last executing test programs: 6.729568688s ago: executing program 1 (id=3288): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0xf0000001, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000140)=""/152, &(0x7f00000000c0)=0x98) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) getsockopt$packet_int(r3, 0x107, 0xf, 0x0, &(0x7f0000000040)) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x4, 0x70bd25, 0x25dfdbff, {0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4814}, 0x44881) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000005c0), 0x10) socket(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="93f74b1d965f3733501911cb7be0357e7b75ecc5b061586a9b96c7b4e56a014c39ee587a49f2daa5e9ddd7d908d919ac1d8b7f384d1a5714e6d6cf2c678e3f415b8814d522", 0x45}], 0x1}}], 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r6}) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x941d832}], 0x1, 0x40000000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x5, 0x80000000000000) socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x2d0}}, 0x0) 6.605339029s ago: executing program 3 (id=3289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x8e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x40, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0xa141}, @exp_fastopen={0xfe, 0x11, 0xf989, "519f7eff2e9879026a27bd9807"}, @mss={0x2, 0x4}, @sack={0x5, 0x16, [0x80, 0x2, 0x0, 0x6, 0xa]}, @mptcp=@capable={0x1e, 0x14, 0x9, 0x8, 0x1, 0x3, [0xe]}]}}}}}}}}, 0x0) 6.456421489s ago: executing program 3 (id=3291): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)) syz_socket_connect_nvme_tcp() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000003c0)={[{}, {@norecovery}, {@snapshot}, {@norecovery}, {@discard}, {@nobarrier}, {@nobarrier}, {@discard}, {@nobarrier}], [], 0x2c}, 0x3, 0xf0d, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc36}]}]}, 0x24}}, 0x0) 6.40952044s ago: executing program 1 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() keyctl$chown(0x4, 0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r2}, 0x38) 5.007986976s ago: executing program 3 (id=3297): socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.716446248s ago: executing program 4 (id=3300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ffffff7f00000000000000008500000023000000b7080000000000007b8af8ff79c497ee0c5f3db2468fee34753028ae94008500007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080000000200088b2f01000846"], 0xfdef) 4.526642799s ago: executing program 2 (id=3301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x8e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x40, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x11, 0xf989, "519f7eff2e9879026a27bd9807"}, @mss={0x2, 0x4}, @sack={0x5, 0x16, [0x80, 0x2, 0x0, 0x6, 0xa]}, @mptcp=@capable={0x1e, 0x14, 0x9, 0x8, 0x1, 0x3, [0xe]}]}}}}}}}}, 0x0) 3.839849342s ago: executing program 4 (id=3302): socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.738620842s ago: executing program 3 (id=3303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0xe8, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@random="64059bf280de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'sit0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'hsr0\x00', 'netdevsim0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ec759c9bd8abef17d071680057cd9a6d71ad0e76926c26a2c1ab2520dfb4ce00814bdaac3aa171fdd8a6cca413899529bed424eb7511bd4aa223ebea3bcf29b0"}}}, {{@arp={@broadcast, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv0\x00', 'veth0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @remote, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x705c, &(0x7f0000000040)={0x0, 0x9a7b, 0x0, 0x1}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x18, 0x20000000, r6) 3.737931952s ago: executing program 0 (id=3304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 3.585381173s ago: executing program 4 (id=3305): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) sendto$unix(r3, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 3.499427543s ago: executing program 0 (id=3306): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.476506134s ago: executing program 4 (id=3307): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)) syz_socket_connect_nvme_tcp() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000003c0)={[{}, {@norecovery}, {@snapshot}, {@norecovery}, {@discard}, {@nobarrier}, {@nobarrier}, {@discard}, {@nobarrier}], [], 0x2c}, 0x3, 0xf0d, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc36}]}]}, 0x24}}, 0x0) 3.263082455s ago: executing program 2 (id=3308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x9b, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x65, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129"}, {0x21}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 3.190959675s ago: executing program 1 (id=3309): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 3.169932405s ago: executing program 0 (id=3310): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x3, 0xfffff038}, {0x6, 0x0, 0xfe}]}, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) 3.093588015s ago: executing program 0 (id=3311): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$eJzsVT2PEkEYfgaWQS3U2phYSBQLYXdRY6eV4QfYGiWwInHxg6UQQiJW/A8b/oaFvY3JFZdcwxV3l1zB5dq7vbwz7y7D3TVc4AjJPMnyvB/zfswweedT9D0CgJPpoI7XUJC4jW0h4AB4ILTtTV7zgdRcYn3P0fyE7b+ZY0bU63+uhWHQWaFwuS+jG8EiGWn9edf/6bs7i+bZKEFc4aCWKkisroS8vu28z+pzXE7C47XfDWftN3MxQVx0zdRXvzI4VDd9azqok/CBpxTZGvoT5hr6N/8aa+456hNZxOkaGn6kPAZQ7ra/laNe/2mrXWsGzeCL71deuM9c97lf/tgKA1f/CqNEMqKIafbSTL1p+HMAdnjA3oKBfV02aY39woylORzzkC4+xBwyRmzCAn/SWA4DHcFbPIp/0ro0mqwFlcWB2lIVAllWPG4XIq11QzlK9a9hYwQBkYSN4aQ5vAlySpGzHrWn8nKYmEbMBeYq85h5wpy8Wclb5KgMu6wVh9Tij1q32/HkPw7x6NVTNl8Cp7GS7g7NA6OqR3J+c/fzsLCwsLCwsLDYMJwFAAD//1loWrc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810043, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.810767702s ago: executing program 2 (id=3312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.755332892s ago: executing program 4 (id=3313): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) 1.274998424s ago: executing program 3 (id=3314): socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.274609995s ago: executing program 1 (id=3315): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') getdents(r0, &(0x7f0000001140)=""/4096, 0x1000) 1.224838905s ago: executing program 0 (id=3316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.202764565s ago: executing program 2 (id=3317): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) sendto$unix(r3, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 1.092296535s ago: executing program 1 (id=3318): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e43f2ced9183d48b5850b9e1de2c492604f7b27f030d82cf14d7bcbe35579bfbfbcccc3dceb90fc0075c0c67c8b887bd9356b0fc5e5479c0133683c922e936e6d9431f80a38a5f819c00801d677445ad545dd77e14c9d2857682f09a6c7", 0xd0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 777.306397ms ago: executing program 0 (id=3319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() keyctl$chown(0x4, 0x0, 0xee00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x44, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, &(0x7f0000000140)=""/83, &(0x7f0000000080), &(0x7f0000000080), 0x6, r2}, 0x38) 318.920279ms ago: executing program 2 (id=3320): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 283.02113ms ago: executing program 4 (id=3321): socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000540), 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1d00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) io_uring_setup(0x30d8, &(0x7f00000000c0)={0x0, 0x710b, 0x400, 0x0, 0x23b}) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x2, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 225.37381ms ago: executing program 3 (id=3322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_ethernet(0x9b, &(0x7f0000000600)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x65, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0xa, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129"}, {0x21}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) 34.603341ms ago: executing program 1 (id=3323): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001600)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$eJzs3d9rU1ccAPDvTRt/b1YQ2fYwCj7M4Uxtux8O9uAexyYTttfRhTQWaWqkScV2wvRhvuxlyGCMCWN/wN59lD3sdX+FMAUZUubDXjpuetPGJmlrjbY2nw9Ez7nn3pz7zT3n9NychATQt4bTf3IRr0fED0nE4ZaywcgKh5f3W3x0rZQ+klha+uKfJJJsW3P/JPv/YJZ5LSL++C7iZK693tr8wnSxUinPZvmR+szlkdr8wqmLM8Wp8lT50tj4+Jn3xsc+/OD9tmMn9m4t1rfPP/7587ufnPn++OJPvz84ciuJs3EoK2uN4xlcb80Mx3D2muTj7JodR3tQ2U6SbPcJsCUDWT/PRzoGHI6BrNd35CLDrvJtRCwBfSrR/6FPNecBzXv7Ht0HvzQefrx8A9Qe/+DyeyOxr3FvdGAxeeLOKL0VGupB/Wkdd+7fvpU+onfvQwBs6PqNiDg9ONg+/iXZ+Ld1pzexz9o6jH/w4txN5z/vdJr/5FbmP9Fh/nOwQ9/dio37f+5Bl0O3uAr0pHT+91HH+e/KotXQQJZ7pTHnyycXLlbK6dj2akSciPzeNL/ees6ZxXtL3cpa53937t/+8/Gja6XmXDA7jweDayKdLNaLzxJzq4c3It7oOP9NVq5/0uH6p6/H+fZQOjpWvv1mt7I18d9abIv/+Vr6LeKtjtd/dbEjWX99cqTRHkaaraLdvzeP/bWayz9R9pTx93wFJr3+B9aPfyhpXa+tPX0dv+77r9ytbOP4O7f/PcmXjfSebNvVYr0+OxqxJ/msffvY6rHNfHP/NP4Tx9cf/zq1//0R8fUm47959GbXXbe7/afxT27++qcvQZpIt6+0iI0S9z795pdu9a8T/8DyHun1f7eROpEds5nxbzPntbXWDAAAAAAAADtXLiIORZIrrKRzuUJh+fMdR+NArlKt1U9eqM5dmozGd2WHIp9rrnQfbvk8xGj2edhmfmxNfjwijkTEjwP7G/lCqVqZ3O7gAQAAAAAAAAAAAAAAAAAAYIc4GLGv0/f/U38PbPfZAc/dOj/5Dexy3ft/VtKLX3oCdiR//6F/6f/Qv/R/6F/6P/Qv/R/6l/4P/Uv/h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPnT93Ln0sLT66Vkrzk1fm56arV05NlmvThZm5UqFUnb1cmKpWpyrlQqk6s9HzVarVy6NjMXd1pF6u1Udq8wsTM9W5S/WJizPFqfJEOf9CogIAAAAAAAAAAAAAAAAAAICXS21+YbpYqZRnJXZfIokXUNfgTohU4quI6OkTbvfIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr/g8AAP//yZ4z2A==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) fdatasync(r0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x172, &(0x7f0000000240)="$eJzs20tOwlAUxvGvgIr4fhtHJibGiVSBhDCTBbgBZwQqIRY14gRiYlyKO3EnbgAGbsAaSqOWOKhtoMb+fwn0TL7e28Gh5w4QgMQ6c78NGcq6leM4j/uSLs4lZWLeHICJcrzruwMgedK0PpBQg2raff+/GNLr20O9732yAeeHQTU1Kgyp/y0/HzT/ZLjXvYw/n5O0EGR+eR7lD+XPL/5y/dxYfilwfvT8Rwf+/LKkFUmrktYkrUvakLQpaeuH9Rtj6+8GXB8AAAAAgCCGp8981HyEGwxPz5ct2zoJmZ/x8qch87NevhAxXwyZn/Py+fqN3Qh5DyCsVMz9n47Y/5mI/Q8kWafbu6rZtnVHQUFB8VnE/csEYNLM+/at2en2jlvtWtNqWtelcqVSLhULFdMdy80owzmAP+3rpR/3TgAAAAAAAAAAAAAAQFjbknbi3gQAAACAqZjG34nifkYAAAAAAAAAAAAAAP67jwAAAP//zxJLFg==") 0s ago: executing program 2 (id=3324): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400, 0x20100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) kernel console output (not intermixed with test programs): oth: hci0: Opcode 0x0c1a failed: -4 [ 278.625564][T10629] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 278.655195][T10629] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 278.681575][T10629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.706085][T10629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 278.723050][T10629] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 278.835687][T10669] loop3: detected capacity change from 0 to 1024 [ 278.869791][T10669] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 278.887268][T10669] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.2580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 278.908950][T10669] EXT4-fs (loop3): no journal found [ 278.914746][T10669] EXT4-fs (loop3): can't get journal size [ 279.609622][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 279.641794][T10629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.657806][T10669] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.2580: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 279.678313][T10669] EXT4-fs (loop3): failed to initialize system zone (-117) [ 279.685652][T10669] EXT4-fs (loop3): mount failed [ 279.711071][T10629] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 279.728670][T10629] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 280.695676][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.695698][ T4253] Bluetooth: hci0: command 0x0406 tx timeout [ 280.703237][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 280.713685][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 280.793491][T10684] netlink: 'syz.0.2584': attribute type 2 has an invalid length. [ 280.914301][T10693] IPVS: Unknown mcast interface: pimreg1 [ 281.118091][T10701] loop3: detected capacity change from 0 to 4096 [ 281.486501][T10712] loop0: detected capacity change from 0 to 2048 [ 281.530710][T10712] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.590106][ T26] audit: type=1800 audit(1731921749.181:54): pid=10712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2595" name="bus" dev="loop0" ino=1367 res=0 errno=0 [ 281.653251][ T4259] Bluetooth: hci4: command 0x0406 tx timeout [ 282.534151][T10721] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2597'. [ 282.783752][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.783866][ T4253] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.796105][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.335979][ T26] audit: type=1326 audit(1731921750.951:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.0.2597" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f741197e719 code=0x0 [ 283.617705][T10716] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.634666][T10716] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 283.656513][T10716] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 283.691769][T10716] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.716923][T10716] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.733200][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.746633][T10716] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 283.790532][T10716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.797345][T10716] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 283.804719][T10716] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 283.813589][T10716] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.824081][T10716] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 283.831845][T10716] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 283.840078][T10716] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.873274][T10716] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 283.889846][T10716] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 284.533264][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.582524][T10750] loop2: detected capacity change from 0 to 32768 [ 284.682631][T10750] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 284.821427][T10779] loop1: detected capacity change from 0 to 2048 [ 285.225441][T10779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 285.555845][ T4249] ocfs2: Unmounting device (7,2) on (node local) [ 285.585770][T10779] kAFS: unable to lookup cell '.yz1' [ 285.733242][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.741146][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 285.813336][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 285.893316][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.899402][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.923922][T10798] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 285.952091][T10798] netdevsim netdevsim2 netdevsim1: Failed to get key data for SA table [ 285.976475][T10798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2621'. [ 286.045561][T10798] netlink: 'syz.2.2621': attribute type 10 has an invalid length. [ 287.144030][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 287.384158][T10838] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 287.423330][T10838] netlink: 'syz.0.2640': attribute type 2 has an invalid length. [ 287.429579][T10842] loop3: detected capacity change from 0 to 512 [ 287.455417][T10842] EXT4-fs: Ignoring removed oldalloc option [ 287.455491][T10838] netlink: 'syz.0.2640': attribute type 1 has an invalid length. [ 287.495494][T10842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2641: Parent and EA inode have the same ino 15 [ 287.521254][T10842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.2641: Parent and EA inode have the same ino 15 [ 287.585321][T10842] EXT4-fs (loop3): 1 orphan inode deleted [ 287.594302][T10842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 287.732343][T10853] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 287.793060][T10853] netdevsim netdevsim4 netdevsim1: Failed to get key data for SA table [ 287.813266][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 287.836121][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2645'. [ 287.893267][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 287.973243][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 287.973280][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 288.089602][T10852] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 288.588886][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 289.524838][ T4259] Bluetooth: hci2: command 0x0c1a tx timeout [ 289.662698][T10846] loop1: detected capacity change from 0 to 40427 [ 289.679726][T10846] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 289.690172][T10846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 289.737380][T10846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 289.867880][T10846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 289.882022][T10846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 289.893206][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.973394][ T4266] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.053400][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.059483][ T4266] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.095820][T10884] x_tables: duplicate underflow at hook 2 [ 290.131342][T10846] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 290.143901][T10846] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 290.878355][T10890] netlink: 'syz.2.2657': attribute type 1 has an invalid length. [ 290.933702][T10890] netlink: 'syz.2.2657': attribute type 2 has an invalid length. [ 291.016193][T10846] F2FS-fs (loop1): Inconsistent i_blocks, ino:8, iblocks:0, sectors:8 [ 291.675600][T10900] loop4: detected capacity change from 0 to 512 [ 291.690765][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 291.722197][T10900] EXT4-fs (loop4): Test dummy encryption mode enabled [ 292.148828][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 292.154968][ T4253] Bluetooth: hci4: command 0x0406 tx timeout [ 292.161176][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 292.175169][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 292.386881][T10900] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.2660: inline data xattr refers to an external xattr inode [ 292.403087][T10900] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2660: couldn't read orphan inode 12 (err -117) [ 292.416831][T10900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.453384][T10900] EXT4-fs (loop4): unmounting filesystem. [ 292.912732][T10907] tipc: Failed to remove unknown binding: 66,1,1/0:3007638258/3007638260 [ 292.942770][T10907] tipc: Failed to remove unknown binding: 66,1,1/0:3007638258/3007638260 [ 293.046146][T10909] loop4: detected capacity change from 0 to 4096 [ 293.610012][T10922] loop3: detected capacity change from 0 to 256 [ 293.813182][ T4266] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.862813][T10929] loop2: detected capacity change from 0 to 2048 [ 293.948414][T10933] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 293.957778][T10912] loop1: detected capacity change from 0 to 40427 [ 293.965087][T10929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 293.976299][T10933] netlink: 'syz.3.2672': attribute type 2 has an invalid length. [ 293.985442][T10929] kAFS: unable to lookup cell '.yz1' [ 293.992408][T10912] F2FS-fs (loop1): invalid crc value [ 294.056008][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 294.063426][T10912] F2FS-fs (loop1): Found nat_bits in checkpoint [ 294.213467][ T4266] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.219509][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.225594][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 294.231613][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.283355][T10912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 294.308020][T10918] loop4: detected capacity change from 0 to 32768 [ 294.336517][ T26] audit: type=1800 audit(1731921761.951:56): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2661" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 294.416935][T10947] tipc: Failed to remove unknown binding: 66,1,1/0:2042341270/2042341272 [ 294.432583][ T4251] syz-executor: attempt to access beyond end of device [ 294.432583][ T4251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.454958][T10918] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 294.459332][T10947] tipc: Failed to remove unknown binding: 66,1,1/0:2042341270/2042341272 [ 294.658917][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 294.661351][T10954] loop2: detected capacity change from 0 to 256 [ 294.922336][T10958] netlink: 'syz.3.2685': attribute type 1 has an invalid length. [ 296.924276][T10975] loop3: detected capacity change from 0 to 256 [ 296.960956][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 296.968519][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 296.974841][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 297.336164][ T26] audit: type=1800 audit(1731921764.951:57): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2689" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 297.356031][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 297.362065][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 297.881009][T10960] loop2: detected capacity change from 0 to 32768 [ 299.024228][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.030290][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 299.037084][ T4266] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.299842][T10987] loop1: detected capacity change from 0 to 32768 [ 299.389830][T11013] loop4: detected capacity change from 0 to 64 [ 299.423355][ T4253] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.214217][T11013] MINIX-fs: bad superblock [ 300.271029][T10987] jfs: Unrecognized mount option "ÿÿ18446744073709551615ÿ01777777777777777777777±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) Ç0177777777777777777777718446744073709551615ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 300.782956][T11041] loop0: detected capacity change from 0 to 2048 [ 300.811833][T11041] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 300.838934][T11041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.093574][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 301.099641][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 301.197511][ T4253] Bluetooth: hci3: command 0x0406 tx timeout [ 301.899831][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 301.954894][T11062] loop3: detected capacity change from 0 to 128 [ 302.367482][T11080] misc userio: No port type given on /dev/userio [ 302.479630][ T26] audit: type=1800 audit(1731921770.091:58): pid=11070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.2725" name="/newroot/551/file0" dev="tmpfs" ino=2798 res=0 errno=0 [ 302.515372][T11048] loop4: detected capacity change from 0 to 32768 [ 302.570163][T11048] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 302.605421][T11048] (syz.4.2716,11048,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 302.629875][T11048] (syz.4.2716,11048,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 302.716062][ T4263] ocfs2: Unmounting device (7,4) on (node local) [ 302.788663][ T26] audit: type=1326 audit(1731921770.401:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11086 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907477e719 code=0x7ffc0000 [ 302.855260][ T26] audit: type=1326 audit(1731921770.431:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11086 comm="syz.3.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907477e719 code=0x7ffc0000 [ 302.906453][T11096] loop1: detected capacity change from 0 to 512 [ 302.953996][T11096] EXT4-fs: Ignoring removed oldalloc option [ 303.123804][T11096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2733: Parent and EA inode have the same ino 15 [ 303.142737][T11096] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2733: Parent and EA inode have the same ino 15 [ 303.165565][T11096] EXT4-fs (loop1): 1 orphan inode deleted [ 303.172725][T11096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 303.973800][ T4253] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.979908][ T4253] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.061016][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 304.183118][ C0] sched: RT throttling activated [ 304.511970][T11111] loop2: detected capacity change from 0 to 128 [ 304.686843][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 305.607563][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 306.190096][T11133] loop0: detected capacity change from 0 to 2048 [ 306.248217][T11133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.342255][ T4253] Bluetooth: hci0: command 0x0406 tx timeout [ 306.348411][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 306.354460][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 306.468160][T11147] loop1: detected capacity change from 0 to 512 [ 306.475208][T11147] EXT4-fs: Ignoring removed oldalloc option [ 306.526575][T11147] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2752: Parent and EA inode have the same ino 15 [ 306.603681][T11147] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2752: Parent and EA inode have the same ino 15 [ 306.654418][T11147] EXT4-fs (loop1): 1 orphan inode deleted [ 306.660193][T11147] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 307.454527][ T26] audit: type=1800 audit(1731921775.061:61): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2758" name="/newroot/597/file0" dev="tmpfs" ino=3039 res=0 errno=0 [ 307.556401][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 309.488821][T11207] loop0: detected capacity change from 0 to 512 [ 309.594442][T11207] EXT4-fs: Ignoring removed oldalloc option [ 309.688052][T11207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2772: Parent and EA inode have the same ino 15 [ 309.772578][T11207] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2772: Parent and EA inode have the same ino 15 [ 309.823842][T11207] EXT4-fs (loop0): 1 orphan inode deleted [ 309.850086][T11207] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 309.875176][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.884169][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.892010][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.900299][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.911302][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.925100][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.609306][ T5267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.651939][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 310.796794][ T5267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.907085][ T5267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.928889][T11241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2785'. [ 310.955151][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2785'. [ 310.967511][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2785'. [ 311.119030][ T5267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.358744][T11250] loop0: detected capacity change from 0 to 2048 [ 311.361508][T11246] loop2: detected capacity change from 0 to 40427 [ 311.375817][T11246] F2FS-fs (loop2): invalid crc value [ 311.389945][T11250] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 311.402248][T11246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.445556][T11250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.465547][T11246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.465589][T11215] chnl_net:caif_netlink_parms(): no params data found [ 311.475117][T11258] loop1: detected capacity change from 0 to 512 [ 311.487791][T11258] EXT4-fs: Ignoring removed oldalloc option [ 311.558889][ T26] audit: type=1800 audit(1731921779.171:62): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2786" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 311.644929][T11258] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2790: Parent and EA inode have the same ino 15 [ 311.673015][T11258] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2790: Parent and EA inode have the same ino 15 [ 311.696548][ T4249] syz-executor: attempt to access beyond end of device [ 311.696548][ T4249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.857102][T11258] EXT4-fs (loop1): 1 orphan inode deleted [ 311.973839][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 311.996036][T11258] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 312.475390][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 312.703563][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.721509][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.741721][T11215] device bridge_slave_0 entered promiscuous mode [ 313.075446][T11215] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.179292][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.326098][T11215] device bridge_slave_1 entered promiscuous mode [ 313.393189][ T26] audit: type=1800 audit(1731921780.991:63): pid=11285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2794" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 313.541179][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.563181][ T128] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 313.574773][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.588781][T11291] loop0: detected capacity change from 0 to 128 [ 313.704472][T11215] team0: Port device team_slave_0 added [ 313.721891][T11215] team0: Port device team_slave_1 added [ 313.763217][ T128] usb 2-1: Using ep0 maxpacket: 16 [ 313.769995][ T128] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.803213][ T128] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.826121][ T128] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 313.856228][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.906694][ T128] usb 2-1: config 0 descriptor?? [ 314.146031][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 315.342154][T11309] loop4: detected capacity change from 0 to 2048 [ 315.364815][ T128] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 315.395448][ T128] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 315.424221][T11309] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 315.444989][ T128] kye 0003:0458:0138.0001: unexpected long global item [ 315.452544][ T128] kye 0003:0458:0138.0001: parse failed [ 315.473883][T11309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.489347][ T128] kye: probe of 0003:0458:0138.0001 failed with error -22 [ 315.564529][ T128] usb 2-1: USB disconnect, device number 2 [ 315.571039][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.589012][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.631423][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.658377][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.673374][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.716590][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.802116][T11296] loop2: detected capacity change from 0 to 40427 [ 315.833548][T11296] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 315.851555][T11296] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 315.917954][T11296] F2FS-fs (loop2): Found nat_bits in checkpoint [ 316.310141][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 316.648396][T11296] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 316.660314][T11330] loop0: detected capacity change from 0 to 128 [ 316.666991][T11296] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 316.683809][T11215] device hsr_slave_0 entered promiscuous mode [ 316.723468][T11215] device hsr_slave_1 entered promiscuous mode [ 316.773564][T11215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.781151][T11215] Cannot create hsr debugfs directory [ 316.855643][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.861976][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.444933][T11346] loop0: detected capacity change from 0 to 256 [ 318.022772][T11350] loop2: detected capacity change from 0 to 2048 [ 318.032103][ T5267] device hsr_slave_0 left promiscuous mode [ 318.037255][T11350] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 318.070250][T11350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.145185][ T4302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 318.165365][ T5267] device hsr_slave_1 left promiscuous mode [ 318.175750][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.204546][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.211100][T11336] loop4: detected capacity change from 0 to 32768 [ 318.240069][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.247615][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.267958][ T5267] device bridge_slave_1 left promiscuous mode [ 318.276878][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.289360][ T5267] device bridge_slave_0 left promiscuous mode [ 318.297615][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.336099][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.350933][ T4302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.360882][ T4302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.373228][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 318.374015][ T4302] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 318.417656][ T4302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.457236][ T4302] usb 2-1: config 0 descriptor?? [ 318.477456][ T5267] device veth1_macvtap left promiscuous mode [ 318.496782][ T5267] device veth0_macvtap left promiscuous mode [ 318.502936][ T5267] device veth1_vlan left promiscuous mode [ 318.524229][ T5267] device veth0_vlan left promiscuous mode [ 318.576457][T11360] capability: warning: `syz.4.2821' uses deprecated v2 capabilities in a way that may be insecure [ 318.677579][ T4302] usbhid 2-1:0.0: can't add hid device: -71 [ 318.685667][ T4302] usbhid: probe of 2-1:0.0 failed with error -71 [ 318.694660][T11362] loop4: detected capacity change from 0 to 128 [ 318.702795][ T4302] usb 2-1: USB disconnect, device number 3 [ 318.846113][ T5267] bond4 (unregistering): Released all slaves [ 319.011732][T11358] loop2: detected capacity change from 0 to 40427 [ 319.021848][T11358] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 319.033355][T11358] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 319.060961][ T5267] bond3 (unregistering): Released all slaves [ 319.079295][ T5267] bond2 (unregistering): Released all slaves [ 319.087053][T11358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 319.128296][ T5267] bond1 (unregistering): Released all slaves [ 319.141395][T11358] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 319.153252][T11358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 319.181839][T11358] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 319.192375][T11358] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 319.981746][T11383] loop4: detected capacity change from 0 to 2048 [ 320.182734][T11386] loop2: detected capacity change from 0 to 256 [ 320.244287][T11383] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 320.360023][T11383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.609006][T11383] overlayfs: failed to resolve './file1': -2 [ 320.759166][ T5267] team0 (unregistering): Port device team_slave_1 removed [ 320.845224][ T5267] team0 (unregistering): Port device team_slave_0 removed [ 320.939808][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.006702][T11400] loop4: detected capacity change from 0 to 128 [ 321.179079][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.246733][T11401] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 321.255861][T11401] FAT-fs (loop4): Filesystem has been set read-only [ 321.564015][ T4240] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 321.666362][ T5267] bond0 (unregistering): Released all slaves [ 321.723291][ T4240] usb 5-1: device descriptor read/64, error -71 [ 321.747992][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2822'. [ 322.013946][ T4240] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 322.183202][ T4240] usb 5-1: device descriptor read/64, error -71 [ 322.366518][ T4240] usb usb5-port1: attempt power cycle [ 322.823361][ T4240] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 322.876040][ T4240] usb 5-1: device descriptor read/8, error -71 [ 323.248189][T11215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.279865][T11418] loop1: detected capacity change from 0 to 2048 [ 323.286382][ T4240] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 323.305873][T11215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.340420][T11418] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 323.351417][ T4240] usb 5-1: device descriptor read/8, error -71 [ 323.365915][T11215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.390187][T11215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 323.416097][T11418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.475250][T11418] overlayfs: failed to resolve './file1': -2 [ 323.493589][ T4240] usb usb5-port1: unable to enumerate USB device [ 323.598348][T11215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.690545][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 323.698810][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 323.730265][T11215] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.750699][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.776199][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.798023][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.805177][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.884496][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.905736][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.923070][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.933045][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.940311][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.955834][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 323.985527][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 323.999707][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.102488][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.141437][T11426] loop2: detected capacity change from 0 to 32768 [ 324.143728][ T8399] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 324.183484][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.188849][T11439] loop4: detected capacity change from 0 to 512 [ 324.193542][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 324.198043][T11439] EXT4-fs: Ignoring removed oldalloc option [ 324.214209][T11426] (syz.2.2847,11426,1):ocfs2_journal_init:906 ERROR: Journal file size (0) is too small! [ 324.226250][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 324.234302][T11426] (syz.2.2847,11426,1):ocfs2_check_volume:2396 ERROR: Could not initialize journal! [ 324.236024][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.252717][T11439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2853: Parent and EA inode have the same ino 15 [ 324.253864][T11426] (syz.2.2847,11426,1):ocfs2_check_volume:2481 ERROR: status = -22 [ 324.273896][T11426] (syz.2.2847,11426,1):ocfs2_mount_volume:1821 ERROR: status = -22 [ 324.283726][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.291973][T11439] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.2853: Parent and EA inode have the same ino 15 [ 324.295407][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.308510][T11439] EXT4-fs (loop4): 1 orphan inode deleted [ 324.313068][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.319394][T11426] (syz.2.2847,11426,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 324.338773][T11439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.345469][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 324.356629][ T8399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.370943][ T8399] usb 2-1: config 18 has an invalid descriptor of length 0, skipping remainder of the config [ 324.572448][ T8399] usb 2-1: config 18 has 0 interfaces, different from the descriptor's value: 1 [ 324.599678][ T8399] usb 2-1: New USB device found, idVendor=0403, idProduct=7151, bcdDevice= 2.fd [ 324.615020][ T8399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.623038][ T8399] usb 2-1: Product: syz [ 324.627607][ T8399] usb 2-1: Manufacturer: syz [ 324.632219][ T8399] usb 2-1: SerialNumber: syz [ 326.005239][ T8399] usb 2-1: USB disconnect, device number 4 [ 326.056596][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 326.229525][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.238690][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.262156][T11215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.304030][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.321192][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.363309][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.372262][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.393834][T11215] device veth0_vlan entered promiscuous mode [ 326.400641][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.418682][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.441791][T11215] device veth1_vlan entered promiscuous mode [ 326.492229][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.496518][T11469] loop2: detected capacity change from 0 to 256 [ 326.509355][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.538108][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.546687][T11469] FAT-fs (loop2): Unrecognized mount option "u" or missing value [ 326.556674][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.574108][T11215] device veth0_macvtap entered promiscuous mode [ 326.588312][T11215] device veth1_macvtap entered promiscuous mode [ 326.608055][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.618928][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.629892][T11471] 9pnet_fd: Insufficient options for proto=fd [ 326.636653][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.648526][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.674039][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.677023][T11473] process 'syz.1.2864' launched '/dev/fd/5' with NULL argv: empty string added [ 326.687123][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.706471][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.724877][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.748955][T11215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.763194][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.772122][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.780584][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 326.872286][T11476] loop0: detected capacity change from 0 to 512 [ 326.904466][T11476] EXT4-fs: Ignoring removed oldalloc option [ 326.928080][T11476] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2865: Parent and EA inode have the same ino 15 [ 326.952591][T11476] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.2865: Parent and EA inode have the same ino 15 [ 326.968870][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 326.979412][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.991244][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.001565][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.022929][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.033021][T11476] EXT4-fs (loop0): 1 orphan inode deleted [ 327.040804][T11476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 327.127952][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.468325][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.494168][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.542743][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.582837][T11215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.591957][T11457] loop4: detected capacity change from 0 to 40427 [ 327.614389][T11457] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 327.634192][T11457] F2FS-fs (loop4): invalid crc value [ 327.642070][T11457] F2FS-fs (loop4): Found nat_bits in checkpoint [ 327.651685][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.672760][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.797022][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 327.846123][T11215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.865317][T11215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.873638][T11457] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 327.883224][T11215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.906466][T11215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.043572][ T4484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.051762][ T4484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.071472][ T4485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.086485][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.115723][ T4485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.126500][ T4263] syz-executor: attempt to access beyond end of device [ 328.126500][ T4263] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 328.134760][ T4485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.053493][ T26] audit: type=1800 audit(1731921796.661:64): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2873" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 329.185484][T11515] loop2: detected capacity change from 0 to 512 [ 329.223874][T11515] EXT4-fs: Ignoring removed oldalloc option [ 329.266369][T11515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.2877: Parent and EA inode have the same ino 15 [ 329.305661][T11515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.2877: Parent and EA inode have the same ino 15 [ 329.363703][T11515] EXT4-fs (loop2): 1 orphan inode deleted [ 329.369479][T11515] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 330.562819][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 330.592946][T11506] loop3: detected capacity change from 0 to 32768 [ 330.648859][T11506] JBD2: Ignoring recovery information on journal [ 330.721229][T11506] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 330.916194][ T26] audit: type=1800 audit(1731921798.501:65): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2767" name="file1" dev="loop3" ino=16946 res=0 errno=0 [ 330.961042][T11557] loop1: detected capacity change from 0 to 2048 [ 331.084919][T11557] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.108244][T11215] ocfs2: Unmounting device (7,3) on (node local) [ 331.222996][T11566] kAFS: unable to lookup cell '.yz1' [ 331.683362][ T26] audit: type=1800 audit(1731921799.291:66): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2891" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 332.044092][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 332.255062][T11579] loop1: detected capacity change from 0 to 512 [ 332.292599][T11579] EXT4-fs: Ignoring removed oldalloc option [ 332.352115][T11579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2896: Parent and EA inode have the same ino 15 [ 332.365455][T11579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2896: Parent and EA inode have the same ino 15 [ 332.388796][T11579] EXT4-fs (loop1): 1 orphan inode deleted [ 332.397749][T11579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 332.514396][T11570] loop2: detected capacity change from 0 to 32768 [ 332.566586][T11570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2894 (11570) [ 332.749088][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 332.893606][T11570] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.991413][T11570] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 333.006181][T11570] BTRFS info (device loop2): using free space tree [ 333.197087][T11570] BTRFS info (device loop2): enabling ssd optimizations [ 333.240323][T11611] loop1: detected capacity change from 0 to 8 [ 333.509214][T11577] loop3: detected capacity change from 0 to 40427 [ 333.732760][T11616] input: syz0 as /devices/virtual/input/input7 [ 335.497618][T11577] F2FS-fs (loop3): invalid crc value [ 335.551296][T11577] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 335.732132][T11624] loop0: detected capacity change from 0 to 2048 [ 335.754802][ T4249] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 335.798191][T11626] loop1: detected capacity change from 0 to 2048 [ 335.826702][T11626] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 335.834611][T11624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 335.875243][T11626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 335.934837][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.940044][T11626] overlayfs: upper fs needs to support d_type. [ 335.944603][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.976230][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.008806][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.025691][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 336.032998][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 336.057372][T11626] overlayfs: cleanup of 'work/#1' failed (-2) [ 336.064341][T11626] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 336.074015][T11640] kAFS: unable to lookup cell '.yz1' [ 336.079884][T11626] overlayfs: failed to set xattr on upper [ 336.085834][T11626] overlayfs: ...falling back to index=off,metacopy=off. [ 336.094222][T11626] overlayfs: failed to resolve './file0': -2 [ 336.195470][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 336.505496][T11658] loop1: detected capacity change from 0 to 22 [ 336.512434][T11658] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 336.524710][T11658] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 336.629074][T11632] chnl_net:caif_netlink_parms(): no params data found [ 337.626993][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.663206][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.713417][T11632] device bridge_slave_0 entered promiscuous mode [ 337.752640][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.763456][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.779477][T11632] device bridge_slave_1 entered promiscuous mode [ 337.790987][T11676] loop0: detected capacity change from 0 to 2048 [ 337.851261][T11676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 337.887505][T11632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.899629][T11676] kAFS: unable to lookup cell '.yz1' [ 337.927182][T11632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.956008][T11680] loop1: detected capacity change from 0 to 2048 [ 338.013486][T11680] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 338.053398][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 338.065003][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 338.071039][T11680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.113802][T11680] overlayfs: './file1' not a directory [ 338.127771][T11687] random: crng reseeded on system resumption [ 338.142981][T11632] team0: Port device team_slave_0 added [ 338.183914][T11632] team0: Port device team_slave_1 added [ 338.265247][T11632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.272207][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.348768][T11632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.377151][T11632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.393224][T11632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.453336][T11632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.476121][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 338.494050][T11694] netlink: 'syz.3.2928': attribute type 18 has an invalid length. [ 338.513280][T11694] netlink: 'syz.3.2928': attribute type 15 has an invalid length. [ 338.573918][T11694] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 338.582933][T11694] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 338.591996][T11694] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 338.600714][T11694] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 338.669165][T11694] device vxlan0 entered promiscuous mode [ 338.781513][T11632] device hsr_slave_0 entered promiscuous mode [ 338.793269][T11632] device hsr_slave_1 entered promiscuous mode [ 338.809811][T11632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.828850][T11632] Cannot create hsr debugfs directory [ 338.882941][T11701] loop1: detected capacity change from 0 to 64 [ 339.119750][T11632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.260163][T11632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.278147][T11707] loop1: detected capacity change from 0 to 128 [ 339.376450][T11707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 339.478052][T11707] ext4 filesystem being mounted at /596/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 339.512110][T11632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.651383][T11717] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 340.268956][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 340.307705][T11632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.377396][T11716] loop0: detected capacity change from 0 to 2048 [ 340.431528][T11716] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 340.493794][T11716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 340.563333][T11716] overlayfs: './file1' not a directory [ 341.481703][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 341.634180][T11632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.655492][T11632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.678761][T11632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.704799][T11632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.920520][T11632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.955974][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.974669][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.999960][T11632] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.027277][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.046556][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.063855][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.071006][ T5577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.092119][ T5577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.110982][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.130415][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.153723][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.160885][T11307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.245920][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.269968][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.300574][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.319408][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.363966][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.385610][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.573294][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 342.587368][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.733789][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.879065][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.010005][T11632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.061898][T11632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.095329][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.107937][T11739] loop1: detected capacity change from 0 to 32768 [ 343.116626][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.120604][T11739] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2945 (11739) [ 343.139647][T11739] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 343.153524][T11739] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 343.176333][T11739] BTRFS info (device loop1): use zlib compression, level 3 [ 343.193367][T11739] BTRFS info (device loop1): using free space tree [ 343.233387][ T4296] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 344.684238][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 344.725976][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.753282][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.800634][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.859970][ T4296] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 344.899373][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.945046][T11739] BTRFS error (device loop1): open_ctree failed [ 344.984115][ T4296] usb 4-1: config 0 descriptor?? [ 345.003955][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 345.011433][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 345.078314][T11632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.219130][ T4296] usbhid 4-1:0.0: can't add hid device: -71 [ 345.981401][ T4296] usbhid: probe of 4-1:0.0 failed with error -71 [ 345.989971][ T4296] usb 4-1: USB disconnect, device number 4 [ 348.229265][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 348.274413][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 348.419663][ T4296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 348.534309][T11632] device veth0_vlan entered promiscuous mode [ 348.541954][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 348.551731][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 348.567471][T11632] device veth1_vlan entered promiscuous mode [ 348.581752][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 348.605604][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 348.630649][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 348.640297][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.669113][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.700572][ T4296] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.732479][ T4296] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 349.490117][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.500224][ T4296] usb 3-1: config 0 descriptor?? [ 349.673250][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.695052][T11632] device veth0_macvtap entered promiscuous mode [ 349.702107][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.721421][ T4296] usbhid 3-1:0.0: can't add hid device: -71 [ 349.728561][ T4296] usbhid: probe of 3-1:0.0 failed with error -71 [ 350.532188][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.158794][ T4296] usb 3-1: USB disconnect, device number 2 [ 351.856844][T11881] loop2: detected capacity change from 0 to 2048 [ 351.914196][T11881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.943941][ T26] audit: type=1326 audit(1731921819.561:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 351.979974][ T26] audit: type=1326 audit(1731921819.561:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 352.002658][ T26] audit: type=1326 audit(1731921819.581:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a7797d0b0 code=0x7ffc0000 [ 352.038502][ T26] audit: type=1326 audit(1731921819.581:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7a7797ff47 code=0x7ffc0000 [ 352.063434][T11881] kAFS: unable to lookup cell '.yz1' [ 352.084941][T11632] device veth1_macvtap entered promiscuous mode [ 352.093344][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.106371][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.140082][ T26] audit: type=1326 audit(1731921819.581:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 352.162873][ T26] audit: type=1326 audit(1731921819.581:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7a7797ff47 code=0x7ffc0000 [ 352.189393][ T26] audit: type=1326 audit(1731921819.581:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7a7797d3aa code=0x7ffc0000 [ 352.211596][ T26] audit: type=1326 audit(1731921819.581:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 352.237340][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 352.254901][ T26] audit: type=1326 audit(1731921819.581:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 352.293232][ T26] audit: type=1326 audit(1731921819.591:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 352.374030][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.408086][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.440442][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.476481][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.519646][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.567833][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.602626][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.613693][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.624247][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.634751][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.651423][T11632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.399219][T11905] serio: Serial port ptm0 [ 353.448608][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.470631][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.492438][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.532000][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.562369][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.594377][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.626512][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.663214][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.703275][ T8399] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 353.716120][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.727010][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.732040][T11913] loop2: detected capacity change from 0 to 2048 [ 353.736931][T11632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.736949][T11632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.738401][T11632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.898338][ T8399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.953218][ T8399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.025923][T11913] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 354.093492][ T8399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.232903][T11923] kAFS: unable to lookup cell '.yz1' [ 354.258431][ T8399] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 354.357680][ T8399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.410213][ T8399] usb 2-1: config 0 descriptor?? [ 354.456544][T11917] nvme_fabrics: missing parameter 'transport=%s' [ 354.474150][T11917] nvme_fabrics: missing parameter 'nqn=%s' [ 354.485093][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.523929][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 354.542477][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.645522][ T8399] usbhid 2-1:0.0: can't add hid device: -71 [ 354.651677][ T8399] usbhid: probe of 2-1:0.0 failed with error -71 [ 354.705110][ T8399] usb 2-1: USB disconnect, device number 5 [ 354.878973][ T2913] bond1: (slave gretap1): Releasing backup interface [ 354.887095][ T2913] device gretap1 left promiscuous mode [ 355.032239][T11632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.047645][T11632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.060033][T11632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.069274][T11632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.046231][T11954] loop2: detected capacity change from 0 to 2048 [ 356.091565][T11954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 356.099188][ T5577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.119223][T11954] kAFS: unable to lookup cell '.yz1' [ 356.188022][ T5577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.224015][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 356.318215][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 356.347095][ T5267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.373931][ T5267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.394482][ T2913] device hsr_slave_0 left promiscuous mode [ 356.408361][ T2913] device hsr_slave_1 left promiscuous mode [ 356.424078][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.448357][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.462682][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.469120][T11955] loop3: detected capacity change from 0 to 32768 [ 356.491717][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.503958][ T2913] device bridge_slave_1 left promiscuous mode [ 356.510322][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.536711][ T2913] device bridge_slave_0 left promiscuous mode [ 356.542997][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.630614][ T2913] device veth1_macvtap left promiscuous mode [ 356.658724][ T2913] device veth0_macvtap left promiscuous mode [ 356.688026][ T2913] device veth1_vlan left promiscuous mode [ 356.723545][ T2913] device veth0_vlan left promiscuous mode [ 357.446582][ T2913] bond4 (unregistering): Released all slaves [ 357.504839][ T2913] bond3 (unregistering): Released all slaves [ 357.547915][ T2913] bond2 (unregistering): Released all slaves [ 357.569503][ T2913] bond1 (unregistering): Released all slaves [ 357.929839][T11988] loop3: detected capacity change from 0 to 256 [ 359.170894][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 359.248170][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 359.292782][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.339093][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.803959][ T2913] bond0 (unregistering): Released all slaves [ 359.890426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.904650][T12004] device hsr_slave_0 left promiscuous mode [ 359.912902][T12004] device hsr_slave_1 left promiscuous mode [ 361.666451][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.676150][ T4266] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.684037][ T4266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.692507][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.700297][ T4266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 361.707771][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.005242][T12044] loop3: detected capacity change from 0 to 4096 [ 362.013853][T12044] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 362.855766][T12039] chnl_net:caif_netlink_parms(): no params data found [ 362.918609][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.930805][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.940423][T12039] device bridge_slave_0 entered promiscuous mode [ 362.948757][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.956794][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.964970][T12039] device bridge_slave_1 entered promiscuous mode [ 362.999894][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.011833][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.052817][T12039] team0: Port device team_slave_0 added [ 363.072434][T12039] team0: Port device team_slave_1 added [ 363.121796][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.136785][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.163945][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.176776][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.178836][T12068] overlayfs: failed to set xattr on upper [ 363.190882][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.216993][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.261831][T12039] device hsr_slave_0 entered promiscuous mode [ 363.270264][T12039] device hsr_slave_1 entered promiscuous mode [ 363.804269][ T4253] Bluetooth: hci5: command 0x0409 tx timeout [ 363.977302][T12039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.129942][T12039] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.376121][T12077] loop3: detected capacity change from 0 to 2048 [ 364.413662][T12077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.562936][T12039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.575873][T12039] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.691697][T12072] loop2: detected capacity change from 0 to 40427 [ 364.728982][T12072] F2FS-fs (loop2): invalid crc value [ 364.731476][T12039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.742155][T12072] F2FS-fs (loop2): Found nat_bits in checkpoint [ 364.745003][T12039] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.800078][T12072] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 364.816106][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 364.816119][ T26] audit: type=1800 audit(1731921832.431:84): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3049" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 364.866831][T12039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.879193][T12039] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.890024][ T4249] syz-executor: attempt to access beyond end of device [ 364.890024][ T4249] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 365.100349][T12039] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.138826][T12039] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.173362][T12039] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.205539][T12039] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.412323][T12039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.426857][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.438428][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.545438][T12039] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.612634][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.632073][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.671348][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.678537][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.756541][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.769319][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.778143][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.786693][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.786700][T12108] loop2: detected capacity change from 0 to 2048 [ 365.800141][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.809170][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.836874][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.839325][T12108] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 365.846102][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.868317][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.877408][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.886469][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.894648][ T4253] Bluetooth: hci5: command 0x041b tx timeout [ 365.902291][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.918664][T12108] kAFS: unable to lookup cell '.yz1' [ 365.925655][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.936808][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.949419][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 365.964621][T12115] tipc: Failed to remove unknown binding: 66,1,1/0:1420100801/1420100803 [ 365.975475][T12115] tipc: Failed to remove unknown binding: 66,1,1/0:1420100801/1420100803 [ 365.977016][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.993422][T12115] tipc: Failed to remove unknown binding: 66,1,1/0:1420100801/1420100803 [ 366.006218][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 366.014335][T12039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.396687][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.413282][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.429250][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.496603][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.506959][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.633489][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.673859][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.711658][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.719642][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.735192][T12039] device veth0_vlan entered promiscuous mode [ 367.049805][T12141] loop3: detected capacity change from 0 to 4096 [ 367.062764][T12141] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 367.074791][ T4302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 367.404804][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.426569][T12039] device veth1_vlan entered promiscuous mode [ 367.447432][ T4302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.519192][ T4302] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.558227][T12039] device veth0_macvtap entered promiscuous mode [ 367.579160][ T4302] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 367.589929][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.601761][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.791882][ T4302] usb 3-1: config 0 descriptor?? [ 367.802142][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.813479][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.834391][T12039] device veth1_macvtap entered promiscuous mode [ 368.208804][T12149] loop4: detected capacity change from 0 to 256 [ 368.224696][ T4253] Bluetooth: hci5: command 0x040f tx timeout [ 368.368484][ T4302] usbhid 3-1:0.0: can't add hid device: -71 [ 368.392557][ T4302] usbhid: probe of 3-1:0.0 failed with error -71 [ 368.636334][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.651488][ T4302] usb 3-1: USB disconnect, device number 3 [ 368.687856][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.738622][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.783292][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.824545][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.861203][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.871308][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.881841][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.891711][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.902154][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.915613][T12039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.926737][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.937455][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.958066][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.993113][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.002981][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.022899][T12126] loop0: detected capacity change from 0 to 40427 [ 369.023108][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.054462][T12126] F2FS-fs (loop0): invalid crc value [ 369.062448][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.078140][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.110337][T12039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.120222][T12164] loop4: detected capacity change from 0 to 764 [ 369.126941][T12039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.129699][T12126] F2FS-fs (loop0): Found nat_bits in checkpoint [ 369.177896][T12039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.199424][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.231570][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.254024][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.313967][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.526271][T12039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.551046][T12039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.723282][T12039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.732291][T12039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.293410][ T4253] Bluetooth: hci5: command 0x0419 tx timeout [ 370.350755][T12175] loop3: detected capacity change from 0 to 2048 [ 370.469785][T12175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 370.479507][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.504335][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.626284][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.823960][T12188] loop4: detected capacity change from 0 to 256 [ 372.894443][T11215] EXT4-fs (loop3): unmounting filesystem. [ 372.904407][ T5207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.917447][ T5207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.932481][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.096651][T12195] loop0: detected capacity change from 0 to 256 [ 373.132315][T12199] loop1: detected capacity change from 0 to 256 [ 373.137765][T12195] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 373.163281][T12199] exfat: Deprecated parameter 'utf8' [ 373.174494][T12197] loop3: detected capacity change from 0 to 512 [ 373.181887][T12197] EXT4-fs: Ignoring removed oldalloc option [ 373.196504][T12199] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 373.212622][T12197] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3090: Parent and EA inode have the same ino 15 [ 373.235363][T12197] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3090: Parent and EA inode have the same ino 15 [ 373.253987][ T26] audit: type=1804 audit(1731921840.861:85): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3091" name="/newroot/628/file1/file0" dev="loop0" ino=1048624 res=1 errno=0 [ 373.314675][T12197] EXT4-fs (loop3): 1 orphan inode deleted [ 373.384633][T12197] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 373.607669][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 373.991374][T11215] EXT4-fs (loop3): unmounting filesystem. [ 374.431578][ T26] audit: type=1326 audit(1731921842.041:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 374.483676][ T26] audit: type=1326 audit(1731921842.071:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 374.696580][T12231] loop3: detected capacity change from 0 to 256 [ 374.952653][ T4253] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.974734][ T4253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.987027][ T4253] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.003928][ T4253] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.039964][ T4253] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 375.073595][ T26] audit: type=1326 audit(1731921842.071:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.094500][ T4253] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.097531][ T26] audit: type=1326 audit(1731921842.081:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.129863][ T26] audit: type=1326 audit(1731921842.081:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.152498][ T26] audit: type=1326 audit(1731921842.081:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.176425][ T26] audit: type=1326 audit(1731921842.081:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.198929][ T26] audit: type=1326 audit(1731921842.081:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.267567][ T26] audit: type=1326 audit(1731921842.081:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.1.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fcfcab7e719 code=0x7ffc0000 [ 375.302327][ T4487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.316018][T12209] loop4: detected capacity change from 0 to 40427 [ 375.328434][T12209] F2FS-fs (loop4): invalid crc value [ 375.378219][T12209] F2FS-fs (loop4): Found nat_bits in checkpoint [ 375.446719][ T4487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.486123][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3107'. [ 375.524147][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.531607][T12209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 375.575049][ T4487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.622374][T12249] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 375.631450][T12249] netdevsim netdevsim2 netdevsim1: Failed to get key data for SA table [ 375.641879][T11632] syz-executor: attempt to access beyond end of device [ 375.641879][T11632] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 375.648918][T12249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3110'. [ 375.746010][T12250] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 375.806276][ T4487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.121535][T12229] chnl_net:caif_netlink_parms(): no params data found [ 376.405855][T12269] loop3: detected capacity change from 0 to 4096 [ 376.421519][T12269] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 376.474262][T12269] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 376.508599][T12269] ntfs3: loop3: Failed to load $Extend. [ 376.552215][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.589986][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.621552][T12229] device bridge_slave_0 entered promiscuous mode [ 376.791043][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.823330][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.831693][T12229] device bridge_slave_1 entered promiscuous mode [ 377.056297][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.089052][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.139506][T12296] loop4: detected capacity change from 0 to 64 [ 377.173504][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 377.195300][T12298] overlayfs: failed to set xattr on upper [ 377.818711][T12229] team0: Port device team_slave_0 added [ 377.843907][T12229] team0: Port device team_slave_1 added [ 378.015920][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.022922][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.111741][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.167544][T12311] loop4: detected capacity change from 0 to 2048 [ 378.176040][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.182996][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.478953][T12314] loop2: detected capacity change from 0 to 4096 [ 378.489168][T12314] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 378.502591][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.513662][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.797222][T12311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 378.937518][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.353821][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 380.623893][T11632] EXT4-fs (loop4): unmounting filesystem. [ 380.660138][T12229] device hsr_slave_0 entered promiscuous mode [ 380.699559][T12229] device hsr_slave_1 entered promiscuous mode [ 380.714037][T12229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.734602][T12229] Cannot create hsr debugfs directory [ 380.939169][T12342] overlayfs: failed to set xattr on upper [ 381.186611][T12345] loop4: detected capacity change from 0 to 4096 [ 381.204326][T12345] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 381.439130][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 382.088731][T12358] loop1: detected capacity change from 0 to 4096 [ 382.095646][T12358] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 383.059399][ T4487] device hsr_slave_0 left promiscuous mode [ 383.083451][T11632] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 383.120383][ T4487] device hsr_slave_1 left promiscuous mode [ 383.128311][T11632] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 383.135861][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.153263][T11632] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 383.162570][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.193734][ T4487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.201150][ T4487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.239328][ T4487] device bridge_slave_1 left promiscuous mode [ 383.248966][ T4487] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.279307][ T4487] device bridge_slave_0 left promiscuous mode [ 383.296130][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.493395][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 383.498719][T12352] loop2: detected capacity change from 0 to 32768 [ 383.516622][ T4487] device veth1_macvtap left promiscuous mode [ 383.522748][ T4487] device veth0_macvtap left promiscuous mode [ 383.554466][ T4487] device veth1_vlan left promiscuous mode [ 383.593208][ T4487] device veth0_vlan left promiscuous mode [ 383.608559][T12352] JBD2: Ignoring recovery information on journal [ 383.690031][T12352] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 383.721988][T12361] loop3: detected capacity change from 0 to 32768 [ 383.730595][T12361] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3148 (12361) [ 383.784520][T12361] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.814049][T12361] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 383.823962][T12361] BTRFS info (device loop3): using free space tree [ 383.836351][ T4249] ocfs2: Unmounting device (7,2) on (node local) [ 383.983764][T12361] BTRFS info (device loop3): enabling ssd optimizations [ 384.274483][T11215] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 384.312765][ T4487] bond6 (unregistering): Released all slaves [ 384.361936][ T4487] bond5 (unregistering): Released all slaves [ 384.406881][ T4487] bond4 (unregistering): Released all slaves [ 384.448075][ T4487] bond3 (unregistering): Released all slaves [ 384.482189][ T4487] bond2 (unregistering): Released all slaves [ 384.505087][ T4487] bond1 (unregistering): Released all slaves [ 384.515633][T12363] loop1: detected capacity change from 0 to 40427 [ 384.537357][T12363] F2FS-fs (loop1): invalid crc value [ 384.574819][T12363] F2FS-fs (loop1): Found nat_bits in checkpoint [ 384.679339][T12363] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 384.708964][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 384.708977][ T26] audit: type=1800 audit(1731921852.321:98): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3149" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 384.771508][T12399] overlayfs: failed to set xattr on upper [ 384.778881][T12039] syz-executor: attempt to access beyond end of device [ 384.778881][T12039] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 385.056449][T12402] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 385.217543][T12393] loop4: detected capacity change from 0 to 32768 [ 385.298975][T12393] XFS (loop4): Mounting V5 Filesystem [ 385.402738][T12393] XFS (loop4): Ending clean mount [ 385.531399][T11632] XFS (loop4): Unmounting Filesystem [ 385.939591][ T4487] team0 (unregistering): Port device team_slave_1 removed [ 386.212746][ T4487] team0 (unregistering): Port device team_slave_0 removed [ 386.592118][ T4487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.482882][ T4487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.588408][T12435] loop4: detected capacity change from 0 to 2048 [ 387.630719][T12435] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 387.673332][T12435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.725630][T12435] overlayfs: './file1' not a directory [ 387.914420][T12437] serio: Serial port ptm0 [ 388.139535][T12433] loop1: detected capacity change from 0 to 32768 [ 388.197094][T12433] JBD2: Ignoring recovery information on journal [ 388.300307][T12433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 388.344525][ T26] audit: type=1326 audit(1731921855.951:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.377534][ T26] audit: type=1326 audit(1731921855.951:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.400848][ T26] audit: type=1326 audit(1731921855.951:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.403769][T12039] ocfs2: Unmounting device (7,1) on (node local) [ 388.423620][ T26] audit: type=1326 audit(1731921855.951:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.452810][ T26] audit: type=1326 audit(1731921855.951:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.493151][ T26] audit: type=1326 audit(1731921855.951:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 388.526705][ T26] audit: type=1326 audit(1731921855.951:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12440 comm="syz.3.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7797e719 code=0x7ffc0000 [ 389.986434][ T4487] bond0 (unregistering): Released all slaves [ 390.540086][T12461] loop1: detected capacity change from 0 to 256 [ 391.825427][T12465] loop4: detected capacity change from 0 to 2048 [ 391.896921][T12465] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 391.933037][T12465] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 392.042387][T12465] overlayfs: upper fs needs to support d_type. [ 392.059503][T12465] overlayfs: cleanup of 'work/#b' failed (-2) [ 392.074637][T12465] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 392.092490][T12465] overlayfs: failed to set xattr on upper [ 392.101639][T12465] overlayfs: ...falling back to index=off,metacopy=off. [ 392.112923][T12465] overlayfs: failed to resolve './file0': -2 [ 392.844952][T12229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 393.140831][T12229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 393.435136][T12229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 393.500250][T12229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 393.599986][T12484] loop1: detected capacity change from 0 to 40427 [ 393.804859][T12484] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 393.841770][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.274595][T12509] loop2: detected capacity change from 0 to 4096 [ 395.281916][T12509] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 397.389106][T12510] loop3: detected capacity change from 0 to 256 [ 398.038250][T12484] F2FS-fs (loop1): invalid crc value [ 398.061510][T12484] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 398.120372][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.147277][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.183458][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.239019][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.298882][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.333949][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.341091][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.394725][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 398.405704][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 398.414668][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.421778][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.430448][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 398.439508][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 398.530285][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 398.559134][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 398.587004][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 398.598481][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 398.613928][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 398.640623][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 398.662712][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 398.672992][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 398.682773][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 398.691389][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 398.719469][T12229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 398.739932][T12525] serio: Serial port ptm0 [ 400.623431][T12548] loop2: detected capacity change from 0 to 4096 [ 400.630379][T12548] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 400.871060][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.904580][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 400.939426][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.963917][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 400.992838][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.121080][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 401.146855][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.157017][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.164894][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.194322][T12229] device veth0_vlan entered promiscuous mode [ 401.237329][T12229] device veth1_vlan entered promiscuous mode [ 401.313641][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 401.332011][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 401.364460][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 401.391296][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.411744][T12229] device veth0_macvtap entered promiscuous mode [ 401.434458][T12229] device veth1_macvtap entered promiscuous mode [ 401.492438][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.513524][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.533396][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.553291][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.582011][T12576] serio: Serial port ptm0 [ 401.586637][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.607707][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.622571][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.643174][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.662541][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.683348][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.705789][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.713968][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 401.730760][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 401.749584][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 401.758307][T12555] loop3: detected capacity change from 0 to 40427 [ 401.769885][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.778820][T12555] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 401.793465][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.815156][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.817819][T12555] F2FS-fs (loop3): invalid crc value [ 401.834644][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.853390][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.868927][T12555] F2FS-fs (loop3): Found nat_bits in checkpoint [ 401.872230][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.899676][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.919912][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.939966][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.952220][T12229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.972935][T12229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.993366][T12555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 401.995537][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.022478][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 402.039943][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.055589][T12229] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.074658][T12229] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.083455][T12229] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.092217][T12229] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.102733][T11215] syz-executor: attempt to access beyond end of device [ 402.102733][T11215] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 402.115616][T12570] loop4: detected capacity change from 0 to 40427 [ 402.127053][T12570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 402.142653][T12570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 402.181238][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.196662][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.209415][T11307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.217731][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.218133][T12570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 402.233302][T11307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.279517][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.304071][T12570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 402.333529][T12570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 402.457836][T12570] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 402.503737][T12570] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 403.929354][ T4484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.099936][ T4484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.186756][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.205030][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.212862][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.220731][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.228842][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 404.236186][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.264680][ T4484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.380154][T12618] loop0: detected capacity change from 0 to 1024 [ 404.381064][T12620] serio: Serial port ptm0 [ 404.395005][T12618] hfsplus: unable to parse mount options [ 404.414028][ T4484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.485226][T12618] loop0: detected capacity change from 0 to 512 [ 404.729459][T12613] chnl_net:caif_netlink_parms(): no params data found [ 405.432517][T12631] loop3: detected capacity change from 0 to 2048 [ 405.446643][T12612] loop4: detected capacity change from 0 to 40427 [ 405.476080][T12613] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.484562][T12612] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 405.493306][T12613] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.505498][T12631] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 405.512851][T12613] device bridge_slave_0 entered promiscuous mode [ 405.525872][T12631] kAFS: No cell specified [ 405.533330][T12612] F2FS-fs (loop4): invalid crc value [ 405.559891][T12613] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.580157][T12613] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.598612][T11215] EXT4-fs (loop3): unmounting filesystem. [ 405.606364][T12612] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.622692][T12613] device bridge_slave_1 entered promiscuous mode [ 405.737432][T12612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 405.798710][T11632] syz-executor: attempt to access beyond end of device [ 405.798710][T11632] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 405.968173][T12613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.195181][T12613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.246665][T12613] team0: Port device team_slave_0 added [ 406.278713][T12613] team0: Port device team_slave_1 added [ 406.293671][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 406.334018][T12613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.342310][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.369585][T12613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.445017][T12613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.461738][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.492681][T12613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.534029][ T4484] bond1: (slave gretap1): Releasing backup interface [ 406.541825][ T4484] device gretap1 left promiscuous mode [ 406.605078][T12613] device hsr_slave_0 entered promiscuous mode [ 406.622244][T12613] device hsr_slave_1 entered promiscuous mode [ 406.632448][T12613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.645568][T12613] Cannot create hsr debugfs directory [ 406.763577][ T4484] IPVS: stopping backup sync thread 8940 ... [ 407.035076][T12667] loop3: detected capacity change from 0 to 2048 [ 407.069604][T12667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 407.078691][ T4484] device hsr_slave_0 left promiscuous mode [ 407.086738][T12667] kAFS: No cell specified [ 407.091329][ T4484] device hsr_slave_1 left promiscuous mode [ 407.112171][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.129596][T11215] EXT4-fs (loop3): unmounting filesystem. [ 407.135759][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.153923][ T4484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.161707][ T4484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.174169][ T4484] device bridge_slave_1 left promiscuous mode [ 407.180549][ T4484] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.202479][ T4484] device bridge_slave_0 left promiscuous mode [ 407.209611][ T4484] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.240356][ T4484] device veth1_macvtap left promiscuous mode [ 407.246612][ T4484] device veth0_macvtap left promiscuous mode [ 407.252768][ T4484] device veth1_vlan left promiscuous mode [ 407.259139][ T4484] device veth0_vlan left promiscuous mode [ 407.440758][ T4484] bond2 (unregistering): Released all slaves [ 407.509701][ T4484] bond1 (unregistering): Released all slaves [ 408.018005][ T4484] team0 (unregistering): Port device team_slave_1 removed [ 408.065556][ T4484] team0 (unregistering): Port device team_slave_0 removed [ 408.106989][ T4484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.148763][ T4484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.387021][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 408.609070][ T4484] bond0 (unregistering): Released all slaves [ 408.697920][ C1] Unknown status report in ack skb [ 409.168133][T12613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.181070][T12613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.195151][T12613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.205310][T12613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.404919][T12613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.421876][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.440358][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.468453][T12613] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.535971][T12700] loop1: detected capacity change from 0 to 4096 [ 409.598927][T12613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.616536][T12613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.802614][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.812071][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.821333][T11307] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.828466][T11307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.837484][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 409.846322][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 409.854856][T11307] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.861941][T11307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.870606][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 409.879892][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 409.889290][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 409.898411][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.913356][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.922231][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 409.931631][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 409.936149][T12708] overlayfs: failed to resolve './file1': -2 [ 409.940251][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 409.954288][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 409.962796][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 409.983915][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 409.992480][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.103908][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.594771][ T4253] Bluetooth: hci0: command 0x040f tx timeout [ 410.890580][T12722] loop4: detected capacity change from 0 to 2048 [ 410.900045][T12722] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 410.913621][T12722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.927674][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.946644][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 410.982391][T12613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.032605][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.052025][ T2913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.090117][T12733] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 411.135144][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.195789][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.209287][T12736] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 411.244076][T12613] device veth0_vlan entered promiscuous mode [ 411.278342][T12613] device veth1_vlan entered promiscuous mode [ 411.301268][T12733] netdevsim netdevsim4 netdevsim1: Failed to get key data for SA table [ 411.542581][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.558534][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.601011][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 411.625590][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 411.676164][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 411.697517][ T4484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.728315][T12613] device veth0_macvtap entered promiscuous mode [ 411.749494][T12613] device veth1_macvtap entered promiscuous mode [ 411.800201][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.829475][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.851190][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.871814][T12748] loop1: detected capacity change from 0 to 2048 [ 411.871950][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.900102][T12748] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 411.908471][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.931798][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.938146][T12748] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 411.951098][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.988807][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.009012][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.030107][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.053002][T12613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.072848][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 412.083975][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.102600][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.198633][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.334580][T12756] loop4: detected capacity change from 0 to 2048 [ 412.351161][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.381236][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.393262][T12756] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 412.461029][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.534635][T12756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.574599][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.696634][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.724785][T12743] loop0: detected capacity change from 0 to 40427 [ 412.731374][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.750558][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.793997][T12743] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 412.830783][T12743] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 412.843319][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.881761][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.912792][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.945057][T12743] F2FS-fs (loop0): Found nat_bits in checkpoint [ 412.968912][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 412.975888][T12613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.028374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.059404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.070976][T12770] loop1: detected capacity change from 0 to 128 [ 413.102436][T12613] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.112820][T12613] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.118766][T12770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 413.131289][T12613] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.140356][T12613] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.155971][T12770] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.240008][T12743] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 413.258054][T12743] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 413.320018][T12743] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 413.351413][T12743] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 414.020918][ T4308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.048959][ T4308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.144961][ T4308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.175674][ T4308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.214935][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.225526][T12039] EXT4-fs (loop1): unmounting filesystem. [ 414.273183][T11307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.881798][T12803] loop2: detected capacity change from 0 to 4096 [ 414.890383][T12803] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 415.259730][T12798] loop4: detected capacity change from 0 to 2048 [ 415.321118][T12798] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 415.366875][T12798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.440775][T12816] loop4: detected capacity change from 0 to 128 [ 416.514360][T12816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 416.564491][T12816] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.422352][T12800] loop3: detected capacity change from 0 to 32768 [ 417.536351][T11632] EXT4-fs (loop4): unmounting filesystem. [ 417.543759][T12800] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.3278 (12800) [ 418.070885][T12847] loop0: detected capacity change from 0 to 2048 [ 418.116560][T12847] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 418.152809][T12847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.191772][T12850] loop3: detected capacity change from 0 to 4096 [ 418.198834][T12850] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 418.300580][T12824] loop2: detected capacity change from 0 to 40427 [ 418.328312][T12824] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 418.355493][T12824] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 418.412385][T12824] F2FS-fs (loop2): Found nat_bits in checkpoint [ 418.599244][T12824] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 418.611120][T12824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 418.670123][T12824] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 418.680637][T12824] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 419.481941][T12869] loop0: detected capacity change from 0 to 128 [ 419.521578][T12869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 419.537790][T12869] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 420.570538][T12229] EXT4-fs (loop0): unmounting filesystem. [ 420.865892][T12889] loop0: detected capacity change from 0 to 2048 [ 420.894518][T12889] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 420.918658][T12889] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.207421][T12902] loop4: detected capacity change from 0 to 4096 [ 421.214335][T12902] NILFS: invalid option "cp=0x0000000000000000": read-only option is not specified [ 421.291385][T12906] loop0: detected capacity change from 0 to 8 [ 422.467706][T12909] SQUASHFS error: zstd decompression error: 10 [ 422.474372][T12909] SQUASHFS error: zstd decompression failed, data probably corrupt [ 422.483427][T12909] SQUASHFS error: Failed to read block 0x62b: -5 [ 422.489806][T12909] SQUASHFS error: Unable to read metadata cache entry [629] [ 422.497641][T12909] SQUASHFS error: Unable to read directory block [629:ff26] [ 424.026060][T12931] loop2: detected capacity change from 0 to 2048 [ 424.058692][T12931] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 424.179106][T12931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.284871][T12938] loop1: detected capacity change from 0 to 1024 [ 424.292579][T12938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.524077][T12938] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 424.936487][ C0] ------------[ cut here ]------------ [ 424.941988][ C0] WARNING: CPU: 0 PID: 12938 at net/mac80211/tx.c:4934 __ieee80211_beacon_get+0x1abc/0x2110 [ 424.952117][ C0] Modules linked in: [ 424.956056][ C0] CPU: 0 PID: 12938 Comm: syz.1.3323 Not tainted 6.1.118-syzkaller #0 [ 424.964250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 424.974428][ C0] RIP: 0010:__ieee80211_beacon_get+0x1abc/0x2110 [ 424.980787][ C0] Code: ff ff ff e8 96 af 5b f7 0f 0b 48 8b 7c 24 20 e8 ea 82 66 fe e9 6f e8 ff ff e8 80 af 5b f7 0f 0b e9 92 ed ff ff e8 74 af 5b f7 <0f> 0b e9 26 f1 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fc e8 [ 425.000431][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 425.006545][ C0] RAX: ffffffff8a2edc7c RBX: 0000000000000000 RCX: ffff88802f7d3b80 [ 425.014561][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.022539][ C0] RBP: ffffc90000007a30 R08: ffffffff8a2ecd9c R09: ffffffff8a2ec5a2 [ 425.030569][ C0] R10: 0000000000000003 R11: ffff88802f7d3b80 R12: dffffc0000000000 [ 425.038678][ C0] R13: 1ffff92000000f1c R14: ffff88806086e258 R15: ffffffff8a2ec270 [ 425.046687][ C0] FS: 00007fcfcba4a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 425.055737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.062329][ C0] CR2: 00000000203da000 CR3: 0000000063c1f000 CR4: 00000000003506f0 [ 425.070334][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.078346][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 425.086353][ C0] Call Trace: [ 425.089652][ C0] [ 425.092504][ C0] ? __warn+0x15a/0x520 [ 425.096699][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.102444][ C0] ? report_bug+0x2af/0x500 [ 425.106984][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.112730][ C0] ? handle_bug+0x3d/0x70 [ 425.117094][ C0] ? exc_invalid_op+0x16/0x40 [ 425.121784][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 425.126848][ C0] ? __ieee80211_beacon_get+0xb0/0x2110 [ 425.132441][ C0] ? __ieee80211_beacon_get+0x3e2/0x2110 [ 425.138144][ C0] ? __ieee80211_beacon_get+0xbdc/0x2110 [ 425.143826][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.149565][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.155353][ C0] ? __ieee80211_beacon_get+0xb0/0x2110 [ 425.160949][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 425.166991][ C0] ? __lock_acquire+0x125b/0x1f80 [ 425.172051][ C0] ? mark_lock+0x9a/0x340 [ 425.176443][ C0] ? __lock_acquire+0x125b/0x1f80 [ 425.181507][ C0] ieee80211_beacon_get_tim+0xb1/0x5d0 [ 425.187021][ C0] ? __ieee80211_beacon_get+0x2110/0x2110 [ 425.192770][ C0] mac80211_hwsim_beacon_tx+0x1d2/0xaa0 [ 425.198386][ C0] __iterate_interfaces+0x21e/0x4b0 [ 425.203641][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 425.209896][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 425.216174][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 425.223405][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x170 [ 425.230453][ C0] mac80211_hwsim_beacon+0xd0/0x1e0 [ 425.235707][ C0] ? hw_scan_work+0xf20/0xf20 [ 425.240398][ C0] __hrtimer_run_queues+0x5e5/0xe50 [ 425.245663][ C0] ? hrtimer_interrupt+0x980/0x980 [ 425.250805][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 425.256947][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 425.262085][ C0] handle_softirqs+0x2ee/0xa40 [ 425.266918][ C0] ? __irq_exit_rcu+0x157/0x240 [ 425.270301][T12944] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, [ 425.271790][ C0] ? do_softirq+0x240/0x240 [ 425.280349][T12944] block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters [ 425.284802][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 425.298712][ C0] __irq_exit_rcu+0x157/0x240 [ 425.303440][ C0] ? irq_exit_rcu+0x20/0x20 [ 425.307979][ C0] irq_exit_rcu+0x5/0x20 [ 425.312260][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 425.317940][ C0] [ 425.320888][ C0] [ 425.323859][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 425.329880][ C0] RIP: 0010:kasan_check_range+0x1/0x290 [ 425.335469][ C0] Code: 01 c6 48 89 c7 e8 5f 22 c6 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 <41> 57 41 56 53 b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 [ 425.355117][ C0] RSP: 0018:ffffc90003cf6dd0 EFLAGS: 00000246 [ 425.361209][ C0] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff813cd307 [ 425.366637][T12948] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 425.369208][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003cf6f30 [ 425.369228][ C0] RBP: ffffc90003cf6f30 R08: 0000000000000001 R09: ffffc90003cf6fd0 [ 425.369244][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003cf6ee0 [ 425.369256][ C0] R13: ffffffff8f26488e R14: 0000000000000000 R15: ffffc90003cf6f30 [ 425.413942][ C0] ? unwind_next_frame+0xde7/0x2220 [ 425.419166][ C0] memset+0x1f/0x40 [ 425.422994][ C0] unwind_next_frame+0xde7/0x2220 [ 425.428081][ C0] ? ext4_buffered_write_iter+0x122/0x3a0 [ 425.433856][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 425.438914][ C0] arch_stack_walk+0x10d/0x140 [ 425.443765][ C0] ? ext4_file_write_iter+0x1d7/0x1930 [ 425.449263][ C0] stack_trace_save+0x113/0x1c0 [ 425.451034][T12948] EXT4-fs (loop1): This should not happen!! Data will be lost [ 425.451034][T12948] [ 425.454147][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 425.454194][ C0] save_stack+0xf6/0x1e0 [ 425.454222][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 425.454246][ C0] ? post_alloc_hook+0x18d/0x1b0 [ 425.454266][ C0] ? get_page_from_freelist+0x3731/0x38d0 [ 425.489177][ C0] ? __alloc_pages+0x28d/0x770 [ 425.493995][ C0] ? folio_alloc+0x1a/0x50 [ 425.498429][ C0] ? filemap_alloc_folio+0xda/0x4f0 [ 425.503681][ C0] ? __filemap_get_folio+0x749/0xe80 [ 425.508989][ C0] ? pagecache_get_page+0x28/0x250 [ 425.514157][ C0] ? ext4_da_write_begin+0x581/0x9c0 [ 425.517056][T12948] EXT4-fs (loop1): Total free blocks count 0 [ 425.519462][ C0] ? generic_perform_write+0x2fc/0x5e0 [ 425.519486][ C0] ? ext4_buffered_write_iter+0x122/0x3a0 [ 425.519522][ C0] ? get_page_from_freelist+0x88b/0x38d0 [ 425.542359][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 425.547437][ C0] __set_page_owner+0x26/0x390 [ 425.552089][T12948] EXT4-fs (loop1): Free/Dirty block details [ 425.552218][ C0] post_alloc_hook+0x18d/0x1b0 [ 425.562905][ C0] get_page_from_freelist+0x3731/0x38d0 [ 425.568517][ C0] ? __alloc_pages+0x16a/0x770 [ 425.573338][ C0] ? __might_sleep+0xb0/0xb0 [ 425.577441][T12948] EXT4-fs (loop1): free_blocks=268435456 [ 425.577942][ C0] ? __next_zones_zonelist+0x9e/0x130 [ 425.588957][ C0] ? __alloc_pages+0x770/0x770 [ 425.593784][ C0] ? prepare_alloc_pages+0x35b/0x5b0 [ 425.599098][ C0] __alloc_pages+0x28d/0x770 [ 425.603730][ C0] ? zone_statistics+0x160/0x160 [ 425.605223][T12948] EXT4-fs (loop1): dirty_blocks=3952 [ 425.608684][ C0] folio_alloc+0x1a/0x50 [ 425.608708][ C0] filemap_alloc_folio+0xda/0x4f0 [ 425.623297][ C0] ? filemap_add_folio+0x570/0x570 [ 425.628446][ C0] ? xas_descend+0x37e/0x470 [ 425.632032][T12948] EXT4-fs (loop1): Block reservation details [ 425.633096][ C0] ? xas_load+0x128/0x140 [ 425.633136][ C0] __filemap_get_folio+0x749/0xe80 [ 425.633162][ C0] ? __filemap_get_folio+0x150/0xe80 [ 425.633184][ C0] ? page_cache_prev_miss+0x500/0x500 [ 425.633216][ C0] ? asm_exc_page_fault+0x22/0x30 [ 425.664398][ C0] pagecache_get_page+0x28/0x250 [ 425.669364][ C0] ext4_da_write_begin+0x581/0x9c0 [ 425.674544][ C0] ? ext4_dirty_folio+0x310/0x310 [ 425.679599][ C0] ? fault_in_iov_iter_readable+0xdb/0x270 [ 425.681888][T12948] EXT4-fs (loop1): i_reserved_data_blocks=247 [ 425.685437][ C0] generic_perform_write+0x2fc/0x5e0 [ 425.685473][ C0] ? generic_file_direct_write+0x460/0x460 [ 425.685495][ C0] ? clear_nonspinnable+0x60/0x60 [ 425.707713][ C0] ? __lock_acquire+0x125b/0x1f80 [ 425.712778][ C0] ? ext4_write_checks+0x255/0x2c0 [ 425.717940][ C0] ext4_buffered_write_iter+0x122/0x3a0 [ 425.723539][ C0] ext4_file_write_iter+0x1d7/0x1930 [ 425.728854][ C0] ? read_lock_is_recursive+0x10/0x10 [ 425.734296][ C0] ? ext4_file_read_iter+0x660/0x660 [ 425.739616][ C0] ? end_current_label_crit_section+0x147/0x170 [ 425.745918][ C0] vfs_write+0x857/0xbc0 [ 425.750191][ C0] ? file_end_write+0x250/0x250 [ 425.755088][ C0] ? __fget_files+0x28/0x4a0 [ 425.759693][ C0] ? __fget_files+0x435/0x4a0 [ 425.764415][ C0] ? __fdget_pos+0x2ba/0x360 [ 425.769026][ C0] ? ksys_write+0x77/0x2c0 [ 425.773508][ C0] ksys_write+0x19c/0x2c0 [ 425.777864][ C0] ? print_irqtrace_events+0x210/0x210 [ 425.783377][ C0] ? __ia32_sys_read+0x80/0x80 [ 425.788158][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 425.794181][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 425.799404][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 425.805437][ C0] do_syscall_64+0x3b/0xb0 [ 425.809874][ C0] ? clear_bhb_loop+0x45/0xa0 [ 425.814600][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.820543][ C0] RIP: 0033:0x7fcfcab7e719 [ 425.825037][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.844696][ C0] RSP: 002b:00007fcfcba4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.853154][ C0] RAX: ffffffffffffffda RBX: 00007fcfcad35f80 RCX: 00007fcfcab7e719 [ 425.861143][ C0] RDX: 000000000208e24b RSI: 00000000200004c0 RDI: 0000000000000004 [ 425.869162][ C0] RBP: 00007fcfcabf175e R08: 0000000000000000 R09: 0000000000000000 [ 425.877171][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.885181][ C0] R13: 0000000000000000 R14: 00007fcfcad35f80 R15: 00007ffef09b5ee8 [ 425.893200][ C0] [ 425.896239][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.903540][ C0] CPU: 0 PID: 12938 Comm: syz.1.3323 Not tainted 6.1.118-syzkaller #0 [ 425.911711][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 425.921885][ C0] Call Trace: [ 425.925178][ C0] [ 425.928033][ C0] dump_stack_lvl+0x1e3/0x2cb [ 425.932726][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 425.938207][ C0] ? panic+0x764/0x764 [ 425.942301][ C0] ? vscnprintf+0x59/0x80 [ 425.946653][ C0] panic+0x318/0x764 [ 425.950586][ C0] ? __warn+0x169/0x520 [ 425.954762][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 425.960177][ C0] __warn+0x348/0x520 [ 425.964175][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.969928][ C0] report_bug+0x2af/0x500 [ 425.974288][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 425.980031][ C0] handle_bug+0x3d/0x70 [ 425.984211][ C0] exc_invalid_op+0x16/0x40 [ 425.988734][ C0] asm_exc_invalid_op+0x16/0x20 [ 425.993611][ C0] RIP: 0010:__ieee80211_beacon_get+0x1abc/0x2110 [ 425.999974][ C0] Code: ff ff ff e8 96 af 5b f7 0f 0b 48 8b 7c 24 20 e8 ea 82 66 fe e9 6f e8 ff ff e8 80 af 5b f7 0f 0b e9 92 ed ff ff e8 74 af 5b f7 <0f> 0b e9 26 f1 ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c fc e8 [ 426.019597][ C0] RSP: 0018:ffffc90000007820 EFLAGS: 00010246 [ 426.025657][ C0] RAX: ffffffff8a2edc7c RBX: 0000000000000000 RCX: ffff88802f7d3b80 [ 426.033638][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.041625][ C0] RBP: ffffc90000007a30 R08: ffffffff8a2ecd9c R09: ffffffff8a2ec5a2 [ 426.049598][ C0] R10: 0000000000000003 R11: ffff88802f7d3b80 R12: dffffc0000000000 [ 426.057567][ C0] R13: 1ffff92000000f1c R14: ffff88806086e258 R15: ffffffff8a2ec270 [ 426.065545][ C0] ? __ieee80211_beacon_get+0xb0/0x2110 [ 426.071104][ C0] ? __ieee80211_beacon_get+0x3e2/0x2110 [ 426.076743][ C0] ? __ieee80211_beacon_get+0xbdc/0x2110 [ 426.082384][ C0] ? __ieee80211_beacon_get+0x1abc/0x2110 [ 426.088114][ C0] ? __ieee80211_beacon_get+0xb0/0x2110 [ 426.093660][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 426.099641][ C0] ? __lock_acquire+0x125b/0x1f80 [ 426.104673][ C0] ? mark_lock+0x9a/0x340 [ 426.109002][ C0] ? __lock_acquire+0x125b/0x1f80 [ 426.114031][ C0] ieee80211_beacon_get_tim+0xb1/0x5d0 [ 426.119492][ C0] ? __ieee80211_beacon_get+0x2110/0x2110 [ 426.125216][ C0] mac80211_hwsim_beacon_tx+0x1d2/0xaa0 [ 426.130765][ C0] __iterate_interfaces+0x21e/0x4b0 [ 426.135959][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 426.142210][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 426.148471][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 426.155667][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x170 [ 426.162782][ C0] mac80211_hwsim_beacon+0xd0/0x1e0 [ 426.167980][ C0] ? hw_scan_work+0xf20/0xf20 [ 426.172654][ C0] __hrtimer_run_queues+0x5e5/0xe50 [ 426.177867][ C0] ? hrtimer_interrupt+0x980/0x980 [ 426.182971][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 426.189035][ C0] hrtimer_run_softirq+0x196/0x2c0 [ 426.194142][ C0] handle_softirqs+0x2ee/0xa40 [ 426.198908][ C0] ? __irq_exit_rcu+0x157/0x240 [ 426.203757][ C0] ? do_softirq+0x240/0x240 [ 426.208262][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 426.213462][ C0] __irq_exit_rcu+0x157/0x240 [ 426.218153][ C0] ? irq_exit_rcu+0x20/0x20 [ 426.222660][ C0] irq_exit_rcu+0x5/0x20 [ 426.226897][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 426.232527][ C0] [ 426.235448][ C0] [ 426.238367][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 426.244347][ C0] RIP: 0010:kasan_check_range+0x1/0x290 [ 426.249880][ C0] Code: 01 c6 48 89 c7 e8 5f 22 c6 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 <41> 57 41 56 53 b0 01 48 85 f6 0f 84 9a 01 00 00 48 89 fd 48 01 f5 [ 426.269472][ C0] RSP: 0018:ffffc90003cf6dd0 EFLAGS: 00000246 [ 426.275530][ C0] RAX: 0000000000000000 RBX: 0000000000000010 RCX: ffffffff813cd307 [ 426.283505][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003cf6f30 [ 426.291487][ C0] RBP: ffffc90003cf6f30 R08: 0000000000000001 R09: ffffc90003cf6fd0 [ 426.299464][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003cf6ee0 [ 426.307432][ C0] R13: ffffffff8f26488e R14: 0000000000000000 R15: ffffc90003cf6f30 [ 426.315408][ C0] ? unwind_next_frame+0xde7/0x2220 [ 426.320617][ C0] memset+0x1f/0x40 [ 426.324423][ C0] unwind_next_frame+0xde7/0x2220 [ 426.329446][ C0] ? ext4_buffered_write_iter+0x122/0x3a0 [ 426.335165][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 426.340188][ C0] arch_stack_walk+0x10d/0x140 [ 426.344949][ C0] ? ext4_file_write_iter+0x1d7/0x1930 [ 426.350417][ C0] stack_trace_save+0x113/0x1c0 [ 426.355296][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 426.360413][ C0] save_stack+0xf6/0x1e0 [ 426.364653][ C0] ? __reset_page_owner+0x1a0/0x1a0 [ 426.369862][ C0] ? post_alloc_hook+0x18d/0x1b0 [ 426.374807][ C0] ? get_page_from_freelist+0x3731/0x38d0 [ 426.380536][ C0] ? __alloc_pages+0x28d/0x770 [ 426.385299][ C0] ? folio_alloc+0x1a/0x50 [ 426.389702][ C0] ? filemap_alloc_folio+0xda/0x4f0 [ 426.394895][ C0] ? __filemap_get_folio+0x749/0xe80 [ 426.400167][ C0] ? pagecache_get_page+0x28/0x250 [ 426.405326][ C0] ? ext4_da_write_begin+0x581/0x9c0 [ 426.410621][ C0] ? generic_perform_write+0x2fc/0x5e0 [ 426.416083][ C0] ? ext4_buffered_write_iter+0x122/0x3a0 [ 426.421809][ C0] ? get_page_from_freelist+0x88b/0x38d0 [ 426.427454][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 426.432487][ C0] __set_page_owner+0x26/0x390 [ 426.437258][ C0] post_alloc_hook+0x18d/0x1b0 [ 426.442018][ C0] get_page_from_freelist+0x3731/0x38d0 [ 426.447661][ C0] ? __alloc_pages+0x16a/0x770 [ 426.452420][ C0] ? __might_sleep+0xb0/0xb0 [ 426.457016][ C0] ? __next_zones_zonelist+0x9e/0x130 [ 426.462392][ C0] ? __alloc_pages+0x770/0x770 [ 426.467155][ C0] ? prepare_alloc_pages+0x35b/0x5b0 [ 426.472449][ C0] __alloc_pages+0x28d/0x770 [ 426.477049][ C0] ? zone_statistics+0x160/0x160 [ 426.482014][ C0] folio_alloc+0x1a/0x50 [ 426.486283][ C0] filemap_alloc_folio+0xda/0x4f0 [ 426.491317][ C0] ? filemap_add_folio+0x570/0x570 [ 426.496436][ C0] ? xas_descend+0x37e/0x470 [ 426.501031][ C0] ? xas_load+0x128/0x140 [ 426.505366][ C0] __filemap_get_folio+0x749/0xe80 [ 426.510474][ C0] ? __filemap_get_folio+0x150/0xe80 [ 426.515778][ C0] ? page_cache_prev_miss+0x500/0x500 [ 426.521153][ C0] ? asm_exc_page_fault+0x22/0x30 [ 426.526195][ C0] pagecache_get_page+0x28/0x250 [ 426.531151][ C0] ext4_da_write_begin+0x581/0x9c0 [ 426.536273][ C0] ? ext4_dirty_folio+0x310/0x310 [ 426.541315][ C0] ? fault_in_iov_iter_readable+0xdb/0x270 [ 426.547129][ C0] generic_perform_write+0x2fc/0x5e0 [ 426.552418][ C0] ? generic_file_direct_write+0x460/0x460 [ 426.558215][ C0] ? clear_nonspinnable+0x60/0x60 [ 426.563235][ C0] ? __lock_acquire+0x125b/0x1f80 [ 426.568261][ C0] ? ext4_write_checks+0x255/0x2c0 [ 426.573377][ C0] ext4_buffered_write_iter+0x122/0x3a0 [ 426.578924][ C0] ext4_file_write_iter+0x1d7/0x1930 [ 426.584243][ C0] ? read_lock_is_recursive+0x10/0x10 [ 426.589620][ C0] ? ext4_file_read_iter+0x660/0x660 [ 426.594898][ C0] ? end_current_label_crit_section+0x147/0x170 [ 426.601145][ C0] vfs_write+0x857/0xbc0 [ 426.605387][ C0] ? file_end_write+0x250/0x250 [ 426.610234][ C0] ? __fget_files+0x28/0x4a0 [ 426.614818][ C0] ? __fget_files+0x435/0x4a0 [ 426.619516][ C0] ? __fdget_pos+0x2ba/0x360 [ 426.624108][ C0] ? ksys_write+0x77/0x2c0 [ 426.628526][ C0] ksys_write+0x19c/0x2c0 [ 426.632852][ C0] ? print_irqtrace_events+0x210/0x210 [ 426.638317][ C0] ? __ia32_sys_read+0x80/0x80 [ 426.643075][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 426.649045][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 426.654235][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 426.660215][ C0] do_syscall_64+0x3b/0xb0 [ 426.664624][ C0] ? clear_bhb_loop+0x45/0xa0 [ 426.669288][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.675174][ C0] RIP: 0033:0x7fcfcab7e719 [ 426.679581][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.699186][ C0] RSP: 002b:00007fcfcba4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.707591][ C0] RAX: ffffffffffffffda RBX: 00007fcfcad35f80 RCX: 00007fcfcab7e719 [ 426.715551][ C0] RDX: 000000000208e24b RSI: 00000000200004c0 RDI: 0000000000000004 [ 426.723510][ C0] RBP: 00007fcfcabf175e R08: 0000000000000000 R09: 0000000000000000 [ 426.731470][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.739436][ C0] R13: 0000000000000000 R14: 00007fcfcad35f80 R15: 00007ffef09b5ee8 [ 426.747408][ C0] [ 426.750758][ C0] Kernel Offset: disabled [ 426.755080][ C0] Rebooting in 86400 seconds..