last executing test programs: 56.059753871s ago: executing program 2 (id=224): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x1) pipe2(0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xe1f7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x24, 0x10, 0x1, 0x2}, 0x24}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 47.174615982s ago: executing program 2 (id=239): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) accept(r2, 0x0, 0x0) 41.711026875s ago: executing program 1 (id=254): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) unshare(0x8040080) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000240), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xae802, 0x186) r3 = syz_io_uring_setup(0x445e, &(0x7f00000035c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000140)=@isdn}) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, '\x00', 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ebee00000000000000000800005f74756e0000000000000000000c0002800800038004000180"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x0) 41.42624721s ago: executing program 1 (id=255): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 36.87677168s ago: executing program 3 (id=264): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x3a, 0x3b, 0x0, 0x0) 36.729575644s ago: executing program 3 (id=265): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setpriority(0x2, 0x0, 0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xe, 0x7, 0x6, 0x3, 0x22, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 35.781118939s ago: executing program 3 (id=266): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 29.473082368s ago: executing program 4 (id=274): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x6c86, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000600)={0x0, "e1f6930221e524ae9ab2be0c85985077a026b3745a57150a9f427662e68b1eb7825cbed06e81c202bd45a7b5805f9ebdb44afa8100fcb63d6cbdf0d74b2fa84d516f9b3719808eecdfa68d16cc8f475f4b8a63d76afa54c1b0f0dd41387e51e32808fe4e1574784262bb302d4bc8174589206f78d592fb12ff0caf3ae903b09f1b383705bebaca136781bb8880f114c92d71f1ca7962372c74d52b8274afaee3ab6752211368c8272dc6837e2f9a724b75ab466064a24bc0619c3289682b5ab2c1162d4cda217d57b3c9b8a66ee5af4a572aa6c97d1574005eb02e666d624c3c2a00a3b4a4497e21502b7dc1affe149fd552f41145aad6c23cad92c6dd680030c86afea8ce79a9bfb62b5fab6bb058a889eac5903e630e7fbf35c75e0f0d1c010432a349546f505f17b32329eca282f6e60ba009e13fa7b0f6e3a7ffc23706fe81635a5c8572ef97e1fd5f87a817b4402289dc3a7e015320b1c5f05ac529bcb1bd54f88e10618247c212a4360a5339d236731f60aa9479a9ae3fd372480327f911a19ab069711dc70305ca4c93caed80ecc9e1914ae1ea38460e1fa4f6ee3caa9b41f732401aa9d17340071115ccf3c33716a236ce199e2e2bdc19a9f65eaf3568512189f6fe8d1bedc13838ef7565bc0fc88355e81a28d87a4cec7f53a828b1ab4009a8423e9ed398c7366d8cdbd4ed6fda675f8b32af86502a5a5fc5f9d521"}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) write(r3, &(0x7f0000000340)="f66532c9cbfc757d657288057e4029a7a08ce459c7e0d819bfd53f14794fbb1a0d35e0d238efd625ab625cf85da5080d98db533b9ed78fadd00a992f67926e548adcc344b73cac1f1cf0cd09c7333c753f25149636b68bfd1fa3", 0x5a) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) r6 = dup(r5) read$FUSE(r6, 0x0, 0x2) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r8 = dup(r0) ioctl$TIOCL_SETSEL(r8, 0x5423, 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, r10, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000, 0x0, 0x80}, 0x0) 19.588880819s ago: executing program 4 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000c00018006000600800a0000100002800c"], 0x34}}, 0xc000) 19.454893431s ago: executing program 4 (id=284): mkdir(0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4850) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r4, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x1, 0x40002000}, &(0x7f0000000040), &(0x7f0000000300)) 18.481756409s ago: executing program 4 (id=286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvfrom$packet(r1, &(0x7f0000000280)=""/44, 0x12f4, 0x10101, 0x0, 0x0) 18.435683413s ago: executing program 4 (id=287): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r0, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 17.182340016s ago: executing program 4 (id=290): sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x10000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x61}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x9, 0x6, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0, 0x4, 0x4, 0x800, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 16.490771439s ago: executing program 2 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="6ce804a8b30958b2c26a8ffe06931b39b3da9c30fb16c43d3162e5b7475eda13c81141ecde591dd50e64e5337e6dd6a2ea43", 0x32, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0x8}, {0x7, 0x3}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x60040f3d, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x60, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x70000}], 0x1}, 0x0) 15.379446668s ago: executing program 2 (id=291): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x6c86, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000600)={0x0, "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"}) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) write(r3, &(0x7f0000000340)="f66532c9cbfc757d657288057e4029a7a08ce459c7e0d819bfd53f14794fbb1a0d35e0d238efd625ab625cf85da5080d98db533b9ed78fadd00a992f67926e548adcc344b73cac1f1cf0cd09c7333c753f25149636b68bfd1fa3", 0x5a) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) r6 = dup(r5) read$FUSE(r6, 0x0, 0x2) r7 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r8 = dup(r0) ioctl$TIOCL_SETSEL(r8, 0x5423, 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, r10, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000, 0x0, 0x80}, 0x0) 7.933797827s ago: executing program 2 (id=293): mkdir(0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000400)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4850) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_DESTROY(r4, 0x5502) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x1, 0x40002000}, &(0x7f0000000040), &(0x7f0000000300)) 6.921709834s ago: executing program 2 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) 6.575070837s ago: executing program 3 (id=270): syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa0000000904000000ff010000", @ANYBLOB="1b"], 0x0) syz_usb_connect(0x2, 0x5e, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x18b, &(0x7f0000000c40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0xa, 0x4, 0x1, 0x3f, 0x179, 0x64, 0x0, 0x7a, 0x2f, 0x0, @empty, @private=0xa010101, {[@lsrr={0x83, 0x7, 0x7f, [@dev={0xac, 0x14, 0x14, 0xc}]}, @timestamp={0x44, 0xc, 0x5e, 0x0, 0x3, [0xfffffffa, 0x1]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xe9, 0x3, [0x3ff, 0x5], "d7a38b570dd71ad881fdbf7feab91c9f533bec1262fcfcebf2e463f05d4245480a6add7d7e63635e45bf31de069777d2af19ee58add79666cc92331a70c9f47fd4453954b1628d8c804621d27311acf7e3b3fce18c46fa7ac7d44c95671b5eb8296d0853e2fc4bf0fd467cf938afa59f87112cb0291dcca441c5afb0e05d3dca989494f179189a26637500668dea80f95e37e9f5ba8e2e402ee739f865d1c57e85eb34dadf709cc66bdc2e322f507b1c569fa345ecc392c1a1edd314ff8009c6c1c80851f3d723b9f06023813388ff9ffdbaac8d845ae79b26169e81fbfbfdb7b5d54e0d9aa1b40c7d"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "99c0191fc83c8d97227fe93445dd74e928cbfae0dc4c16ec8832fd320e009ede"}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xf, 0x1, 0x4, 0x2, 0x0, 0x1, 0x4, 0x5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x82, 0x3, 0x0, 0x1, 0x7, 0x10}, 0x2, {0x10000, 0x22, 0x1, 0x1a, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 6.266842597s ago: executing program 1 (id=269): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2002, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@local, 0x2}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)='afs\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) 5.308070319s ago: executing program 0 (id=297): set_mempolicy(0x8006, &(0x7f0000000080)=0xffe, 0x200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 5.094889049s ago: executing program 0 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) timer_gettime(0x0, &(0x7f0000000300)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmmsg$sock(r4, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000640)}, {0x0}, {0x0}, {&(0x7f0000000b00)}, {0x0}, {0x0}], 0x6}}, {{&(0x7f0000000e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2, {0xa, 0x4e21, 0x10000, @private2, 0x80}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)="3d5949c9ff77fe98c0c80854c5d8fd5b7cd03e78b2cb2d262284078162e42771f82cf12d98e11ce0418cc84bbb27badecb07a63c77e0f7deb54fd13fef00fedd75c71012539fd24459445c01a75249b7a326dac767ebf375e1ee4b3a29367f62e1f8c466a15f8f15d10682424507366fa889d34113374d3106a3eb498275c3c985ccf0af46bf22e355b01d5b895600491554f5d21afd8d8e47459d6d984ee034db0d534f90d4057665c864fdcce1f2db52328d82", 0xb4}, {&(0x7f0000000f40)="d4150da2d1301603a585f3ca4beea2fd1e5e30efabfbec0dd08805b0857d34be0d44097059722fcc3caf51858dc98303a01ef3f6ce9f1ee862266a21520f1c0da0a173854bafb2304161799857022e419d60ea5029a21b85e66e511b94a6081e84cfcf2c510599c5c9e727261736f83a0c89727daf8c6e227be5e2f5540c24864f4464caf213ac9ccc5a41c9c44e5104745b03d03c5682b36369c80c972d63ccacf7c6c26cb4992768d97c6a4ebfdadac3e612abdd53fff3e713c68c15c8131036681e0527cde6188712240007eb4993f63a97e6d8bb4c7436bba092c16be18d6ebc0acd7dd88a483ba30de3292a0328efef367f", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001280)="c421ee69c94e7e4b512606b675efee368d5b3294356f49172fddf1d35a9c4468447803fb2b640a612112dd3813faa6fd7785bd5b86b08c1b8a172f98d27606d54645ce21c3cfbdfb40ece68c223aceea8bfc4ad86bea453cbf71e57eb88d", 0x5e}, {&(0x7f0000000cc0)="4756bfa49719", 0x6}, {&(0x7f0000001440)="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", 0x853}, {&(0x7f0000002440)}, {0x0}, {&(0x7f0000002680)="20311f170e7a73c2f2a0e06c106a6f75b23726b8e1f6a31f730536f985d1e3d23a029c52c241f281f9ce5bc12945adeca64422742c6db50f3b5a6419287d58fcf485e749b21e25a90d88cecc22ca9e7815668dfda6bce65851b9f8812ccd1abe58ee550589d25b145e6ec6821333cae4bb581d20ba0186674f0a8a8dd7ae4cc9210294a1996ac65d126ab650981aa752b9c039659aa82d9f01", 0x99}], 0x6, &(0x7f00000028c0)=[@timestamping={{0x14, 0x1, 0x25, 0x608d}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}}, {{&(0x7f0000002dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x1, 0x0, 0x1, {0xa, 0x4e24, 0x2, @empty, 0x1}}}, 0x80, &(0x7f0000003100)=[{0x0}, {&(0x7f0000002fc0)}, {&(0x7f0000003040)}], 0x3}}], 0x4, 0x0) 4.071556498s ago: executing program 1 (id=300): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x178, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) write(r0, &(0x7f0000000340)="41000000010001", 0x7) 4.070500788s ago: executing program 0 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) timer_gettime(0x0, &(0x7f0000000300)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) sendmmsg$sock(r4, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000000640)}, {0x0}, {0x0}, {&(0x7f0000000b00)}, {0x0}, {0x0}], 0x6}}, {{&(0x7f0000000e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2, {0xa, 0x4e21, 0x10000, @private2, 0x80}}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)="3d5949c9ff77fe98c0c80854c5d8fd5b7cd03e78b2cb2d262284078162e42771f82cf12d98e11ce0418cc84bbb27badecb07a63c77e0f7deb54fd13fef00fedd75c71012539fd24459445c01a75249b7a326dac767ebf375e1ee4b3a29367f62e1f8c466a15f8f15d10682424507366fa889d34113374d3106a3eb498275c3c985ccf0af46bf22e355b01d5b895600491554f5d21afd8d8e47459d6d984ee034db0d534f90d4057665c864fdcce1f2db52328d82", 0xb4}, {&(0x7f0000000f40)="d4150da2d1301603a585f3ca4beea2fd1e5e30efabfbec0dd08805b0857d34be0d44097059722fcc3caf51858dc98303a01ef3f6ce9f1ee862266a21520f1c0da0a173854bafb2304161799857022e419d60ea5029a21b85e66e511b94a6081e84cfcf2c510599c5c9e727261736f83a0c89727daf8c6e227be5e2f5540c24864f4464caf213ac9ccc5a41c9c44e5104745b03d03c5682b36369c80c972d63ccacf7c6c26cb4992768d97c6a4ebfdadac3e612abdd53fff3e713c68c15c8131036681e0527cde6188712240007eb4993f63a97e6d8bb4c7436bba092c16be18d6ebc0acd7dd88a483ba30de3292a0328efef367f", 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001280)="c421ee69c94e7e4b512606b675efee368d5b3294356f49172fddf1d35a9c4468447803fb2b640a612112dd3813faa6fd7785bd5b86b08c1b8a172f98d27606d54645ce21c3cfbdfb40ece68c223aceea8bfc4ad86bea453cbf71e57eb88d", 0x5e}, {&(0x7f0000000cc0)="4756bfa49719", 0x6}, {&(0x7f0000001440)="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", 0x853}, {&(0x7f0000002440)}, {0x0}, {&(0x7f0000002680)="20311f170e7a73c2f2a0e06c106a6f75b23726b8e1f6a31f730536f985d1e3d23a029c52c241f281f9ce5bc12945adeca64422742c6db50f3b5a6419287d58fcf485e749b21e25a90d88cecc22ca9e7815668dfda6bce65851b9f8812ccd1abe58ee550589d25b145e6ec6821333cae4bb581d20ba0186674f0a8a8dd7ae4cc9210294a1996ac65d126ab650981aa752b9c039659aa82d9f01", 0x99}], 0x6, &(0x7f00000028c0)=[@timestamping={{0x14, 0x1, 0x25, 0x608d}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x30}}, {{&(0x7f0000002dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x1, 0x0, 0x1, {0xa, 0x4e24, 0x2, @empty, 0x1}}}, 0x80, &(0x7f0000003100)=[{0x0}, {&(0x7f0000002fc0)}, {&(0x7f0000003040)}], 0x3}}], 0x4, 0x0) 2.953048746s ago: executing program 0 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="6ce804a8b30958b2c26a8ffe06931b39b3da9c30fb16c43d3162e5b7475eda13c81141ecde591dd50e64e5337e6dd6a2ea43", 0x32, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@getchain={0x2c, 0x66, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x9}, {0x8}, {0x7, 0x3}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x60040f3d, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x60, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x70000}], 0x1}, 0x0) 2.870917544s ago: executing program 3 (id=303): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.307285258s ago: executing program 1 (id=304): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x20001782, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x20, 0x8c}) socket(0x2b, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x6185, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) unshare(0x2e020680) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x110, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x7, 0x21cd43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) 730.42375ms ago: executing program 3 (id=305): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000006c0)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='rdma.current\x00', 0x26e1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r2, 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000040)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000140)={0x0, 0x3, 0x3fb}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x3ff}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/201, 0xc9}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x3, 0x0, 0x0) read$rfkill(r7, &(0x7f00000000c0), 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) 683.183924ms ago: executing program 1 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000000400)=""/152, 0xd4}, {&(0x7f0000000580)=""/210}, {&(0x7f00000006c0)=""/71}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xe02, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 682.776384ms ago: executing program 0 (id=315): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX]) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 0 (id=307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000180)="1c", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='cpuset\x00') preadv(r4, &(0x7f0000000840)=[{&(0x7f0000001dc0)=""/4088, 0xff8}], 0x1, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) kernel console output (not intermixed with test programs): cvtap left promiscuous mode [ 87.634555][ T2671] device veth1_vlan left promiscuous mode [ 87.640828][ T3647] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 87.656667][ T3616] usb 2-1: can't set config #1, error -71 [ 87.667729][ T3616] usb 2-1: USB disconnect, device number 2 [ 87.676918][ T2671] device veth0_vlan left promiscuous mode [ 87.725369][ T3647] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 87.744870][ T3647] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 87.765467][ T3647] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.836759][ T3647] usb 1-1: config 0 interface 125 has no altsetting 0 [ 87.861762][ T3647] usb 1-1: config 0 interface 125 has no altsetting 2 [ 88.205125][ T3616] Bluetooth: hci1: command 0x041b tx timeout [ 88.207741][ T3647] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 88.226565][ T3647] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.358220][ T3647] usb 1-1: Product: syz [ 88.370506][ T3647] usb 1-1: Manufacturer: syz [ 88.375422][ T3647] usb 1-1: SerialNumber: syz [ 88.383048][ T3647] usb 1-1: config 0 descriptor?? [ 88.417011][ T3647] usb 1-1: can't set config #0, error -71 [ 88.431208][ T3647] usb 1-1: USB disconnect, device number 6 [ 89.163257][ T26] audit: type=1107 audit(1726924647.086:3): pid=3868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 89.782357][ T2671] team0 (unregistering): Port device team_slave_1 removed [ 89.810942][ T2671] team0 (unregistering): Port device team_slave_0 removed [ 89.844919][ T2671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.882270][ T2671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.041804][ T2671] bond0 (unregistering): Released all slaves [ 90.236359][ T3871] team0: Port device team_slave_1 removed [ 90.245043][ T3874] netlink: 'syz.4.53': attribute type 4 has an invalid length. [ 90.266926][ T3879] netlink: 'syz.4.53': attribute type 4 has an invalid length. [ 90.438107][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 94.595647][ T3791] Bluetooth: hci1: command 0x0419 tx timeout [ 96.594539][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.675209][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.716653][ T1075] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.768768][ T3800] device bridge_slave_0 entered promiscuous mode [ 96.792977][ T3927] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.808530][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.986527][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.995245][ T3800] device bridge_slave_1 entered promiscuous mode [ 97.128170][ T1075] usb 2-1: Using ep0 maxpacket: 16 [ 97.246759][ T1075] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 97.261515][ T1075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 97.270538][ T1075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 97.278979][ T1075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 97.288202][ T1075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.297691][ T1075] usb 2-1: config 0 has no interface number 0 [ 97.301063][ T3800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.304220][ T1075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 97.326097][ T1075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 97.350322][ T1075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.362208][ T1075] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.376954][ T1075] usb 2-1: config 0 interface 125 has no altsetting 0 [ 97.385925][ T1075] usb 2-1: config 0 interface 125 has no altsetting 2 [ 97.415777][ T3800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.542022][ T3800] team0: Port device team_slave_0 added [ 97.548949][ T1075] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 97.562780][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.576767][ T1075] usb 2-1: Product: syz [ 97.581732][ T1075] usb 2-1: Manufacturer: syz [ 97.597054][ T1075] usb 2-1: SerialNumber: syz [ 97.685156][ T1075] usb 2-1: config 0 descriptor?? [ 97.702513][ T3800] team0: Port device team_slave_1 added [ 97.729861][ T1075] usb 2-1: selecting invalid altsetting 2 [ 98.467964][ T3800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.518020][ T3800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.601351][ T3800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.647836][ T3800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.675992][ T3800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.836660][ T1075] get_1284_register timeout [ 98.842687][ T1075] uss720: probe of 2-1:0.125 failed with error -5 [ 98.856503][ C0] usb 2-1: async_complete: urb error -104 [ 98.862680][ C0] usb 2-1: async_complete: urb error -104 [ 98.877856][ T3800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.960176][ T1075] usb 2-1: USB disconnect, device number 3 [ 99.155294][ T3800] device hsr_slave_0 entered promiscuous mode [ 99.223751][ T3800] device hsr_slave_1 entered promiscuous mode [ 99.265470][ T3800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.276293][ T3800] Cannot create hsr debugfs directory [ 100.450703][ T26] audit: type=1107 audit(1726924658.376:4): pid=3968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 100.525068][ T3975] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 100.581355][ T3981] netlink: 'syz.1.68': attribute type 4 has an invalid length. [ 101.491495][ T3991] bridge0: port 3(team0) entered blocking state [ 101.498753][ T3991] bridge0: port 3(team0) entered disabled state [ 101.507072][ T3991] device team0 entered promiscuous mode [ 101.512863][ T3991] device team_slave_0 entered promiscuous mode [ 101.519387][ T3991] device team_slave_1 entered promiscuous mode [ 101.527015][ T3991] bridge0: port 3(team0) entered blocking state [ 101.533735][ T3991] bridge0: port 3(team0) entered forwarding state [ 101.962577][ T3980] loop2: detected capacity change from 0 to 40427 [ 104.540604][ T4009] team0: Port device virt_wifi0 added [ 104.895475][ T3800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.969864][ T3800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.054596][ T3800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.093873][ T3800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.442485][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.240579][ T3800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.266509][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 106.297948][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 106.329143][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.369621][ T3800] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.406803][ T21] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 106.417251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.437336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.448980][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.487354][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.494704][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.542437][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.554353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.581017][ T21] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 106.585644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.625560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.639676][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.664627][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.671875][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.694066][ T21] usb 5-1: config 0 has no interface number 0 [ 106.719630][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 106.723593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.780387][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 106.791543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.825046][ T21] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.856693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.865417][ T21] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.905121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.929454][ T21] usb 5-1: config 0 interface 125 has no altsetting 0 [ 106.953765][ T21] usb 5-1: config 0 interface 125 has no altsetting 2 [ 106.981876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.031086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.111648][ T3800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.155448][ T3800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.166744][ T21] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 107.175686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.201974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.215960][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.234404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.264156][ T21] usb 5-1: Product: syz [ 107.274674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.282601][ T21] usb 5-1: Manufacturer: syz [ 107.288108][ T21] usb 5-1: SerialNumber: syz [ 107.324556][ T21] usb 5-1: config 0 descriptor?? [ 107.349359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.393585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.409812][ T21] usb 5-1: selecting invalid altsetting 2 [ 107.775232][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.796846][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.811187][ T3800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.894362][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.908596][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.942488][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.962477][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.987581][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.031277][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.060559][ T3800] device veth0_vlan entered promiscuous mode [ 108.084284][ T3800] device veth1_vlan entered promiscuous mode [ 108.141230][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.177396][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.215659][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.234951][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.288197][ T3800] device veth0_macvtap entered promiscuous mode [ 108.313952][ T3800] device veth1_macvtap entered promiscuous mode [ 108.391185][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.420702][ T26] audit: type=1107 audit(1726924666.346:5): pid=4079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 108.446855][ C1] usb 5-1: async_complete: urb error -71 [ 108.452599][ C1] usb 5-1: async_complete: urb error -71 [ 108.459676][ T21] get_1284_register: usb error -71 [ 108.465069][ T21] uss720: probe of 5-1:0.125 failed with error -71 [ 108.480041][ T21] usb 5-1: USB disconnect, device number 3 [ 108.503496][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.535550][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.566211][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.595094][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.636930][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.653050][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.680507][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.692386][ T3800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.700118][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.719725][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.750508][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.770428][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.800730][ T4082] netlink: 'syz.0.84': attribute type 4 has an invalid length. [ 108.840595][ T4084] netlink: 'syz.0.84': attribute type 4 has an invalid length. [ 108.883253][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.920007][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.946153][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.966459][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.986479][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.042021][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.073089][ T3800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.231110][ T3800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.244618][ T3800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.260200][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.505324][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.722564][ T3800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.774250][ T3800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.818773][ T3800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.852281][ T3800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.895706][ T4105] bridge0: port 3(team0) entered blocking state [ 109.902303][ T4105] bridge0: port 3(team0) entered disabled state [ 109.911013][ T4105] device team0 entered promiscuous mode [ 109.916672][ T4105] device team_slave_0 entered promiscuous mode [ 109.923062][ T4105] device team_slave_1 entered promiscuous mode [ 109.929610][ T4105] device virt_wifi0 entered promiscuous mode [ 109.936678][ T4105] bridge0: port 3(team0) entered blocking state [ 109.942988][ T4105] bridge0: port 3(team0) entered forwarding state [ 110.227803][ T4078] loop1: detected capacity change from 0 to 40427 [ 110.282053][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.298973][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.315068][ T4078] F2FS-fs (loop1): invalid crc value [ 110.390694][ T4123] tmpfs: Unknown parameter 'usrquota' [ 111.137366][ T4078] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.212520][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.452088][ T3973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.491285][ T3973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.531549][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.754632][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 119.158653][ T3616] Bluetooth: hci0: command 0x2016 tx timeout [ 123.811278][ T3616] Bluetooth: hci0: command 0x0406 tx timeout [ 125.944606][ T4246] overlayfs: unrecognized mount option "verity=require" or missing value [ 126.192595][ T26] audit: type=1326 audit(1726924684.116:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 126.322779][ T26] audit: type=1326 audit(1726924684.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 126.460680][ T26] audit: type=1326 audit(1726924684.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 126.492431][ T26] audit: type=1326 audit(1726924684.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 126.609219][ T26] audit: type=1326 audit(1726924684.156:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 127.396532][ T26] audit: type=1326 audit(1726924684.156:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 127.419242][ T26] audit: type=1326 audit(1726924684.166:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4251 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa992b32ef9 code=0x7ffc0000 [ 127.780268][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 131.264390][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 131.283544][ T4291] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 131.434840][ T4293] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 131.453268][ T4293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.461031][ T4293] IPv6: NLM_F_CREATE should be set when creating new route [ 132.269156][ T4311] process 'syz.1.142' launched '/dev/fd/5/./file0' with NULL argv: empty string added [ 132.971097][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977480][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.241096][ T3616] Bluetooth: hci5: command 0x1003 tx timeout [ 134.381177][ T3570] Bluetooth: hci5: sending frame failed (-49) [ 134.828659][ T4322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.346527][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.452129][ T4322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.555523][ T4322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.606526][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 135.657323][ T4322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.843999][ T4322] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.884787][ T4322] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.907674][ T4322] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.955942][ T4322] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.966274][ T23] usb 2-1: New USB device found, idVendor=0572, idProduct=1329, bcdDevice=56.c1 [ 136.005508][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.029044][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 136.056256][ T23] usb 2-1: Product: syz [ 136.066666][ T23] usb 2-1: Manufacturer: syz [ 136.094674][ T23] usb 2-1: SerialNumber: syz [ 136.130828][ T23] usb 2-1: config 0 descriptor?? [ 136.259899][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.267319][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.413909][ T4332] device bridge_slave_0 entered promiscuous mode [ 136.445108][ T3616] Bluetooth: hci5: command 0x1001 tx timeout [ 136.475360][ T3577] Bluetooth: hci5: sending frame failed (-49) [ 136.501629][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.510985][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.537141][ T4332] device bridge_slave_1 entered promiscuous mode [ 136.552520][ T4340] udc-core: couldn't find an available UDC or it's busy [ 136.560558][ T4340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.630750][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.651359][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.761614][ T4332] team0: Port device team_slave_0 added [ 136.841941][ T4332] team0: Port device team_slave_1 added [ 136.909676][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.925713][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.956500][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.984071][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.991519][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.019725][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.169768][ T4332] device hsr_slave_0 entered promiscuous mode [ 137.186133][ T4332] device hsr_slave_1 entered promiscuous mode [ 137.232496][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.241479][ T4332] Cannot create hsr debugfs directory [ 137.476590][ T3576] Bluetooth: hci6: command 0x0409 tx timeout [ 138.019243][ T3576] usb 2-1: USB disconnect, device number 4 [ 138.483322][ T4332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.623921][ T7] Bluetooth: hci5: command 0x1009 tx timeout [ 138.660721][ T4353] overlayfs: unrecognized mount option "verity=require" or missing value [ 138.697150][ T4332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.076780][ T4332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.964393][ T3576] Bluetooth: hci6: command 0x041b tx timeout [ 141.351742][ T4369] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.363383][ T4369] F2FS-fs (loop7): Unable to read 1th superblock [ 141.371522][ T4369] blk_update_request: I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.382723][ T4369] F2FS-fs (loop7): Unable to read 2th superblock [ 141.556889][ T3617] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.225181][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.242799][ T4332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.257775][ T3617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.276482][ T3617] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 142.302931][ T3617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.363784][ T3617] usb 2-1: config 0 descriptor?? [ 143.292084][ T3616] Bluetooth: hci6: command 0x040f tx timeout [ 143.376924][ T3617] usbhid 2-1:0.0: can't add hid device: -71 [ 143.383001][ T3617] usbhid: probe of 2-1:0.0 failed with error -71 [ 143.437866][ T3617] usb 2-1: USB disconnect, device number 5 [ 143.615325][ T3567] syz-executor (3567) used greatest stack depth: 18744 bytes left [ 143.671678][ T4332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.715614][ T4332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.898032][ T4332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.520192][ T4332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.715338][ T1075] Bluetooth: hci5: command 0x0409 tx timeout [ 144.756883][ T4133] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 145.416014][ T1075] Bluetooth: hci6: command 0x0419 tx timeout [ 145.646552][ T4133] usb 3-1: Using ep0 maxpacket: 8 [ 145.938510][ T4133] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 146.011267][ T4133] usb 3-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 146.261202][ T4133] usb 3-1: Product: syz [ 146.316522][ T4133] usb 3-1: Manufacturer: syz [ 146.331812][ T4133] usb 3-1: SerialNumber: syz [ 146.339737][ T4133] usb 3-1: config 0 descriptor?? [ 146.418022][ T4133] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 146.464243][ T4133] usb 3-1: Detected SIO [ 146.501697][ T4133] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 146.542416][ T4378] chnl_net:caif_netlink_parms(): no params data found [ 146.606474][ T4391] netlink: 208 bytes leftover after parsing attributes in process `syz.2.165'. [ 146.649241][ T4411] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.662043][ T4411] F2FS-fs (loop3): Unable to read 1th superblock [ 146.669772][ T4411] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.682278][ T4411] F2FS-fs (loop3): Unable to read 2th superblock [ 146.855536][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.064833][ T1075] Bluetooth: hci5: command 0x041b tx timeout [ 147.366266][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.476649][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.492985][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.501482][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.510603][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.519643][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.526883][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.535436][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.360229][ T3612] usb 3-1: USB disconnect, device number 2 [ 148.365412][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.377075][ T3612] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 148.397893][ T3612] ftdi_sio 3-1:0.0: device disconnected [ 148.417596][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.424863][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.433256][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.474096][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.497530][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.512128][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.542370][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.564370][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.598819][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.768745][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.787145][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.446922][ T4133] Bluetooth: hci5: command 0x040f tx timeout [ 149.570593][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.603404][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.632054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.674034][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.474020][ T3570] Bluetooth: min 3 > max 0 [ 150.750940][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.768891][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.784580][ T4378] device bridge_slave_0 entered promiscuous mode [ 150.798790][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.816577][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.827713][ T4378] device bridge_slave_1 entered promiscuous mode [ 151.713350][ T1075] Bluetooth: hci5: command 0x0419 tx timeout [ 152.548554][ T4460] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.548659][ T4460] F2FS-fs (loop5): Unable to read 1th superblock [ 152.548813][ T4460] blk_update_request: I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 152.548863][ T4460] F2FS-fs (loop5): Unable to read 2th superblock [ 152.949321][ T4378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.978335][ T4378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.857136][ T1075] Bluetooth: hci2: command 0x2021 tx timeout [ 154.635607][ T4378] team0: Port device team_slave_0 added [ 154.700652][ T4378] team0: Port device team_slave_1 added [ 154.853651][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.874740][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.889641][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.985346][ T4378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.776839][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.809630][ T4378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.908016][ T4378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.243277][ T4378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.257278][ T4488] dlm: no local IP address has been set [ 156.266203][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.281482][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.295759][ T4488] dlm: cannot start dlm midcomms -107 [ 156.361830][ T4492] bridge0: port 3(syz_tun) entered blocking state [ 156.373008][ T4492] bridge0: port 3(syz_tun) entered disabled state [ 156.401605][ T4492] device syz_tun entered promiscuous mode [ 156.413014][ T4492] bridge0: port 3(syz_tun) entered blocking state [ 156.419901][ T4492] bridge0: port 3(syz_tun) entered forwarding state [ 156.462403][ T4378] device hsr_slave_0 entered promiscuous mode [ 156.465414][ T4494] syz.3.192 (4494) used greatest stack depth: 17080 bytes left [ 156.477316][ T4378] device hsr_slave_1 entered promiscuous mode [ 156.484857][ T4378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.495031][ T4378] Cannot create hsr debugfs directory [ 156.569073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.579948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.598487][ T9] device hsr_slave_0 left promiscuous mode [ 156.612714][ T9] device hsr_slave_1 left promiscuous mode [ 156.616791][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 156.634692][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.648718][ T23] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.654948][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.658436][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.676615][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.690041][ T23] usb 2-1: config 0 descriptor?? [ 156.696066][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.703616][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.711671][ T9] device bridge_slave_1 left promiscuous mode [ 156.716777][ T4480] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 156.718217][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.733722][ T9] device bridge_slave_0 left promiscuous mode [ 156.741704][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.745791][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 156.768279][ T9] device veth1_macvtap left promiscuous mode [ 156.774575][ T9] device veth0_macvtap left promiscuous mode [ 156.781843][ T9] device veth1_vlan left promiscuous mode [ 156.789126][ T9] device veth0_vlan left promiscuous mode [ 157.019115][ T9] team0 (unregistering): Port device team_slave_0 removed [ 157.032253][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.049410][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.138951][ T9] bond0 (unregistering): Released all slaves [ 157.246294][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.259521][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.273964][ T4332] device veth0_vlan entered promiscuous mode [ 157.305192][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.314197][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.365175][ T4378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.385204][ T4332] device veth1_vlan entered promiscuous mode [ 157.439935][ T4332] device veth0_macvtap entered promiscuous mode [ 157.448356][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.457422][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.466310][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.483414][ T4332] device veth1_macvtap entered promiscuous mode [ 157.498299][ T4378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.529941][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.546838][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.557799][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.569548][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.580234][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.592226][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.602398][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.613220][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.625061][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.634844][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.644220][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.654186][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.673392][ T4378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.690475][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.701674][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.711590][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.722114][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.733161][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.743836][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.753703][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.764237][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.775388][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.788043][ T4332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.798777][ T4332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.808617][ T4332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.818547][ T4332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.829584][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.838755][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.855836][ T4378] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.975197][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.999792][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.013700][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.066079][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.080715][ T4378] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.087833][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.100320][ T4378] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.114949][ T4378] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.148466][ T3660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.168208][ T4378] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.861267][ T4133] usb 2-1: USB disconnect, device number 6 [ 158.967408][ T4378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.031139][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.046265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.059656][ T4378] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.072773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.082760][ T3616] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.099946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.110902][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.118052][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.137692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.149565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.167741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.179470][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.186650][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.194645][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 159.215989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.227624][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.240690][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.258940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.267586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.278707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.288312][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.298236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.319610][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.337229][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.355046][ T3616] usb 3-1: Using ep0 maxpacket: 32 [ 159.363471][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.515181][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.528596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.552800][ T4378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.567146][ T4504] loop0: detected capacity change from 0 to 40427 [ 159.646960][ T3616] usb 3-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 159.666841][ T3616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.676917][ T4504] F2FS-fs (loop0): invalid crc value [ 159.687312][ T3616] usb 3-1: Product: syz [ 159.697134][ T3616] usb 3-1: Manufacturer: syz [ 159.701859][ T3616] usb 3-1: SerialNumber: syz [ 159.730011][ T4504] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.777158][ T3616] usb 3-1: config 0 descriptor?? [ 159.825697][ T3616] usb-storage 3-1:0.0: USB Mass Storage device detected [ 159.903693][ T4504] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.006512][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.017429][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.022138][ T4504] F2FS-fs (loop0) : inject evict_inode fail in f2fs_evict_inode of evict+0x529/0x930 [ 160.048945][ T4133] usb 3-1: USB disconnect, device number 3 [ 160.090548][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.099796][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.112765][ T4378] device veth0_vlan entered promiscuous mode [ 160.124996][ T4332] F2FS-fs (loop0): access invalid blkaddr:2816 [ 160.125560][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.153235][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.164111][ T4332] CPU: 0 PID: 4332 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 160.172653][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.183247][ T4332] Call Trace: [ 160.186552][ T4332] [ 160.189558][ T4332] dump_stack_lvl+0x1e3/0x2d0 [ 160.194265][ T4332] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 160.199968][ T4332] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 160.205818][ T4332] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 160.211335][ T4332] f2fs_map_blocks+0x159a/0x3720 [ 160.216342][ T4332] ? f2fs_force_buffered_io+0x630/0x630 [ 160.221939][ T4332] f2fs_mpage_readpages+0xe98/0x27c0 [ 160.227289][ T4332] ? dquot_release_reservation_block+0x90/0x90 [ 160.233496][ T4332] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 160.239876][ T4332] ? f2fs_readahead+0x16e/0x310 [ 160.245100][ T4332] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 160.250944][ T4332] read_pages+0x159/0x8e0 [ 160.255310][ T4332] ? page_cache_ra_unbounded+0x930/0x930 [ 160.261049][ T4332] ? add_to_page_cache_locked+0x40/0x40 [ 160.266827][ T4332] ? down_read+0x1b3/0x2e0 [ 160.271369][ T4332] page_cache_ra_unbounded+0x7b0/0x930 [ 160.276949][ T4332] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 160.283780][ T4332] ? blk_cgroup_congested+0x30c/0x390 [ 160.289179][ T4332] f2fs_readdir+0x546/0xef0 [ 160.293722][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.298946][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.304789][ T4332] ? iterate_dir+0x10a/0x570 [ 160.309508][ T4332] ? fsnotify_perm+0x442/0x590 [ 160.314310][ T4332] iterate_dir+0x224/0x570 [ 160.318749][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.323982][ T4332] __se_sys_getdents64+0x209/0x4f0 [ 160.329231][ T4332] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 160.335245][ T4332] ? __x64_sys_getdents64+0x80/0x80 [ 160.340657][ T4332] ? filldir+0x720/0x720 [ 160.345107][ T4332] ? syscall_enter_from_user_mode+0x2e/0x240 [ 160.351283][ T4332] ? lockdep_hardirqs_on+0x94/0x130 [ 160.356511][ T4332] ? syscall_enter_from_user_mode+0x2e/0x240 [ 160.362876][ T4332] do_syscall_64+0x3b/0xb0 [ 160.367305][ T4332] ? clear_bhb_loop+0x15/0x70 [ 160.372026][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.378848][ T4332] RIP: 0033:0x7fd5f9ad8093 [ 160.383310][ T4332] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 160.403628][ T4332] RSP: 002b:00007ffe8890f8c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 160.412336][ T4332] RAX: ffffffffffffffda RBX: 0000555576b2d600 RCX: 00007fd5f9ad8093 [ 160.420600][ T4332] RDX: 0000000000008000 RSI: 0000555576b2d600 RDI: 0000000000000005 [ 160.428599][ T4332] RBP: 0000555576b2d5d4 R08: 0000000000028a41 R09: 0000000000000000 [ 160.436859][ T4332] R10: 00007fd5f9c33ca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 160.445406][ T4332] R13: 0000000000000010 R14: 0000555576b2d5d0 R15: 00007ffe88911b70 [ 160.453606][ T4332] [ 160.456780][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.614504][ T4378] device veth1_vlan entered promiscuous mode [ 160.626854][ T4332] F2FS-fs (loop0): access invalid blkaddr:2816 [ 160.633128][ T4332] CPU: 1 PID: 4332 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 160.641693][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.651779][ T4332] Call Trace: [ 160.655784][ T4332] [ 160.658738][ T4332] dump_stack_lvl+0x1e3/0x2d0 [ 160.663622][ T4332] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 160.669468][ T4332] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 160.676351][ T4332] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 160.681783][ T4332] f2fs_map_blocks+0x159a/0x3720 [ 160.686772][ T4332] ? f2fs_force_buffered_io+0x630/0x630 [ 160.690398][ T4378] device veth0_macvtap entered promiscuous mode [ 160.692477][ T4332] ? unlock_page+0x188/0x200 [ 160.703313][ T4332] f2fs_mpage_readpages+0xe98/0x27c0 [ 160.708680][ T4332] ? dquot_release_reservation_block+0x90/0x90 [ 160.714859][ T4332] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 160.721040][ T4332] ? f2fs_readahead+0x16e/0x310 [ 160.725887][ T4332] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 160.731746][ T4332] read_pages+0x159/0x8e0 [ 160.736088][ T4332] ? page_cache_ra_unbounded+0x930/0x930 [ 160.741740][ T4332] ? add_to_page_cache_locked+0x40/0x40 [ 160.747677][ T4332] ? down_read+0x1b3/0x2e0 [ 160.752133][ T4332] page_cache_ra_unbounded+0x7b0/0x930 [ 160.757705][ T4332] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 160.764394][ T4332] ? blk_cgroup_congested+0x30c/0x390 [ 160.769801][ T4332] f2fs_readdir+0x546/0xef0 [ 160.774333][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.779562][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.784949][ T4332] ? iterate_dir+0x10a/0x570 [ 160.789556][ T4332] ? fsnotify_perm+0x442/0x590 [ 160.794622][ T4332] iterate_dir+0x224/0x570 [ 160.799423][ T4332] ? f2fs_fill_dentries+0xd60/0xd60 [ 160.804848][ T4332] __se_sys_getdents64+0x209/0x4f0 [ 160.810307][ T4332] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 160.816804][ T4332] ? __x64_sys_getdents64+0x80/0x80 [ 160.822390][ T4332] ? filldir+0x720/0x720 [ 160.826941][ T4332] ? syscall_enter_from_user_mode+0x2e/0x240 [ 160.833564][ T4332] ? lockdep_hardirqs_on+0x94/0x130 [ 160.838783][ T4332] ? syscall_enter_from_user_mode+0x2e/0x240 [ 160.845009][ T4332] do_syscall_64+0x3b/0xb0 [ 160.849445][ T4332] ? clear_bhb_loop+0x15/0x70 [ 160.854231][ T4332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.860377][ T4332] RIP: 0033:0x7fd5f9ad8093 [ 160.864970][ T4332] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 160.885761][ T4332] RSP: 002b:00007ffe8890f8c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 160.894478][ T4332] RAX: ffffffffffffffda RBX: 0000555576b2d600 RCX: 00007fd5f9ad8093 [ 160.902674][ T4332] RDX: 0000000000008000 RSI: 0000555576b2d600 RDI: 0000000000000005 [ 160.911082][ T4332] RBP: 0000555576b2d5d4 R08: 0000000000028a41 R09: 0000000000000000 [ 160.919164][ T4332] R10: 00007fd5f9c33ca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 160.927568][ T4332] R13: 0000000000000010 R14: 0000555576b2d5d0 R15: 00007ffe88911b70 [ 160.935718][ T4332] [ 160.942166][ T4332] attempt to access beyond end of device [ 160.942166][ T4332] loop0: rw=0, want=45072, limit=40427 [ 160.978779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.988963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 161.007195][ T4378] device veth1_macvtap entered promiscuous mode [ 161.018926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 161.029899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.095470][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.126816][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.137711][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.159856][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.173173][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.185990][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.219814][ T4532] dlm: no locking on control device [ 161.967183][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.138862][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.593186][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.606116][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.753939][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.824932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.844442][ T155] attempt to access beyond end of device [ 162.844442][ T155] loop0: rw=1, want=45224, limit=40427 [ 162.860943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.030595][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.819712][ T155] attempt to access beyond end of device [ 163.819712][ T155] loop0: rw=2049, want=40992, limit=40427 [ 163.861637][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.901402][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.947480][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.969307][ T4549] binder: 4544:4549 ioctl 4018620d 0 returned -22 [ 163.995973][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.023441][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.043839][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.054913][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.072800][ T4378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.079720][ T4549] kAFS: unparsable volume name [ 164.103819][ T4378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.178017][ T4378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.226168][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 164.257722][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.273738][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.448848][ T4378] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.459541][ T4378] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.484840][ T4378] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.514124][ T4378] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.780468][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.782946][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 164.803989][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.849668][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.885785][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.911454][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.937184][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.946938][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.984998][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.040268][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.103997][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.265860][ T4567] device bond0 entered promiscuous mode [ 165.322338][ T4567] device bond_slave_0 entered promiscuous mode [ 165.353258][ T4567] device bond_slave_1 entered promiscuous mode [ 166.563478][ T4562] loop2: detected capacity change from 0 to 40427 [ 166.640201][ T4597] kvm: emulating exchange as write [ 166.674858][ T4562] F2FS-fs (loop2): invalid crc value [ 166.736188][ T4562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.035167][ T4562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.127313][ T4562] F2FS-fs (loop2) : inject evict_inode fail in f2fs_evict_inode of evict+0x529/0x930 [ 167.163162][ T4584] chnl_net:caif_netlink_parms(): no params data found [ 167.235506][ T3572] F2FS-fs (loop2): access invalid blkaddr:2816 [ 167.284920][ T3572] CPU: 0 PID: 3572 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 167.293564][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 167.303768][ T3572] Call Trace: [ 167.307068][ T3572] [ 167.310017][ T3572] dump_stack_lvl+0x1e3/0x2d0 [ 167.314726][ T3572] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 167.320378][ T3572] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 167.326252][ T3572] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 167.331753][ T3572] f2fs_map_blocks+0x159a/0x3720 [ 167.336764][ T3572] ? f2fs_force_buffered_io+0x630/0x630 [ 167.342450][ T3572] f2fs_mpage_readpages+0xe98/0x27c0 [ 167.347798][ T3572] ? dquot_release_reservation_block+0x90/0x90 [ 167.354080][ T3572] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 167.360362][ T3572] ? f2fs_readahead+0x16e/0x310 [ 167.365248][ T3572] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 167.371004][ T3572] read_pages+0x159/0x8e0 [ 167.375559][ T3572] ? page_cache_ra_unbounded+0x930/0x930 [ 167.381236][ T3572] ? add_to_page_cache_locked+0x40/0x40 [ 167.386820][ T3572] ? down_read+0x1b3/0x2e0 [ 167.391441][ T3572] page_cache_ra_unbounded+0x7b0/0x930 [ 167.397113][ T3572] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 167.403764][ T3572] ? blk_cgroup_congested+0x30c/0x390 [ 167.409437][ T3572] f2fs_readdir+0x546/0xef0 [ 167.414172][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.419609][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.425263][ T3572] ? iterate_dir+0x10a/0x570 [ 167.430010][ T3572] ? fsnotify_perm+0x442/0x590 [ 167.434907][ T3572] iterate_dir+0x224/0x570 [ 167.439426][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.444642][ T3572] __se_sys_getdents64+0x209/0x4f0 [ 167.449767][ T3572] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 167.455754][ T3572] ? __x64_sys_getdents64+0x80/0x80 [ 167.460951][ T3572] ? filldir+0x720/0x720 [ 167.465199][ T3572] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.471179][ T3572] ? lockdep_hardirqs_on+0x94/0x130 [ 167.476468][ T3572] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.482447][ T3572] do_syscall_64+0x3b/0xb0 [ 167.486860][ T3572] ? clear_bhb_loop+0x15/0x70 [ 167.491531][ T3572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.497421][ T3572] RIP: 0033:0x7f82cccbd093 [ 167.501833][ T3572] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 167.521433][ T3572] RSP: 002b:00007ffed6b1e038 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 167.529930][ T3572] RAX: ffffffffffffffda RBX: 0000555573fe7600 RCX: 00007f82cccbd093 [ 167.537897][ T3572] RDX: 0000000000008000 RSI: 0000555573fe7600 RDI: 0000000000000005 [ 167.545860][ T3572] RBP: 0000555573fe75d4 R08: 0000000000000000 R09: 0000000000000000 [ 167.553825][ T3572] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 167.561792][ T3572] R13: 0000000000000010 R14: 0000555573fe75d0 R15: 00007ffed6b202e0 [ 167.569890][ T3572] [ 167.579949][ T3572] F2FS-fs (loop2): access invalid blkaddr:2816 [ 167.586283][ T3572] CPU: 0 PID: 3572 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 167.594627][ T3572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 167.604792][ T3572] Call Trace: [ 167.608083][ T3572] [ 167.611012][ T3572] dump_stack_lvl+0x1e3/0x2d0 [ 167.615697][ T3572] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 167.621447][ T3572] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 167.627534][ T3572] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 167.633133][ T3572] f2fs_map_blocks+0x159a/0x3720 [ 167.638463][ T3572] ? f2fs_force_buffered_io+0x630/0x630 [ 167.644053][ T3572] ? unlock_page+0x188/0x200 [ 167.649068][ T3572] f2fs_mpage_readpages+0xe98/0x27c0 [ 167.654502][ T3572] ? dquot_release_reservation_block+0x90/0x90 [ 167.661225][ T3572] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 167.667795][ T3572] ? f2fs_readahead+0x16e/0x310 [ 167.672681][ T3572] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 167.678441][ T3572] read_pages+0x159/0x8e0 [ 167.683013][ T3572] ? page_cache_ra_unbounded+0x930/0x930 [ 167.689143][ T3572] ? add_to_page_cache_locked+0x40/0x40 [ 167.694834][ T3572] ? down_read+0x1b3/0x2e0 [ 167.699419][ T3572] page_cache_ra_unbounded+0x7b0/0x930 [ 167.704923][ T3572] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 167.711689][ T3572] ? blk_cgroup_congested+0x30c/0x390 [ 167.717277][ T3572] f2fs_readdir+0x546/0xef0 [ 167.721922][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.727162][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.732400][ T3572] ? iterate_dir+0x10a/0x570 [ 167.737109][ T3572] ? fsnotify_perm+0x442/0x590 [ 167.742096][ T3572] iterate_dir+0x224/0x570 [ 167.747005][ T3572] ? f2fs_fill_dentries+0xd60/0xd60 [ 167.752243][ T3572] __se_sys_getdents64+0x209/0x4f0 [ 167.757537][ T3572] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 167.763620][ T3572] ? __x64_sys_getdents64+0x80/0x80 [ 167.768874][ T3572] ? filldir+0x720/0x720 [ 167.773124][ T3572] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.779122][ T3572] ? lockdep_hardirqs_on+0x94/0x130 [ 167.784362][ T3572] ? syscall_enter_from_user_mode+0x2e/0x240 [ 167.790534][ T3572] do_syscall_64+0x3b/0xb0 [ 167.795040][ T3572] ? clear_bhb_loop+0x15/0x70 [ 167.799717][ T3572] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.805836][ T3572] RIP: 0033:0x7f82cccbd093 [ 167.810257][ T3572] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 167.830333][ T3572] RSP: 002b:00007ffed6b1e038 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 167.839215][ T3572] RAX: ffffffffffffffda RBX: 0000555573fe7600 RCX: 00007f82cccbd093 [ 167.847188][ T3572] RDX: 0000000000008000 RSI: 0000555573fe7600 RDI: 0000000000000005 [ 167.855351][ T3572] RBP: 0000555573fe75d4 R08: 0000000000000000 R09: 0000000000000000 [ 167.863711][ T3572] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 167.872188][ T3572] R13: 0000000000000010 R14: 0000555573fe75d0 R15: 00007ffed6b202e0 [ 167.880476][ T3572] [ 167.887097][ T3572] attempt to access beyond end of device [ 167.887097][ T3572] loop2: rw=0, want=45072, limit=40427 [ 168.013996][ T4633] device bond0 entered promiscuous mode [ 168.029541][ T4633] device bond_slave_0 entered promiscuous mode [ 168.038725][ T4633] device bond_slave_1 entered promiscuous mode [ 168.115814][ T144] attempt to access beyond end of device [ 168.115814][ T144] loop2: rw=1, want=45224, limit=40427 [ 168.165653][ T144] attempt to access beyond end of device [ 168.165653][ T144] loop2: rw=2049, want=40992, limit=40427 [ 168.411919][ T3617] Bluetooth: hci0: command 0x0409 tx timeout [ 171.351200][ T4656] syz.1.228 uses obsolete (PF_INET,SOCK_PACKET) [ 171.362293][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 172.381182][ T4584] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.450990][ T4584] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.477179][ T4584] device bridge_slave_0 entered promiscuous mode [ 172.527805][ T4584] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.681702][ T4584] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.851593][ T4584] device bridge_slave_1 entered promiscuous mode [ 174.438418][ T4133] Bluetooth: hci0: command 0x040f tx timeout [ 174.545006][ T4584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.626108][ T4584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.457617][ T4688] dlm: no locking on control device [ 176.033332][ T4584] team0: Port device team_slave_0 added [ 176.064576][ T4690] device bond0 entered promiscuous mode [ 176.081925][ T4690] device bond_slave_0 entered promiscuous mode [ 176.096725][ T4690] device bond_slave_1 entered promiscuous mode [ 176.192939][ T4584] team0: Port device team_slave_1 added [ 176.567076][ T4673] loop4: detected capacity change from 0 to 40427 [ 176.638000][ T4673] F2FS-fs (loop4): invalid crc value [ 176.672848][ T4673] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 176.722607][ T4133] Bluetooth: hci0: command 0x0419 tx timeout [ 176.907049][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 177.041315][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.106027][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.132436][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.237812][ T4584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.298398][ T4584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.315224][ T4584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.361202][ T4584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.390612][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 177.439346][ T4726] binder: 4723:4726 ioctl 4018620d 0 returned -22 [ 177.518811][ T4726] kAFS: unparsable volume name [ 177.585824][ T4721] team1: Mode "" not found [ 177.794374][ T4584] device hsr_slave_0 entered promiscuous mode [ 177.812142][ T4584] device hsr_slave_1 entered promiscuous mode [ 178.252263][ T9] device hsr_slave_0 left promiscuous mode [ 178.294280][ T9] device hsr_slave_1 left promiscuous mode [ 178.653621][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.663897][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.692156][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.710280][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.077975][ T4133] Bluetooth: hci3: command 0x0409 tx timeout [ 179.544680][ T9] device bridge_slave_1 left promiscuous mode [ 179.581128][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.612393][ T9] device bridge_slave_0 left promiscuous mode [ 179.636777][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.692505][ T9] device hsr_slave_0 left promiscuous mode [ 179.699472][ T9] device hsr_slave_1 left promiscuous mode [ 179.715314][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.723928][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.795594][ T4747] dlm: no locking on control device [ 179.823201][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.920766][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.099402][ T9] device team0 left promiscuous mode [ 180.194570][ T9] device team_slave_0 left promiscuous mode [ 180.343621][ T9] device team_slave_1 left promiscuous mode [ 180.459885][ T9] device virt_wifi0 left promiscuous mode [ 180.564147][ T4750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'. [ 180.576308][ T9] bridge0: port 3(team0) entered disabled state [ 180.609993][ T4750] x_tables: ip_tables: udp match: only valid for protocol 17 [ 180.628259][ T9] device bridge_slave_1 left promiscuous mode [ 180.634943][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.686876][ T9] device bridge_slave_0 left promiscuous mode [ 180.693324][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.735748][ T9] device veth1_macvtap left promiscuous mode [ 180.747500][ T9] device veth0_macvtap left promiscuous mode [ 180.756053][ T9] device veth1_vlan left promiscuous mode [ 180.763116][ T9] device veth0_vlan left promiscuous mode [ 180.906026][ T4133] Bluetooth: hci2: command 0x0406 tx timeout [ 180.927843][ T9] device veth1_macvtap left promiscuous mode [ 180.955153][ T9] device veth0_macvtap left promiscuous mode [ 180.990191][ T9] device veth1_vlan left promiscuous mode [ 181.026493][ T9] device veth0_vlan left promiscuous mode [ 181.551440][ T4133] Bluetooth: hci3: command 0x041b tx timeout [ 182.025547][ T4752] loop4: detected capacity change from 0 to 40427 [ 182.135695][ T4752] F2FS-fs (loop4): invalid crc value [ 182.175050][ T4752] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.282333][ T4752] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 182.345671][ T9] team0 (unregistering): Port device team_slave_1 removed [ 182.431589][ T4773] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 182.526233][ T9] team0 (unregistering): Port device team_slave_0 removed [ 182.553506][ T4774] overlayfs: failed to resolve './file2': -2 [ 182.850257][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.166718][ T4378] attempt to access beyond end of device [ 183.166718][ T4378] loop4: rw=2049, want=45128, limit=40427 [ 183.183052][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.362631][ T9] bond0 (unregistering): Released all slaves [ 183.378919][ T4777] binder: 4775:4777 ioctl 4018620d 0 returned -22 [ 183.567368][ T4777] kAFS: unparsable volume name [ 183.636757][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 183.691099][ T9] team0 (unregistering): Port device virt_wifi0 removed [ 183.892511][ T9] team0 (unregistering): Port device team_slave_1 removed [ 183.955639][ T9] team0 (unregistering): Port device team_slave_0 removed [ 184.013141][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.075587][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.283172][ T4781] binder: 4780:4781 ioctl c018620c 0 returned -14 [ 184.561879][ T9] bond0 (unregistering): Released all slaves [ 185.472526][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 185.661123][ T4805] dlm: no locking on control device [ 186.360524][ T1075] Bluetooth: hci3: command 0x0419 tx timeout [ 187.588437][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.595540][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.625668][ T4707] device bridge_slave_0 entered promiscuous mode [ 187.713321][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.726522][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.734760][ T4707] device bridge_slave_1 entered promiscuous mode [ 187.873154][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.904086][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.021189][ T4707] team0: Port device team_slave_0 added [ 188.051768][ T4707] team0: Port device team_slave_1 added [ 188.133570][ T4584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.152907][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.162459][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.188414][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.225513][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.247995][ T4584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.330219][ T4825] loop3: detected capacity change from 0 to 40427 [ 188.341686][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.357027][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.505148][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.213791][ T4584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.251098][ T4825] F2FS-fs (loop3): invalid crc value [ 189.297392][ T4584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.325239][ T4707] device hsr_slave_0 entered promiscuous mode [ 189.354496][ T4707] device hsr_slave_1 entered promiscuous mode [ 189.367966][ T4825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.385462][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.404635][ T4707] Cannot create hsr debugfs directory [ 189.635786][ T4825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.815518][ T4825] F2FS-fs (loop3) : inject evict_inode fail in f2fs_evict_inode of evict+0x529/0x930 [ 189.964269][ T4707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.971966][ T3800] F2FS-fs (loop3): access invalid blkaddr:2816 [ 190.022856][ T4584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.027878][ T3800] CPU: 1 PID: 3800 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 190.038319][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 190.049826][ T3800] Call Trace: [ 190.053217][ T3800] [ 190.056483][ T3800] dump_stack_lvl+0x1e3/0x2d0 [ 190.061296][ T3800] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 190.067311][ T3800] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 190.073274][ T3800] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 190.078318][ T4584] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.078954][ T3800] f2fs_map_blocks+0x159a/0x3720 [ 190.090687][ T3800] ? f2fs_force_buffered_io+0x630/0x630 [ 190.096338][ T3800] f2fs_mpage_readpages+0xe98/0x27c0 [ 190.099128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.102380][ T3800] ? dquot_release_reservation_block+0x90/0x90 [ 190.111406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.116181][ T3800] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 190.129589][ T3800] ? f2fs_readahead+0x16e/0x310 [ 190.131359][ T4860] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 190.134473][ T3800] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 190.148109][ T3800] read_pages+0x159/0x8e0 [ 190.152481][ T3800] ? page_cache_ra_unbounded+0x930/0x930 [ 190.158242][ T3800] ? add_to_page_cache_locked+0x40/0x40 [ 190.163918][ T3800] ? down_read+0x1b3/0x2e0 [ 190.168370][ T3800] page_cache_ra_unbounded+0x7b0/0x930 [ 190.174138][ T3800] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 190.174833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.180750][ T3800] ? blk_cgroup_congested+0x30c/0x390 [ 190.180787][ T3800] f2fs_readdir+0x546/0xef0 [ 190.180832][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.180868][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.180900][ T3800] ? iterate_dir+0x10a/0x570 [ 190.180923][ T3800] ? fsnotify_perm+0x442/0x590 [ 190.191549][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.194725][ T3800] iterate_dir+0x224/0x570 [ 190.194757][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.202858][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.204610][ T3800] __se_sys_getdents64+0x209/0x4f0 [ 190.209904][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.214396][ T3800] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 190.240270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.244269][ T3800] ? __x64_sys_getdents64+0x80/0x80 [ 190.244304][ T3800] ? filldir+0x720/0x720 [ 190.264846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.270849][ T3800] ? syscall_enter_from_user_mode+0x2e/0x240 [ 190.270892][ T3800] ? lockdep_hardirqs_on+0x94/0x130 [ 190.270917][ T3800] ? syscall_enter_from_user_mode+0x2e/0x240 [ 190.270944][ T3800] do_syscall_64+0x3b/0xb0 [ 190.270966][ T3800] ? clear_bhb_loop+0x15/0x70 [ 190.293412][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.294839][ T3800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.294884][ T3800] RIP: 0033:0x7fa992b65093 [ 190.300202][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.306204][ T3800] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 190.341749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.359858][ T3800] RSP: 002b:00007ffe8cbe6238 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 190.359895][ T3800] RAX: ffffffffffffffda RBX: 000055555814a600 RCX: 00007fa992b65093 [ 190.359912][ T3800] RDX: 0000000000008000 RSI: 000055555814a600 RDI: 0000000000000005 [ 190.359926][ T3800] RBP: 000055555814a5d4 R08: 0000000000000000 R09: 0000000000000000 [ 190.359939][ T3800] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 190.359953][ T3800] R13: 0000000000000010 R14: 000055555814a5d0 R15: 00007ffe8cbe84e0 [ 190.359985][ T3800] [ 190.435568][ T3800] F2FS-fs (loop3): access invalid blkaddr:2816 [ 190.448435][ T3800] CPU: 0 PID: 3800 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 190.457067][ T3800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 190.467319][ T3800] Call Trace: [ 190.470618][ T3800] [ 190.473561][ T3800] dump_stack_lvl+0x1e3/0x2d0 [ 190.478260][ T3800] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 190.483904][ T3800] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 190.489735][ T3800] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 190.495130][ T3800] f2fs_map_blocks+0x159a/0x3720 [ 190.500320][ T3800] ? f2fs_force_buffered_io+0x630/0x630 [ 190.505897][ T3800] ? unlock_page+0x188/0x200 [ 190.510507][ T3800] f2fs_mpage_readpages+0xe98/0x27c0 [ 190.515850][ T3800] ? dquot_release_reservation_block+0x90/0x90 [ 190.522058][ T3800] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 190.528240][ T3800] ? f2fs_readahead+0x16e/0x310 [ 190.533099][ T3800] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 190.538831][ T3800] read_pages+0x159/0x8e0 [ 190.543183][ T3800] ? page_cache_ra_unbounded+0x930/0x930 [ 190.548836][ T3800] ? add_to_page_cache_locked+0x40/0x40 [ 190.554496][ T3800] ? down_read+0x1b3/0x2e0 [ 190.559039][ T3800] page_cache_ra_unbounded+0x7b0/0x930 [ 190.564542][ T3800] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 190.571074][ T3800] ? blk_cgroup_congested+0x30c/0x390 [ 190.576472][ T3800] f2fs_readdir+0x546/0xef0 [ 190.581013][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.586249][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.591464][ T3800] ? iterate_dir+0x10a/0x570 [ 190.596075][ T3800] ? fsnotify_perm+0x442/0x590 [ 190.600858][ T3800] iterate_dir+0x224/0x570 [ 190.605374][ T3800] ? f2fs_fill_dentries+0xd60/0xd60 [ 190.610587][ T3800] __se_sys_getdents64+0x209/0x4f0 [ 190.615714][ T3800] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 190.621704][ T3800] ? __x64_sys_getdents64+0x80/0x80 [ 190.626913][ T3800] ? filldir+0x720/0x720 [ 190.631212][ T3800] ? syscall_enter_from_user_mode+0x2e/0x240 [ 190.637209][ T3800] ? lockdep_hardirqs_on+0x94/0x130 [ 190.642426][ T3800] ? syscall_enter_from_user_mode+0x2e/0x240 [ 190.648426][ T3800] do_syscall_64+0x3b/0xb0 [ 190.652864][ T3800] ? clear_bhb_loop+0x15/0x70 [ 190.656011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.657570][ T3800] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.657603][ T3800] RIP: 0033:0x7fa992b65093 [ 190.657623][ T3800] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 190.696010][ T3800] RSP: 002b:00007ffe8cbe6238 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 190.704465][ T3800] RAX: ffffffffffffffda RBX: 000055555814a600 RCX: 00007fa992b65093 [ 190.707874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.712540][ T3800] RDX: 0000000000008000 RSI: 000055555814a600 RDI: 0000000000000005 [ 190.728418][ T3800] RBP: 000055555814a5d4 R08: 0000000000000000 R09: 0000000000000000 [ 190.736409][ T3800] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 190.744572][ T3800] R13: 0000000000000010 R14: 000055555814a5d0 R15: 00007ffe8cbe84e0 [ 190.752586][ T3800] [ 190.801881][ T3800] attempt to access beyond end of device [ 190.801881][ T3800] loop3: rw=0, want=45072, limit=40427 [ 190.823403][ T4707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.899005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.949870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.961785][ T154] attempt to access beyond end of device [ 190.961785][ T154] loop3: rw=1, want=45224, limit=40427 [ 190.977761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.007578][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.028254][ T154] attempt to access beyond end of device [ 191.028254][ T154] loop3: rw=2049, want=41000, limit=40427 [ 191.054389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.085576][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.189558][ T4707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.253278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.275080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.297521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.344762][ T3800] bridge0: port 3(syz_tun) entered disabled state [ 191.369589][ T3800] device syz_tun left promiscuous mode [ 191.375230][ T3800] bridge0: port 3(syz_tun) entered disabled state [ 191.429757][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.455809][ T4707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.791727][ T4707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.830147][ T4707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.886690][ T4707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.931263][ T4584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.947757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.955397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.988829][ T4707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.169380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.187572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.224919][ T4584] device veth0_vlan entered promiscuous mode [ 192.299052][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.309387][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.370007][ T4584] device veth1_vlan entered promiscuous mode [ 192.401405][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.426906][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.448726][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.554462][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.776693][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.823199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 193.307729][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.494599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 193.545146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.615564][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.622745][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.651540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.687950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.710449][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.717678][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.749023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.788577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.820835][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 193.852161][ T4584] device veth0_macvtap entered promiscuous mode [ 193.915490][ T4584] device veth1_macvtap entered promiscuous mode [ 194.021187][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.087786][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.119794][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126112][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.187796][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.236462][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.286458][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.315698][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.337392][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.366490][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.376331][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.406483][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.457769][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.489975][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.507899][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.551296][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.577597][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.605692][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.617547][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.749219][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.757139][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 194.786107][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.823806][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.851181][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.882526][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.895449][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.916304][ T4584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.931969][ T4584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.958193][ T4584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.996708][ T1290] Bluetooth: hci0: command 0x0401 tx timeout [ 195.005633][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.107046][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.156552][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 195.230011][ T4584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.276527][ T4584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.285552][ T4584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.306488][ T4584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.360170][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.427237][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.590224][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.607306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.643914][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.672965][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.742167][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.784028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.110985][ T4900] chnl_net:caif_netlink_parms(): no params data found [ 196.193987][ T4911] chnl_net:caif_netlink_parms(): no params data found [ 196.219613][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.246558][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.273968][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.447346][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.454811][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.462633][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.495750][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.570859][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.604188][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.771780][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.794445][ T4954] netlink: 'syz.0.211': attribute type 1 has an invalid length. [ 196.803244][ T4900] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.819398][ T4900] device bridge_slave_0 entered promiscuous mode [ 196.825874][ T4954] netlink: 68 bytes leftover after parsing attributes in process `syz.0.211'. [ 196.836578][ T3612] Bluetooth: hci1: command 0x041b tx timeout [ 196.852968][ T4911] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.866556][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.874862][ T4911] device bridge_slave_0 entered promiscuous mode [ 196.938959][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.969581][ T4900] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.103992][ T4900] device bridge_slave_1 entered promiscuous mode [ 197.136764][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.154098][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.189159][ T4911] device bridge_slave_1 entered promiscuous mode [ 197.242756][ T1290] Bluetooth: hci4: command 0x041b tx timeout [ 197.881306][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 197.907421][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.108966][ T4900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.145212][ T4900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.186816][ T4911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.320185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.350731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.457269][ T4707] device veth0_vlan entered promiscuous mode [ 198.466247][ T4911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.557928][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.576757][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.731496][ T4707] device veth1_vlan entered promiscuous mode [ 198.766311][ T4900] team0: Port device team_slave_0 added [ 198.790990][ T4900] team0: Port device team_slave_1 added [ 199.006204][ T1290] Bluetooth: hci1: command 0x040f tx timeout [ 199.229637][ T4900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.635599][ T4900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.727001][ T4900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.759060][ T4900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.766095][ T4900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.876551][ T3617] Bluetooth: hci4: command 0x040f tx timeout [ 199.893345][ T4900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.939169][ T4911] team0: Port device team_slave_0 added [ 199.945731][ T4964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 200.028706][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.047090][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.250792][ T4911] team0: Port device team_slave_1 added [ 200.413130][ T4707] device veth0_macvtap entered promiscuous mode [ 200.611199][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.626318][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.657171][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.713189][ T4707] device veth1_macvtap entered promiscuous mode [ 200.992575][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.010194][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.051875][ T4973] Invalid ELF header magic: != ELF [ 201.066470][ T4911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.078259][ T1290] Bluetooth: hci1: command 0x0419 tx timeout [ 201.100412][ T4911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.708941][ T26] audit: type=1804 audit(1726924758.966:13): pid=4973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.280" name="/newroot/6/bus/bus" dev="overlay" ino=64 res=1 errno=0 [ 201.710714][ T4911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.797769][ T4911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.984048][ T3617] Bluetooth: hci4: command 0x0419 tx timeout [ 202.310462][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.397376][ T9] device hsr_slave_0 left promiscuous mode [ 202.422747][ T9] device hsr_slave_1 left promiscuous mode [ 202.446652][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.471546][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.917848][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.942362][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.971635][ T9] device team0 left promiscuous mode [ 202.983711][ T9] device team_slave_0 left promiscuous mode [ 203.005037][ T9] device team_slave_1 left promiscuous mode [ 203.037777][ T9] bridge0: port 3(team0) entered disabled state [ 203.061839][ T9] device bridge_slave_1 left promiscuous mode [ 203.077181][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.096975][ T9] device bridge_slave_0 left promiscuous mode [ 203.104033][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.132583][ T9] device veth1_macvtap left promiscuous mode [ 203.151119][ T9] device veth0_macvtap left promiscuous mode [ 203.159271][ T9] device veth1_vlan left promiscuous mode [ 203.165161][ T9] device veth0_vlan left promiscuous mode [ 203.591056][ T9] team0 (unregistering): Port device team_slave_1 removed [ 203.613376][ T9] team0 (unregistering): Port device team_slave_0 removed [ 203.636191][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.682270][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.829272][ T9] bond0 (unregistering): Released all slaves [ 203.944027][ T4900] device hsr_slave_0 entered promiscuous mode [ 203.962681][ T4900] device hsr_slave_1 entered promiscuous mode [ 203.980554][ T4900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.996294][ T4900] Cannot create hsr debugfs directory [ 204.025091][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.035868][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.046282][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.056861][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.066906][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.078566][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.092327][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.110670][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.151625][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.555492][ T4911] device hsr_slave_0 entered promiscuous mode [ 204.572870][ T4911] device hsr_slave_1 entered promiscuous mode [ 204.583326][ T4911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.735233][ T4911] Cannot create hsr debugfs directory [ 204.854055][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.879635][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.914375][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.934436][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.952426][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.966988][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.985516][ T4707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.997190][ T4707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.023835][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.054372][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.065609][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.087922][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.107039][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.183177][ T4707] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.204046][ T4707] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.216443][ T4707] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.225526][ T4707] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.368588][ T4911] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.393668][ T4992] loop4: detected capacity change from 0 to 40427 [ 205.495256][ T4992] F2FS-fs (loop4): invalid crc value [ 205.534519][ T4911] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.561925][ T4992] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.671032][ T4911] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.715469][ T3973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.746703][ T4992] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.756689][ T3973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.779453][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.840012][ T4911] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.868381][ T4992] F2FS-fs (loop4) : inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfb/0x580 [ 205.891674][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.932499][ T4992] overlayfs: failed to create directory ./file0/index (errno: 3); mounting read-only [ 205.955196][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.996538][ T4992] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 206.086162][ T4900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.101673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.127835][ T4378] F2FS-fs (loop4): access invalid blkaddr:2816 [ 206.147854][ T4378] CPU: 1 PID: 4378 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 206.156239][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.167102][ T4378] Call Trace: [ 206.170397][ T4378] [ 206.173437][ T4378] dump_stack_lvl+0x1e3/0x2d0 [ 206.178144][ T4378] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 206.183944][ T4378] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 206.189778][ T4378] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 206.195180][ T4378] f2fs_map_blocks+0x159a/0x3720 [ 206.200168][ T4378] ? f2fs_force_buffered_io+0x630/0x630 [ 206.205756][ T4378] f2fs_mpage_readpages+0xe98/0x27c0 [ 206.211175][ T4378] ? dquot_release_reservation_block+0x90/0x90 [ 206.217411][ T4378] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 206.223843][ T4378] ? f2fs_readahead+0x16e/0x310 [ 206.229357][ T4378] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 206.235758][ T4378] read_pages+0x159/0x8e0 [ 206.240306][ T4378] ? page_cache_ra_unbounded+0x930/0x930 [ 206.246087][ T4378] ? add_to_page_cache_locked+0x40/0x40 [ 206.251709][ T4378] ? down_read+0x1b3/0x2e0 [ 206.256333][ T4378] page_cache_ra_unbounded+0x7b0/0x930 [ 206.262001][ T4378] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 206.268537][ T4378] ? blk_cgroup_congested+0x30c/0x390 [ 206.274030][ T4378] f2fs_readdir+0x546/0xef0 [ 206.278598][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.283936][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.289177][ T4378] ? iterate_dir+0x10a/0x570 [ 206.293797][ T4378] ? fsnotify_perm+0x442/0x590 [ 206.298682][ T4378] iterate_dir+0x224/0x570 [ 206.303203][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.308435][ T4378] __se_sys_getdents64+0x209/0x4f0 [ 206.313568][ T4378] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 206.319661][ T4378] ? __x64_sys_getdents64+0x80/0x80 [ 206.325088][ T4378] ? filldir+0x720/0x720 [ 206.329533][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 206.335898][ T4378] ? lockdep_hardirqs_on+0x94/0x130 [ 206.341127][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 206.347228][ T4378] do_syscall_64+0x3b/0xb0 [ 206.351661][ T4378] ? clear_bhb_loop+0x15/0x70 [ 206.356451][ T4378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.362533][ T4378] RIP: 0033:0x7ff881b3e093 [ 206.367141][ T4378] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 206.386862][ T4378] RSP: 002b:00007ffcfce06cc8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 206.395486][ T4378] RAX: ffffffffffffffda RBX: 000055555e4cc600 RCX: 00007ff881b3e093 [ 206.403559][ T4378] RDX: 0000000000008000 RSI: 000055555e4cc600 RDI: 0000000000000005 [ 206.411904][ T4378] RBP: 000055555e4cc5d4 R08: 0000000000000000 R09: 0000000000000000 [ 206.419903][ T4378] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 206.427988][ T4378] R13: 0000000000000010 R14: 000055555e4cc5d0 R15: 00007ffcfce08f70 [ 206.436194][ T4378] [ 206.456824][ T4378] F2FS-fs (loop4): access invalid blkaddr:2816 [ 206.463125][ T4378] CPU: 1 PID: 4378 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 206.471482][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.481673][ T4378] Call Trace: [ 206.485072][ T4378] [ 206.488011][ T4378] dump_stack_lvl+0x1e3/0x2d0 [ 206.492743][ T4378] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 206.498397][ T4378] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 206.504248][ T4378] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 206.509656][ T4378] f2fs_map_blocks+0x159a/0x3720 [ 206.514653][ T4378] ? f2fs_force_buffered_io+0x630/0x630 [ 206.520233][ T4378] ? unlock_page+0x188/0x200 [ 206.524964][ T4378] f2fs_mpage_readpages+0xe98/0x27c0 [ 206.530489][ T4378] ? dquot_release_reservation_block+0x90/0x90 [ 206.536780][ T4378] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 206.542970][ T4378] ? f2fs_readahead+0x16e/0x310 [ 206.547834][ T4378] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 206.553582][ T4378] read_pages+0x159/0x8e0 [ 206.557936][ T4378] ? page_cache_ra_unbounded+0x930/0x930 [ 206.563597][ T4378] ? add_to_page_cache_locked+0x40/0x40 [ 206.569165][ T4378] ? down_read+0x1b3/0x2e0 [ 206.573617][ T4378] page_cache_ra_unbounded+0x7b0/0x930 [ 206.579109][ T4378] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 206.585626][ T4378] ? blk_cgroup_congested+0x30c/0x390 [ 206.591024][ T4378] f2fs_readdir+0x546/0xef0 [ 206.595565][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.600798][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.606063][ T4378] ? iterate_dir+0x10a/0x570 [ 206.610668][ T4378] ? fsnotify_perm+0x442/0x590 [ 206.615457][ T4378] iterate_dir+0x224/0x570 [ 206.620694][ T4378] ? f2fs_fill_dentries+0xd60/0xd60 [ 206.625929][ T4378] __se_sys_getdents64+0x209/0x4f0 [ 206.631080][ T4378] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 206.637175][ T4378] ? __x64_sys_getdents64+0x80/0x80 [ 206.642492][ T4378] ? filldir+0x720/0x720 [ 206.646772][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 206.652769][ T4378] ? lockdep_hardirqs_on+0x94/0x130 [ 206.658619][ T4378] ? syscall_enter_from_user_mode+0x2e/0x240 [ 206.664643][ T4378] do_syscall_64+0x3b/0xb0 [ 206.669354][ T4378] ? clear_bhb_loop+0x15/0x70 [ 206.674080][ T4378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.680429][ T4378] RIP: 0033:0x7ff881b3e093 [ 206.684870][ T4378] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 206.704492][ T4378] RSP: 002b:00007ffcfce06cc8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 206.712927][ T4378] RAX: ffffffffffffffda RBX: 000055555e4cc600 RCX: 00007ff881b3e093 [ 206.721001][ T4378] RDX: 0000000000008000 RSI: 000055555e4cc600 RDI: 0000000000000005 [ 206.728990][ T4378] RBP: 000055555e4cc5d4 R08: 0000000000000000 R09: 0000000000000000 [ 206.736988][ T4378] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 206.745094][ T4378] R13: 0000000000000010 R14: 000055555e4cc5d0 R15: 00007ffcfce08f70 [ 206.753108][ T4378] [ 206.783109][ T4378] attempt to access beyond end of device [ 206.783109][ T4378] loop4: rw=0, want=45072, limit=40427 [ 206.787457][ T4900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.976304][ T4900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.038158][ T4378] attempt to access beyond end of device [ 208.038158][ T4378] loop4: rw=2049, want=45120, limit=40427 [ 208.221167][ T4900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.077978][ T1075] Bluetooth: hci0: command 0x0401 tx timeout [ 209.887950][ T4911] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.919005][ T4911] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.064476][ T4911] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.169063][ T4911] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.254671][ T4900] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.299571][ T4900] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.330220][ T4900] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 210.368359][ T4900] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.746801][ T4900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.759883][ T4911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.846711][ T4900] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.867966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.887118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.909368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 210.919336][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.949148][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.959021][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.990935][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.998199][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.050381][ T4911] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.080146][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.129228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.207060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.267817][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.274945][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.310895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.333930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.360740][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.367891][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.407666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.504325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.523411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.537723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.558382][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.565483][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.576220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.587903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.597856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.613078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.622946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.632987][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.644620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.664177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.674333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.685065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.697494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.714776][ T4911] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.755388][ T4911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.779469][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.788468][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.800644][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.813373][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.822301][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.831074][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.858279][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.907547][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.934899][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.948395][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.957598][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.980023][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.168679][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.197199][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.211833][ T4911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.297799][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.317098][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.371480][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.427454][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.435026][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.447367][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.461333][ T4900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.479521][ T4911] device veth0_vlan entered promiscuous mode [ 212.508218][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.516812][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.575046][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.634338][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.655132][ T4911] device veth1_vlan entered promiscuous mode [ 212.670622][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 212.697844][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.717307][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.784518][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.805025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 212.817672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.837658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.849919][ T4911] device veth0_macvtap entered promiscuous mode [ 212.892004][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.958661][ T4911] device veth1_macvtap entered promiscuous mode [ 213.002607][ T4900] device veth0_vlan entered promiscuous mode [ 213.045396][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.057928][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.077735][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.087683][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.109902][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.120002][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.153827][ T4900] device veth1_vlan entered promiscuous mode [ 213.170994][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.197168][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.208276][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.226541][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.238187][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.249150][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.266421][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.286485][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.328067][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.346488][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.376762][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.407727][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.429750][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.452855][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.466641][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.486735][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.506776][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.517433][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.528839][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.539324][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.551575][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.562397][ T4911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.573355][ T4911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.617217][ T4911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.631724][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.647458][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.688042][ T4911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.714532][ T4911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.736605][ T4911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.772200][ T4911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.858501][ T4900] device veth0_macvtap entered promiscuous mode [ 213.989324][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.008565][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.027497][ T3823] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.067320][ T4900] device veth1_macvtap entered promiscuous mode [ 214.327334][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.357039][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.376432][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.396408][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.415730][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.436406][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.466492][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.486401][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.506412][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.546400][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.556257][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.596403][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.618897][ T4900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.645388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.688313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.728272][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.749597][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.763885][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.776405][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.786245][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.854119][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.896461][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.921336][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.933070][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.943972][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.982513][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.016490][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.052170][ T4900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.082919][ T4900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.121903][ T4900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.221821][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.238834][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.252581][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.285947][ T4900] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.346479][ T4900] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.355462][ T4900] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.381958][ T4900] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.610904][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.406651][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.618678][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.675288][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.710088][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.756787][ T3657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.840939][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.878969][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.901758][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.107723][ T3647] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.051391][ T5072] binder: 5067:5072 ioctl 4018620d 0 returned -22 [ 218.115809][ T9] device hsr_slave_0 left promiscuous mode [ 218.147297][ T9] device hsr_slave_1 left promiscuous mode [ 218.163167][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.175026][ T5072] kAFS: unparsable volume name [ 218.186469][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.216826][ T3647] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 218.227275][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.249039][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.271807][ T9] device bridge_slave_1 left promiscuous mode [ 218.294800][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.316775][ T3647] usb 4-1: config 250 has an invalid descriptor of length 27, skipping remainder of the config [ 219.154431][ T9] device bridge_slave_0 left promiscuous mode [ 219.155304][ T3618] Bluetooth: hci2: command 0x0409 tx timeout [ 219.186629][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.235281][ T9] device veth1_macvtap left promiscuous mode [ 219.246987][ T3647] usb 4-1: config 250 has an invalid descriptor of length 27, skipping remainder of the config [ 219.255084][ T9] device veth0_macvtap left promiscuous mode [ 219.267099][ T9] device veth1_vlan left promiscuous mode [ 219.297550][ T9] device veth0_vlan left promiscuous mode [ 219.967399][ T3647] usb 4-1: config 250 has an invalid descriptor of length 27, skipping remainder of the config [ 220.439139][ T3647] usb 4-1: unable to read config index 3 descriptor/start: -71 [ 220.456409][ T3647] usb 4-1: can't read configurations, error -71 [ 221.640029][ T3617] Bluetooth: hci2: command 0x041b tx timeout [ 222.052497][ T3617] Bluetooth: hci0: command 0x0401 tx timeout [ 223.547467][ T5130] ------------[ cut here ]------------ [ 223.553939][ T5130] WARNING: CPU: 0 PID: 5130 at kernel/cgroup/cgroup.c:1424 cset_cgroup_from_root+0x1c7/0x230 [ 223.564605][ T5130] Modules linked in: [ 223.568516][ T5130] CPU: 0 PID: 5130 Comm: syz.0.307 Not tainted 5.15.167-syzkaller #0 [ 223.577111][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 223.587469][ T5130] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 223.593672][ T5130] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 223.613992][ T5130] RSP: 0018:ffffc900010ef958 EFLAGS: 00010087 [ 223.620085][ T5130] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 223.628334][ T5130] RDX: ffffc9000a4f1000 RSI: 00000000000008ab RDI: 00000000000008ac [ 223.636326][ T5130] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 223.644971][ T5130] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807dd12000 [ 223.653146][ T5130] R13: dffffc0000000000 R14: ffff888077cd4000 R15: ffffffff8c948000 [ 223.661330][ T5130] FS: 00007f11d310a6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 223.670362][ T5130] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.677178][ T5130] CR2: 000000110c2607e7 CR3: 0000000028c46000 CR4: 00000000003506f0 [ 223.685167][ T5130] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 223.693426][ T5130] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 223.701930][ T5130] Call Trace: [ 223.705220][ T5130] [ 223.708189][ T5130] ? __warn+0x15b/0x300 [ 223.712409][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 223.717963][ T5130] ? report_bug+0x1b7/0x2e0 [ 223.722682][ T5130] ? handle_bug+0x3d/0x70 [ 223.727109][ T5130] ? exc_invalid_op+0x16/0x40 [ 223.731895][ T5130] ? asm_exc_invalid_op+0x16/0x20 [ 223.736942][ T5130] ? cset_cgroup_from_root+0x65/0x230 [ 223.742841][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 223.748490][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 223.754045][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 223.759539][ T5130] cgroup_path_ns_locked+0x6c/0xd0 [ 223.765037][ T5130] proc_cpuset_show+0x27d/0x3f0 [ 223.769936][ T5130] proc_single_show+0xf6/0x180 [ 223.774733][ T5130] seq_read_iter+0x43a/0xd10 [ 223.780056][ T5130] seq_read+0x452/0x5c0 [ 223.784326][ T5130] ? seq_open+0x140/0x140 [ 223.788913][ T5130] do_iter_read+0x4c6/0x760 [ 223.793462][ T5130] do_preadv+0x211/0x350 [ 223.797839][ T5130] ? do_writev+0x470/0x470 [ 223.802407][ T5130] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 223.808441][ T5130] ? vtime_user_exit+0x2d1/0x400 [ 223.813715][ T5130] ? syscall_enter_from_user_mode+0x2e/0x240 [ 223.819900][ T5130] ? lockdep_hardirqs_on+0x94/0x130 [ 223.825150][ T5130] ? syscall_enter_from_user_mode+0x2e/0x240 [ 223.831164][ T5130] do_syscall_64+0x3b/0xb0 [ 223.835597][ T5130] ? clear_bhb_loop+0x15/0x70 [ 223.840279][ T5130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.846196][ T5130] RIP: 0033:0x7f11d4cd3ef9 [ 223.850627][ T5130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.870250][ T5130] RSP: 002b:00007f11d310a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 223.879029][ T5130] RAX: ffffffffffffffda RBX: 00007f11d4e8c130 RCX: 00007f11d4cd3ef9 [ 223.887858][ T5130] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000009 [ 223.896747][ T5130] RBP: 00007f11d4d46b76 R08: 0000000000000000 R09: 0000000000000000 [ 223.904821][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.913413][ T5130] R13: 0000000000000000 R14: 00007f11d4e8c130 R15: 00007ffc52c65c38 [ 223.921680][ T5130] [ 223.924713][ T5130] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.932107][ T5130] CPU: 0 PID: 5130 Comm: syz.0.307 Not tainted 5.15.167-syzkaller #0 [ 223.940993][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 223.951353][ T5130] Call Trace: [ 223.954681][ T5130] [ 223.957715][ T5130] dump_stack_lvl+0x1e3/0x2d0 [ 223.962432][ T5130] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 223.968083][ T5130] ? panic+0x860/0x860 [ 223.972166][ T5130] ? cset_cgroup_from_root+0x180/0x230 [ 223.977628][ T5130] ? cset_cgroup_from_root+0x180/0x230 [ 223.983187][ T5130] panic+0x318/0x860 [ 223.987438][ T5130] ? __warn+0x16a/0x300 [ 223.991729][ T5130] ? fb_is_primary_device+0xd0/0xd0 [ 223.997070][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 224.002547][ T5130] __warn+0x2b2/0x300 [ 224.006672][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 224.012171][ T5130] report_bug+0x1b7/0x2e0 [ 224.016519][ T5130] handle_bug+0x3d/0x70 [ 224.020907][ T5130] exc_invalid_op+0x16/0x40 [ 224.025518][ T5130] asm_exc_invalid_op+0x16/0x20 [ 224.030558][ T5130] RIP: 0010:cset_cgroup_from_root+0x1c7/0x230 [ 224.036631][ T5130] Code: 78 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 5d b2 52 00 4d 8b 27 4d 85 e4 75 c7 e8 30 e8 08 00 0f 0b e8 29 e8 08 00 <0f> 0b e9 a4 fe ff ff e8 1d e8 08 00 0f 0b e9 f9 fe ff ff 48 c7 c1 [ 224.056365][ T5130] RSP: 0018:ffffc900010ef958 EFLAGS: 00010087 [ 224.062572][ T5130] RAX: ffffffff81777247 RBX: 0000000000000000 RCX: 0000000000040000 [ 224.070558][ T5130] RDX: ffffc9000a4f1000 RSI: 00000000000008ab RDI: 00000000000008ac [ 224.078802][ T5130] RBP: dffffc0000000000 R08: ffffffff817770e5 R09: 0000000000000003 [ 224.086785][ T5130] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807dd12000 [ 224.094875][ T5130] R13: dffffc0000000000 R14: ffff888077cd4000 R15: ffffffff8c948000 [ 224.103568][ T5130] ? cset_cgroup_from_root+0x65/0x230 [ 224.109206][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 224.114875][ T5130] ? cset_cgroup_from_root+0x1c7/0x230 [ 224.120819][ T5130] cgroup_path_ns_locked+0x6c/0xd0 [ 224.126047][ T5130] proc_cpuset_show+0x27d/0x3f0 [ 224.130945][ T5130] proc_single_show+0xf6/0x180 [ 224.135839][ T5130] seq_read_iter+0x43a/0xd10 [ 224.140495][ T5130] seq_read+0x452/0x5c0 [ 224.144663][ T5130] ? seq_open+0x140/0x140 [ 224.149021][ T5130] do_iter_read+0x4c6/0x760 [ 224.153541][ T5130] do_preadv+0x211/0x350 [ 224.157788][ T5130] ? do_writev+0x470/0x470 [ 224.162220][ T5130] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 224.168750][ T5130] ? vtime_user_exit+0x2d1/0x400 [ 224.173721][ T5130] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.181032][ T5130] ? lockdep_hardirqs_on+0x94/0x130 [ 224.186349][ T5130] ? syscall_enter_from_user_mode+0x2e/0x240 [ 224.192439][ T5130] do_syscall_64+0x3b/0xb0 [ 224.196894][ T5130] ? clear_bhb_loop+0x15/0x70 [ 224.201930][ T5130] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.208014][ T5130] RIP: 0033:0x7f11d4cd3ef9 [ 224.212544][ T5130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.232346][ T5130] RSP: 002b:00007f11d310a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 224.241063][ T5130] RAX: ffffffffffffffda RBX: 00007f11d4e8c130 RCX: 00007f11d4cd3ef9 [ 224.249525][ T5130] RDX: 0000000000000001 RSI: 0000000020000840 RDI: 0000000000000009 [ 224.257843][ T5130] RBP: 00007f11d4d46b76 R08: 0000000000000000 R09: 0000000000000000 [ 224.266215][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.274817][ T5130] R13: 0000000000000000 R14: 00007f11d4e8c130 R15: 00007ffc52c65c38 [ 224.283024][ T5130] [ 224.286153][ T5130] Kernel Offset: disabled [ 224.290760][ T5130] Rebooting in 86400 seconds..