last executing test programs: 19.028934022s ago: executing program 4 (id=99): mkdirat(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x320082, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x2b8, 0xb0000010, 0x168, 0x5c8fca04, 0x248, 0x3a8, 0x3a8, 0x248, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x120, 0x168, 0x700, {}, [@common=@frag={{0x30}}, @common=@unspec=@limit={{0x48}, {0x0, 0x10000003}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev}}}, {{@ipv6={@remote, @empty, [], [], 'veth0_to_team\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) 17.915428471s ago: executing program 4 (id=101): openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r3) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 13.111915776s ago: executing program 4 (id=109): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 12.70202573s ago: executing program 4 (id=112): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145142, 0x0) 9.144076496s ago: executing program 4 (id=121): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) userfaultfd(0x0) unshare(0x26020480) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 6.79169914s ago: executing program 0 (id=130): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = open$dir(0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x14937e, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r2, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0x8004550f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.160558969s ago: executing program 3 (id=135): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711211000000000095d34525159870b973c326553369e697df9d00e383cea246f6a4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.130485529s ago: executing program 1 (id=136): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, 0x0) 6.081688674s ago: executing program 0 (id=137): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=@newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_ID={0x8}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = gettid() tkill(r3, 0x14) 5.134705762s ago: executing program 1 (id=138): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x6000) r4 = epoll_create1(0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000400) ioctl$RTC_SET_TIME(r5, 0x40187013, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x0) 5.052519915s ago: executing program 2 (id=139): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x145242, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000a40)='d', 0x1}]) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r1, &(0x7f00000000c0)=0x10000, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x20000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r6}) 5.005904616s ago: executing program 0 (id=140): socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(0xffffffffffffffff) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040341a0208009812ffff010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) close_range(r1, r3, 0x0) 4.946747433s ago: executing program 3 (id=141): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324", 0x12}], 0x1}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480), 0x24, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x180}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 4.696654343s ago: executing program 4 (id=142): recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0xffffff39, 0x0) 4.12075221s ago: executing program 2 (id=144): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r3, &(0x7f0000002540)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) sendmsg$tipc(r4, &(0x7f0000002540)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000002540)={&(0x7f0000000280), 0x10, 0x0}, 0x0) 3.634413909s ago: executing program 3 (id=145): socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x44}}, 0x0) 3.51644s ago: executing program 2 (id=146): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x4}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.234615757s ago: executing program 3 (id=147): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_setup(0x7ff, &(0x7f0000002080)) 2.983491612s ago: executing program 0 (id=148): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000340)={0x2}) socket(0x2, 0x3, 0x100000001) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x3}}]}]}, 0x2c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$media(&(0x7f00000009c0), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, 0x0}) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'veth1_to_team\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x80047453, &(0x7f00000000c0)={0x2f, 0x0, {0x0, @empty, 'ipvlan1\x00'}}) 1.944511173s ago: executing program 2 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000240)={0xbc, 0x0, 0x5}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.934851532s ago: executing program 3 (id=150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x4, 0x8, 0x6}, 0x48) r1 = getpid() r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r1, r3, 0x300, 0xffffffffffffffff, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xa, 0x1, 0x9, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x11, r5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1800080200000000000000000000000018100000", @ANYRES32=r6, @ANYBLOB="00000000000000009500000000000000363255b22e6e1f6dde619f53bfd70e04273528c4d2af0bdd2a42724562e7d47a5eb4f5f90edc49e430414508d96bd6d328d6f25cae09ea2d5f5f6317a4dafadfcdf644c2ca2716d313482718f3f91ef89434cecc73ff76c946213e90"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000001c0)={[{@dioread_nolock}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@mblk_io_submit}, {@errors_continue}, {@usrjquota}, {@prjquota}, {@nodiscard}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") 1.775533872s ago: executing program 1 (id=151): socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x412b80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x18d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup3(r1, r0, 0x0) 1.564622101s ago: executing program 3 (id=152): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) 1.533694797s ago: executing program 1 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1}}}}) 1.312849713s ago: executing program 2 (id=154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 268.527626ms ago: executing program 0 (id=155): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) memfd_create(0x0, 0x0) r1 = fanotify_init(0x0, 0x0) execve(0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000240)='nicvf0\x00']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x0) fanotify_mark(r1, 0x1, 0x4000000a, r0, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 215.564354ms ago: executing program 1 (id=156): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "5a5f0000008a3f00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, "f937267f0f7ba57603a6a12e3f0a7f64c64c56"}) syz_io_uring_setup(0x2593, 0x0, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[{0x0}], 0x1) r2 = dup(r1) read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000004540)={0x2020}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000880)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) 190.368625ms ago: executing program 2 (id=157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) write$cgroup_int(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000003c0)={0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x45, 0x0, 0xfd}) 472.562µs ago: executing program 1 (id=158): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 0 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@iter={0x0}}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r2, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 48.132502][ T5216] cgroup: Unknown subsys name 'net' [ 48.307888][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.574233][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.961264][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.969567][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.977844][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.985754][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.993900][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.001846][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.006132][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.023445][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.032727][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.032933][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.040456][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.053807][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.061390][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.062968][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.069454][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.075712][ T5245] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.084348][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.091040][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.096738][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.104070][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.112366][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.118773][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.126577][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.130938][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.138837][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.153125][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.153459][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.168259][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.170160][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.187286][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.594260][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 52.608154][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 52.722080][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 52.730801][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 52.740041][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.748029][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.755418][ T5228] bridge_slave_0: entered allmulticast mode [ 52.762057][ T5228] bridge_slave_0: entered promiscuous mode [ 52.772420][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 52.803252][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.810481][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.817994][ T5228] bridge_slave_1: entered allmulticast mode [ 52.824688][ T5228] bridge_slave_1: entered promiscuous mode [ 52.922286][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.931577][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.939586][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.947152][ T5229] bridge_slave_0: entered allmulticast mode [ 52.953859][ T5229] bridge_slave_0: entered promiscuous mode [ 52.971591][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.978734][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.985978][ T5226] bridge_slave_0: entered allmulticast mode [ 52.993510][ T5226] bridge_slave_0: entered promiscuous mode [ 53.000543][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.008255][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.015561][ T5226] bridge_slave_1: entered allmulticast mode [ 53.022402][ T5226] bridge_slave_1: entered promiscuous mode [ 53.029999][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.048511][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.055698][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.063659][ T5229] bridge_slave_1: entered allmulticast mode [ 53.070115][ T5229] bridge_slave_1: entered promiscuous mode [ 53.134622][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.145578][ T5228] team0: Port device team_slave_0 added [ 53.168296][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.175715][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.182935][ T5230] bridge_slave_0: entered allmulticast mode [ 53.189406][ T5230] bridge_slave_0: entered promiscuous mode [ 53.197714][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.207240][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.216823][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.224873][ T5230] bridge_slave_1: entered allmulticast mode [ 53.231346][ T5230] bridge_slave_1: entered promiscuous mode [ 53.242165][ T5228] team0: Port device team_slave_1 added [ 53.249619][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.261688][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.318664][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.325917][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.333797][ T5227] bridge_slave_0: entered allmulticast mode [ 53.340717][ T5227] bridge_slave_0: entered promiscuous mode [ 53.348088][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.355332][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.365899][ T5227] bridge_slave_1: entered allmulticast mode [ 53.372709][ T5227] bridge_slave_1: entered promiscuous mode [ 53.381545][ T5226] team0: Port device team_slave_0 added [ 53.398325][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.416231][ T5229] team0: Port device team_slave_0 added [ 53.424741][ T5229] team0: Port device team_slave_1 added [ 53.438595][ T5226] team0: Port device team_slave_1 added [ 53.445992][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.457131][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.464110][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.490165][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.536645][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.546584][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.573487][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.593178][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.606113][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.627128][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.634324][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.660561][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.672821][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.679778][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.705962][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.728553][ T5230] team0: Port device team_slave_0 added [ 53.739723][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.746963][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.778274][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.812879][ T5227] team0: Port device team_slave_0 added [ 53.821492][ T5230] team0: Port device team_slave_1 added [ 53.837549][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.844625][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.870966][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.889015][ T5227] team0: Port device team_slave_1 added [ 53.927120][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.934205][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.960765][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.973329][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.980290][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.007092][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.034368][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.041323][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.067572][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.105682][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.113024][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.139426][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.153536][ T5228] hsr_slave_0: entered promiscuous mode [ 54.159719][ T5228] hsr_slave_1: entered promiscuous mode [ 54.191139][ T5226] hsr_slave_0: entered promiscuous mode [ 54.197495][ T5226] hsr_slave_1: entered promiscuous mode [ 54.206083][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.213991][ T5226] Cannot create hsr debugfs directory [ 54.223232][ T5229] hsr_slave_0: entered promiscuous mode [ 54.229382][ T5229] hsr_slave_1: entered promiscuous mode [ 54.232753][ T5240] Bluetooth: hci4: command tx timeout [ 54.236616][ T5245] Bluetooth: hci3: command tx timeout [ 54.240830][ T54] Bluetooth: hci0: command tx timeout [ 54.245870][ T5244] Bluetooth: hci1: command tx timeout [ 54.252025][ T5236] Bluetooth: hci2: command tx timeout [ 54.265819][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.273648][ T5229] Cannot create hsr debugfs directory [ 54.299399][ T5230] hsr_slave_0: entered promiscuous mode [ 54.308285][ T5230] hsr_slave_1: entered promiscuous mode [ 54.314681][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.322846][ T5230] Cannot create hsr debugfs directory [ 54.459908][ T5227] hsr_slave_0: entered promiscuous mode [ 54.466598][ T5227] hsr_slave_1: entered promiscuous mode [ 54.472882][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.480423][ T5227] Cannot create hsr debugfs directory [ 54.650296][ T5230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.679997][ T5230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.699240][ T5230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.719470][ T5230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.755480][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.773954][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.793393][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.812835][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.840564][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.850911][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.866544][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.875979][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.949649][ T5226] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.979205][ T5226] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.988280][ T5226] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.000218][ T5226] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.044314][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.054752][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.064744][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.081819][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.114927][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.159660][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.185502][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.192795][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.226649][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.233793][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.246044][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.287732][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.325377][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.332523][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.361377][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.386095][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.405912][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.415599][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.422738][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.458809][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.469917][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.486620][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.507917][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.515085][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.524553][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.531602][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.544396][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.551443][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.580281][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.587430][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.619702][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.627404][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.669050][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.676211][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.817691][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.844804][ T5289] modprobe (5289) used greatest stack depth: 18960 bytes left [ 55.895876][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.009832][ T5228] veth0_vlan: entered promiscuous mode [ 56.053957][ T5228] veth1_vlan: entered promiscuous mode [ 56.105017][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.145250][ T5228] veth0_macvtap: entered promiscuous mode [ 56.174758][ T5228] veth1_macvtap: entered promiscuous mode [ 56.202839][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.235867][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.257633][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.294894][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.308964][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.316370][ T5236] Bluetooth: hci0: command tx timeout [ 56.322308][ T5236] Bluetooth: hci2: command tx timeout [ 56.322885][ T54] Bluetooth: hci4: command tx timeout [ 56.327713][ T5236] Bluetooth: hci3: command tx timeout [ 56.333985][ T54] Bluetooth: hci1: command tx timeout [ 56.354746][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.364222][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.373400][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.382818][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.416538][ T5230] veth0_vlan: entered promiscuous mode [ 56.455186][ T5230] veth1_vlan: entered promiscuous mode [ 56.514199][ T5226] veth0_vlan: entered promiscuous mode [ 56.558648][ T5227] veth0_vlan: entered promiscuous mode [ 56.589012][ T5226] veth1_vlan: entered promiscuous mode [ 56.606342][ T1833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.619091][ T1833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.626829][ T5229] veth0_vlan: entered promiscuous mode [ 56.641462][ T5227] veth1_vlan: entered promiscuous mode [ 56.698344][ T5229] veth1_vlan: entered promiscuous mode [ 56.707041][ T5226] veth0_macvtap: entered promiscuous mode [ 56.720130][ T5230] veth0_macvtap: entered promiscuous mode [ 56.739722][ T5227] veth0_macvtap: entered promiscuous mode [ 56.746958][ T5226] veth1_macvtap: entered promiscuous mode [ 56.764631][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.773177][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.780902][ T5230] veth1_macvtap: entered promiscuous mode [ 56.801758][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.813804][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.825358][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.844753][ T5227] veth1_macvtap: entered promiscuous mode [ 56.867330][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.886057][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.898557][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.915155][ T5229] veth0_macvtap: entered promiscuous mode [ 56.928703][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.948232][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.960525][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.978292][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.989847][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.025214][ T5229] veth1_macvtap: entered promiscuous mode [ 57.033078][ T5226] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.049756][ T5226] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.064703][ T5226] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.073833][ T5226] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.087100][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.104143][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.117574][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.128400][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.140675][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.154033][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.166438][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.186391][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.209476][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.220511][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.238133][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.250765][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.314798][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.326247][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.336016][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.349051][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.431254][ T5315] loop2: detected capacity change from 0 to 128 [ 58.027592][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.038725][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.048620][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.059951][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.070061][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.082222][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.093226][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.130097][ T5230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.140027][ T5230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.149119][ T5230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.158548][ T5230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.169303][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.180020][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.189935][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.200698][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.210614][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.221052][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.233757][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.244895][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.255871][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.295551][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.309250][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.320702][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.331898][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.341711][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.354102][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.373151][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.389148][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.401478][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.416019][ T5245] Bluetooth: hci4: command tx timeout [ 58.421450][ T5245] Bluetooth: hci2: command tx timeout [ 58.425076][ T5240] Bluetooth: hci0: command tx timeout [ 58.429208][ T5236] Bluetooth: hci3: command tx timeout [ 58.435747][ T54] Bluetooth: hci1: command tx timeout [ 58.459853][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.474790][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.491136][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.518016][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.527499][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.536418][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.627861][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.638891][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.710347][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.721077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.761614][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.800014][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.831637][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.846643][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.867760][ T2965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.894330][ T2965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.935553][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.946187][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.952294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 58.993486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.014573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.274657][ T5326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.157279][ T5330] loop0: detected capacity change from 0 to 2048 [ 60.475057][ T54] Bluetooth: hci1: command tx timeout [ 60.480722][ T54] Bluetooth: hci0: command tx timeout [ 60.486486][ T5330] loop0: p3 < > p4 < > [ 60.487471][ T54] Bluetooth: hci3: command tx timeout [ 60.497444][ T54] Bluetooth: hci2: command tx timeout [ 60.502044][ T5236] Bluetooth: hci4: command tx timeout [ 60.550748][ T5330] loop0: partition table partially beyond EOD, truncated [ 60.812717][ T5330] loop0: p3 start 4284289 is beyond EOD, truncated [ 60.824674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 60.834819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 60.928656][ T5346] kvm: emulating exchange as write [ 61.126546][ T5348] netlink: 'syz.1.11': attribute type 15 has an invalid length. [ 61.352078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.492025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.392788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.401001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.473069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.633505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.669257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.338090][ T5381] loop0: detected capacity change from 0 to 1024 [ 64.997922][ T5386] sp0: Synchronizing with TNC [ 65.385359][ T61] sp0: Found TNC [ 65.595330][ T61] hfsplus: b-tree write err: -5, ino 4 [ 65.778175][ T5273] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.718103][ T5397] loop0: detected capacity change from 0 to 2048 [ 66.775446][ T5397] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.795041][ T5238] udevd[5238]: incorrect nilfs2 checksum on /dev/loop0 [ 66.864799][ T5238] udevd[5238]: incorrect nilfs2 checksum on /dev/loop0 [ 66.892665][ T5405] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.073190][ T5273] usb 2-1: Using ep0 maxpacket: 32 [ 67.078163][ T5408] loop2: detected capacity change from 0 to 128 [ 67.102311][ T5273] usb 2-1: config 0 has an invalid interface number: 155 but max is 0 [ 67.115023][ T5408] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.145402][ T5408] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.145669][ T5273] usb 2-1: config 0 has no interface number 0 [ 67.177553][ C0] vkms_vblank_simulate: vblank timer overrun [ 67.177687][ T5273] usb 2-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.177732][ T5273] usb 2-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 67.266027][ T5413] overlayfs: upper fs does not support tmpfile. [ 67.300601][ T5414] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 67.335490][ T5413] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 67.346625][ T5273] usb 2-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 67.355982][ T5273] usb 2-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 67.362734][ T5414] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 67.364216][ T5273] usb 2-1: Product: syz [ 67.376087][ T5273] usb 2-1: Manufacturer: syz [ 67.377232][ T5413] overlayfs: failed to set xattr on upper [ 67.380672][ T5273] usb 2-1: SerialNumber: syz [ 67.413030][ T5414] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.28'. [ 67.415929][ T5273] usb 2-1: config 0 descriptor?? [ 67.464227][ T5273] ftdi_sio 2-1:0.155: FTDI USB Serial Device converter detected [ 67.478914][ T5273] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 67.534724][ T5408] loop2: detected capacity change from 128 to 0 [ 67.577325][ T5413] overlayfs: ...falling back to redirect_dir=nofollow. [ 67.699638][ T5413] overlayfs: ...falling back to index=off. [ 67.727133][ T5228] syz-executor: attempt to access beyond end of device [ 67.727133][ T5228] loop2: rw=12288, sector=8, nr_sectors = 2 limit=0 [ 67.742912][ T5413] overlayfs: ...falling back to uuid=null. [ 67.760667][ T5228] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 67.784435][ T5228] syz-executor: attempt to access beyond end of device [ 67.784435][ T5228] loop2: rw=12288, sector=70, nr_sectors = 2 limit=0 [ 67.815763][ T5228] EXT4-fs error (device loop2): ext4_get_inode_loc:4571: inode #2: block 35: comm syz-executor: unable to read itable block [ 67.848299][ T5228] syz-executor: attempt to access beyond end of device [ 67.848299][ T5228] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 67.906652][ T5228] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 67.907282][ T25] usb 2-1: USB disconnect, device number 2 [ 67.956168][ T25] ftdi_sio 2-1:0.155: device disconnected [ 68.001917][ T5228] EXT4-fs (loop2): I/O error while writing superblock [ 68.009292][ T5228] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5807: IO failure [ 68.018787][ T5228] syz-executor: attempt to access beyond end of device [ 68.018787][ T5228] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 68.042871][ T5228] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 68.061897][ T5228] EXT4-fs (loop2): I/O error while writing superblock [ 68.070866][ T5228] EXT4-fs error (device loop2): ext4_dirty_inode:6011: inode #2: comm syz-executor: mark_inode_dirty error [ 68.116976][ T5228] syz-executor: attempt to access beyond end of device [ 68.116976][ T5228] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 68.171950][ T5228] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 68.181369][ T5228] EXT4-fs (loop2): I/O error while writing superblock [ 68.221445][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 68.235551][ T36] kworker/u8:3: attempt to access beyond end of device [ 68.235551][ T36] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 68.249549][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 68.260029][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 68.268564][ T36] kworker/u8:3: attempt to access beyond end of device [ 68.268564][ T36] loop2: rw=1, sector=74, nr_sectors = 24 limit=0 [ 68.291980][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 37) [ 68.319977][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 68.349148][ T36] kworker/u8:3: attempt to access beyond end of device [ 68.349148][ T36] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 68.374361][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 68.386861][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 68.394721][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 68.413505][ T36] kworker/u8:3: attempt to access beyond end of device [ 68.413505][ T36] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 68.429788][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 68.439563][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 68.450831][ T36] Buffer I/O error on device loop2, logical block 37 [ 68.457666][ T36] Buffer I/O error on device loop2, logical block 38 [ 68.464325][ T36] Buffer I/O error on device loop2, logical block 39 [ 68.470977][ T36] Buffer I/O error on device loop2, logical block 40 [ 68.477729][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.199274][ T36] Buffer I/O error on device loop2, logical block 41 [ 69.205991][ T36] Buffer I/O error on device loop2, logical block 42 [ 69.212683][ T36] Buffer I/O error on device loop2, logical block 43 [ 69.219375][ T36] Buffer I/O error on device loop2, logical block 44 [ 69.226147][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.284469][ T36] Buffer I/O error on device loop2, logical block 45 [ 69.291195][ T36] Buffer I/O error on device loop2, logical block 46 [ 69.306204][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.313815][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 69.332412][ T36] kworker/u8:3: attempt to access beyond end of device [ 69.332412][ T36] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 69.346107][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 69.354782][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 69.362073][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 53) [ 69.374239][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 69.388442][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 69.401917][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 69.412058][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 69.430437][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 69.439088][ T36] EXT4-fs (loop2): I/O error while writing superblock [ 69.448813][ T36] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm kworker/u8:3: Error while async write back metadata [ 69.462268][ T36] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 69.472548][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 29) [ 69.474424][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.484467][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 18) [ 69.540198][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 21) [ 69.579353][ T36] EXT4-fs warning (device loop2): ext4_end_bio:346: I/O error 10 writing to inode 12 starting block 22) [ 69.628858][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.667978][ T5424] vlan2: entered promiscuous mode [ 69.673236][ T5424] team0: entered promiscuous mode [ 69.678563][ T5424] team_slave_0: entered promiscuous mode [ 69.689345][ T5424] team_slave_1: entered promiscuous mode [ 69.719039][ T5424] team0: Device vlan2 is already an upper device of the team interface [ 69.737393][ T5424] team0: left promiscuous mode [ 69.742560][ T5424] team_slave_0: left promiscuous mode [ 69.750889][ T5424] team_slave_1: left promiscuous mode [ 69.817466][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.152031][ T5431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.392513][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.417279][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.427254][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.438178][ T35] bridge_slave_1: left allmulticast mode [ 70.444919][ T35] bridge_slave_1: left promiscuous mode [ 70.459777][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.525377][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.546950][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.556550][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.618648][ T35] bridge_slave_0: left allmulticast mode [ 70.641900][ T35] bridge_slave_0: left promiscuous mode [ 70.662957][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.890212][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.899363][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.909425][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.929727][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.942054][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.949705][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.366387][ T5441] loop3: detected capacity change from 0 to 32768 [ 71.535909][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.542664][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.573040][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.606027][ T29] audit: type=1804 audit(1724323718.885:2): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.41" name="/newroot/7/file0/bus" dev="loop3" ino=7 res=1 errno=0 [ 71.632316][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.644339][ T35] bond0 (unregistering): Released all slaves [ 72.838640][ T5236] Bluetooth: hci3: command tx timeout [ 73.040581][ T5236] Bluetooth: hci4: command tx timeout [ 73.901414][ T5433] chnl_net:caif_netlink_parms(): no params data found [ 73.987004][ T5547] loop1: detected capacity change from 0 to 256 [ 74.040062][ T5538] input: syz0 as /devices/virtual/input/input5 [ 74.176498][ T5449] chnl_net:caif_netlink_parms(): no params data found [ 74.639480][ T5433] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.647315][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.712903][ T5433] bridge_slave_0: entered allmulticast mode [ 74.728295][ T5433] bridge_slave_0: entered promiscuous mode [ 74.890589][ T5236] Bluetooth: hci3: command tx timeout [ 74.917798][ T35] hsr_slave_0: left promiscuous mode [ 74.934682][ T35] hsr_slave_1: left promiscuous mode [ 74.989360][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.146969][ T5236] Bluetooth: hci4: command tx timeout [ 75.177387][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.434681][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.638141][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.716505][ T35] veth1_macvtap: left promiscuous mode [ 75.760364][ T35] veth0_macvtap: left promiscuous mode [ 75.775027][ T35] veth1_vlan: left promiscuous mode [ 75.797977][ T35] veth0_vlan: left promiscuous mode [ 75.912992][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 75.922003][ T5236] Bluetooth: hci2: Injecting HCI hardware error event [ 75.927258][ T5585] loop1: detected capacity change from 0 to 1024 [ 75.929939][ T5236] Bluetooth: hci2: hardware error 0x00 [ 76.070458][ T5585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.199666][ T5226] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 76.229614][ T5226] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 76.264646][ T5226] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 76.286471][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.305009][ T5226] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 76.328394][ T5226] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 76.350247][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.357663][ T5226] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 76.378600][ T5226] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 76.400429][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.445097][ T5226] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 76.466541][ T5226] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /16/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 76.489552][ T5226] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 76.634548][ T47] cfg80211: failed to load regulatory.db [ 76.648763][ T5595] loop4: detected capacity change from 0 to 2048 [ 76.764673][ T5595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.787556][ T35] team0 (unregistering): Port device team_slave_1 removed [ 76.807419][ T5597] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1601139807 (3202279614 ns) > initial count (1616928864 ns). Using initial count to start timer. [ 76.872832][ T35] team0 (unregistering): Port device team_slave_0 removed [ 76.952242][ T5245] Bluetooth: hci3: command tx timeout [ 77.028653][ T5595] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.056431][ T5595] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1116 with error 28 [ 77.084452][ T5595] EXT4-fs (loop4): This should not happen!! Data will be lost [ 77.084452][ T5595] [ 77.091579][ T5603] loop3: detected capacity change from 0 to 256 [ 77.111955][ T5595] EXT4-fs (loop4): Total free blocks count 0 [ 77.118999][ T5595] EXT4-fs (loop4): Free/Dirty block details [ 77.125729][ T5595] EXT4-fs (loop4): free_blocks=2415919104 [ 77.133355][ T5595] EXT4-fs (loop4): dirty_blocks=1120 [ 77.138674][ T5595] EXT4-fs (loop4): Block reservation details [ 77.145105][ T5595] EXT4-fs (loop4): i_reserved_data_blocks=70 [ 77.192113][ T5245] Bluetooth: hci4: command tx timeout [ 77.487566][ T5433] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.496133][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.509121][ T5433] bridge_slave_1: entered allmulticast mode [ 77.521447][ T5433] bridge_slave_1: entered promiscuous mode [ 77.548138][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.555611][ T5449] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.562931][ T5449] bridge_slave_0: entered allmulticast mode [ 77.570037][ T5449] bridge_slave_0: entered promiscuous mode [ 77.639474][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665391][ T5510] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2 with max blocks 2 with error 28 [ 77.677993][ T5449] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.685974][ T5449] bridge_slave_1: entered allmulticast mode [ 77.696427][ T5449] bridge_slave_1: entered promiscuous mode [ 77.715600][ T5433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.821231][ T5433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.884267][ T5226] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.001411][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 78.090341][ T5449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.388945][ T5449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.513155][ T5433] team0: Port device team_slave_0 added [ 78.872690][ T5433] team0: Port device team_slave_1 added [ 78.929739][ T5449] team0: Port device team_slave_0 added [ 78.979423][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.992028][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.017947][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.051320][ T5236] Bluetooth: hci3: command tx timeout [ 79.108321][ T5433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.136502][ T5449] team0: Port device team_slave_1 added [ 79.195929][ T5433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.212901][ T5433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.264054][ T5433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.283380][ T5245] Bluetooth: hci4: command tx timeout [ 79.310181][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.332232][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.340086][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.349274][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.360273][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.369672][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.389484][ T5641] loop3: detected capacity change from 0 to 2048 [ 79.424339][ T5641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.445079][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.462694][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.482237][ T5641] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 79.488616][ C1] vkms_vblank_simulate: vblank timer overrun [ 79.494793][ T5449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.497647][ T5641] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.532825][ T5449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.539996][ T5449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.541347][ T5641] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 79.566427][ T5449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.616680][ T5641] EXT4-fs (loop3): This should not happen!! Data will be lost [ 79.616680][ T5641] [ 79.633602][ T5641] EXT4-fs (loop3): Total free blocks count 0 [ 79.639675][ T5641] EXT4-fs (loop3): Free/Dirty block details [ 79.646171][ T5641] EXT4-fs (loop3): free_blocks=2415919104 [ 79.651386][ T5433] hsr_slave_0: entered promiscuous mode [ 79.655218][ T5641] EXT4-fs (loop3): dirty_blocks=16 [ 79.663991][ T5433] hsr_slave_1: entered promiscuous mode [ 79.665053][ T5641] EXT4-fs (loop3): Block reservation details [ 79.677490][ T5433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.683731][ T5641] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 79.692873][ T5433] Cannot create hsr debugfs directory [ 79.741473][ T2965] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 79.780652][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.820319][ T5449] hsr_slave_0: entered promiscuous mode [ 79.868621][ T5449] hsr_slave_1: entered promiscuous mode [ 79.889911][ T5449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.900273][ T5449] Cannot create hsr debugfs directory [ 79.936067][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.949366][ T5655] coredump: 57(syz.3.72): coredump has not been created, error -2 [ 80.082679][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.152856][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.249191][ T5638] chnl_net:caif_netlink_parms(): no params data found [ 81.398564][ T5449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.474140][ T5236] Bluetooth: hci0: command tx timeout [ 81.596604][ T5449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.706296][ T5449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.152073][ T5449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.453594][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.462607][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.500661][ T5638] bridge_slave_0: entered allmulticast mode [ 82.511008][ T5638] bridge_slave_0: entered promiscuous mode [ 82.530674][ T5684] loop3: detected capacity change from 0 to 256 [ 82.531446][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.547550][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.554809][ T5638] bridge_slave_1: entered allmulticast mode [ 82.561704][ T5638] bridge_slave_1: entered promiscuous mode [ 82.567658][ T5684] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 82.611075][ T35] bridge_slave_1: left allmulticast mode [ 82.618834][ T35] bridge_slave_1: left promiscuous mode [ 82.633056][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.660731][ T35] bridge_slave_0: left allmulticast mode [ 82.666769][ T35] bridge_slave_0: left promiscuous mode [ 82.673073][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.681365][ T5689] loop4: detected capacity change from 0 to 256 [ 82.697442][ T35] bridge_slave_1: left allmulticast mode [ 82.708312][ T35] bridge_slave_1: left promiscuous mode [ 82.733411][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.768011][ T35] bridge_slave_0: left allmulticast mode [ 82.779666][ T35] bridge_slave_0: left promiscuous mode [ 82.786832][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.002096][ T5684] loop3: detected capacity change from 256 to 0 [ 83.544578][ T5236] Bluetooth: hci0: command tx timeout [ 83.568404][ T5227] bio_check_eod: 25 callbacks suppressed [ 83.568421][ T5227] syz-executor: attempt to access beyond end of device [ 83.568421][ T5227] loop3: rw=0, sector=128, nr_sectors = 1 limit=0 [ 83.660618][ T5227] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5) [ 83.708851][ T5227] exFAT-fs (loop3): Filesystem has been set read-only [ 83.800800][ T5227] syz-executor: attempt to access beyond end of device [ 83.800800][ T5227] loop3: rw=0, sector=128, nr_sectors = 1 limit=0 [ 83.821856][ T5227] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5) [ 83.856481][ T5227] syz-executor: attempt to access beyond end of device [ 83.856481][ T5227] loop3: rw=524288, sector=208, nr_sectors = 1 limit=0 [ 83.889308][ T5227] syz-executor: attempt to access beyond end of device [ 83.889308][ T5227] loop3: rw=524288, sector=209, nr_sectors = 1 limit=0 [ 83.904422][ T5227] syz-executor: attempt to access beyond end of device [ 83.904422][ T5227] loop3: rw=524288, sector=210, nr_sectors = 1 limit=0 [ 83.918722][ T5227] syz-executor: attempt to access beyond end of device [ 83.918722][ T5227] loop3: rw=524288, sector=211, nr_sectors = 1 limit=0 [ 83.934567][ T5227] syz-executor: attempt to access beyond end of device [ 83.934567][ T5227] loop3: rw=524288, sector=212, nr_sectors = 1 limit=0 [ 83.957127][ T5227] syz-executor: attempt to access beyond end of device [ 83.957127][ T5227] loop3: rw=524288, sector=213, nr_sectors = 1 limit=0 [ 84.023561][ T5227] syz-executor: attempt to access beyond end of device [ 84.023561][ T5227] loop3: rw=524288, sector=214, nr_sectors = 1 limit=0 [ 84.087159][ T5227] syz-executor: attempt to access beyond end of device [ 84.087159][ T5227] loop3: rw=524288, sector=215, nr_sectors = 1 limit=0 [ 84.250465][ T5227] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5) [ 84.692399][ T5702] loop3: detected capacity change from 0 to 256 [ 84.733471][ T5702] FAT-fs (loop3): Directory bread(block 64) failed [ 84.741294][ T5702] FAT-fs (loop3): Directory bread(block 65) failed [ 84.755110][ T5702] FAT-fs (loop3): Directory bread(block 66) failed [ 84.761743][ T5702] FAT-fs (loop3): Directory bread(block 67) failed [ 84.770983][ T5702] FAT-fs (loop3): Directory bread(block 68) failed [ 84.778047][ T5702] FAT-fs (loop3): Directory bread(block 69) failed [ 84.785144][ T5702] FAT-fs (loop3): Directory bread(block 70) failed [ 84.793299][ T5702] FAT-fs (loop3): Directory bread(block 71) failed [ 84.799906][ T5702] FAT-fs (loop3): Directory bread(block 72) failed [ 84.805832][ T5704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.806960][ T5702] FAT-fs (loop3): Directory bread(block 73) failed [ 85.066578][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.077477][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.097410][ T35] bond0 (unregistering): Released all slaves [ 85.166499][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.177403][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.187867][ T35] bond0 (unregistering): Released all slaves [ 85.213631][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.234455][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.303124][ T5638] team0: Port device team_slave_0 added [ 85.313195][ T5638] team0: Port device team_slave_1 added [ 85.381076][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.388909][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.417749][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.435664][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.444527][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.471031][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.593827][ T5236] Bluetooth: hci0: command tx timeout [ 85.703294][ T5638] hsr_slave_0: entered promiscuous mode [ 85.717552][ T5638] hsr_slave_1: entered promiscuous mode [ 85.736593][ T5638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.761646][ T5638] Cannot create hsr debugfs directory [ 85.876566][ T5449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.992821][ T5449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.041068][ T5449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.055021][ T5449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.430548][ T35] hsr_slave_0: left promiscuous mode [ 86.438613][ T35] hsr_slave_1: left promiscuous mode [ 86.446582][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.454885][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.463699][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.471120][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.495009][ T35] hsr_slave_0: left promiscuous mode [ 86.502328][ T35] hsr_slave_1: left promiscuous mode [ 86.508265][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.515786][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.524368][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.531822][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.582497][ T35] veth1_macvtap: left promiscuous mode [ 86.588106][ T35] veth0_macvtap: left promiscuous mode [ 86.594244][ T35] veth1_vlan: left promiscuous mode [ 86.600552][ T35] veth0_vlan: left promiscuous mode [ 86.610305][ T35] veth1_macvtap: left promiscuous mode [ 86.622024][ T35] veth0_macvtap: left promiscuous mode [ 86.653124][ T35] veth1_vlan: left promiscuous mode [ 86.658377][ T35] veth0_vlan: left promiscuous mode [ 87.675164][ T5236] Bluetooth: hci0: command tx timeout [ 87.813210][ T5728] loop3: detected capacity change from 0 to 4096 [ 87.822557][ T5728] ======================================================= [ 87.822557][ T5728] WARNING: The mand mount option has been deprecated and [ 87.822557][ T5728] and is ignored by this kernel. Remove the mand [ 87.822557][ T5728] option from the mount to silence this warning. [ 87.822557][ T5728] ======================================================= [ 87.890633][ T5728] ntfs3: loop3: Unsupported bytes per MFT record 32768. [ 87.915955][ T5728] ntfs3: loop3: try to read out of volume at offset 0x1ffe00 [ 87.929960][ T5730] loop4: detected capacity change from 0 to 512 [ 87.943448][ T5730] EXT4-fs: Ignoring removed i_version option [ 87.998748][ T5730] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 88.029340][ T5730] EXT4-fs (loop4): 1 truncate cleaned up [ 88.036106][ T5730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.079383][ T35] team0 (unregistering): Port device team_slave_1 removed [ 88.117923][ T35] team0 (unregistering): Port device team_slave_0 removed [ 89.032975][ T5229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.218645][ T5742] loop3: detected capacity change from 0 to 512 [ 89.240359][ T5742] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 89.248174][ T5742] UDF-fs: Scanning with blocksize 512 failed [ 89.265909][ T5742] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 89.277145][ T5742] UDF-fs: Scanning with blocksize 1024 failed [ 89.289305][ T5742] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 89.298127][ T5742] UDF-fs: Scanning with blocksize 2048 failed [ 89.304972][ T5742] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 89.321631][ T5742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.385319][ T5281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.586945][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.599704][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.611023][ T5281] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.623400][ T35] team0 (unregistering): Port device team_slave_1 removed [ 89.639480][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.654091][ T5281] usb 5-1: config 0 descriptor?? [ 89.689264][ T35] team0 (unregistering): Port device team_slave_0 removed [ 89.969357][ T5744] loop3: detected capacity change from 0 to 32768 [ 90.022995][ T5744] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 90.100301][ T5744] XFS (loop3): Ending clean mount [ 90.129320][ T5281] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 90.153826][ T47] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 90.176788][ T5281] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 90.202273][ T47] XFS (loop3): Unmount and run xfs_repair [ 90.221038][ T5281] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x7 [ 90.228603][ T47] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 90.252701][ T5281] mcp2221 0003:04D8:00DD.0001: item fetching failed at offset 4/5 [ 90.260747][ T47] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 90.262293][ T5756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 90.275444][ T5281] mcp2221 0003:04D8:00DD.0001: can't parse reports [ 90.289858][ T47] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 90.298837][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 90.301438][ T5281] mcp2221 0003:04D8:00DD.0001: probe with driver mcp2221 failed with error -22 [ 90.317400][ T47] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 90.326651][ T47] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 90.368140][ T47] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.384868][ T47] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.394711][ T47] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.404424][ T47] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 90.415000][ T5433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.431124][ T5744] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 90.450743][ T5433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.453155][ T5744] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 90.473038][ T5744] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 90.484712][ T5449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.525336][ T5433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.537480][ T5433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.559261][ T5449] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.574885][ T5504] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.582035][ T5504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.618914][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.626086][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.641933][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.780834][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.839929][ T5433] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.846807][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 90.864229][ T8] usb 4-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 90.885570][ T5510] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.892717][ T5510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.900582][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.902254][ T5281] usb 5-1: USB disconnect, device number 2 [ 90.916530][ T8] usb 4-1: Product: syz [ 90.920876][ T8] usb 4-1: Manufacturer: syz [ 90.961387][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.968571][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.977589][ T8] usb 4-1: SerialNumber: syz [ 91.008601][ T8] usb 4-1: config 0 descriptor?? [ 91.128352][ T5449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.145296][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.187655][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.223914][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.240470][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.362479][ T5449] veth0_vlan: entered promiscuous mode [ 91.387624][ T8] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 91.453192][ T5281] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.466923][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 91.476033][ T8] dib0700: firmware download failed at 7 with -22 [ 91.495874][ T5449] veth1_vlan: entered promiscuous mode [ 91.523318][ T8] usb 4-1: USB disconnect, device number 2 [ 91.616138][ T5449] veth0_macvtap: entered promiscuous mode [ 91.631330][ T5449] veth1_macvtap: entered promiscuous mode [ 91.649194][ T5433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.666085][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.678902][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 91.686439][ T5281] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 91.703909][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.725608][ T5281] usb 5-1: config 0 descriptor?? [ 91.744308][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.760249][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.773306][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.783897][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.795768][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.808430][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.819795][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.831363][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.843453][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.855685][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.876687][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.894249][ T5449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.907765][ T5449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.917021][ T5449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926017][ T5449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.947768][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.954982][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.017013][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.024180][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.047280][ T5227] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 92.067766][ T5433] veth0_vlan: entered promiscuous mode [ 92.079365][ T5433] veth1_vlan: entered promiscuous mode [ 92.100589][ T5433] veth0_macvtap: entered promiscuous mode [ 92.110372][ T5433] veth1_macvtap: entered promiscuous mode [ 92.124781][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.135585][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.145607][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.156280][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.166905][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.177788][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.189745][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.288331][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.301938][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.312782][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.323402][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.333405][ T5433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.343874][ T5433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.358117][ T5433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.370179][ T5433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.378999][ T5433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.388043][ T5433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.397131][ T5433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.459975][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.471391][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.526950][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.535614][ T5638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.552368][ T5638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.553554][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.576324][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 92.601080][ T5236] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 92.601133][ T5236] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 92.602735][ T5768] netlink: 72 bytes leftover after parsing attributes in process `syz.4.92'. [ 92.610125][ T5236] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 92.625253][ T5236] Bluetooth: hci1: Malformed LE Event: 0x0d [ 92.756842][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.769208][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.805634][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.816149][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.352742][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.805183][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 93.844401][ T5281] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 93.855097][ T5281] asix 5-1:0.0: probe with driver asix failed with error -71 [ 93.885894][ T5281] usb 5-1: USB disconnect, device number 3 [ 94.033033][ T5638] veth0_vlan: entered promiscuous mode [ 94.099471][ T5638] veth1_vlan: entered promiscuous mode [ 94.181681][ T5638] veth0_macvtap: entered promiscuous mode [ 94.264521][ T5638] veth1_macvtap: entered promiscuous mode [ 94.289303][ T5836] loop3: detected capacity change from 0 to 128 [ 94.343295][ T5836] FAT-fs (loop3): bogus number of reserved sectors [ 94.365071][ T5836] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 94.373098][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.386788][ T5836] FAT-fs (loop3): Can't find a valid FAT filesystem [ 94.492024][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.509458][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.520563][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.531073][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.541622][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.551589][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.562281][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.573523][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.584038][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.594544][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.604421][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.614889][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.625456][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.636603][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.646815][ T5638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.661582][ T5638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.673269][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.683012][ T5638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.695130][ T5638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.711556][ T5638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.722418][ T5638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.000332][ T29] audit: type=1326 audit(1724323742.265:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5841 comm="syz.2.98" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71c7979e79 code=0x0 [ 95.081351][ T5850] Cannot find add_set index 0 as target [ 95.883442][ T5510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.917643][ T2572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.724557][ T5510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.742004][ T2572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.184790][ T5866] loop3: detected capacity change from 0 to 4096 [ 98.281417][ T5866] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 98.292598][ T5765] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.361199][ T5861] loop2: detected capacity change from 0 to 32768 [ 98.417228][ T5866] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 98.427588][ T5861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.102 (5861) [ 98.564218][ T5866] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 99.152029][ T5765] usb 2-1: Using ep0 maxpacket: 8 [ 99.219281][ T29] audit: type=1804 audit(1724323746.495:4): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.103" name="/newroot/32/file0/bus" dev="loop3" ino=34 res=1 errno=0 [ 99.270881][ T5861] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.510927][ T5861] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 99.562548][ T29] audit: type=1804 audit(1724323746.835:5): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.103" name="/newroot/32/file0/bus" dev="loop3" ino=34 res=1 errno=0 [ 99.592781][ T5861] BTRFS info (device loop2): using free-space-tree [ 100.034526][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 100.078767][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 100.211443][ T5765] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 100.229570][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.239800][ T5765] usb 2-1: config 0 has no interface number 0 [ 100.245952][ T5765] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 100.257554][ T5765] usb 2-1: config 0 interface 113 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 100.268885][ T5765] usb 2-1: config 0 interface 113 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 100.279653][ T5765] usb 2-1: config 0 interface 113 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 100.367484][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 100.379130][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 100.463268][ T5912] team_slave_0: entered promiscuous mode [ 100.478671][ T5912] team_slave_1: entered promiscuous mode [ 100.500659][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 100.500930][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 100.538259][ T5765] usb 2-1: string descriptor 0 read error: -71 [ 100.554052][ T5861] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 100.554384][ T5765] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 100.559483][ T5918] loop1: detected capacity change from 0 to 256 [ 100.564227][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.594789][ T5912] macvlan2: entered allmulticast mode [ 100.600201][ T5912] team0: entered allmulticast mode [ 100.613350][ T5912] team_slave_0: entered allmulticast mode [ 100.619106][ T5912] team_slave_1: entered allmulticast mode [ 100.625840][ T5912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 100.633751][ T5765] usb 2-1: config 0 descriptor?? [ 100.678862][ T5918] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 100.702605][ T5912] team0: left allmulticast mode [ 100.707516][ T5912] team_slave_0: left allmulticast mode [ 100.709752][ T5765] usb 2-1: can't set config #0, error -71 [ 100.724619][ T5765] usb 2-1: USB disconnect, device number 3 [ 100.746224][ T5912] team_slave_1: left allmulticast mode [ 100.746721][ T5861] BTRFS error (device loop2): open_ctree failed [ 100.767049][ T5912] team_slave_0: left promiscuous mode [ 100.772588][ T5912] team_slave_1: left promiscuous mode [ 101.063278][ T5927] loop3: detected capacity change from 0 to 1024 [ 101.212619][ T5935] loop4: detected capacity change from 0 to 512 [ 101.343998][ T5935] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.400760][ T5935] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.466135][ T5935] EXT4-fs (loop4): 1 truncate cleaned up [ 101.497326][ T5935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.672456][ T5954] bio_check_eod: 3 callbacks suppressed [ 101.678107][ T5954] syz.1.114: attempt to access beyond end of device [ 101.678107][ T5954] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 101.692704][ T5954] qnx4: unable to read the superblock [ 102.366432][ T5950] loop2: detected capacity change from 0 to 8192 [ 102.541501][ T29] audit: type=1800 audit(1724323749.815:6): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.112" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=25 res=0 errno=0 [ 103.946002][ T5974] loop1: detected capacity change from 0 to 512 [ 103.953043][ T5974] EXT4-fs: Ignoring removed bh option [ 104.308141][ T5974] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 104.744959][ T5229] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.047691][ T5229] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.247829][ T5229] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.642465][ T5229] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.720409][ T5229] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.749956][ T6002] loop3: detected capacity change from 0 to 256 [ 105.764929][ T5229] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.796273][ T5229] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.809082][ T6001] loop0: detected capacity change from 0 to 2048 [ 105.862315][ T5229] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 105.906161][ T5229] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /27/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 105.970437][ T5229] EXT4-fs error (device loop4): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 106.181079][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 106.193106][ T6009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.255610][ T6001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.268038][ T6001] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.920880][ T6012] loop1: detected capacity change from 0 to 8 [ 106.946526][ T5433] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 107.033930][ T6012] SQUASHFS error: lzo decompression failed, data probably corrupt [ 107.060814][ T6012] SQUASHFS error: Failed to read block 0x91: -5 [ 107.085815][ T6020] mmap: syz.2.131 (6020) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.087787][ T6012] SQUASHFS error: Unable to read metadata cache entry [8f] [ 107.122017][ T6012] SQUASHFS error: Unable to read inode 0x11f [ 107.200512][ T5433] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.278044][ T6025] loop3: detected capacity change from 0 to 1024 [ 107.341590][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.387711][ T6029] loop0: detected capacity change from 0 to 128 [ 107.450984][ T6029] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.527890][ T6029] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.553368][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.617564][ T6034] loop2: detected capacity change from 0 to 2048 [ 107.634667][ T6034] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 107.708962][ T6034] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.739446][ T5433] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.759270][ T6039] loop3: detected capacity change from 0 to 512 [ 107.809584][ T6039] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 107.847969][ T6039] EXT4-fs (loop3): 1 truncate cleaned up [ 107.854734][ T6039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.779152][ T6055] loop2: detected capacity change from 0 to 512 [ 108.806129][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.847327][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.854580][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.860321][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.876703][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.885403][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.890334][ T5229] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.893850][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.910308][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.921011][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.931237][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.938816][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.947278][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.955805][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.963386][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.970876][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 108.978448][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.002987][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.015526][ T6055] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.047181][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.063549][ T2572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.073453][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.110886][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.137404][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.155115][ T29] audit: type=1800 audit(1724323756.425:7): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.139" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.193896][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.203640][ T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.219389][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.221071][ T2572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.263881][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.271423][ T29] audit: type=1804 audit(1724323756.475:8): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.139" name="/newroot/11/bus/bus" dev="loop2" ino=19 res=1 errno=0 [ 109.308298][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.345625][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.363800][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.372543][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.380059][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.387923][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.396657][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.404724][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.413278][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.441279][ T5765] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 109.450805][ T47] usb 1-1: config 0 has no interfaces? [ 109.467317][ T47] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00 [ 109.498112][ T47] usb 1-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255 [ 109.511550][ T2572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.515522][ T5765] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.551843][ T47] usb 1-1: Product: syz [ 109.565001][ T47] usb 1-1: Manufacturer: syz [ 109.581939][ T47] usb 1-1: SerialNumber: syz [ 109.668485][ T5449] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.679731][ T47] usb 1-1: config 0 descriptor?? [ 109.811287][ T2572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.978654][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.002353][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.016295][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.024540][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.033767][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.041282][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.100592][ T939] usb 1-1: USB disconnect, device number 2 [ 110.295325][ T6080] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.402756][ T6072] chnl_net:caif_netlink_parms(): no params data found [ 110.589067][ T2572] bridge_slave_1: left allmulticast mode [ 110.622569][ T2572] bridge_slave_1: left promiscuous mode [ 110.775165][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.789730][ T2572] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.311371][ T2572] bridge_slave_0: left allmulticast mode [ 111.409288][ T2572] bridge_slave_0: left promiscuous mode [ 111.442056][ T2572] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.912381][ T6102] loop3: detected capacity change from 0 to 512 [ 111.919233][ T6102] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.015663][ T6102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 112.024912][ T6102] System zones: 1-12 [ 112.042402][ T6102] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.150: casefold flag without casefold feature [ 112.058883][ T6102] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.150: couldn't read orphan inode 15 (err -117) [ 112.071918][ T54] Bluetooth: hci2: command tx timeout [ 112.072633][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.147120][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.312415][ T2572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.338091][ T2572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.362885][ T2572] bond0 (unregistering): Released all slaves [ 113.764562][ T6137] loop1: detected capacity change from 0 to 128 [ 113.778008][ T6140] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000014: 0000 [#1] PREEMPT SMP KASAN PTI [ 113.790605][ T6140] KASAN: null-ptr-deref in range [0x00000000000000a0-0x00000000000000a7] [ 113.799008][ T6140] CPU: 1 UID: 0 PID: 6140 Comm: syz.0.159 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 113.809049][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 113.819085][ T6140] RIP: 0010:check_preempt_wakeup_fair+0x471/0xb00 [ 113.825489][ T6140] Code: 00 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 30 71 95 00 4d 8b 3f 49 8d ae a0 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 10 71 95 00 48 8b 5d 00 49 8d af [ 113.845086][ T6140] RSP: 0018:ffffc90004417960 EFLAGS: 00010006 [ 113.851138][ T6140] RAX: 0000000000000014 RBX: ffff8880b913eb00 RCX: ffffffff81671258 [ 113.859087][ T6140] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888022551e00 [ 113.867035][ T6140] RBP: 00000000000000a0 R08: ffff888022551e07 R09: 1ffff110044aa3c0 [ 113.874998][ T6140] R10: dffffc0000000000 R11: ffffed10044aa3c1 R12: ffff8880b913ea40 [ 113.882955][ T6140] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 113.890908][ T6140] FS: 00007fdbad3426c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 113.899818][ T6140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.906380][ T6140] CR2: 00007fdbad341f98 CR3: 000000002c0e8000 CR4: 00000000003526f0 [ 113.914340][ T6140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.922294][ T6140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.930244][ T6140] Call Trace: [ 113.933518][ T6140] [ 113.936433][ T6140] ? __die_body+0x5f/0xb0 [ 113.940740][ T6140] ? die_addr+0xb0/0xe0 [ 113.944871][ T6140] ? exc_general_protection+0x3dd/0x5d0 [ 113.950404][ T6140] ? asm_exc_general_protection+0x26/0x30 [ 113.956102][ T6140] ? check_preempt_wakeup_fair+0x88/0xb00 [ 113.961804][ T6140] ? check_preempt_wakeup_fair+0x471/0xb00 [ 113.967593][ T6140] wakeup_preempt+0xd8/0x2a0 [ 113.972166][ T6140] ttwu_do_activate+0x1f8/0x7e0 [ 113.976997][ T6140] try_to_wake_up+0x8bc/0x1480 [ 113.981737][ T6140] ? __pfx_plist_check_list+0x10/0x10 [ 113.987091][ T6140] ? __pfx_try_to_wake_up+0x10/0x10 [ 113.992269][ T6140] ? __pfx_lock_release+0x10/0x10 [ 113.997272][ T6140] ? plist_del+0x3f1/0x410 [ 114.001669][ T6140] ? do_raw_spin_unlock+0x13c/0x8b0 [ 114.006843][ T6140] wake_up_q+0xc8/0x120 [ 114.010974][ T6140] futex_wake+0x523/0x5c0 [ 114.015279][ T6140] ? __pfx_futex_wake+0x10/0x10 [ 114.020106][ T6140] do_futex+0x392/0x560 [ 114.024238][ T6140] ? __pfx_do_futex+0x10/0x10 [ 114.028893][ T6140] __se_sys_futex+0x3f9/0x480 [ 114.033548][ T6140] ? __pfx___se_sys_futex+0x10/0x10 [ 114.038723][ T6140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.045029][ T6140] ? do_syscall_64+0x100/0x230 [ 114.049772][ T6140] ? __x64_sys_futex+0x21/0xf0 [ 114.054511][ T6140] do_syscall_64+0xf3/0x230 [ 114.058990][ T6140] ? clear_bhb_loop+0x35/0x90 [ 114.063641][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.069513][ T6140] RIP: 0033:0x7fdbac579e79 [ 114.073908][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.093485][ T6140] RSP: 002b:00007fdbad3420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 114.101875][ T6140] RAX: ffffffffffffffda RBX: 00007fdbac715f88 RCX: 00007fdbac579e79 [ 114.109843][ T6140] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdbac715f8c [ 114.117787][ T6140] RBP: 00007fdbac715f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 114.125745][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdbac715f8c [ 114.133688][ T6140] R13: 0000000000000000 R14: 00007fff4de72020 R15: 00007fff4de72108 [ 114.141636][ T6140] [ 114.144644][ T6140] Modules linked in: [ 114.148515][ T6140] ---[ end trace 0000000000000000 ]--- [ 114.153953][ T6140] RIP: 0010:check_preempt_wakeup_fair+0x471/0xb00 [ 114.160349][ T6140] Code: 00 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 30 71 95 00 4d 8b 3f 49 8d ae a0 00 00 00 48 89 e8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 ef e8 10 71 95 00 48 8b 5d 00 49 8d af [ 114.179928][ T6140] RSP: 0018:ffffc90004417960 EFLAGS: 00010006 [ 114.185968][ T6140] RAX: 0000000000000014 RBX: ffff8880b913eb00 RCX: ffffffff81671258 [ 114.193913][ T6140] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888022551e00 [ 114.201859][ T6140] RBP: 00000000000000a0 R08: ffff888022551e07 R09: 1ffff110044aa3c0 [ 114.209802][ T6140] R10: dffffc0000000000 R11: ffffed10044aa3c1 R12: ffff8880b913ea40 [ 114.217746][ T6140] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.225693][ T6140] FS: 00007fdbad3426c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 114.234595][ T6140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.241150][ T6140] CR2: 00007fdbad341f98 CR3: 000000002c0e8000 CR4: 00000000003526f0 [ 114.249198][ T6140] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 114.257158][ T6140] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 114.265117][ T6140] Kernel panic - not syncing: Fatal exception [ 115.333546][ T6140] Shutting down cpus with NMI [ 115.338500][ T6140] Kernel Offset: disabled [ 115.342811][ T6140] Rebooting in 86400 seconds..