last executing test programs: 42.327273595s ago: executing program 1 (id=169): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$eJzs3U2MG1cdAPBn73rzWeKUhC5paBMKbfnobrNZwkcETdVciJqKW6WKS5SmJSINiFSCVj0kOXGjVRWufIhTLxUgJHpBUU9cKtFIXHoqCHEgClIlDqWQLIr3Pa/3H5uxd5P1ev37SW+fZ/5jvzfe8Xg8M++9BIyteuvv/Px0LaVLb71+9B8P/n3LzTmPtZdotv5Odkw1Ukq1PD0ZXu/9icX8+gevnOyW19Jc62+ZTk9daz93W0rpfNqXLqdm2nPpymvvzD15/MKxi/vffePw1Tuz9gAAMF6+dfnw/O6//OnenR+9ed+RtKk9vxyfN/P09nzcfyQf+Jfj/3paPl3rSJ2mwnKTOdXDchNdlusspxGWm+xR/lR43UaP5TZVlD/RMa/besMoK9txM9XqM8um6/WZmcXf5Kn1u36qNnP29Jnnzg2posBt96/7U0r7JEkax7SwY9h7IIBF8XrhLc7HMwur0361yf7Kv/Z4vfvz4TZY6+1f+aNV/q8u2ONw+2zUramsV/kcbc/T8TpCvH9p0M9/eb14PaLRZz17XUcYlesLveo5scb1WKle9Y/bxUb19ZyX9+EbId75+Yn/01H5HwPdfej8vySNbVoY9g4IWLfifXMLWYnH+/pifFNFfHNFfEtFfGtFfFtFHMbZb1/8SXq1tvQ7P/6mH/R8WDnPdlfOPzZgfeL5yEHLj/f9Dmq15cf7iWE9+/2Jp0995dlnrize/19rb/838va+L08382frcl6gnC+M59Xb9/43l5dT77Hc3aE+d3VZvvV41/LlaruWXid17Gduqcf08uft6LXc3uXLNcNyW3LaHOobj0+2hueV44+yXy3v12RY30ZYj6lQj7Jf2ZnzWA9YibI99rr/v2yf06lRe+70mVOP5umynf5xorHp5vwDa1xvYPX6bf8znZa3/9nent+od+4XdizNr3XuF5ph/lyP+QfzdPme+87Eltb8mZPfO/Ps7V55GHPnXnr5uyfOnDn1Aw888MCD9oNh75mAO232xRe+P3vupZcfOf3CiedPPX/q7MFDhw7OzR366sH52dZx/Wzn0T2wkSx96Q+7JgAAAAAAAAAAAEC/fnjs6JU/v/3l9xbb/y+1/yvt/8udv6X9/49D+//YTr60gy/tAHd2ibeWCR2sToXlGjl9PNR3Vyhnd3jeJ3LeHscvt/8vxcV+XUt97gnzY/+9ZbnQnUCaSLf2PzIVntdZv0/n/GLOf5lgiGpbus/OeVX/1mVbL/1T6JdiNJX/W9kaSj8mpf13r36dyv5/5xrUkdtvLZoTDnsdge7+Ofb9f+cjmKHXQ5LWPi0sGMUDWB+GPf5nOe9Z8rN/+Obmm6ksdu3x5fvL2H8prMZ6H39S+Rtr/M/2+Hd97//CiHnNlZX7759dfa+j2LSn3/Lj+pd+oHcNVv5HufyyNg+l/spf+EUoP14Q6tN/Qvlb+yz/lvXfu7Ly/5vLL2/bww/0W/5ijWv15fVonzf+cDEv1//ieePielj/0rfnwOu/woEab+TyYZyNyjizgxqV8X97ifdhfClPlx1huc8hjncyaP3L/RXle2B3eP1axfeb8X9H29dyXvV5KOP/lu2x2WW63jHd6PLebtR9DYyq98f++p+0irR429fw6yGtMC0sLNzZE1oVhlo4Q3//h/07YdjlD/v9rxLH/43H8HH83xiP4//GeBz/N8bj+HoxHsf/je9nHP83xu8JrxvHB56uiH+yIr6nIn5vRXxvRfxTFfH9FfH7KuL3V8Tvrog/UBH/TEX8sxXxByviD1fEP1cR3+hKe5RxXX8YZ7F9ns8/jI9y/afX539XRRwYXT9988ATz/zm283F9v9T7fMh5TrekTzdyL+df5Sn43Xv1DF9M/Z2nv5riK/38x0wTmL/GfH7/aGKODC6yn1ePt8whmrde+zpt9+qXsf5jJbP5/wLOf9izh/J+UzOZ3N+IOdza1Q/7ownfv27w6/Wln7v7wjxfu8nj+2BYj9RB5dCf/t/9YnnBwa9nz324zeo1Za/wuZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ1Nv/Z2fn66ldOmt148+ffz07M05j7WXaLb+TnZMNdrPS+nRnE/k/Of5wfUPXjnZmd/IeS3NpVqqteenp661S9qWUjqf9qXLqZn2XLry2jtzTx6/cOzi/nffOHz1zr0DAAAAsPH9LwAA//9WXw9H") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x1, {0x0, @usage, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x8000000000000001]}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000e00)={[{@nomblk_io_submit}, {@delalloc}, {@nobh}, {@debug}, {@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5f4, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) 39.880951631s ago: executing program 1 (id=171): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") stat(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) select(0x40, &(0x7f0000000340)={0x1f}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 39.375957948s ago: executing program 1 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000080)=@hat={'permhat '}, 0x1b) 21.263633102s ago: executing program 4 (id=215): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a10716, &(0x7f0000000780)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@mblk_io_submit}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x100409e}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x46d, &(0x7f0000001bc0)="$eJzs289vVEUcAPDve7sFBGUrIgqCVNGk8UdLCyoHE6PRxIMmJnrAY20LQRZqaE2ENFqNwaMh8W48mvgXePJk1JOJVzyaGBKixAT04pq3+17pLrullYXddD+fZGFm3+zMfPvevJ2d2Q1gYI1k/yQRd0fExYioNLLNBUYa/127sjj995XF6SRqtTf/SOrlrl5ZnK7litdty+scTSPST5O8kRhaWe382XMnp6rV2TN5fnzh1Hvj82fPPX3i1NTx2eOzpyePHDl8aOK5ZyefadPr3y6sN84svqt7Ppzbu/vVty+8Pn30wjs/fpP1d9e+xvEsjvXWeTMjWeB/Nv42rcce73ZjPfZv7XqcSbnXvWGtShFRzgfnxahEKa6fvEq88klPOwfcVtk9e3Pnw0s1YANLotc9AHqjeKPPPv8Wjzs09egLl19sfADK4r6WPxpHypE2Pho1L1x02UhEHF3658vsES3rELU26wYAALfqu2z+81S7+V8au1aU257vDQ1HxL0RsSMi7ouInRFxf0S97AMR8WCnhjpMokZa8jfOP9NL/zu4Ncjmf8/ne1vN87+0KDJcynP31OMfSo6dqM4ezP8mozG0OctPtKu8qOLlXz7v1P7K+V/2yNov5oJ5JZfKjQW6LcUzM1MLU92alF7+OGJPuV38yfJOQBIRuyNiz/qq3l4kTjzx9d5OhW4e/yq6sM9U+6qoZHEpWuIvJKvvT45vierswfHiqrjRTz+ff6NT+7cUfxdk539r8/XfUqLyV7Jyv3Z++cALa23j/K+fdfxMWV779b8su/43JW/V93Q35c99MLWwcGYiYlPyWj3f9Pzk9dcW+aJ8Fv/ogfbjf0f+miz+hyIiu4j3RcTDEbE/P3ePRMSjEXFglfh/eOmxdzsd64fzP9P2/rd8/Q83n//1J0onv/+2U/tru/8drqdG82fq97+b6Nyd4jbacjUDAADABpbWvxufpGPL6TQdG2t8h39nbE2rc/MLTx6be//0TOM79MMxlBYrXZUV66ETyVJeYyM/ma8VF8cP5evGX5TuqufHpueqMz2OHQbdtg7jP/N7qde9A247v9eCwdU6/tMe9QO487z/w+Ay/mFwGf8wuNqN/49a8vYCYCOqVXrdA6B3zP9hcBn/MLiMfxhIt/K7/tuVKK/y632JfklE2hfd6JvE/j4aTeUujO4e35gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65L8AAAD///Uk+Ss=") clock_getres(0x8, &(0x7f00000025c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) futex(0x0, 0x5, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x4) syz_mount_image$tmpfs(0x0, &(0x7f0000002340)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 17.591805083s ago: executing program 4 (id=221): io_setup(0x0, &(0x7f0000000500)=0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[0x0]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x4, 0x20000000, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) r4 = socket(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16.534508062s ago: executing program 0 (id=224): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 16.326448352s ago: executing program 4 (id=225): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff0000/0x10000)=nil, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xf0}}, 0x0) 16.099563583s ago: executing program 0 (id=226): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") r1 = gettid() sigaltstack(&(0x7f0000001040)={0x0, 0x80000001}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x200000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000740)=0x6) readlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000880)=""/202, 0xca) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0) readlink(&(0x7f0000000700)='./file2\x00', &(0x7f0000000b00)=""/233, 0xe9) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000780), 0x10000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/asound/timers\x00', 0x0, 0x0) bind$inet(r3, &(0x7f0000000980)={0x2, 0x4e20, @loopback}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000003280)='./file2\x00', 0x0, 0x0) lstat(&(0x7f0000003340)='./file2\x00', 0x0) lstat(&(0x7f0000003c00)='./file2\x00', 0x0) mkdirat(r3, &(0x7f00000009c0)='./file2\x00', 0x8) 15.290295237s ago: executing program 4 (id=227): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@nobarrier}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) 12.436157384s ago: executing program 0 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_init_net_socket$llc(0x1a, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x0, 0x3e0000000000}], 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x20000}, 0x20) 12.412374486s ago: executing program 4 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x601, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@nl, &(0x7f0000000000)=0x80) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce0216}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0xfffffffc, 0x0, 0x0, 0x0, 0x44, 0x0, 0x8}, &(0x7f0000000080)=0x9c) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x2, @multicast, 'veth1_virt_wifi\x00'}}, 0x1e) r6 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x10}, {r6, 0x8000}], 0x2, 0xec) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r7, &(0x7f0000000000)="1c0000001a00110214f9f407000904001f0000000001000000020000", 0x1c) 11.411028518s ago: executing program 4 (id=238): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev}, 0x1c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000040)={0x7, 0x3, 0x3, 0x0, 0x1, [0x3, 0x0, 0x7, 0x5]}) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x12, 0x29, 0x37}], 0x18}], 0x1, 0x0) 11.410017469s ago: executing program 0 (id=239): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020) 11.173795901s ago: executing program 0 (id=242): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0303000000000000000005000000", @ANYRES32=r1], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x7}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12001) r7 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r7, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r8, &(0x7f0000000000), 0x0, 0x0) 9.519598373s ago: executing program 2 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket(0x26, 0x5, 0xfffffff7) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000100)=0xba1, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f00000001c0)=""/102391, &(0x7f0000000180)=0xc9a6) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r6, 0x0, 0x3, 0x4, 0x0, 0x70, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x80, 0x3c4, 0x5}}) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 9.374129257s ago: executing program 0 (id=245): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000140), 0x400000000000303, 0x10002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/48, 0x30) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x8, 0x1, @mcast1}]}, 0x44}}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 7.969868957s ago: executing program 2 (id=249): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000002010400000000000000000a00000004000180040003803c0002802c0001"], 0x58}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) write$nci(r0, &(0x7f00000005c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x40, @f={0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x60, {}, 0x0, 0x0, 0x0, 0x3}}, 0x11) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = io_uring_setup(0x800, &(0x7f0000000100)) syz_io_uring_setup(0x159c, &(0x7f0000000780)={0x0, 0x3752, 0x0, 0x4, 0x1d7, 0x0, r4}, &(0x7f0000000940), &(0x7f0000000800)) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x20000000000000) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000040)={0x6, 0x1, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000980)=""/153, 0x99}, {&(0x7f0000000ac0)=""/104, 0x68}, {&(0x7f0000000580)=""/211, 0xd3}], &(0x7f0000000700)=[0x8, 0x1000, 0xa0000000, 0xb6c, 0xa2, 0x403f, 0x20, 0x0, 0xfffffffffffffffe]}, 0x20) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000c80)={0x124, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x23a}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x24}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xaf}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000854}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x2}]}}}}}}}, 0x0) 6.202509542s ago: executing program 2 (id=251): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000000), 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x5b, &(0x7f00000004c0)={0x6, {{0x2, 0x4e23, @remote}}, {{0x2, 0x0, @remote}}}, 0x108) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200010000ffbe8c5ee17688a20033000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) sendfile(r4, r5, 0x0, 0x8000002b) 5.846523594s ago: executing program 3 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(0xffffffffffffffff, 0x8924, 0x20001116) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r2, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x8c}}, 0x0) 4.989215314s ago: executing program 1 (id=191): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x10, 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) r5 = gettid() sigaltstack(&(0x7f0000001000)={&(0x7f0000001580)=""/4088, 0x0, 0xfffffde8}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f0000001500)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000280)) write$P9_RVERSION(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x6}, 0x1c) 4.953712638s ago: executing program 2 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@mode={'mode', 0x3d, 0x3}}, {}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@map_acorn}, {@hide}, {@nojoliet}, {@map_off}, {@map_normal}, {@map_normal}, {@check_relaxed}, {@utf8}, {@cruft}]}, 0x3, 0x3e2, &(0x7f0000000840)="$eJzs3M9u3EQcwPFx/sASpAqpok3THKaUQzh0aztko1UPyHhnN9N6bWvGWyUnFJGkipoURItEcyKXABI8RK88BM/CC1Q8Ash/tiTZJFvyb0P1/UjVzNo/z/zGXc1oHY0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQTthyXc8RkY57y/J4Ycsk3RPO99v75EBxQr9COPk/UauJ6fLQ9PV/T39cNnKz/HRT1PKiJnY+vPHRg+sTY/3rT0joUjx/ufN0dWtr/btRJ3Lh/jzyaEfF2ia6G3SU1DaRzUbDvb/UtrKtI2VXbKa6MjQqyBIj58LPpNdszktVX0l6cacVRKp/cPGe77oN+bCeqsDYJL7/sG7DJR1FOu4UMfnpPGYx/yI+0pnMVNCVcmNza31+WOp5kPc2Qf6wIN/1fc/zfa+x0FxYdN2JgQPuIWIgYvRfWozWOc/gwOn9Xa3/AAAAAADg3eUUz9jz3/+TxXN4R7R1pNxRpwUAAAAAAM5R8Zf/m3kxmdemhcPvfwAAAAAA3jU/D91jZ9P3nT/+EsZMOrvp8qfOdpDHBdvj5XXjh1vM2jPOtaqRomhMVJ9CNevcKoNu9aNfV8XGsDycc0hA/CpmypiZtbJc658pe5lq60jVwyR64IkguDaWqeXs+2ebP4hi+L/E3WuO2NjcWq9//c3WWpHLbt7K7na1gWJgH8UJubx4s+/x6BFPFg9iqn6nyn7d/eMfKy8f+w997onbZcztqbKcOjj+Wt6nVz9u9FUW3hlHvidmy5jZubt5cXfuiCz8YVn4+7M41b14iyzmh2Uxf8YsAGBUNvatQrXq2MH1f2DdPcUsdzmr+564U8bcmSkm1omZI2Z0d9iM7p5xdft94B0Ix62xeb+/HVpVX+UXvDq2Xxv5Tn4Lx19sfytuPH+5c29ze/XJ+pP1Z74/33A/d90FX0wWw6gK1h4AwBGUee1MZT85xuj0K6/Z9IJsSUmThI+k0a2OkjrOlAmXgrijZGqSLAmTKK881i1lpe2laWIy2U6MTBOrl4s3v8jq1S9WdYM406FNIxVYJcMkzoIwky1tQ5n2voy0XVKmuNimKtRtHQaZTmJpk54JVV1Kq9S+QN1ScabbOq/GMjW6G5gV+TiJel0lW8qGRqdZUjbY70vH7cR0i2bro77ZAABcEW/eYHeBlVGPEQAAHHTqVfq9C0oIAAAAAAAAAAAAAAAAAAAAAAAMuIz9f5db+eJqpPF0tbrDP569wfGrMJz/feWD6j/kXFseFyMf1wVVRjgpAbgU/wQAAP//S0ucQg==") r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5521) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2) getdents64(r5, &(0x7f0000006380)=""/1024, 0x400) 4.827193159s ago: executing program 1 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x200341, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)={0x2c, 0x38, 0x9, 0x0, 0x0, {0x1}, [@nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\b\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) 4.660444725s ago: executing program 3 (id=255): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.949274922s ago: executing program 2 (id=256): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ftruncate(r0, 0x8000000) 3.258391467s ago: executing program 3 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(0x0, 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000006c0)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) 2.48135462s ago: executing program 2 (id=258): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x5bb, &(0x7f0000002280)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {0x4}, 0x6, 0x40, &(0x7f0000000240)={0x1, 0x17, 0xfffb, 0xd, 0x7}, 0x8, 0x1, 0xd, 0x0, 0x80, 0x9, &(0x7f0000000280)="ea9215f811169814b8e81b89b91ea600040f157ac9b8e6"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r2, 0x5, 0x0) 1.629836818s ago: executing program 1 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$setsig(0x4203, r0, 0x10, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r1, 0x0, 0x7f, 0xe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000340)=""/109, 0x6d, 0x0) syz_open_dev$usbfs(0x0, 0x200, 0x102) syz_open_dev$usbmon(0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1.61874581s ago: executing program 3 (id=260): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) semget$private(0x0, 0x400000000b, 0x0) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semop(0x0, &(0x7f00000002c0)=[{0x2, 0x6, 0x1000}, {0x4, 0x7f}, {0x4}], 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000010000200000008000b010000000008003f"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8800, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@umask={'umask', 0x3d, 0x80000000}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x2a3a}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_continue}, {@errors_remount}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x5, 0x1514, &(0x7f0000000ac0)="$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") 1.06232861s ago: executing program 3 (id=261): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) clock_gettime(0x0, &(0x7f00000001c0)) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, 0x0, &(0x7f0000000380), 0x0) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ASHMEM_SET_NAME(r1, 0x7706, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='ext4_fc_commit_start\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000f0000006115700000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) 0s ago: executing program 3 (id=262): socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) kernel console output (not intermixed with test programs): [ 55.319691][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 55.549136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #142!!! [ 55.698914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 55.707948][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 55.716926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 55.725954][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 55.734915][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 55.743929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 55.752891][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 55.848027][ T3686] loop4: detected capacity change from 0 to 2048 [ 55.909065][ T3686] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 56.119145][ T1301] gspca_stv06xx: I2C: Read error writing address: -71 [ 56.182491][ T1301] usb 3-1: USB disconnect, device number 2 [ 57.671194][ T3719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 57.679171][ T3721] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 57.686752][ T3721] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 57.741605][ T3721] vhci_hcd vhci_hcd.0: Device attached [ 58.689012][ T7] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 58.717446][ T3743] loop3: detected capacity change from 0 to 16 [ 58.752579][ T3746] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 58.849235][ T3611] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.881249][ T3743] erofs: (device loop3): mounted with root inode @ nid 36. [ 58.982168][ T3751] loop0: detected capacity change from 0 to 127 [ 59.041348][ T3724] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 1 [ 59.054268][ T3651] vhci_hcd: stop threads [ 59.060064][ T3651] vhci_hcd: release socket [ 59.064907][ T3651] vhci_hcd: disconnect device [ 59.527022][ T1301] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 59.599884][ T3760] loop2: detected capacity change from 0 to 128 [ 59.799162][ T3611] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 59.808239][ T3611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.819692][ T3611] usb 1-1: Product: syz [ 59.823842][ T3611] usb 1-1: Manufacturer: syz [ 59.828426][ T3611] usb 1-1: SerialNumber: syz [ 59.840488][ T3611] usb 1-1: config 0 descriptor?? [ 59.889650][ T3559] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 59.909162][ T1301] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 59.927675][ T1301] usb 2-1: config 0 has no interface number 0 [ 59.948037][ T1301] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 59.985319][ T1301] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 29285, setting to 64 [ 60.099134][ T3771] loop4: detected capacity change from 0 to 128 [ 60.224597][ T3773] loop2: detected capacity change from 0 to 64 [ 60.299285][ T3559] usb 4-1: Using ep0 maxpacket: 16 [ 60.497961][ T3773] Trying to free block not in datazone [ 60.579825][ T3559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.698414][ T3559] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.729566][ T1301] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 60.738611][ T1301] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 60.746860][ T1301] usb 2-1: Product: syz [ 60.751279][ T1301] usb 2-1: Manufacturer: syz [ 60.755875][ T1301] usb 2-1: SerialNumber: syz [ 60.770952][ T1301] usb 2-1: config 0 descriptor?? [ 60.932964][ T3741] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 60.936461][ T3559] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 60.950015][ T3559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.966556][ T3559] usb 4-1: config 0 descriptor?? [ 60.990615][ T1301] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 61.001938][ T3736] udc-core: couldn't find an available UDC or it's busy [ 61.003374][ T1301] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 61.014062][ T3736] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.047813][ T3559] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 61.132940][ T25] audit: type=1800 audit(1727946894.434:2): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.35" name="bus" dev="loop4" ino=1048590 res=0 errno=0 [ 61.470585][ T3559] usb 4-1: USB disconnect, device number 2 [ 61.539173][ T3611] usb 1-1: ignoring: probably an ADSL modem [ 61.566733][ T25] audit: type=1804 audit(1727946894.464:3): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.35" name="/newroot/7/file1/bus" dev="loop4" ino=1048590 res=1 errno=0 [ 61.623528][ T1301] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 61.647021][ T1301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 61.661486][ T1301] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 61.674046][ T1301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 61.684027][ T1301] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 61.694020][ T1301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 61.703164][ T1301] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 61.711944][ T1301] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 61.719987][ T25] audit: type=1326 audit(1727946895.064:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 61.760425][ T1301] usb 2-1: USB disconnect, device number 2 [ 61.770088][ T25] audit: type=1326 audit(1727946895.064:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 61.806409][ T3783] loop2: detected capacity change from 0 to 128 [ 61.820055][ T1301] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 61.839165][ T3611] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 61.858074][ T3785] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 61.858969][ T25] audit: type=1326 audit(1727946895.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 61.884505][ T3611] usb 1-1: USB disconnect, device number 2 [ 61.899322][ T1301] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 61.985218][ T1301] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 62.030975][ T25] audit: type=1326 audit(1727946895.064:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 62.064006][ T1301] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 62.082941][ T25] audit: type=1326 audit(1727946895.064:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 62.095583][ T1301] keyspan 2-1:0.107: device disconnected [ 62.111804][ T25] audit: type=1326 audit(1727946895.064:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 62.169980][ T25] audit: type=1326 audit(1727946895.064:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 62.222538][ T25] audit: type=1326 audit(1727946895.064:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3782 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc71b66ff9 code=0x7ffc0000 [ 62.377718][ T3797] loop2: detected capacity change from 0 to 256 [ 63.514240][ T3799] loop1: detected capacity change from 0 to 1764 [ 63.807168][ T3806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.44'. [ 63.824705][ T3811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.899265][ T7] vhci_hcd: vhci_device speed not set [ 64.483056][ T3816] loop4: detected capacity change from 0 to 512 [ 64.572988][ T3799] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 64.789126][ T3827] mmap: syz.2.46 (3827) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 65.369173][ T3828] loop3: detected capacity change from 0 to 16 [ 66.163236][ T3823] sched: RT throttling activated [ 66.584021][ T3828] erofs: (device loop3): mounted with root inode @ nid 36. [ 67.576350][ T3816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.639585][ T3816] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 68.035299][ T3850] netlink: 72 bytes leftover after parsing attributes in process `syz.3.53'. [ 69.873103][ T3876] loop1: detected capacity change from 0 to 128 [ 69.980433][ T3876] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 70.044858][ T3882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.096823][ T3887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.131130][ T3862] kvm [3861]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3 [ 70.174914][ T3862] kvm [3861]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4 [ 70.195816][ T3882] device veth0_macvtap left promiscuous mode [ 70.205863][ T3862] kvm [3861]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4 [ 70.220250][ T3862] kvm [3861]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x5 [ 70.231936][ T3569] FAT-fs (loop1): error, invalid access to FAT (entry 0x0affffff) [ 70.238514][ T3862] kvm [3861]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x33 [ 70.248559][ T3862] kvm [3861]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0x34 [ 70.259021][ T3569] FAT-fs (loop1): Filesystem has been set read-only [ 70.267938][ T3862] kvm [3861]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x1 [ 70.278735][ T3862] kvm [3861]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x1 [ 70.296367][ T3862] kvm [3861]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x2 [ 70.318797][ T3862] kvm [3861]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop [ 70.463558][ C0] net_ratelimit: 6 callbacks suppressed [ 70.463573][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 70.647311][ T3901] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.717411][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.902043][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.152700][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.159580][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.600408][ T1076] cfg80211: failed to load regulatory.db [ 71.740959][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.879619][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.174333][ T3926] loop2: detected capacity change from 0 to 512 [ 72.305106][ T3926] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 72.408508][ T3926] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.508964][ T3926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 72.546351][ T3926] System zones: 1-12 [ 72.685172][ T3926] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.77: corrupted in-inode xattr [ 72.738809][ T3926] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.77: couldn't read orphan inode 15 (err -117) [ 72.793871][ T3926] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 73.636680][ T3916] chnl_net:caif_netlink_parms(): no params data found [ 73.654869][ T3926] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 255: comm syz.2.77: lblock 2 mapped to illegal pblock 255 (length 1) [ 73.714717][ T3959] loop4: detected capacity change from 0 to 136 [ 73.742806][ T3926] EXT4-fs warning (device loop2): ext4_dx_find_entry:1796: inode #2: lblock 2: comm syz.2.77: error -117 reading directory block [ 73.847284][ T3956] 9pnet: p9_errstr2errno: server reported unknown error œæç×¾ [ 73.869493][ T3803] Bluetooth: hci2: command 0x0409 tx timeout [ 73.908129][ T3959] loop4: detected capacity change from 0 to 1024 [ 74.064892][ T3959] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.81: bad orphan inode 2048 [ 74.133184][ T3959] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.146564][ T3916] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.182486][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.191162][ T3959] ext4 filesystem being mounted at /16/file1/file0 supports timestamps until 2038 (0x7fffffff) [ 74.227251][ T3916] device bridge_slave_0 entered promiscuous mode [ 74.382847][ T3916] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.397899][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.439500][ T3916] device bridge_slave_1 entered promiscuous mode [ 74.598345][ T3572] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz-executor: Unrecognised inode hash code 84 [ 74.613856][ T3916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.626577][ T3572] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 74.655130][ T3572] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /16/file0: bad entry in directory: directory entry overrun - offset=0, inode=684770115, rec_len=3636, size=1024 fake=0 [ 74.677646][ T3916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.701463][ T3572] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 74.742864][ T3572] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 74.774076][ T3916] team0: Port device team_slave_0 added [ 74.792956][ T3916] team0: Port device team_slave_1 added [ 74.804090][ T3572] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 255: comm syz-executor: lblock 2 mapped to illegal pblock 255 (length 1) [ 74.819212][ T1301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.016312][ T3916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.023554][ T3916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.049531][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.059407][ T3916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.074252][ T3916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.081514][ T1301] usb 1-1: Using ep0 maxpacket: 8 [ 75.086686][ T3916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.112597][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.122428][ T3916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.799898][ T1301] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 75.822897][ T1301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.824590][ T3916] device hsr_slave_0 entered promiscuous mode [ 75.921375][ T1301] usb 1-1: config 0 descriptor?? [ 75.928716][ T3916] device hsr_slave_1 entered promiscuous mode [ 75.959080][ T3654] Bluetooth: hci2: command 0x041b tx timeout [ 75.969975][ T3916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.986656][ T3916] Cannot create hsr debugfs directory [ 76.020846][ T4001] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.046897][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.061816][ T154] device hsr_slave_0 left promiscuous mode [ 76.083494][ T154] device hsr_slave_1 left promiscuous mode [ 76.091015][ T4001] CIFS mount error: No usable UNC path provided in device string! [ 76.091015][ T4001] [ 76.106644][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.124509][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.141687][ T4001] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 76.151715][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.182497][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.193160][ T25] kauditd_printk_skb: 30 callbacks suppressed [ 76.193171][ T25] audit: type=1326 audit(1727946909.544:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.227678][ T25] audit: type=1326 audit(1727946909.544:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.258222][ T154] device bridge_slave_1 left promiscuous mode [ 76.265429][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.289965][ T25] audit: type=1326 audit(1727946909.544:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.341143][ T154] device bridge_slave_0 left promiscuous mode [ 76.354706][ T25] audit: type=1326 audit(1727946909.544:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.376711][ C0] vkms_vblank_simulate: vblank timer overrun [ 76.396889][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.410919][ T25] audit: type=1326 audit(1727946909.544:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.538628][ T154] device veth1_macvtap left promiscuous mode [ 76.549220][ T25] audit: type=1326 audit(1727946909.544:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.590066][ T154] device veth0_macvtap left promiscuous mode [ 76.596148][ T154] device veth1_vlan left promiscuous mode [ 76.623016][ T154] device veth0_vlan left promiscuous mode [ 76.665204][ T25] audit: type=1326 audit(1727946909.544:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.728111][ T25] audit: type=1326 audit(1727946909.544:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.795822][ T25] audit: type=1326 audit(1727946909.554:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.821634][ T25] audit: type=1326 audit(1727946909.554:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3996 comm="syz.3.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf3f6e1ff9 code=0x7ffc0000 [ 76.946286][ T154] team0 (unregistering): Port device team_slave_1 removed [ 76.958713][ T154] team0 (unregistering): Port device team_slave_0 removed [ 76.972006][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.984402][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.038170][ T154] bond0 (unregistering): Released all slaves [ 77.299693][ T1301] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 77.318474][ T1301] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 77.340865][ T1301] asix: probe of 1-1:0.0 failed with error -71 [ 77.357178][ T1301] usb 1-1: USB disconnect, device number 3 [ 77.463623][ T4013] chnl_net:caif_netlink_parms(): no params data found [ 77.607490][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.619010][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.638812][ T4013] device bridge_slave_0 entered promiscuous mode [ 77.721464][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.728697][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.745073][ T4013] device bridge_slave_1 entered promiscuous mode [ 77.905966][ T4013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.937155][ T4013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.038943][ T3654] Bluetooth: hci2: command 0x040f tx timeout [ 78.053684][ T4013] team0: Port device team_slave_0 added [ 78.113159][ T4013] team0: Port device team_slave_1 added [ 78.219696][ T4013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.238364][ T4013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.325610][ T4013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.370494][ T3916] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.401396][ T4013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.408807][ T4013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.435268][ T1076] Bluetooth: hci1: command 0x0409 tx timeout [ 78.445547][ T4013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.477818][ T3916] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.529601][ T3916] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.590661][ T3916] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.331941][ T4013] device hsr_slave_0 entered promiscuous mode [ 79.364913][ T4056] loop0: detected capacity change from 0 to 2048 [ 79.371744][ T4013] device hsr_slave_1 entered promiscuous mode [ 79.398991][ T4013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.417228][ T4013] Cannot create hsr debugfs directory [ 79.493652][ T4056] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.96: bad orphan inode 8192 [ 79.535844][ T4056] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.701790][ T3916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.727120][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.746167][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.795749][ T3916] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.853897][ T4013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.908301][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.927578][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.957003][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.964080][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.999572][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.029806][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.070952][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.099338][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.106394][ T3778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.120546][ T1076] Bluetooth: hci2: command 0x0419 tx timeout [ 80.138796][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.170413][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.361800][ T4013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.519023][ T3611] Bluetooth: hci1: command 0x041b tx timeout [ 80.769889][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.888351][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.024719][ T3916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.097529][ T3916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.132699][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.151213][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.160871][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.180689][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.199199][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.216315][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.243051][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.289060][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.368779][ T4013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.127100][ T4013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.401427][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.414385][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.432382][ T3916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.450407][ T4013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.486636][ T4013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.516473][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.532149][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.573542][ T4013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.590151][ T4013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.599429][ T3611] Bluetooth: hci1: command 0x040f tx timeout [ 82.630552][ T3916] device veth0_vlan entered promiscuous mode [ 82.637557][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.663491][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.694386][ T3916] device veth1_vlan entered promiscuous mode [ 82.720030][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.733547][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.766261][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.856024][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.869679][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.895168][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.926365][ T3916] device veth0_macvtap entered promiscuous mode [ 82.973649][ T3916] device veth1_macvtap entered promiscuous mode [ 83.004746][ T4013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.031189][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.051794][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.075678][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.087685][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.103719][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.147117][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.166150][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.192528][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.212117][ T3916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.231825][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.249383][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.311682][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.328151][ T4132] loop0: detected capacity change from 0 to 256 [ 83.346341][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.363498][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.397498][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.411220][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.422551][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.432761][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.443464][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.457497][ T3916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.478306][ T3916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.501574][ T3916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.524211][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.580139][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.601160][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.611834][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.622872][ T4013] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.632429][ T3916] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.642758][ T3916] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.653048][ T3916] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.663676][ T3916] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709927][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.718464][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.736600][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.743685][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.784884][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.809460][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.844066][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.853225][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.860354][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.906165][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.028180][ T3778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.038730][ T3778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.040269][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.072334][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.152209][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.272286][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.392768][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.617188][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.746150][ T1076] Bluetooth: hci1: command 0x0419 tx timeout [ 84.901848][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.943164][ T4158] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 84.943273][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.971295][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.972110][ T4158] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 85.034459][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.068328][ T4158] Error parsing options; rc = [-22] [ 85.086891][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.108055][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.154445][ T3775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.169693][ T3775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.190263][ T4168] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.232793][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.458838][ T4176] sctp: [Deprecated]: syz.1.72 (pid 4176) Use of int in max_burst socket option deprecated. [ 85.458838][ T4176] Use struct sctp_assoc_value instead [ 85.609619][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.617051][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.756322][ T4013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.847580][ T154] device hsr_slave_0 left promiscuous mode [ 85.863776][ T154] device hsr_slave_1 left promiscuous mode [ 85.895646][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.919472][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.952800][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.019554][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.087994][ T4183] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.099471][ T154] device bridge_slave_1 left promiscuous mode [ 86.105742][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.156993][ T154] device bridge_slave_0 left promiscuous mode [ 86.226480][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.330378][ T154] device veth1_macvtap left promiscuous mode [ 86.336454][ T154] device veth1_vlan left promiscuous mode [ 86.358993][ T4200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.112'. [ 86.449026][ T154] device veth0_vlan left promiscuous mode [ 87.129367][ T154] team0 (unregistering): Port device team_slave_1 removed [ 87.178038][ T154] team0 (unregistering): Port device team_slave_0 removed [ 87.217320][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.269219][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.336561][ T3613] Bluetooth: hci5: command 0x0409 tx timeout [ 87.524428][ T154] bond0 (unregistering): Released all slaves [ 87.568313][ T4215] loop1: detected capacity change from 0 to 512 [ 87.643685][ T4215] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.114: casefold flag without casefold feature [ 87.676897][ T4222] loop0: detected capacity change from 0 to 1024 [ 87.686737][ T4215] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.114: couldn't read orphan inode 15 (err -117) [ 87.713334][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.749251][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.788011][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.805385][ T4215] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.815390][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.847734][ T4013] device veth0_vlan entered promiscuous mode [ 87.861311][ T4159] chnl_net:caif_netlink_parms(): no params data found [ 87.874399][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 87.891331][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.899652][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.917271][ T4013] device veth1_vlan entered promiscuous mode [ 87.930228][ T4222] hfsplus: xattr searching failed [ 88.004092][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.027921][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.056758][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.081196][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.106048][ T4013] device veth0_macvtap entered promiscuous mode [ 88.143153][ T4013] device veth1_macvtap entered promiscuous mode [ 88.224619][ T4234] loop0: detected capacity change from 0 to 1024 [ 88.328461][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.365934][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.376739][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.395668][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.402952][ T7] kernel write not supported for file /vbi7 (pid: 7 comm: kworker/0:0) [ 88.406991][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.428487][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.438819][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.450174][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.464404][ T4013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.473913][ T4159] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.486370][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.504429][ T4159] device bridge_slave_0 entered promiscuous mode [ 88.520543][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.534942][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.568390][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.581251][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.601097][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.644584][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.659165][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.676426][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.687593][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.703404][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.714628][ T4013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.730563][ T4242] loop1: detected capacity change from 0 to 2048 [ 88.732635][ T4013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.748433][ T4013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.756826][ T4159] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.766619][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.777398][ T4159] device bridge_slave_1 entered promiscuous mode [ 88.808406][ T4245] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.857086][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.867288][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.897272][ T4159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.922957][ T4013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.934540][ T4242] kvm: emulating exchange as write [ 88.939839][ T4013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.958949][ T4013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.979673][ T4013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.012944][ T4159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.134662][ T4159] team0: Port device team_slave_0 added [ 89.201231][ T4159] team0: Port device team_slave_1 added [ 89.242828][ T3778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.283200][ T3778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.292640][ T4159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.310048][ T4250] loop0: detected capacity change from 0 to 128 [ 89.336084][ T4159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.364321][ T4248] loop1: detected capacity change from 0 to 1024 [ 89.399181][ T3654] Bluetooth: hci5: command 0x041b tx timeout [ 89.400053][ T4159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.436050][ T4248] EXT4-fs (loop1): Ignoring removed nobh option [ 89.445167][ T4250] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.505120][ T4250] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 89.553491][ T4248] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.568296][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.612520][ T4159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.624762][ T4159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.626255][ T4248] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 89.664292][ T4159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.894219][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.469242][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.594555][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.679729][ T4159] device hsr_slave_0 entered promiscuous mode [ 90.692556][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.720015][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 90.735336][ T4159] device hsr_slave_1 entered promiscuous mode [ 90.749422][ T3568] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 90.854323][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 90.914902][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 90.949578][ T3568] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 91.001344][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 91.036493][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 91.053718][ T4270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.128'. [ 91.107751][ T3568] EXT4-fs error (device loop0): ext4_empty_dir:3164: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 91.167486][ T3568] EXT4-fs error (device loop0): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 91.200225][ T4159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.295728][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 91.398252][ T4159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.469245][ T1076] Bluetooth: hci5: command 0x040f tx timeout [ 91.502393][ T4159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.549053][ T1301] Bluetooth: hci3: command 0x0409 tx timeout [ 91.655287][ T4159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.703787][ T4284] device vlan2 entered promiscuous mode [ 91.711678][ T4284] device bond0 entered promiscuous mode [ 91.717421][ T4284] device bond_slave_0 entered promiscuous mode [ 91.724215][ T4284] device bond_slave_1 entered promiscuous mode [ 91.731199][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 91.740018][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.747064][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.776027][ T4252] device bridge_slave_0 entered promiscuous mode [ 91.785187][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.797425][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.815253][ T4252] device bridge_slave_1 entered promiscuous mode [ 91.942185][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.980368][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 92.021787][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.130751][ T4252] team0: Port device team_slave_0 added [ 92.138315][ T4252] team0: Port device team_slave_1 added [ 92.151038][ T3568] syz-executor (3568) used greatest stack depth: 18456 bytes left [ 92.184702][ T4159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.292149][ T4159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.312670][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.336581][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.371075][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.388701][ T4159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.459102][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.466045][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.502491][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.517150][ T4159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.677885][ T4290] loop1: detected capacity change from 0 to 32768 [ 92.728237][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.203021][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.257486][ T4290] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 93.257486][ T4290] [ 93.356934][ T4252] device hsr_slave_0 entered promiscuous mode [ 93.364862][ T4252] device hsr_slave_1 entered promiscuous mode [ 93.365544][ T4290] ialloc: diAlloc returned -5! [ 93.378550][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.386701][ T4252] Cannot create hsr debugfs directory [ 93.482935][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.534274][ T4305] device vlan3 entered promiscuous mode [ 93.550317][ T3613] Bluetooth: hci5: command 0x0419 tx timeout [ 93.587254][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.638110][ T1301] Bluetooth: hci3: command 0x041b tx timeout [ 93.762585][ T4310] loop2: detected capacity change from 0 to 256 [ 93.816453][ T4159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.872347][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.910862][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.955028][ T4159] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.986888][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 93.995545][ T4316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.141'. [ 94.059730][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.099259][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.119449][ T4310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.156010][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.163102][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.183874][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.197468][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.271978][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.279095][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.302949][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.303536][ T4324] loop2: detected capacity change from 0 to 512 [ 94.335695][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.350195][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.371092][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.388632][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.408714][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.430602][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.476686][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.486514][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.487847][ T4324] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.495456][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.508952][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 94.511805][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.524325][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.544285][ T4324] EXT4-fs error (device loop2): __ext4_iget:4872: inode #11: block 1: comm syz.2.142: invalid block [ 94.556972][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.564908][ T4324] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.142: couldn't read orphan inode 11 (err -117) [ 94.565089][ T4324] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 94.632895][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.664413][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.784204][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.715057][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.768760][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.805269][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.829935][ T4298] device bridge_slave_0 entered promiscuous mode [ 95.883015][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.917838][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.940636][ T4298] device bridge_slave_1 entered promiscuous mode [ 96.052844][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.117146][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.147874][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.156009][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.190606][ T4159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.245818][ T4298] team0: Port device team_slave_0 added [ 96.318268][ T4298] team0: Port device team_slave_1 added [ 96.450785][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.457735][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.527868][ T1301] Bluetooth: hci3: command 0x040f tx timeout [ 96.542582][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.589694][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 96.690230][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.697176][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.786672][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.274264][ T4390] xt_HMARK: spi-set and port-set can't be combined [ 99.596142][ T4398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.503059][ T3613] Bluetooth: hci3: command 0x0419 tx timeout [ 100.510417][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 100.538602][ T4298] device hsr_slave_0 entered promiscuous mode [ 100.547271][ T4298] device hsr_slave_1 entered promiscuous mode [ 100.554231][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.569181][ T4298] Cannot create hsr debugfs directory [ 100.716759][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 100.784572][ T4405] loop2: detected capacity change from 0 to 1024 [ 100.918100][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.943310][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.959563][ T4405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.174266][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.197627][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.246499][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.280203][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.290787][ T4159] device veth0_vlan entered promiscuous mode [ 101.452389][ T4159] device veth1_vlan entered promiscuous mode [ 101.535083][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.543367][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.571640][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.581349][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.607795][ T4431] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 101.618175][ T4159] device veth0_macvtap entered promiscuous mode [ 101.686375][ T4159] device veth1_macvtap entered promiscuous mode [ 101.756088][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.766932][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.776897][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.787514][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.797533][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.808060][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.821373][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.844142][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.858768][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.879236][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.900388][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.910046][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.920146][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.953898][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.969991][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.051065][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.103738][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.159428][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.197933][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.217726][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.280385][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.331405][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.397581][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.470421][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.538869][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.570299][ T4440] loop1: detected capacity change from 0 to 1024 [ 102.577563][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.629026][ T4159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.647916][ T4159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.701708][ T4159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.714670][ T4159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.875059][ T4252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.915448][ T4444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 102.954604][ T4447] Zero length message leads to an empty skb [ 103.004017][ T4252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.024464][ T4252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.204855][ T3651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.229044][ T3651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.299736][ T4252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.081152][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.135319][ T2621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.261898][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.298146][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.309338][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.344739][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.353687][ T2621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.899684][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.946943][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.089529][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.096596][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.143379][ T4474] loop2: detected capacity change from 0 to 2048 [ 105.150274][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.169970][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.192517][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.214250][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.258678][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.265799][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.274852][ T4485] loop1: detected capacity change from 0 to 512 [ 105.288616][ T4474] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.313792][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.340156][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.415477][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.448163][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 105.448175][ T25] audit: type=1800 audit(1727946938.794:53): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.163" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 105.451588][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.510695][ T4485] EXT4-fs (loop1): 1 orphan inode deleted [ 105.529867][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.543652][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.583988][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.632580][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 105.683642][ T4485] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 105.738042][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.776557][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.799735][ T4500] loop4: detected capacity change from 0 to 512 [ 105.810819][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.820641][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.830792][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.966981][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.987607][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.015514][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.024200][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.043904][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.065990][ T1126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.946987][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.113553][ T4252] device veth0_vlan entered promiscuous mode [ 107.171806][ T4252] device veth1_vlan entered promiscuous mode [ 107.290355][ T4252] device veth0_macvtap entered promiscuous mode [ 107.346813][ T4252] device veth1_macvtap entered promiscuous mode [ 107.453472][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.493980][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.505115][ T4500] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.167: invalid indirect mapped block 256 (level 2) [ 107.533794][ T4500] EXT4-fs (loop4): 2 truncates cleaned up [ 107.547796][ T4500] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.567263][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.597448][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.606710][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.615213][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.626517][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.637119][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.645671][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.647332][ T4528] loop1: detected capacity change from 0 to 2048 [ 107.655620][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.668593][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.681406][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.691063][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.700456][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.765588][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.818079][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.870002][ T4528] NILFS (loop1): invalid segment: Checksum error in segment payload [ 107.878495][ T4528] NILFS (loop1): trying rollback from an earlier position [ 107.888993][ T3654] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.906663][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.988441][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.049047][ T4528] NILFS (loop1): recovery complete [ 108.069053][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.108900][ T4533] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.148892][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.219168][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.259156][ T3654] usb 5-1: New USB device found, idVendor=0bda, idProduct=818a, bcdDevice=e2.d8 [ 108.278698][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.308892][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.357497][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.379407][ T3654] usb 5-1: config 0 descriptor?? [ 108.428789][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.539139][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.618878][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.704752][ T3559] usb 5-1: USB disconnect, device number 2 [ 108.732255][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.279614][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.469212][ T4415] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 109.494476][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.873904][ T4535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 109.970780][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.989907][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.060829][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.106345][ T4546] loop1: detected capacity change from 0 to 512 [ 110.116127][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.221317][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.227949][ T4546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.244597][ T4546] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 110.280771][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.290698][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.303625][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.313575][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.324151][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.335576][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.346460][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.357284][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.377898][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.398552][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.415123][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.450146][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.457983][ T3916] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /21/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 110.501435][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.511037][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.530045][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.559372][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.595609][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.602711][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.676932][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.753223][ T4567] netlink: 104 bytes leftover after parsing attributes in process `syz.4.172'. [ 111.460915][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.576582][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.615904][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.648919][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.729015][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.737575][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.755975][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.763060][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.821635][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.886912][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.500729][ T4582] loop4: detected capacity change from 0 to 512 [ 112.512259][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.527235][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.563805][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.586311][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.601062][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.633540][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.653387][ T4582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.683347][ T4582] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.176: bg 0: block 131: padding at end of block bitmap is not set [ 112.722532][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.734836][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.744738][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.773946][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.792979][ T4582] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 112.873486][ T4582] EXT4-fs (loop4): 1 truncate cleaned up [ 112.897168][ T4582] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.182737][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.211620][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.267112][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.794535][ T154] device hsr_slave_0 left promiscuous mode [ 113.821991][ T154] device hsr_slave_1 left promiscuous mode [ 113.849351][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.884561][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.912931][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.921207][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.930810][ T4606] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure [ 113.957572][ T154] device bridge_slave_1 left promiscuous mode [ 113.968987][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.978077][ T154] device bridge_slave_0 left promiscuous mode [ 113.985563][ T4606] loop2: detected capacity change from 0 to 512 [ 113.999004][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.013276][ T154] device hsr_slave_0 left promiscuous mode [ 114.028819][ T154] device hsr_slave_1 left promiscuous mode [ 114.050403][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.057804][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.075041][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.092376][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.109589][ T154] device bridge_slave_1 left promiscuous mode [ 114.116283][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.159401][ T154] device bridge_slave_0 left promiscuous mode [ 114.165566][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.176162][ T4606] loop2: detected capacity change from 0 to 512 [ 114.216723][ T154] device hsr_slave_0 left promiscuous mode [ 114.228576][ T154] device hsr_slave_1 left promiscuous mode [ 114.241101][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.248502][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.268029][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.284384][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.305030][ T154] device bridge_slave_1 left promiscuous mode [ 114.328604][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.358273][ T154] device bridge_slave_0 left promiscuous mode [ 114.385692][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.452281][ T4617] loop2: detected capacity change from 0 to 1024 [ 114.468666][ T154] device veth1_macvtap left promiscuous mode [ 114.475220][ T154] device veth0_macvtap left promiscuous mode [ 114.499208][ T154] device veth1_vlan left promiscuous mode [ 114.505001][ T154] device veth0_vlan left promiscuous mode [ 114.548593][ T154] device veth1_macvtap left promiscuous mode [ 114.560381][ T154] device veth0_macvtap left promiscuous mode [ 114.566628][ T154] device veth1_vlan left promiscuous mode [ 114.583664][ T154] device veth0_vlan left promiscuous mode [ 114.595043][ T154] device veth1_macvtap left promiscuous mode [ 114.612382][ T154] device veth0_macvtap left promiscuous mode [ 114.618445][ T154] device veth1_vlan left promiscuous mode [ 114.648869][ T154] device veth0_vlan left promiscuous mode [ 114.918112][ T4624] hfsplus: request for non-existent node 2048 in B*Tree [ 114.925449][ T4624] hfsplus: request for non-existent node 2048 in B*Tree [ 115.869499][ T154] team0 (unregistering): Port device team_slave_1 removed [ 115.894043][ T154] team0 (unregistering): Port device team_slave_0 removed [ 115.918595][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.946219][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.103114][ T154] bond0 (unregistering): Released all slaves [ 116.362113][ T154] team0 (unregistering): Port device team_slave_1 removed [ 116.388136][ T154] team0 (unregistering): Port device team_slave_0 removed [ 116.417334][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.433402][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.516422][ T154] bond0 (unregistering): Released all slaves [ 116.716678][ T154] team0 (unregistering): Port device team_slave_1 removed [ 116.749968][ T154] team0 (unregistering): Port device team_slave_0 removed [ 116.773974][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.797886][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.938530][ T154] bond0 (unregistering): Released all slaves [ 117.049357][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.068888][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.076301][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.186738][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.199880][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.233409][ T4636] loop4: detected capacity change from 0 to 64 [ 117.249062][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.249664][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.296583][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.368781][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.435626][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.469660][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.493825][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.531568][ T4298] device veth0_vlan entered promiscuous mode [ 117.620661][ T4298] device veth1_vlan entered promiscuous mode [ 117.861570][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.991023][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.194073][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.366899][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.431105][ T4298] device veth0_macvtap entered promiscuous mode [ 118.451303][ T4661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 118.476344][ T4298] device veth1_macvtap entered promiscuous mode [ 118.529709][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.550801][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.673220][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.756755][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.818693][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.887920][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.943600][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.008236][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.062386][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.115768][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.130475][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.140692][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.154538][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.164432][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.174869][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.184735][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.195182][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.218987][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.229508][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.250002][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.299304][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.307967][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.361752][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.397078][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.474917][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.553089][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.697972][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.813355][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.289811][ T4691] loop2: detected capacity change from 0 to 512 [ 120.341511][ T4650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.379710][ T4650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.427366][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.435972][ T4691] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 120.529888][ T3653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.683372][ T4691] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.693794][ T3653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.862092][ T4691] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3879: comm syz.2.188: Allocating blocks 41-42 which overlap fs metadata [ 120.922913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.133998][ T4691] EXT4-fs (loop2): Remounting filesystem read-only [ 121.165812][ T4691] Quota error (device loop2): write_blk: dquota write failed [ 121.256969][ T4691] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 121.267107][ T4691] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.188: Failed to acquire dquot type 0 [ 121.287795][ T4691] EXT4-fs (loop2): 1 truncate cleaned up [ 121.316583][ T4691] EXT4-fs (loop2): pa ffff88806244c1c0: logic 1, phys. 41, len 23 [ 121.324911][ T4691] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4896: group 0, free 22, pa_free 23 [ 121.827353][ T4691] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x000000000000000a,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002. Quota mode: writeback. [ 122.394737][ T4717] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 124.623646][ T3609] Bluetooth: hci4: command 0x0409 tx timeout [ 124.713820][ T4735] loop2: detected capacity change from 0 to 512 [ 125.493880][ T4735] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 125.507750][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 125.518216][ T4735] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 125.550833][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 125.579486][ T4735] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 125.648569][ T25] audit: type=1107 audit(1727946958.994:54): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='§' [ 125.686035][ T4755] loop3: detected capacity change from 0 to 64 [ 125.710922][ T4713] chnl_net:caif_netlink_parms(): no params data found [ 125.739447][ T4755] hfs: unable to locate alternate MDB [ 125.745120][ T4755] hfs: continuing without an alternate MDB [ 125.783402][ T4739] loop0: detected capacity change from 0 to 736 [ 125.800613][ T4735] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 125.994010][ T4763] loop4: detected capacity change from 0 to 1024 [ 126.018616][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.025875][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.041532][ T4713] device bridge_slave_0 entered promiscuous mode [ 126.050406][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.057534][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.065587][ T4713] device bridge_slave_1 entered promiscuous mode [ 126.137630][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.227518][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.348124][ T4771] sctp: [Deprecated]: syz.2.207 (pid 4771) Use of int in maxseg socket option. [ 126.348124][ T4771] Use struct sctp_assoc_value instead [ 126.421562][ T4713] team0: Port device team_slave_0 added [ 126.480922][ T4713] team0: Port device team_slave_1 added [ 126.521266][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.528384][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.556748][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.570341][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.577337][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.645086][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.750645][ T3609] Bluetooth: hci4: command 0x041b tx timeout [ 127.427480][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 127.453368][ T25] audit: type=1326 audit(1727946960.804:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.547917][ T4713] device hsr_slave_0 entered promiscuous mode [ 127.559716][ T4713] device hsr_slave_1 entered promiscuous mode [ 127.576647][ T4713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.588934][ T25] audit: type=1326 audit(1727946960.894:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.620056][ T4713] Cannot create hsr debugfs directory [ 127.645159][ T25] audit: type=1326 audit(1727946960.894:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.668324][ T25] audit: type=1326 audit(1727946960.894:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.720253][ T25] audit: type=1326 audit(1727946960.894:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.764741][ T25] audit: type=1326 audit(1727946960.894:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 127.820182][ T25] audit: type=1326 audit(1727946960.894:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 128.134789][ T25] audit: type=1326 audit(1727946960.894:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe4d15ff9 code=0x7ffc0000 [ 128.296645][ T25] audit: type=1326 audit(1727946960.894:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfe4d14990 code=0x7ffc0000 [ 128.408061][ T4713] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.413629][ T1073] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.427182][ T25] audit: type=1326 audit(1727946960.894:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfe4d15bfb code=0x7ffc0000 [ 128.524104][ T4794] loop4: detected capacity change from 0 to 512 [ 128.535432][ T4713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.567151][ T4796] loop3: detected capacity change from 0 to 128 [ 128.607264][ T4798] loop2: detected capacity change from 0 to 128 [ 128.632239][ T4794] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 128.652330][ T4713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.839104][ T3654] Bluetooth: hci4: command 0x040f tx timeout [ 128.864305][ T4794] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.215: inline data xattr refers to an external xattr inode [ 130.069051][ T4794] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.215: couldn't read orphan inode 12 (err -117) [ 130.318449][ T4794] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,mblk_io_submit,grpjquota=,resuid=0x0000000000000000,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000100409e,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 130.346116][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.569111][ T1073] usb 1-1: unable to read config index 0 descriptor/all [ 130.577501][ T1073] usb 1-1: can't read configurations, error -71 [ 130.704427][ T4713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.704788][ T4809] loop3: detected capacity change from 0 to 128 [ 131.658701][ T4812] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.215: Directory hole found for htree leaf block 0 [ 131.723307][ T4812] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.215: Directory hole found for htree leaf block 0 [ 132.170938][ T1076] Bluetooth: hci4: command 0x0419 tx timeout [ 132.599602][ T1387] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.607117][ T1387] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.719788][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 132.720833][ T25] audit: type=1800 audit(1727946965.914:75): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.217" name="bus" dev="loop3" ino=1048611 res=0 errno=0 [ 132.971915][ T4823] loop2: detected capacity change from 0 to 2048 [ 133.137744][ T4713] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.254873][ T4823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.366516][ T25] audit: type=1804 audit(1727946965.934:76): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.217" name="/newroot/11/file1/bus" dev="loop3" ino=1048611 res=1 errno=0 [ 133.395903][ T4713] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.451651][ T4713] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.501463][ T4713] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.998613][ T25] audit: type=1804 audit(1727946967.334:77): pid=4842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.222" name="/newroot/43/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 134.415737][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.454317][ T25] audit: type=1804 audit(1727946967.744:78): pid=4823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.222" name="/newroot/43/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 134.492003][ T4845] loop0: detected capacity change from 0 to 512 [ 134.512627][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.525175][ T4847] loop4: detected capacity change from 0 to 512 [ 134.539722][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.578893][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.588518][ T4845] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 134.599548][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.632782][ T4845] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 134.649128][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.681465][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.688518][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.710372][ T4847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.227: inode #1: comm syz.4.227: iget: illegal inode # [ 134.732214][ T4847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.227: error while reading EA inode 1 err=-117 [ 134.771483][ T4845] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 134.797450][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.886113][ T4847] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 134.922129][ T4845] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 134.985164][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.076645][ T4845] System zones: 0-1, 15-15, 18-18, 34-34 [ 135.146217][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.163068][ T4847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.227: inode #1: comm syz.4.227: iget: illegal inode # [ 135.236889][ T4845] EXT4-fs (loop0): orphan cleanup on readonly fs [ 135.302674][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.309810][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.339781][ T4845] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 135.469600][ T4845] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.486924][ T4847] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.227: error while reading EA inode 1 err=-117 [ 135.549171][ T4845] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 135.569917][ T4847] EXT4-fs (loop4): 1 orphan inode deleted [ 135.575659][ T4847] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 135.686787][ T4859] loop3: detected capacity change from 0 to 764 [ 135.694600][ T4845] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.226: bg 0: block 40: padding at end of block bitmap is not set [ 135.914222][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.175651][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.186060][ T4845] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 136.195523][ T4859] rock: directory entry would overflow storage [ 136.210763][ T4859] rock: sig=0x4654, size=5, remaining=4 [ 136.225903][ T4845] EXT4-fs (loop0): 1 truncate cleaned up [ 136.231666][ T4845] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 136.246823][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.289477][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.335650][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.365254][ T4845] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 136.387071][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.396305][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.438444][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.449863][ T4863] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 136.482639][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.522924][ T4845] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 136.557724][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.583088][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.595606][ T4845] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 136.611954][ T4845] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 136.619788][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.620308][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.781836][ T4863] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 137.018393][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.355055][ T4159] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 137.451259][ T4159] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 137.495375][ T4159] EXT4-fs error (device loop4): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 15 [ 137.545251][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.574903][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.688589][ T4882] sd 0:0:1:0: PR command failed: 2 [ 137.823068][ T4882] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 137.966141][ T4882] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 138.249253][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.317989][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.389258][ T4890] ip6t_srh: unknown srh invflags 7F00 [ 138.398809][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.492005][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.516458][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.543125][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.578352][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.774726][ T4874] loop2: detected capacity change from 0 to 32768 [ 138.775285][ T4713] device veth0_vlan entered promiscuous mode [ 139.250116][ T4874] XFS (loop2): Mounting V5 Filesystem [ 139.485305][ T4874] XFS (loop2): Ending clean mount [ 139.532197][ T4713] device veth1_vlan entered promiscuous mode [ 139.575886][ T4713] device veth0_macvtap entered promiscuous mode [ 139.586741][ T4909] loop3: detected capacity change from 0 to 512 [ 139.598436][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.610270][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.618819][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.638498][ T4909] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.652606][ T4713] device veth1_macvtap entered promiscuous mode [ 139.697517][ T4909] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 139.707822][ T4909] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.243: invalid indirect mapped block 2683928664 (level 1) [ 139.726561][ T4909] EXT4-fs (loop3): 1 truncate cleaned up [ 139.734817][ T4909] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,noinit_itable,minixdf,jqfmt=vfsv0,usrjquota=.,,errors=continue. Quota mode: writeback. [ 139.765329][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.780386][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.802763][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.817929][ T4874] xfs: Unknown parameter 'ÿÿ0xffffffffffffffff¤ Z*¬ð¿Ë m˜.Dc8'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5 æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá' [ 139.838982][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.848784][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.918101][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.936150][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.946682][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.956896][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.967901][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.979245][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.256565][ T4013] XFS (loop2): Unmounting Filesystem [ 140.592647][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.619716][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.639986][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.670355][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.688872][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.718873][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.738543][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.753668][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.764299][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.775589][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.825484][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.879669][ T4921] loop3: detected capacity change from 0 to 256 [ 140.911227][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.966774][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.989561][ T3609] Bluetooth: hci0: command 0x0409 tx timeout [ 141.131035][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.197214][ T4921] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 141.331904][ T4713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.443066][ T4713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.451838][ T4713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.460575][ T4713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.506881][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.526993][ T2621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.653582][ T4897] chnl_net:caif_netlink_parms(): no params data found [ 141.700536][ T4928] loop3: detected capacity change from 0 to 512 [ 141.761626][ T154] device hsr_slave_0 left promiscuous mode [ 141.768279][ T4928] EXT4-fs (loop3): user quota file already specified [ 141.780920][ T154] device hsr_slave_1 left promiscuous mode [ 141.796471][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.819020][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.827606][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.828710][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 141.839388][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.845161][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'. [ 141.861473][ T154] device bridge_slave_1 left promiscuous mode [ 141.861817][ T4930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'. [ 141.867725][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.924649][ T154] device bridge_slave_0 left promiscuous mode [ 141.966888][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.002601][ T154] device veth1_macvtap left promiscuous mode [ 142.008747][ T154] device veth0_macvtap left promiscuous mode [ 142.023859][ T154] device veth1_vlan left promiscuous mode [ 142.035764][ T4931] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.046452][ T154] device veth0_vlan left promiscuous mode [ 142.828624][ T4935] loop3: detected capacity change from 0 to 256 [ 142.886773][ T4935] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 142.916312][ T154] team0 (unregistering): Port device team_slave_1 removed [ 142.937828][ T154] team0 (unregistering): Port device team_slave_0 removed [ 142.951786][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.966976][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.045559][ T154] bond0 (unregistering): Released all slaves [ 143.069159][ T3559] Bluetooth: hci2: command 0x0409 tx timeout [ 143.075339][ T3559] Bluetooth: hci0: command 0x041b tx timeout [ 144.044715][ T2621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.067449][ T2621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.452996][ T2621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.469798][ T2621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.600420][ T4919] chnl_net:caif_netlink_parms(): no params data found [ 144.614476][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.630440][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.647903][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.655772][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.668012][ T4897] device bridge_slave_0 entered promiscuous mode [ 144.723462][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.751527][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.769843][ T4897] device bridge_slave_1 entered promiscuous mode [ 144.923882][ T4897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.042617][ T4959] loop2: detected capacity change from 0 to 136 [ 145.052853][ T4897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.098556][ T4919] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.129281][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.159434][ T3559] Bluetooth: hci0: command 0x040f tx timeout [ 145.165582][ T3559] Bluetooth: hci2: command 0x041b tx timeout [ 145.171768][ T4919] device bridge_slave_0 entered promiscuous mode [ 145.197031][ T4919] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.208924][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.216918][ T4919] device bridge_slave_1 entered promiscuous mode [ 145.364154][ T4897] team0: Port device team_slave_0 added [ 145.468361][ T4959] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.481064][ T4897] team0: Port device team_slave_1 added [ 145.544613][ T4919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.563991][ T4966] device  entered promiscuous mode [ 145.595922][ T4919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.615656][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.634806][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.672874][ T4956] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 145.684195][ T4897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.708051][ T4961] loop3: detected capacity change from 0 to 512 [ 145.732196][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.742095][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.771079][ T4897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.784661][ T4961] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 145.903919][ T4919] team0: Port device team_slave_0 added [ 145.919682][ T4961] EXT4-fs (loop3): 1 orphan inode deleted [ 145.963304][ T4961] EXT4-fs (loop3): 1 truncate cleaned up [ 145.984951][ T4919] team0: Port device team_slave_1 added [ 145.999180][ T4961] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 146.104102][ T4897] device hsr_slave_0 entered promiscuous mode [ 146.123358][ T4897] device hsr_slave_1 entered promiscuous mode [ 146.146783][ T4897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.159310][ T4972] loop2: detected capacity change from 0 to 8192 [ 146.173659][ T4897] Cannot create hsr debugfs directory [ 146.192615][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.202920][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.240541][ T4972] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 146.265733][ T4972] REISERFS (device loop2): using ordered data mode [ 146.272848][ T4972] reiserfs: using flush barriers [ 146.282760][ T4919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.282877][ T4972] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.295204][ T4919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.316382][ T4919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.342326][ T4919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.354603][ T4972] REISERFS (device loop2): checking transaction log (loop2) [ 146.375061][ T4972] REISERFS (device loop2): Using r5 hash to sort names [ 146.386691][ T4972] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 146.517433][ T4919] device hsr_slave_0 entered promiscuous mode [ 146.535606][ T4919] device hsr_slave_1 entered promiscuous mode [ 146.556535][ T4919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.585423][ T4919] Cannot create hsr debugfs directory [ 147.287894][ T3559] Bluetooth: hci2: command 0x040f tx timeout [ 147.294178][ T3559] Bluetooth: hci0: command 0x0419 tx timeout [ 148.198256][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 148.253787][ T4984] loop3: detected capacity change from 0 to 256 [ 148.403957][ T4897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.437133][ T4984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d) [ 148.566653][ T4986] loop2: detected capacity change from 0 to 1024 [ 148.654808][ T4986] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.696330][ T4897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.721377][ T4986] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1539)! [ 148.796420][ T4986] EXT4-fs (loop2): group descriptors corrupted! [ 148.918658][ T4897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.085873][ T4897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.242744][ T4919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.316265][ T1076] Bluetooth: hci2: command 0x0419 tx timeout [ 149.337766][ T4919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.425626][ T4919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.537988][ T4919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.779902][ T4897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.054036][ T4897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.081018][ T4897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.323601][ T4897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.363929][ T4919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.417595][ T4919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.457663][ T4996] input: syz0 as /devices/virtual/input/input5 [ 152.472570][ T4919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.487970][ T4996] input: failed to attach handler leds to device input5, error: -6 [ 152.500084][ T4919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.661462][ T4897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.718691][ T4897] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.735542][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.745385][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.781304][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.799533][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.808061][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.815170][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.836766][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.852868][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.868201][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.875306][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.910235][ T4919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.927894][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.943130][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.958064][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.968397][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.994881][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.036403][ T4919] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.054858][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.066020][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.087251][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.108582][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.118598][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.134062][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.147527][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.162965][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.176274][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.219199][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.269161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.278017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.329742][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.336800][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.424792][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.632552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.649517][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.656589][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.990856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.985117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.077268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.280896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.318915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.004429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.021044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.060002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.155352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.175089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.207498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.232516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.288551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.307553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.335156][ T4897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.355000][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 160.509286][ T3609] Bluetooth: hci5: command 0x0409 tx timeout [ 161.308909][ T3609] Bluetooth: hci6: command 0x0409 tx timeout [ 162.589085][ T26] Bluetooth: hci5: command 0x041b tx timeout [ 163.388999][ T26] Bluetooth: hci6: command 0x041b tx timeout [ 164.669011][ T26] Bluetooth: hci5: command 0x040f tx timeout [ 165.468900][ T26] Bluetooth: hci6: command 0x040f tx timeout [ 166.748898][ T26] Bluetooth: hci5: command 0x0419 tx timeout [ 167.548903][ T3609] Bluetooth: hci6: command 0x0419 tx timeout [ 170.349845][ T26] Bluetooth: hci7: command 0x0409 tx timeout [ 172.429153][ T26] Bluetooth: hci7: command 0x041b tx timeout [ 174.509106][ T3609] Bluetooth: hci7: command 0x040f tx timeout [ 176.589214][ T26] Bluetooth: hci7: command 0x0419 tx timeout [ 201.228939][ T26] Bluetooth: hci1: command 0x0406 tx timeout [ 201.549124][ T3609] Bluetooth: hci8: command 0x0409 tx timeout [ 203.548924][ T3609] Bluetooth: hci9: command 0x0409 tx timeout [ 203.629430][ T3609] Bluetooth: hci8: command 0x041b tx timeout [ 205.628944][ T26] Bluetooth: hci9: command 0x041b tx timeout [ 205.709084][ T26] Bluetooth: hci8: command 0x040f tx timeout [ 207.708879][ T26] Bluetooth: hci9: command 0x040f tx timeout [ 207.789108][ T26] Bluetooth: hci8: command 0x0419 tx timeout [ 209.789049][ T26] Bluetooth: hci9: command 0x0419 tx timeout [ 216.588976][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 220.588956][ T26] Bluetooth: hci10: command 0x0409 tx timeout [ 221.628981][ T3609] Bluetooth: hci11: command 0x0409 tx timeout [ 222.668956][ T3609] Bluetooth: hci10: command 0x041b tx timeout [ 223.709047][ T3609] Bluetooth: hci11: command 0x041b tx timeout [ 224.750650][ T3609] Bluetooth: hci10: command 0x040f tx timeout [ 225.788908][ T3609] Bluetooth: hci11: command 0x040f tx timeout [ 226.828942][ T26] Bluetooth: hci10: command 0x0419 tx timeout [ 227.868913][ T26] Bluetooth: hci11: command 0x0419 tx timeout [ 230.669070][ T3609] Bluetooth: hci12: command 0x0409 tx timeout [ 232.749163][ T26] Bluetooth: hci12: command 0x041b tx timeout [ 234.829063][ T26] Bluetooth: hci12: command 0x040f tx timeout [ 236.909113][ T26] Bluetooth: hci12: command 0x0419 tx timeout [ 247.309093][ T3609] Bluetooth: hci4: command 0x0406 tx timeout [ 254.848792][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 254.855426][ C0] rcu: 0-....: (10499 ticks this GP) idle=9e3/1/0x4000000000000000 softirq=12434/12434 fqs=4859 [ 254.867049][ C0] (t=10500 jiffies g=13737 q=4045) [ 254.872229][ C0] NMI backtrace for cpu 0 [ 254.876526][ C0] CPU: 0 PID: 4983 Comm: syz.1.259 Not tainted 5.15.167-syzkaller #0 [ 254.884559][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.894936][ C0] Call Trace: [ 254.898185][ C0] [ 254.901003][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 254.905682][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 254.911284][ C0] ? panic+0x860/0x860 [ 254.915337][ C0] ? read_lock_is_recursive+0x10/0x10 [ 254.920677][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 254.925586][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 254.931705][ C0] ? vprintk_emit+0xf5/0x150 [ 254.936265][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 254.941692][ C0] ? _raw_spin_lock+0x40/0x40 [ 254.946339][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 254.952374][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 254.958322][ C0] rcu_dump_cpu_stacks+0x223/0x390 [ 254.963405][ C0] print_cpu_stall+0x320/0x600 [ 254.968138][ C0] rcu_sched_clock_irq+0x8d9/0x1150 [ 254.973305][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 254.978125][ C0] ? hrtimer_run_queues+0x163/0x450 [ 254.983289][ C0] ? account_process_tick+0x232/0x3a0 [ 254.988629][ C0] update_process_times+0x196/0x200 [ 254.993801][ C0] tick_sched_timer+0x386/0x550 [ 254.998623][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 255.004138][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 255.009312][ C0] ? hrtimer_interrupt+0x980/0x980 [ 255.014390][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 255.020428][ C0] hrtimer_interrupt+0x392/0x980 [ 255.025344][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 255.031293][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 255.036894][ C0] [ 255.039796][ C0] [ 255.042700][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 255.048653][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 255.054429][ C0] Code: 51 67 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 4e ed 24 f7 48 89 df e8 26 41 26 f7 e8 f1 f4 48 f7 fb bf 01 00 00 00 06 87 19 f7 65 8b 05 87 89 c4 75 85 c0 74 02 5b c3 e8 54 a6 c2 [ 255.074004][ C0] RSP: 0018:ffffc90002ff7bc0 EFLAGS: 00000282 [ 255.080038][ C0] RAX: 502d3b795df3fc00 RBX: ffff8880217eb780 RCX: ffffffff96868f03 [ 255.087976][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2b00 RDI: 0000000000000001 [ 255.095913][ C0] RBP: 0000000000000000 R08: ffffffff8186db50 R09: ffffed10042fd6f1 [ 255.103852][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 255.111788][ C0] R13: dffffc0000000000 R14: ffff8880217ebc18 R15: ffff8880217eb780 [ 255.119731][ C0] ? trace_hardirqs_on+0x30/0x80 [ 255.124644][ C0] get_signal+0x13ee/0x14e0 [ 255.129123][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 255.134724][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 255.141106][ C0] ? __might_fault+0xb4/0x110 [ 255.145753][ C0] ? _copy_from_user+0x10f/0x170 [ 255.150662][ C0] ? restore_altstack+0x274/0x400 [ 255.155655][ C0] ? get_sigframe_size+0x10/0x10 [ 255.160563][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 255.165920][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 255.171350][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 255.176778][ C0] exit_to_user_mode_loop+0x97/0x130 [ 255.182031][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 255.187542][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 255.193072][ C0] do_syscall_64+0x47/0xb0 [ 255.197459][ C0] ? clear_bhb_loop+0x15/0x70 [ 255.202101][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 255.207963][ C0] RIP: 0033:0x7f7d72acdff7 [ 255.212353][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 255.231925][ C0] RSP: 002b:00007f7d70f460e8 EFLAGS: 00000246 [ 255.237960][ C0] RAX: 00000000000000ca RBX: 00007f7d72c85f88 RCX: 00007f7d72acdff9 [ 255.245900][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7d72c85f88 [ 255.253842][ C0] RBP: 00007f7d72c85f80 R08: 0000000000000000 R09: 0000000000000000 [ 255.261779][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7d72c85f8c [ 255.269715][ C0] R13: 0000000000000000 R14: 00007ffff9ac2460 R15: 00007ffff9ac2548 [ 255.277664][ C0] [ 261.718992][ T26] Bluetooth: hci13: command 0x0409 tx timeout [ 262.668880][ T26] Bluetooth: hci0: command 0x0406 tx timeout [ 263.708988][ T26] Bluetooth: hci14: command 0x0409 tx timeout [ 263.788961][ T26] Bluetooth: hci13: command 0x041b tx timeout