569765][T11079] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 668.671319][T10502] EXT4-fs (loop3): unmounting filesystem. [ 668.833168][T11090] device ipvlan2 entered promiscuous mode [ 668.857964][T11096] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffc [ 669.004353][T11102] Bluetooth: MGMT ver 1.22 [ 669.124805][T11106] loop0: detected capacity change from 0 to 128 [ 669.290725][ T4775] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 669.517887][T11112] syz.0.1749 (11112): /proc/11105/oom_adj is deprecated, please use /proc/11105/oom_score_adj instead. [ 669.727100][ T8993] bio_check_eod: 49101 callbacks suppressed [ 669.727409][ T8993] syz.2.1264: attempt to access beyond end of device [ 669.727409][ T8993] loop2: rw=3, sector=37448404897208, nr_sectors = 8388600 limit=2048 [ 670.092164][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.092164][ T8993] loop2: rw=3, sector=37448413285808, nr_sectors = 8388600 limit=2048 [ 670.147744][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.147744][ T8993] loop2: rw=3, sector=37448421674408, nr_sectors = 8388600 limit=2048 [ 670.184493][ T4775] usb 4-1: Using ep0 maxpacket: 8 [ 670.245553][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.245553][ T8993] loop2: rw=3, sector=37448430063008, nr_sectors = 8388600 limit=2048 [ 670.274475][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.274475][ T8993] loop2: rw=3, sector=37448438451608, nr_sectors = 8388600 limit=2048 [ 670.313173][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.313173][ T8993] loop2: rw=3, sector=37448446840208, nr_sectors = 8388600 limit=2048 [ 670.336509][ T4775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.362098][ T4775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.366227][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.366227][ T8993] loop2: rw=3, sector=37448455228808, nr_sectors = 8388600 limit=2048 [ 670.401736][ T4775] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 670.435302][ T4775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.454232][ T4775] usb 4-1: config 0 descriptor?? [ 670.496436][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.496436][ T8993] loop2: rw=3, sector=37448463617408, nr_sectors = 8388600 limit=2048 [ 670.557968][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.557968][ T8993] loop2: rw=3, sector=37448472006008, nr_sectors = 8388600 limit=2048 [ 670.620282][ T8993] syz.2.1264: attempt to access beyond end of device [ 670.620282][ T8993] loop2: rw=3, sector=37448480394608, nr_sectors = 8388600 limit=2048 [ 670.640502][ T4058] usb 2-1: USB disconnect, device number 17 [ 670.928317][ T4775] ryos 0003:1E7D:3232.000B: unknown main item tag 0x0 [ 670.962541][ T4775] ryos 0003:1E7D:3232.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.3-1/input0 [ 671.130126][ T4775] usb 4-1: USB disconnect, device number 19 [ 671.770452][T11138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1763'. [ 671.800339][T11140] loop4: detected capacity change from 0 to 164 [ 671.887090][T11140] Unsupported NM flag settings (8) [ 671.992357][T11128] loop0: detected capacity change from 0 to 40427 [ 672.071238][T11128] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 672.086323][T11128] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 672.143971][T11128] F2FS-fs (loop0): invalid crc_offset: 5705724 [ 672.159732][ T28] INFO: task segctord:9002 blocked for more than 143 seconds. [ 672.178129][ T28] Not tainted 6.1.103-syzkaller #0 [ 672.184041][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 672.203394][T11128] F2FS-fs (loop0): Found nat_bits in checkpoint [ 672.216346][ T28] task:segctord state:D stack:28056 pid:9002 ppid:2 flags:0x00004000 [ 672.255201][ T28] Call Trace: [ 672.271201][ T28] [ 672.283268][ T28] __schedule+0x143f/0x4570 [ 672.303182][ T28] ? release_firmware_map_entry+0x186/0x186 [ 672.323073][ T28] ? print_irqtrace_events+0x210/0x210 [ 672.340372][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 672.355813][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 672.362316][T11128] F2FS-fs (loop0): recover fsync data on readonly fs [ 672.372473][ T28] schedule+0xbf/0x180 [ 672.380415][T11128] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 672.388114][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 672.410129][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 672.416351][T11128] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 672.424747][ T28] ? down_write_killable_nested+0x90/0x90 [ 672.440680][ T28] ? read_lock_is_recursive+0x10/0x10 [ 672.455549][ T28] ? rcu_is_watching+0x11/0xb0 [ 672.460832][ T28] nilfs_transaction_lock+0x25c/0x4f0 [ 672.466601][ T28] nilfs_segctor_thread+0x547/0x11a0 [ 672.472024][ T28] ? print_irqtrace_events+0x210/0x210 [ 672.478036][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 672.483365][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 672.489720][ T28] ? release_firmware_map_entry+0x186/0x186 [ 672.495730][ T28] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 672.502243][ T28] ? wake_bit_function+0x210/0x210 [ 672.514566][ T28] ? _raw_spin_unlock+0x40/0x40 [ 672.525634][ T28] ? __kthread_parkme+0x168/0x1c0 [ 672.531334][ T28] kthread+0x28d/0x320 [ 672.535555][T11128] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 672.543988][ T28] ? nilfs_iput_work_func+0x70/0x70 [ 672.552325][ T28] ? kthread_blkcg+0xd0/0xd0 [ 672.568632][ T28] ret_from_fork+0x1f/0x30 [ 672.573697][ T28] [ 672.577557][ T28] [ 672.577557][ T28] Showing all locks held in the system: [ 672.585568][ T28] 3 locks held by kworker/u4:0/9: [ 672.597029][ T28] #0: ffff888023832938 ((wq_completion)phy92){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.607678][ T28] #1: ffffc900000e7d20 ((work_completion)(&sdata->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.631300][ T28] #2: ffff888057884d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_rx_queued_mgmt+0x118/0x2dd0 [ 672.651906][ T28] 1 lock held by rcu_tasks_kthre/12: [ 672.657535][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 672.668336][ T28] 1 lock held by rcu_tasks_trace/13: [ 672.673757][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 672.685177][ T28] 1 lock held by khungtaskd/28: [ 672.690565][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 672.700834][ T28] 1 lock held by syslogd/3074: [ 672.705732][ T28] #0: ffff8880b983a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 672.716033][ T28] 2 locks held by getty/3394: [ 672.721604][ T28] #0: ffff8880290b7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 672.733255][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 672.744312][ T28] 3 locks held by kworker/u4:7/3753: [ 672.749932][ T28] #0: ffff888012879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.761282][ T28] #1: ffffc900046cfd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.772699][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 672.784521][ T28] 2 locks held by kworker/0:14/4775: [ 672.790155][ T28] #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.801711][ T28] #1: ffffc900035dfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.813527][ T28] 3 locks held by kworker/0:18/5069: [ 672.819205][ T28] #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.829956][ T28] #1: ffffc9000462fd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 672.841901][ T28] #2: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 672.853196][ T28] 4 locks held by syz.2.1264/8993: [ 672.864203][ T28] 1 lock held by segctord/9002: [ 672.870693][ T28] #0: ffff88807956c2a0 (&nilfs->ns_segctor_sem){++++}-{3:3}, at: nilfs_transaction_lock+0x25c/0x4f0 [ 672.888014][ T28] 5 locks held by syz.2.1769/11153: [ 672.893376][ T28] #0: ffffffff8e556c50 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 672.909848][ T28] #1: ffffffff8e4f7c28 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5b/0x8a0 [ 672.922602][ T28] #2: ffff88804d5087c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: nl80211_pre_doit+0x58b/0x8a0 [ 672.934892][ T28] #3: ffff888057884d40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_leave_ibss+0x4c/0x70 [ 672.944868][ T28] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 672.956258][ T28] [ 672.958787][ T28] ============================================= [ 672.958787][ T28] [ 672.968848][ T28] NMI backtrace for cpu 1 [ 672.973211][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 672.981139][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 672.991228][ T28] Call Trace: [ 672.994529][ T28] [ 672.997498][ T28] dump_stack_lvl+0x1e3/0x2cb [ 673.002258][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 673.007752][ T28] ? panic+0x764/0x764 [ 673.011841][ T28] ? vprintk_emit+0x622/0x740 [ 673.016580][ T28] ? printk_sprint+0x490/0x490 [ 673.021414][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 673.026548][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 673.031506][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 673.037677][ T28] ? _printk+0xd1/0x111 [ 673.041881][ T28] ? panic+0x764/0x764 [ 673.046060][ T28] ? __wake_up_klogd+0xcc/0x100 [ 673.050929][ T28] ? panic+0x764/0x764 [ 673.055018][ T28] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 673.061184][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 673.067275][ T28] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 673.073379][ T28] watchdog+0xf88/0xfd0 [ 673.077642][ T28] ? watchdog+0x1f8/0xfd0 [ 673.082005][ T28] kthread+0x28d/0x320 [ 673.086109][ T28] ? hungtask_pm_notify+0x50/0x50 [ 673.091157][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.095762][ T28] ret_from_fork+0x1f/0x30 [ 673.100227][ T28] [ 673.103943][ T28] Sending NMI from CPU 1 to CPUs 0: [ 673.109500][ C0] NMI backtrace for cpu 0 [ 673.109512][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.103-syzkaller #0 [ 673.109530][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 673.109541][ C0] Workqueue: phy62 ieee80211_iface_work [ 673.109569][ C0] RIP: 0010:kasan_check_range+0x5f/0x290 [ 673.109588][ C0] Code: eb 03 49 b8 00 00 00 00 00 fc ff df 4e 8d 0c 03 4c 8d 54 37 ff 49 c1 ea 03 49 bb 01 00 00 00 00 fc ff df 4f 8d 34 1a 4c 89 f5 <4c> 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 [ 673.109603][ C0] RSP: 0018:ffffc900001072d8 EFLAGS: 00000a03 [ 673.109617][ C0] RAX: 0000000000000001 RBX: 1ffff92000020ec4 RCX: ffffffff8a2ef456 [ 673.109629][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffc90000107620 [ 673.109641][ C0] RBP: fffff52000020ec5 R08: dffffc0000000000 R09: fffff52000020ec4 [ 673.109654][ C0] R10: 1ffff92000020ec4 R11: dffffc0000000001 R12: 0000000000000004 [ 673.109666][ C0] R13: 0000000000000006 R14: fffff52000020ec5 R15: ffff88807ce8388d [ 673.109678][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 673.109693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 673.109705][ C0] CR2: 00005555574da5c8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 673.109720][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 673.109730][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 673.109741][ C0] Call Trace: [ 673.109746][ C0] [ 673.109753][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 673.109779][ C0] ? read_lock_is_recursive+0x10/0x10 [ 673.109807][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 673.109833][ C0] ? nmi_handle+0x25/0x440 [ 673.109867][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 673.109893][ C0] ? nmi_handle+0x12e/0x440 [ 673.109920][ C0] ? nmi_handle+0x25/0x440 [ 673.109945][ C0] ? kasan_check_range+0x5f/0x290 [ 673.109961][ C0] ? default_do_nmi+0x62/0x150 [ 673.109988][ C0] ? exc_nmi+0xa8/0x100 [ 673.110013][ C0] ? end_repeat_nmi+0x16/0x31 [ 673.110040][ C0] ? _ieee802_11_parse_elems_full+0x816/0x3880 [ 673.110069][ C0] ? kasan_check_range+0x5f/0x290 [ 673.110086][ C0] ? kasan_check_range+0x5f/0x290 [ 673.110104][ C0] ? kasan_check_range+0x5f/0x290 [ 673.110121][ C0] [ 673.110126][ C0] [ 673.110132][ C0] _ieee802_11_parse_elems_full+0x816/0x3880 [ 673.110201][ C0] ? ieee802_11_parse_elems_full+0x1380/0x1380 [ 673.110229][ C0] ? ieee802_11_parse_elems_full+0xc4/0x1380 [ 673.110257][ C0] ? rcu_is_watching+0x11/0xb0 [ 673.110272][ C0] ? cfg80211_find_elem_match+0x170/0x1a0 [ 673.110298][ C0] ? __kmalloc+0xe2/0x230 [ 673.110318][ C0] ieee802_11_parse_elems_full+0xd60/0x1380 [ 673.110346][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 673.110372][ C0] ? rcu_is_watching+0x11/0xb0 [ 673.110388][ C0] ? trace_contention_end+0x61/0x170 [ 673.110410][ C0] ? __mutex_lock+0x2f7/0xd80 [ 673.110443][ C0] ? reacquire_held_locks+0x660/0x660 [ 673.110472][ C0] ? ieee80211_queue_delayed_work+0x160/0x160 [ 673.110500][ C0] ? mutex_lock_nested+0x10/0x10 [ 673.110526][ C0] ? mark_lock+0x9a/0x340 [ 673.110557][ C0] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 673.110578][ C0] ? __lock_acquire+0x125b/0x1f80 [ 673.110611][ C0] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 673.110634][ C0] ? mark_lock+0x9a/0x340 [ 673.110661][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 673.110688][ C0] ? print_irqtrace_events+0x210/0x210 [ 673.110713][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 673.110733][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 673.110752][ C0] ? skb_dequeue+0x10f/0x140 [ 673.110770][ C0] ieee80211_iface_work+0x7aa/0xce0 [ 673.110793][ C0] ? process_one_work+0x7a9/0x11d0 [ 673.110812][ C0] process_one_work+0x8a9/0x11d0 [ 673.110841][ C0] ? worker_detach_from_pool+0x260/0x260 [ 673.110864][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 673.110882][ C0] ? kthread_data+0x4e/0xc0 [ 673.110910][ C0] ? wq_worker_running+0x97/0x190 [ 673.110939][ C0] worker_thread+0xa47/0x1200 [ 673.110972][ C0] kthread+0x28d/0x320 [ 673.110986][ C0] ? worker_clr_flags+0x190/0x190 [ 673.111005][ C0] ? kthread_blkcg+0xd0/0xd0 [ 673.111021][ C0] ret_from_fork+0x1f/0x30 [ 673.111052][ C0] [ 673.547457][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 673.554348][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.103-syzkaller #0 [ 673.562273][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 673.572351][ T28] Call Trace: [ 673.575657][ T28] [ 673.578695][ T28] dump_stack_lvl+0x1e3/0x2cb [ 673.583412][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 673.588904][ T28] ? panic+0x764/0x764 [ 673.592999][ T28] ? llist_add_batch+0x160/0x1d0 [ 673.597960][ T28] ? vscnprintf+0x59/0x80 [ 673.602308][ T28] panic+0x318/0x764 [ 673.606224][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 673.612412][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 673.617808][ T28] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 673.623982][ T28] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 673.630170][ T28] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 673.636371][ T28] watchdog+0xfc7/0xfd0 [ 673.640578][ T28] ? watchdog+0x1f8/0xfd0 [ 673.644971][ T28] kthread+0x28d/0x320 [ 673.649052][ T28] ? hungtask_pm_notify+0x50/0x50 [ 673.654108][ T28] ? kthread_blkcg+0xd0/0xd0 [ 673.659123][ T28] ret_from_fork+0x1f/0x30 [ 673.663579][ T28] [ 673.666886][ T28] Kernel Offset: disabled [ 673.671217][ T28] Rebooting in 86400 seconds..