last executing test programs: 5m24.549334459s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 4m58.067207662s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 4m3.881299869s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 2m9.865294913s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 1m30.43296581s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 52.053881389s ago: executing program 4 (id=773): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) 36.277714004s ago: executing program 0 (id=1401): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$eJzs3Am4T+X2OPC13vfdHDJ8k8x7vWvzTYaXJMmQJEOSJCGZE5IkSZLEIVMSkpDxJJlD5nTSMc9D5qSTK0mSkJDk/T+n4e823H/33l/3r9896/M8+znv2nu/a6991vmePTzPOV90HVa9UY0q9ZkZ/h365wH++CURABIAYCAAZAeAAADK5CiTI217Jo2J/9ZBxH9IgxmXuwJxOUn/0zfpf/om/U/fpP/pm/Q/fZP+p2/S//RN+i9EujYr75WypN9F3v//L6f+J5Pl+v/fB/G3q/7RvtL//zb6X9pb+p9uZPi9ldL/9OL3LwHS//RN+p+eBZe7AHGZyec/fZP+C5Gu/envlDecu9zvtGX5FxYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOL/g3P+EgMAP48vd11CCCGEEEIIIYT48/i3LncFQgghhBBCCCGE+M9DUKDBQAAZICMkQCbIDFdAFsgK2SA7xOBKyAFXQU64GnJBbsgDeSEf5IcCEAKBBYYICkIhiMM1UBiuhSJQFIpBcXBQAkrCdVAKrofScAOUgRuhLNwE5aA8VICKcDNUglugMtwKVeA2qArVoDrUgNuhJtwBteBOqA13QR24G+rCPVAP7oX60AAawn3QCO6HxtAEmkIzaA4toOUfzE/K/nvzn4Ee8Cz0hF6QCL2hDzwHfaEf9IcBMBCeh0HwAgyGF2EIDIVh8BIMh5dhBLwCI2EUjIZXYQyMhXEwHibAREiC12ASvA6T4Y37s8JUmAbTYQbMhFnwJsyGOTAX3oJ5MB8WQFKmRbAYlsDbsBTegWR4F5bBe5ACy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abvw3bYATthF+yGPbAXPoB98CHsh48gFT/+F+ef/eV86IaAgAoVGjSYATNgAiZgZsyMWTALZsNsGMMY5sAcmBNzYi7MhXkwD+bDfFgACyAhISNjQSyIcYxjYSyMRbAIFsNi6NBhSSyJpfB6LI2lsQyWwbJYFstheSyPFbEiVsJKWBkrYxWsglWxKlbH6ng73o53YC2shbWxNtbBOlgX62I9rIf1sT42xIbYCBthY2yMTbEpNsfm2BJbYitsha2xNbbFttgO22F7bI8dsAN2xI7YCTthZ+yMXbALdsWu2A2fxqfxGXwGn8VnsRdWVb2xD/bBvtgX++MAHIDP4yB8AV/AF3EIDsVh+BK+hC/jCDyDI3EUjsbRWEmNxXE4HllNxCRMwowwCSfjZJyCU3EqTscZOBNn4SycjXNwDr6F83A+zseFuBAX4xJcgkvxHUzGZFyGZzEFl+MKXImrcDWuwrW4DtfiBtyIG3AzbsatuBXfx/dxB+7AXbgL9+Ae/AA/wA/xQxyCqZiKB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5wDgPJ7HC3gBL+LFtA+/SmOUURlUBpWgElRmlVllUVlUNpVNxVRM5VA5VE6VU+VSuVQelUflU/lUAVVAkSLFKlIFVUEVV3FVWBVWRVQRVUwVU045VVKVVKVUKVValVZl1I2qrLpJlVPlVRtXUVVUlVRbV1ndqqqoKqqqqqaqqxqqhqqpaqpaqpaqrWqrOqqOqqvuUfVUb+yPDVRaZxqpodhYDcOmqplqrlqol/EB1UqNwNaqjWqrHlKjcCS2V61cB/Wo6qjGYSf1uBqPT6guaiJ2VU+pbupp1V09o3qo1q6n6qWmYG/VR03Hvqqf6q8GqNlYTaV1rLp6UQ1RQ9Uw9ZJajC+rEeoVNVKNUqPVq2qMGqvGqfFqgpqoktRrapJ6XU1Wb6gpaqqapqarGWqmmqXeVLPVHDVXvaXmqflqgVqoFqnFaol6Wy1V76hk9a5apt5TKWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qfbVd7VA71S61W+1Re9UHap/6UO1XH6lU9bE6oP6mDqpP1CH1qTqsPlNH1OfqqPpCHVNfquPqK3VCnVSn1NfqtPpGnVFn1Tn1rTqvvlMX1PfqovIKNGqltTY60Bl0Rp2gM+nM+gqdRWfV2XR2HdNX6hz6Kp1TX61z6dw6j8mr8+n8uoAONWmrWUe6oC6k4/oaXVhfq4voorqYLq6dLqFL6ut0KX29Lq1v0GX0jbqsvkmX0+V1BQ/6Zl1J36Ir61t1FX2brqqr6eq6hr5d19R36Fr6Tl1b36Xr6Lt1XX2Prqfv1fV1A91Q36cb6ft1Y91EN9XNdHPdQrfUD+hW+kHdWrfRbfVDup1+WLfXj+gO+lHdUT+mO+nHdWf9hO6in9Rd9VO6m35ad9ff64va6566l07UvXUf/Zzuq/vp/nqAHqif14P0C3qwflEP0UP1MP2SHq5f1iP0K3qkHqVH61f1GD1Wj9Pj9QQ9USfp1/Qk/bqerN/QU/RUPU1P1zP0TN3/p0xz/4n5r//O/ME/HH2r3qbf19v1Dr1T79K79R69V+/V+/Q+vV/v16k6VR/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1t/prfVp/o8/os/qs/laf1+f1hZ++B2DQKKONMYHJYDKaBJPJZDZXmCwmq8lmspuYudLkMFeZnOZqk8vkNnlMXpPP5DcFTGjIWMMmMgVNIRM315jC5lpTxBQ1xUxx40wJU9Jc9z+e/0f1tTQtTSvTyrQ2rU1b09a0M+1Me9PedDAdTEfT0XQynUxn09l0MV1MV9PVdDPdTHfT3fQwPUxP09MkmkTTxzxn+pp+pr8ZYAaa580gM8gMNoPNEDPEDDPDzHAz3IwwI8xIM9KMNqPNGDPGjDPjzAQzwST57GaSmWQmm8lmiplipg3MbmaYGWaWmWVmm9lmrplr5pl5ZoFZYBaZRWaJWWKWmqUm2SSbZWaZSTHLzXKz0qw0q81qs9asNevNerPRbDSbzWaTYraZbWa72W52mp1mt9lt9pq9Zp/ZZ/ab/SbVpJoD5oA5aA6aQ+aQOWwOmyPmiDlqjppj5pg5bo6bE+aEOWVOmdPmtDljzphz5pw5b86bC+aCuWgupt32BSpQgQlMkCHIECQECUHmIHOQJcgSZAuyBbEgFuQIcgQ5g6uDXEHuIE+QN8gX5A8KBGFAgQ04iIKCQaEgHlwTFA6uDYoERYNiQfHABSWCksF1Qang+qB0cENQJrgxKBvcFJQLygcVgorBzUGl4JagcnBrUCW4LagaVAuqBzWC24OawR1BreDOoHZwV1AnuDuoG9wT1AvuDeoHDYKGwX1Bo+D+oHHQJGgaNAuaBy2Cln9qfu/P5H7Q9Qx7hYlh77BP+FzYN+wX9g8HhAPD58NB4Qvh4PDFcEg4NBwWvhQOD18OR4SvhCPDUeHo8NVwTDg2HBeODyeEE8Ok8LVwUvh6ODl8I5wSTg2nBdPDGeHMcFb4Zjg7nBPODd8K54XzwwXhwnBRuDhE/PFuPDl8N1wWvhemhMvDFeHKcFW4OlwTrg3XhevDDeHGcFO4ucygH3cNt4c7wp3hrnB3uCfcG34Q7gs/DPeHH4Wp4cfhgfBv4cHwk/BQ+Gl4OPwsPBJ+Hh4NvwiPhV+Gx8OvwhPhyUwQfh2eDr8Jz4Rnw3Pht+H58LvwQvh9eDH0aTf3aZd3MmQoA2WgBEqgzJSZslAWykbZKEYxykE5KCflpFyUi/JQHspH+agAFaA0TEwFqSDFKU6FqTAVoSJUjIqRI0clqSSVolJUmkpTGSpDZakslSNLFagC3Uw30y10C91Kt9JtdBtVo2pUg2oQYk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpRI2pMjakpNaXm1JxaUktqRa2oNbWmttSW2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTEimR+lAf6kt9qT/1p4E0kAbRIBpMg2kIDaFhNIyG03AaQSNoJI2i0fQqjaGxNI7G0wSaSEmURJNoEk2myTSFptA0mkYzaAbNolk0m2bTXJpL82geLaAFtIgW0RJaQktpKSVTMi2jZZRCKbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaNttJ22007aSbtpN+2lvbSP9tF+2k+plEoH6AAdpIN0iA7RYTpMR+gIHaWjdIyO0XE6TifoBJ2iU3SaTtMZOkPn6Bydp+/oAn1PF8lTgs1kM9srbBab1Waz2e2v4zw2r81n89sCNrS5bO5fxGStLWKL2mK2uHW2hC1pr/tNXM6WtxVsRXuzrWRvsZVtOZsJ/j6uae+wteydtra9y9awt/8irmPvtnXt/baebWLr22a2oW1hG9n7bWPbxDa1zWxz28K2sw/b9vYR28E+ajvax34TL7Xv2HV2vd1gN9p99kN7zn5rj9ov7Hn7ne1pe9mB9nk7yL5gB9sX7RA79JcxgB1tX7Vj7Fg7zo63E+zE38TT7HQ7w860s+ybdrad85t4iX3bzrPJdoFdaBfZxT/EaTUl23ftMvueTbHL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135gt9sddqfdZXfbPT/Eaeex335kU+3H9oj93B60n9hD9pg9bD/7IU47v2P2S3vcfmVP2JP2lP3anrbf2DP27A/nn3buX9vv7UXrLTCyYs2GA87AGTmBM3FmvoKzcFbOxtk5xldyDr6Kc/LVnItzcx7Oy/k4PxfgkIktM0dckAtxnK/hwnwtF+GiXIyLs+MSXJKv41J8PZfmG7gM38hl+SYux+W5Alfkm7kS38KV+VauwrdxVa7G1bkG3841+Q6uxXdybb6L6/DdXJfv4Xp8L9fnBtyQ7+NGfD835ibclJtxc27BLfkBbsUPcmtuw235IW7HD3N7foQ78KPckR/jTvw4d+YnuAs/yV35Ke7GT3N3foZ78LPck3txIvfmPvwc9+V+3J8H8EB+ngfxCzyYX+QhPJSH8Us8nF/mEfwKj+RRPJpf5TE8lsfxeJ7AEzmJX+NJ/DpP5jd4Ck/laTydZ/BMnsVv8myew3P5LZ7H83kBL+RFvJiX8Nu8lN/hZH6Xl/F7nMLLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexu/zdt7BO3kX7+Y9vJc/4H38Ie/njziVP+YD/Dc+yJ/wIf6UD/NnfIQ/56P8BR/jL/k4f8Un+CSf4q/5NH/DZ/gsn+Nv+Tx/xxf4e77IniHCSEU6MlEQZYgyRglRpihzdEWUJcoaZYuyR7HoyihHdFWUM7o6yhXljvJEeaN8Uf6oQBRGFNmIoygqGBWK4tE1UeHo2qhIVDQqFhWPXFQiKhldF5WKro9KRzdEZaIbo7LRTVG5qHxUIaoY3RxVim6JKke3RlWi26KqUbWoelQjuj2qGd0R1YrujGpHd0Wlo7ujutE9Ub3o3qh+1CBqGN0XNYrujxpHTaKmUbOoedQiahk9ELWKHoxaR22ittFDUbvo4ah99EjUIXo06hg9dml70eDHq+mvtidGvSP90xuyO/Wi+OL4kvjb8aXxd+LJ8Xfjy+LvxVPiy+Mr4ivjq+Kr42via+Pr4uvjG+Ib45vim+Nb4lvj3tfICA7THoTBuMBlcBldgsvkMrsrXBaX1WVz2V3MXelyuKtcTne1y+Vyuzwur8vn8rsCLnTkrGMXuYKukIu7a1xhd60r4oq6Yq64c66EK+lauJaupWvlHnStXRvX1j3kHnIPu4fdI+4R96jr6B5zndzjrrN7wnVxT7on3VOum3vadXfPuB7uWdfT9XKJLtH1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXJJLcpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfskt0yt8yluBS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+pS3QF3wB10B90h96k77D5zR9zn7qj7wh1zX7rj7it3wp10p9zX7rT7xp1xZ9059607775zF9z37qLzLin2WmxS7PXY5NgbsSmxqbFpsemxGbGZsVmxN2OzY3Nic2NvxebF5scWxBbGFsUWx5bE3o4tjb0TS469G1sWey+WElseWxFbGVsVWx3zPv/2yBf0hXzcX+ML+2t9EV/UF/PFvfMlfEl/nS/lr/el/Q2+jL/Rl/U3+XK+vK/gm/imvplv7lv4lv4B38o/6Fv7Nr6tf8i38w/79v4R38E/6jv6x3wn/7jv7J/wXfyTvqt/av5PP56+h3/W9/S9fKLv7fv453xf38/39wP8QP+8H+Rf8IP9i36IH+qH+Zf8cP+yH+Ff8SP9KD/av+rH+LF+nB/vJ/iJPsm/5if51/1k/4af4qf6aX66n+Fn+ln+TT/bz/Fz/Vt+np/vF/iFfpFf7Jf4t/1S/45P9u/6Zf49n+KX+xV+pV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mM8J2v8Pv9Lv8br/H7/Uf+H3+Q7/ff+RT/cf+gP+bP+g/8Yf8p/6w/8wf8Z/7o/4Lf8x/6Y/7r/wJf9Kf8l/70/4bf8af9ef8t/68/85f8N/7i/I3a0IIIYQQ/xT9B9t7/8469dNiAKAPAGTdkffwr3NuyvXjuJ/a1zEGAI/26trg56VBg8TExJ/2TdEQFFoIALFL8zPApXg5tIWHoQO0gVK/W18/VQH5V/mDv9uelj9+I0BmgEw/r0uAH+Jf5b/+H+Rv8vav8/+6/vhCgCKFLs1JO9DP8aX8pf9B/j3t/iB/pk+SAFr/3ZwscCm+lL8kPAiPQYdf7CmEEEIIIYQQQvyonzrf7Y+eb9Oez/OZS3MywqX4j57P/0DlP+MchBBCCCGEEEII8f/2xNPdH3mgQ4c2nf+bBxn/GmX8BQYIAH+BMmTw1x9c7t9MQgghhBBCiD/bpZv+y12JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRfv37/yFM/dM7X+5zFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xMAAP//gUVOqg==") r0 = open(&(0x7f0000000800)='./file1\x00', 0x185102, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) 32.460862426s ago: executing program 0 (id=1411): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) fallocate(r0, 0x0, 0x0, 0x404042bbe) 28.464859414s ago: executing program 0 (id=1418): creat(&(0x7f0000000340)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() r2 = getpgrp(0x0) kcmp(r1, r2, 0x0, r0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003ef000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000380)="0f201766b9e309000066b83f46151e66ba1cc889580f302ef4ba6100ed0f0966b90602000066b80100000066ba000000000f300f20c06635000000400f22c066adbaa100ecf9", 0x25}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 27.045380725s ago: executing program 0 (id=1421): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40184810, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x3}) 26.166767726s ago: executing program 0 (id=1424): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002a0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfdef, &(0x7f0000000840)=ANY=[], 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup(r5) getsockname$packet(r6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 24.698838052s ago: executing program 0 (id=1428): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) 11.235661904s ago: executing program 1 (id=1453): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') creat(&(0x7f0000000100)='./bus\x00', 0xe4c68c55c8a9ffa8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) 10.350791685s ago: executing program 2 (id=1458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.958512124s ago: executing program 1 (id=1459): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/199, 0xc7}, 0x8}], 0x1, 0x40010020, 0x0) 8.223150102s ago: executing program 2 (id=1460): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.982782904s ago: executing program 1 (id=1462): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.06984405s ago: executing program 3 (id=1466): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000480)={[], [{@uid_eq}]}, 0x1, 0x75b, &(0x7f0000000800)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) accept$nfc_llcp(r4, 0x0, &(0x7f0000000200)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="80001089", 0x4, 0x0, &(0x7f0000000180)={0xa, 0x0, 0xfffffff7, @local, 0x4}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x69, &(0x7f0000000240)=ANY=[@ANYBLOB="050f6900030a1003000000000000000b100100000000000000004f100041d45dea526b2dd2e399b341d6f18ac718d13567fe7b3788c476d1da553d21503cf6772bc1622a8f6bb05512c3f83392c9c156c367a3c36c9ac358ba5c1ab74525298803f415075850354cc15ed17346246cbd6f8721e8fdf8e25f19f8ecf6281e994f243ec46f10d6d1ace231df00e25513eb121c1fd32565fd3f84e0f985309f64fa7c3a7eaa38cd6c9bc302114c4024c7d7f70a463837cb0fb8283ca62c7fcb604c80fa30904e000078092e5e3da8da2156c7080100b0db2f91e907bae1bb7ac0a0bdd15eea5a652adbd95c9ff2d3cc6102f7cf100aaa9f88eb35641100d3ba3459055aa339368453b43de9463876cc1ff32d5043772a0f5fb300000000000000f26d13eeb14213db1cd0c7f417d12511f85714ade57c43e209ed9fe000e366f3bc69b4885c621ac4c0d2ee17bc91eea5755fe22ec0df77ecee714afed22efe7f93ea558b9ab0cde97dd7bc4ec21a77b0d614e678bf951f6ab2b2751e9cab458c7ac5fd4d42df35dacb24c1c0da05f6bd12cf374126581e273320857f78d97913c5e4f31bf0233f7f0efea36d092a93998f45eb49bd91b3a7482a7765b544d56624bbd3342506a10ecc2ff1faf405829adb44c17530d2e4e6d477f376a7158e71d2da5c8bcf54987435d3303ecd02f10cd685a5a2885073cedf528d8ec620a29f211a5eb7665d916fde8c649445b192f87c2cfa728871c15c1fb6c1bb207da47b3a10960902c5c70a6153df666ca9d49b676ec44b"]}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.062274823s ago: executing program 2 (id=1467): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x7c9ce320e12db95) sendfile(r2, r1, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$watch_queue(r1, &(0x7f0000000b40)=""/168, 0xa8) 4.851673432s ago: executing program 2 (id=1468): futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x14fffffd) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000085000000050000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa721, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.582734697s ago: executing program 2 (id=1469): r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup2(r0, r0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x80) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r3, 0x8979) sendfile(r2, r3, 0x0, 0xfff) 4.476087447s ago: executing program 2 (id=1470): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 'veth0_macvtap\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f00000016c0)) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_subtree(r8, &(0x7f0000000440)=ANY=[@ANYBLOB='-'], 0x7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000eaff070000006600000008000300", @ANYRES32=r2, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 4.277607875s ago: executing program 1 (id=1471): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$addseals(r3, 0x409, 0x8) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r7, 0xfffffffffffffff5, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) close(r2) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00"], 0xfdef) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x218, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0x0, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 2.829449439s ago: executing program 3 (id=1472): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1200000, &(0x7f0000000180), 0xec, 0x57c, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x36c, &(0x7f0000001040)="$eJzs3T9oo2UYAPAn/dKkPdB2EwUhuglarrfpYov04LCLSvDPIAavp5JUocFiO1xbB8VRcNRJJwUdHMRRBEXcHFw9QU7FQW878PCV5MuXpEnaaw+rFH+/IXnued/nfd/vS0i+C8nb55aieXE6Ll27djVmZkpRXnpkKa6XYj6yKOzGuMqEHABwOlxPKf5IuSOWlE54SQDACeu+/78QEbWYzzOvf3VY/+TdHwBOvd7//2cP6zNzUMMrJ7IkAOCEjX3+f+++5ko5ohLl4p/loW8FAACn1RNPP/Po8mrE47XaTMT6m5v1zXo8NGhfvhQvRSvW4mzMxY2I/EKhc1Pq3p6/sLpytlar7cTP81GPiKleYT2/UljOuvXVWIy5mO/Vdy41UjfOzn+6urJY64qI3Z3u/LFe2qxPx5ne/D+cibXBhUcxSPcu4sLqyrlab4D6elG/E7E3+Nyis/6FmIvvnu8Pk1LxDcbVlcuLxaIH9Zv1alzsn4UDPwEBAAAAAAAAAAAAAAAAAAAAAIBbslDrm+/vn5M69/lOOQsLE9q7++Pk9b39gfby/YFSNUVKv7/2QP2tLPbtDzS6P8+mjQQBAAAAAAAAAAAAAAAAAACgr71ViUartbbR3tpuDgc7G+2tqYjoZF7+5uMvZ2O8z02Ccj5FNaI/Ra2X2W42UlZ0TlnEeHnWmbzIfPhZf8XDfar9o5i4jOrBTa3Wbff89O4gc3dWjPzXoE8Wkw8wG1rGwyMjr9+eL+k4J6ofnBvOVMdnv5JSGsq8MVx++dnxAaMUUT7+A7fdnIqD+6RO8PXVF+8szn7ji5S77/65J6+88/6vzUarM3N0H8HKRvtGajZKRefjnZbOqS4ypciD0vAzoXxY+d7+TCP7/ren7nr726PNnoYzr260t7KRPll+OJ+MllfyoLPMkabZQfl07yBaa9MTnvw3C27hMb3jvc8/SunHX448xcDU2MtG6Z96/QEAAAAAAAAAAAAAAAAAAAaGfive0/ux7/RhVQ8+dvIrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/z+Dv/w8Fe7sxkukHu2OZfvDnzoSq6tpGO6IymPCD0n95uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/E/9HQAA//8N81lW") mlockall(0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) prctl$PR_SET_MM(0x43724f53, 0x0, &(0x7f0000ffb000/0x4000)=nil) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r2, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 2.246753543s ago: executing program 3 (id=1473): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 998.703547ms ago: executing program 3 (id=1474): syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000380)={[{@oldalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@init_itable_val={'init_itable', 0x3d, 0x3000000}}]}, 0xfe, 0x4a1, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 790.843627ms ago: executing program 3 (id=1475): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(r0, &(0x7f00000005c0)='net/ip_tables_matches\x00') fchdir(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\xebX\xce\xd0\xaaw\xf5\x80\xa3\b\xa1\xa3\xa2\xca.\t'}, {}]}, 0x1d) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mlockall(0x6) syslog(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ec40007"], 0x6a) syslog(0x0, &(0x7f00000007c0)=""/165, 0xa5) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): an_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.914982][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.925532][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.953305][ T9565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 811.180778][ T9565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 811.347443][ T9565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.674576][ T9565] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.724294][ T9565] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.788785][ T9565] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.830696][ T9565] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.864066][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 811.970131][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 812.018562][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 813.093401][ T3971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.125548][ T3971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.285349][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 813.451084][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.529150][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.642239][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.150068][ T9992] loop1: detected capacity change from 0 to 2048 [ 815.240189][ T9996] loop3: detected capacity change from 0 to 256 [ 815.338295][ T9992] ext4: Unknown parameter 'uid' [ 815.526822][ T9995] loop0: detected capacity change from 0 to 2048 [ 815.952010][ T9996] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 815.986608][ T26] audit: type=1800 audit(1727152758.544:2228): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1228" name="file2" dev="loop3" ino=1048809 res=0 errno=0 [ 815.997052][ T9995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 818.582486][ T3902] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.802878][ T3902] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.944032][ T3902] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.035139][ T3902] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.879179][T10043] loop3: detected capacity change from 0 to 164 [ 822.191159][ T7776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 822.201300][ T7776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 822.230876][ T7776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 822.239658][ T7776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 822.251902][ T7776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 822.259446][ T7776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 822.472372][T10066] loop2: detected capacity change from 0 to 512 [ 822.562428][T10066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 822.579017][ T3902] device hsr_slave_0 left promiscuous mode [ 822.587815][ T3902] device hsr_slave_1 left promiscuous mode [ 822.593902][T10066] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038 (0x7fffffff) [ 822.629472][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.684305][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.723208][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.758804][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.788900][ T3902] device bridge_slave_1 left promiscuous mode [ 822.815106][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.836454][ T3902] device bridge_slave_0 left promiscuous mode [ 822.842762][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.874193][ T3902] device veth1_macvtap left promiscuous mode [ 822.881606][ T3902] device veth0_macvtap left promiscuous mode [ 822.888016][ T3902] device veth1_vlan left promiscuous mode [ 822.894481][ T3902] device veth0_vlan left promiscuous mode [ 823.572881][ T6708] EXT4-fs (loop2): unmounting filesystem. [ 823.752490][T10074] loop2: detected capacity change from 0 to 512 [ 824.000382][T10074] EXT4-fs (loop2): 1 truncate cleaned up [ 824.019150][T10074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 824.170429][T10074] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.1241: bg 0: bad block bitmap checksum [ 824.321436][T10080] loop1: detected capacity change from 0 to 2048 [ 824.334588][ T6708] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 824.349794][ T7778] Bluetooth: hci1: command tx timeout [ 824.375760][T10080] ext4: Unknown parameter 'uid' [ 824.445737][ T8558] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm syz.2.952: Invalid inode table block 5 in block_group 0 [ 824.459592][ T8558] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 824.470103][ T8558] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz.2.952: mark_inode_dirty error [ 824.483955][ T3692] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 824.556485][ T3692] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 824.602059][ T3692] EXT4-fs error (device loop2): __ext4_get_inode_loc:4506: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 824.648223][ T8558] EXT4-fs (loop2): unmounting filesystem. [ 825.515701][T10084] loop0: detected capacity change from 0 to 2048 [ 825.541882][T10084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.098520][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 826.185464][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 826.262966][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.362716][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.436102][ T7778] Bluetooth: hci1: command tx timeout [ 826.666330][T10090] loop0: detected capacity change from 0 to 128 [ 826.751483][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 826.762684][ T26] audit: type=1800 audit(1727152769.274:2229): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1245" name="bus" dev="loop0" ino=1048811 res=0 errno=0 [ 827.643690][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 disabled perfctr wrmsr: 0xc2 data 0x1 [ 827.656684][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 disabled perfctr wrmsr: 0x186 data 0x1 [ 827.669886][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.680992][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.693737][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.706649][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.718371][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.729489][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.753648][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.766790][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.778249][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 827.789762][T10093] kvm [10092]: vcpu0, guest rIP: 0x3b1 ignored wrmsr: 0x11e data 0x1 [ 828.143610][ T3902] bond0 (unregistering): Released all slaves [ 828.505105][ T7778] Bluetooth: hci1: command tx timeout [ 828.934129][T10061] chnl_net:caif_netlink_parms(): no params data found [ 830.416647][T10112] loop1: detected capacity change from 0 to 1024 [ 830.531099][ T26] audit: type=1800 audit(1727152773.084:2230): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1251" name="file1" dev="loop1" ino=19 res=0 errno=0 [ 830.601866][ T7778] Bluetooth: hci1: command tx timeout [ 831.392958][ T7778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 831.410779][ T7778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 831.419352][ T7778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 831.428286][ T7778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 831.436412][ T7778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 831.444557][ T7778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 831.537660][T10061] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.544874][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.554176][T10061] device bridge_slave_0 entered promiscuous mode [ 833.289726][T10145] loop1: detected capacity change from 0 to 128 [ 833.687835][ T7778] Bluetooth: hci2: command tx timeout [ 833.771436][ T26] audit: type=1800 audit(1727152776.324:2231): pid=10143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1257" name="bus" dev="loop1" ino=1048813 res=0 errno=0 [ 833.794862][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'. [ 834.003742][T10061] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.025804][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.037268][ T7778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.048158][ T7778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 834.058143][ T7778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 834.059368][T10061] device bridge_slave_1 entered promiscuous mode [ 834.073958][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 834.085272][ T7778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 834.092624][ T7778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 834.330811][ T3902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.421449][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.557819][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1260'. [ 834.573765][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.716412][ T3902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.744741][T10148] loop0: detected capacity change from 0 to 40427 [ 834.779159][T10148] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 834.787087][T10148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 834.805248][T10061] team0: Port device team_slave_0 added [ 834.827814][T10061] team0: Port device team_slave_1 added [ 834.851155][T10148] F2FS-fs (loop0): Found nat_bits in checkpoint [ 835.025890][T10148] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 835.034067][T10148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 835.088341][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.095436][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.194127][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.707145][ T7778] Bluetooth: hci2: command tx timeout [ 835.834391][ T3902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.938594][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.955072][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.028783][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.047385][T10177] loop1: detected capacity change from 0 to 2048 [ 836.086763][T10177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.118742][ T3902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.205283][ T7778] Bluetooth: hci4: command tx timeout [ 836.424406][T10148] syz.0.1258: attempt to access beyond end of device [ 836.424406][T10148] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 836.439949][T10148] syz.0.1258: attempt to access beyond end of device [ 836.439949][T10148] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 837.328829][T10061] device hsr_slave_0 entered promiscuous mode [ 837.361644][T10061] device hsr_slave_1 entered promiscuous mode [ 837.427302][T10132] chnl_net:caif_netlink_parms(): no params data found [ 837.782170][T10150] chnl_net:caif_netlink_parms(): no params data found [ 837.795212][ T7776] Bluetooth: hci2: command tx timeout [ 838.813087][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.832247][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.859142][T10132] device bridge_slave_0 entered promiscuous mode [ 838.869018][ T7776] Bluetooth: hci4: command tx timeout [ 838.981674][T10206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 839.023989][T10206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 839.038564][T10132] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.045894][T10132] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.054575][T10132] device bridge_slave_1 entered promiscuous mode [ 839.387934][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.396528][T10150] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.404841][T10150] device bridge_slave_0 entered promiscuous mode [ 839.416516][T10209] loop0: detected capacity change from 0 to 40427 [ 839.445595][T10132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.457938][T10209] F2FS-fs (loop0): invalid crc value [ 839.493153][T10209] F2FS-fs (loop0): Found nat_bits in checkpoint [ 839.631990][T10209] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 839.671081][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.671156][T10150] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.672436][T10150] device bridge_slave_1 entered promiscuous mode [ 839.674743][T10132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.865134][ T7776] Bluetooth: hci2: command tx timeout [ 840.150957][T10132] team0: Port device team_slave_0 added [ 840.160459][ T8279] syz-executor: attempt to access beyond end of device [ 840.160459][ T8279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 840.187156][T10150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.254853][T10132] team0: Port device team_slave_1 added [ 840.263336][T10150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.614332][T10132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.631824][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.657849][ C1] vkms_vblank_simulate: vblank timer overrun [ 840.693135][T10132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.717077][T10132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.724074][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.750749][T10132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.787319][T10150] team0: Port device team_slave_0 added [ 840.888553][T10150] team0: Port device team_slave_1 added [ 840.901478][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 840.905203][ T3685] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 840.911011][ T7778] Bluetooth: hci4: command tx timeout [ 840.948209][T10132] device hsr_slave_0 entered promiscuous mode [ 840.955509][T10132] device hsr_slave_1 entered promiscuous mode [ 840.962145][T10132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.970054][T10132] Cannot create hsr debugfs directory [ 841.044546][ T3902] device hsr_slave_0 left promiscuous mode [ 841.051772][ T3902] device hsr_slave_1 left promiscuous mode [ 841.058910][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.067169][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.075603][ T3902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.083060][ T3902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.092306][ T3902] device bridge_slave_1 left promiscuous mode [ 841.098873][ T3902] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.116639][ T3902] device bridge_slave_0 left promiscuous mode [ 841.133159][ T3902] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.175549][ T3902] device veth1_macvtap left promiscuous mode [ 841.181622][ T3902] device veth0_macvtap left promiscuous mode [ 841.195852][ T3902] device veth1_vlan left promiscuous mode [ 841.201730][ T3902] device veth0_vlan left promiscuous mode [ 841.388878][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.402977][ T3685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 841.416786][ T3685] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 841.426711][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.445614][ T3685] usb 2-1: config 0 descriptor?? [ 841.621435][T10244] loop0: detected capacity change from 0 to 40427 [ 841.633553][T10244] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 841.650097][T10244] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 841.713650][T10244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 841.835111][T10244] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 841.843410][T10244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 842.077882][ T3685] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 842.086284][ T3685] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 842.094306][ T3685] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 842.104665][ T3685] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 842.201432][T10250] syz.0.1273: attempt to access beyond end of device [ 842.201432][T10250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 842.227493][T10250] syz.0.1273: attempt to access beyond end of device [ 842.227493][T10250] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 842.500270][ T3902] team0 (unregistering): Port device team_slave_1 removed [ 842.601139][ T3685] usb 2-1: USB disconnect, device number 12 [ 842.617150][ T3902] team0 (unregistering): Port device team_slave_0 removed [ 842.772678][ T3902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.866012][ T3902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.987251][ T7778] Bluetooth: hci4: command tx timeout [ 843.575275][ T3685] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 843.996358][ T3685] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 844.019036][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.135356][ T3685] usb 1-1: config 0 descriptor?? [ 844.188772][ T3685] ums-usbat 1-1:0.0: USB Mass Storage device detected [ 844.287903][ T3685] ums-usbat 1-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 844.295438][ T3685] ums-usbat 1-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.111-syzkaller) [ 844.295438][ T3685] Please send a copy of this message to and [ 844.321183][ C1] vkms_vblank_simulate: vblank timer overrun [ 844.477067][ T3902] bond0 (unregistering): Released all slaves [ 844.769101][T10150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.799360][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.905312][T10150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.954104][T10150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.992035][T10150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.053089][T10150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.095327][T10061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.123075][T10061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.153178][T10061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.172525][T10061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.284495][T10150] device hsr_slave_0 entered promiscuous mode [ 845.300560][T10150] device hsr_slave_1 entered promiscuous mode [ 845.309613][T10150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.317702][T10150] Cannot create hsr debugfs directory [ 845.791671][T10061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.836484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 845.854162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 845.879219][T10061] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.902287][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 845.918991][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 845.937632][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.944965][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.961736][T10271] loop1: detected capacity change from 0 to 40427 [ 845.976170][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 845.987661][T10271] F2FS-fs (loop1): invalid crc value [ 845.994016][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 846.004574][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 846.018158][T10271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 846.043861][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.051123][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.070979][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 846.111462][T10271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 846.214777][T10150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.325494][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 846.343985][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 846.359745][ T5672] usb 1-1: USB disconnect, device number 12 [ 846.389646][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 846.431475][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 846.612729][ T9189] syz-executor: attempt to access beyond end of device [ 846.612729][ T9189] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 846.629224][T10150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.683977][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 846.696454][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 846.736162][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 846.745902][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 846.756864][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 846.766267][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 846.777656][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.852324][T10150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.039487][T10150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.367100][T10132] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 847.408169][T10132] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 847.438496][T10132] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 847.526289][T10132] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 847.552789][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 847.565437][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 847.596146][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 847.611684][T10289] loop0: detected capacity change from 0 to 40427 [ 847.662081][T10289] F2FS-fs (loop0): invalid crc value [ 847.680236][T10150] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 847.736695][T10289] F2FS-fs (loop0): Found nat_bits in checkpoint [ 847.746751][T10150] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 847.776905][T10150] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 847.828963][T10150] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 847.847012][T10309] loop1: detected capacity change from 0 to 512 [ 847.886219][T10309] ext4: Unknown parameter 'nojournal_checksum"dax' [ 847.927524][ T7460] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 848.046752][T10289] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 848.900668][T10132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.910898][ T8279] syz-executor: attempt to access beyond end of device [ 848.910898][ T8279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 848.998517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.016014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.038938][T10150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.052048][T10132] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.107814][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.120323][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.156307][T10150] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.163482][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.186266][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.199544][T10328] overlayfs: missing 'lowerdir' [ 849.225843][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.232991][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.259843][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.296492][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.306555][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.356491][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.363662][ T7854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.385908][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.405466][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.425648][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.432828][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.451539][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.491948][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.510802][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 849.543465][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 849.572348][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 849.606652][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 849.629176][T10337] loop1: detected capacity change from 0 to 512 [ 849.685987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 849.716385][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1287: corrupted inode contents [ 849.728744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 849.758163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.775450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.784596][T10337] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.1287: mark_inode_dirty error [ 849.810449][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.817596][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.837170][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1287: corrupted inode contents [ 849.861878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.900682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 849.913581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 849.927768][T10337] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1287: mark_inode_dirty error [ 849.946032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 849.971213][T10337] Quota error (device loop1): write_blk: dquota write failed [ 849.981235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 849.999764][T10337] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 850.039842][T10337] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1287: Failed to acquire dquot type 0 [ 850.070179][T10061] device veth0_vlan entered promiscuous mode [ 850.087560][T10132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.107797][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1287: corrupted inode contents [ 850.405930][T10337] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.1287: mark_inode_dirty error [ 850.569828][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1287: corrupted inode contents [ 850.769762][T10337] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1287: mark_inode_dirty error [ 850.784242][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1287: corrupted inode contents [ 850.811322][T10337] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 850.841621][T10150] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 850.855982][T10337] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1287: corrupted inode contents [ 850.876076][T10150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.894054][T10337] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.1287: mark_inode_dirty error [ 850.962075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.972393][T10337] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 850.989056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.005939][T10337] EXT4-fs (loop1): 1 truncate cleaned up [ 851.017291][T10337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 851.029513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.038534][T10337] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 851.050040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.059069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.080169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.100487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.120652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.181894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.220791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 851.230621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.237490][ T26] audit: type=1800 audit(1727152793.794:2232): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1287" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 851.241101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.573521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.755728][T10061] device veth1_vlan entered promiscuous mode [ 851.964242][T10061] device veth0_macvtap entered promiscuous mode [ 852.007913][T10061] device veth1_macvtap entered promiscuous mode [ 852.082848][ T9189] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 852.118514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.131450][ T9189] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 852.162007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.180891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.205617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.213606][ T9189] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 852.237503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 852.246803][ T9189] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 852.274516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.289585][ T9189] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz-executor: Failed to acquire dquot type 1 [ 852.304287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.316861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.335633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 852.357722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 852.405329][T10146] EXT4-fs (loop1): unmounting filesystem. [ 852.432193][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.536635][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.555037][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.565997][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.586485][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.615101][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.638032][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.718008][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 852.751977][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.785360][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.810861][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.832726][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.845468][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.862129][T10061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.874156][T10061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.892646][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.905146][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.914795][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 852.960902][T10061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.985265][T10061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.031481][T10061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.063275][T10061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.197623][ T7854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.267959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.313308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.349455][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 853.371410][T10365] loop0: detected capacity change from 0 to 40427 [ 853.373321][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.394278][T10365] F2FS-fs (loop0): invalid crc value [ 853.426285][T10365] F2FS-fs (loop0): Found nat_bits in checkpoint [ 853.468054][ T7854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.500541][T10132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.620690][ T7854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.631374][T10365] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 853.875894][ T7854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.002276][T10150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.029833][ T7776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.043364][ T7776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.051781][ T7776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.060239][ T7776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.073039][ T7776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 854.080516][ T7776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 854.206457][ T3902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.247087][ T3902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.321236][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.357400][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.375421][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.386092][ T8279] syz-executor: attempt to access beyond end of device [ 854.386092][ T8279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 854.413499][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 854.440147][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.484450][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.571073][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 854.588434][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 854.598113][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 854.606953][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 854.631954][T10132] device veth0_vlan entered promiscuous mode [ 854.721047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 854.761366][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 854.800279][T10132] device veth1_vlan entered promiscuous mode [ 854.984299][T10150] device veth0_vlan entered promiscuous mode [ 855.006423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 855.025502][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 855.062003][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 855.082875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 855.141903][T10150] device veth1_vlan entered promiscuous mode [ 855.194848][T10132] device veth0_macvtap entered promiscuous mode [ 855.205179][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 855.231838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 855.266162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 855.274522][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.288907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.362443][T10413] overlayfs: missing 'lowerdir' [ 855.401437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 855.410804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.427636][T10132] device veth1_macvtap entered promiscuous mode [ 855.712311][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 855.739018][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 855.781351][T10150] device veth0_macvtap entered promiscuous mode [ 855.794517][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.813410][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.823936][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.841696][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.854168][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.875060][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.894935][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.905814][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.917828][T10132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.929706][T10150] device veth1_macvtap entered promiscuous mode [ 855.941780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 855.960106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 855.970671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.982693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 855.997056][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.008578][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.020355][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.031378][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.041395][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.064689][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.074625][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.085505][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.102668][T10132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.110914][T10392] chnl_net:caif_netlink_parms(): no params data found [ 856.156084][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.165348][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.177798][T10132] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.187457][ T7776] Bluetooth: hci3: command tx timeout [ 856.196136][T10132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.204869][T10132] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.214005][T10132] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.338611][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.359330][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.375029][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.394933][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.404789][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.423587][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.443368][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.454965][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.467289][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.478201][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.498401][T10150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.572080][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 856.596562][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 856.619882][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.663629][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.686460][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.707414][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.727871][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.764518][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.794362][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.824930][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.834802][T10150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.845761][T10150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.857345][T10150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.905510][T10392] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.913101][T10392] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.987432][T10392] device bridge_slave_0 entered promiscuous mode [ 857.508393][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 857.543765][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 857.619962][T10150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.663246][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 857.665111][T10150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.673569][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 857.688130][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 857.700089][T10150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.709302][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 857.737366][T10150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.774797][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 857.782727][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.867093][T10392] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.874686][T10392] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.886692][T10392] device bridge_slave_1 entered promiscuous mode [ 858.266716][ T7776] Bluetooth: hci3: command tx timeout [ 858.758287][T10392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.823781][T10392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.940871][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.971281][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.093585][T10392] team0: Port device team_slave_0 added [ 859.157655][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 859.188697][T10392] team0: Port device team_slave_1 added [ 859.299912][ T7854] device hsr_slave_0 left promiscuous mode [ 859.326201][ T7854] device hsr_slave_1 left promiscuous mode [ 859.343277][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.361668][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.383441][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 859.415027][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.430336][ T7854] device bridge_slave_1 left promiscuous mode [ 859.439472][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.460202][ T7854] device bridge_slave_0 left promiscuous mode [ 859.472273][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.539112][ T7854] device veth1_macvtap left promiscuous mode [ 859.545929][ T7854] device veth0_macvtap left promiscuous mode [ 859.552196][ T7854] device veth1_vlan left promiscuous mode [ 859.558361][ T7854] device veth0_vlan left promiscuous mode [ 859.866495][ T7778] Bluetooth: hci1: command tx timeout [ 860.355995][ T7778] Bluetooth: hci3: command tx timeout [ 860.594649][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 860.632542][ T6514] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 860.655303][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 860.702689][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.758614][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.995356][ T6514] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.013992][ T6514] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.042079][ T6514] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.058797][ T6514] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.072755][ T6514] usb 1-1: config 0 descriptor?? [ 861.374336][ T7854] bond0 (unregistering): Released all slaves [ 861.472839][T10392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.474732][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.484999][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.499639][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.532493][T10392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.555169][ T6514] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 861.562657][ T6514] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 861.565803][T10392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.577965][ T6514] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 861.589058][T10392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.594321][ T6514] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 861.624070][T10392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.646831][ T3729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 861.747033][ T3844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.794420][ T3844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.847217][T10392] device hsr_slave_0 entered promiscuous mode [ 861.854491][T10392] device hsr_slave_1 entered promiscuous mode [ 861.887876][T10392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.912840][T10392] Cannot create hsr debugfs directory [ 861.927689][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 861.940257][T10479] loop2: detected capacity change from 0 to 256 [ 861.947585][ T7778] Bluetooth: hci1: command tx timeout [ 862.003911][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.025962][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.071967][T10479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 862.094780][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.425325][ T7778] Bluetooth: hci3: command tx timeout [ 862.848461][T10447] chnl_net:caif_netlink_parms(): no params data found [ 863.468944][ T3685] usb 1-1: USB disconnect, device number 13 [ 863.551666][T10447] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.571606][T10447] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.620865][T10447] device bridge_slave_0 entered promiscuous mode [ 863.797724][T10447] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.837791][T10447] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.847289][T10447] device bridge_slave_1 entered promiscuous mode [ 863.993012][ T7854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.025158][ T7776] Bluetooth: hci1: command tx timeout [ 864.258464][ T7854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.312743][T10447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.415241][T10447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.441976][T10508] loop2: detected capacity change from 0 to 40427 [ 864.501218][ T7854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.512503][T10508] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 864.556929][T10508] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 864.873887][T10508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 865.337194][T10392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 865.389041][T10392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 865.396025][T10508] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 865.403087][T10508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 865.442309][T10392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 865.637320][ T7854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.756057][T10447] team0: Port device team_slave_0 added [ 865.764474][T10392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 865.850731][T10534] syz.2.1304: attempt to access beyond end of device [ 865.850731][T10534] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 865.873211][T10534] syz.2.1304: attempt to access beyond end of device [ 865.873211][T10534] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 866.089133][T10447] team0: Port device team_slave_1 added [ 866.105534][ T7776] Bluetooth: hci1: command tx timeout [ 866.288887][T10447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.339260][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.455143][T10447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.488964][T10447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.513261][T10447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.539718][T10540] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 866.539718][T10540] The task syz.0.1308 (10540) triggered the difference, watch for misbehavior. [ 866.591099][T10447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.767032][T10447] device hsr_slave_0 entered promiscuous mode [ 866.785586][T10447] device hsr_slave_1 entered promiscuous mode [ 866.794554][T10447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.817019][T10447] Cannot create hsr debugfs directory [ 866.870809][ T5672] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 866.979824][T10550] loop2: detected capacity change from 0 to 2048 [ 867.018270][T10550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 867.153209][T10392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.227678][T10554] loop0: detected capacity change from 0 to 256 [ 867.271350][T10392] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.322849][T10554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 867.344415][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 867.400120][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 867.436424][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.471081][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 867.816891][ T5672] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 867.826331][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.837267][ T5672] usb 4-1: config 0 descriptor?? [ 868.494409][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 868.510476][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 868.558164][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.565372][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.606530][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 868.789338][ T5672] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.808874][ T5672] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 868.817779][ T5672] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 868.831944][ T5672] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 868.937205][ T7776] Bluetooth: hci2: unexpected cc 0x1407 length: 100 > 9 [ 869.985992][ T27] usb 4-1: USB disconnect, device number 15 [ 870.009521][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 870.018524][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 870.029163][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.036367][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.039843][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.049925][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.094286][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 870.356133][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 870.380558][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 870.436638][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 870.480230][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.488739][ T22] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 870.515467][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.548852][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.562507][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.577444][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.726954][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.872350][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 870.965857][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.101055][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.225112][ T22] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 871.244982][ T22] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 871.254129][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.276969][ T22] usb 3-1: config 0 descriptor?? [ 871.470320][T10392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 871.769247][ T22] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 871.830443][ T22] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 872.388641][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 872.416524][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.588986][T10392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.679907][ T7854] device hsr_slave_0 left promiscuous mode [ 872.717870][ T7854] device hsr_slave_1 left promiscuous mode [ 872.732809][T10602] loop3: detected capacity change from 0 to 40427 [ 872.739827][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.760953][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.765428][T10602] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 872.778660][T10616] vhci_hcd: vhci_device speed not set [ 872.798717][T10602] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 872.809835][ T7854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.828443][ T7854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.837479][ T7854] device bridge_slave_1 left promiscuous mode [ 872.844183][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.871265][ T7854] device bridge_slave_0 left promiscuous mode [ 872.883948][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.896328][T10602] F2FS-fs (loop3): Found nat_bits in checkpoint [ 872.985175][ T7776] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 872.994128][ T7776] Bluetooth: hci2: Injecting HCI hardware error event [ 873.004645][ T7778] Bluetooth: hci2: hardware error 0x00 [ 873.060083][ T7854] device veth1_macvtap left promiscuous mode [ 873.061051][T10602] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 873.066470][ T7854] device veth0_macvtap left promiscuous mode [ 873.073838][T10602] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 873.099876][ T7854] device veth1_vlan left promiscuous mode [ 873.108429][ T7854] device veth0_vlan left promiscuous mode [ 873.137098][ C1] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -1 [ 873.349595][T10630] loop2: detected capacity change from 0 to 2048 [ 873.430881][T10630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 873.521108][T10632] syz.3.1319: attempt to access beyond end of device [ 873.521108][T10632] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 873.546301][T10632] syz.3.1319: attempt to access beyond end of device [ 873.546301][T10632] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 874.231605][ T27] usb 3-1: USB disconnect, device number 21 [ 874.353492][T10635] loop2: detected capacity change from 0 to 2048 [ 874.419946][T10635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 874.470128][ T26] audit: type=1800 audit(1727152817.024:2233): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1324" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 874.509561][ T26] audit: type=1800 audit(1727152817.064:2234): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1324" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 874.628417][T10640] loop3: detected capacity change from 0 to 256 [ 874.642645][T10640] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 874.725338][T10132] EXT4-fs (loop2): unmounting filesystem. [ 875.075268][ T7778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 875.709618][T10649] loop3: detected capacity change from 0 to 256 [ 875.754361][T10649] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 875.819224][ T26] audit: type=1800 audit(1727152818.364:2235): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1326" name="file2" dev="loop3" ino=1048826 res=0 errno=0 [ 875.880369][ T7854] team0 (unregistering): Port device team_slave_1 removed [ 875.962370][ T7854] team0 (unregistering): Port device team_slave_0 removed [ 876.031039][ T7854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.121735][ T7854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.058765][ T7854] bond0 (unregistering): Released all slaves [ 877.195704][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.229642][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.269094][T10447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 877.318218][T10447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 877.411749][T10447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 877.448285][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.495818][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.540492][T10392] device veth0_vlan entered promiscuous mode [ 877.547571][T10447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 877.567468][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.600367][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.636129][T10392] device veth1_vlan entered promiscuous mode [ 877.760348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.780353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.806821][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.841606][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.866882][T10392] device veth0_macvtap entered promiscuous mode [ 877.877717][T10392] device veth1_macvtap entered promiscuous mode [ 877.954648][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 877.989097][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.012524][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.051969][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.084175][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.299450][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.313721][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.335365][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.256541][T10392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.309871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 879.351865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.380912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 879.417751][T10691] loop0: detected capacity change from 0 to 256 [ 879.460357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 879.587926][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.615159][T10691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 879.707478][T10695] loop2: detected capacity change from 0 to 256 [ 879.742550][T10695] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 879.787899][ T26] audit: type=1800 audit(1727152822.334:2236): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1336" name="file2" dev="loop2" ino=1048827 res=0 errno=0 [ 880.534997][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.826498][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.064960][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.075052][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.085599][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.095565][T10392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.106150][T10392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.137642][T10392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.168923][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 881.217257][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 881.252858][T10447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.283096][T10392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.299757][T10392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.327809][T10392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.351168][T10392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.378523][T10447] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.421068][T10447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 881.622826][T10447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 881.674209][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 881.931103][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 882.042931][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 882.152890][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 882.283049][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.290232][ T3732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 882.325340][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 882.357940][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 882.414719][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.421939][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.496231][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 882.541944][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 882.576256][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 882.606679][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 882.626245][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 882.635294][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 882.675579][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 882.686243][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 882.742475][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 882.769015][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 882.900011][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 882.909939][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 882.937057][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 883.762515][T10727] loop0: detected capacity change from 0 to 128 [ 883.769849][T10727] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 883.815321][ T3929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.828778][ T3929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.842842][T10730] loop2: detected capacity change from 0 to 256 [ 883.891352][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 883.893944][T10730] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 883.970717][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.995675][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.008483][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 884.180733][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.238054][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.251105][T10447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.969810][T10740] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 885.637615][T10746] loop1: detected capacity change from 0 to 2048 [ 885.659649][T10746] ext4: Unknown parameter 'uid' [ 887.199387][T10758] loop2: detected capacity change from 0 to 256 [ 887.508885][T10748] loop0: detected capacity change from 0 to 40427 [ 887.531906][T10748] F2FS-fs (loop0): invalid crc value [ 887.582728][T10748] F2FS-fs (loop0): Found nat_bits in checkpoint [ 887.613597][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 887.629866][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 888.111952][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 888.161431][T10748] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 888.204590][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 888.542165][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 888.592228][ T8279] syz-executor: attempt to access beyond end of device [ 888.592228][ T8279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 888.600137][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 888.722590][T10447] device veth0_vlan entered promiscuous mode [ 888.743518][T10447] device veth1_vlan entered promiscuous mode [ 888.772936][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 888.792293][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 888.829666][T10447] device veth0_macvtap entered promiscuous mode [ 888.871778][T10447] device veth1_macvtap entered promiscuous mode [ 888.890417][T10774] loop3: detected capacity change from 0 to 256 [ 888.914780][T10774] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 888.942123][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.138385][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.161458][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.191859][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.367507][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.516720][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.661028][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.780953][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.848183][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.899516][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.942023][T10447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.003691][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 890.085554][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 890.122686][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 890.146137][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 890.171018][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.196301][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.241911][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.340416][T10784] loop1: detected capacity change from 0 to 2048 [ 890.352961][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.389206][T10784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 890.404926][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.464747][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.901361][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.617948][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.644654][T10447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.677648][T10447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.696459][T10447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.775486][T10447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.875353][T10447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.924928][T10447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.933772][T10447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.994502][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 892.024157][ T4456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.228495][T10780] loop2: detected capacity change from 0 to 40427 [ 892.259858][T10780] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 892.307367][T10780] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 892.358311][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.380508][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.437169][T10780] F2FS-fs (loop2): Found nat_bits in checkpoint [ 893.120785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.273638][ T7854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.287539][ T7854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.397621][ T7854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.976999][T10818] loop2: detected capacity change from 0 to 2048 [ 893.984147][T10818] ext4: Unknown parameter 'uid' [ 893.999435][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.470854][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.090937][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.142817][T10815] loop0: detected capacity change from 0 to 40427 [ 895.153693][T10815] F2FS-fs (loop0): invalid crc value [ 895.180115][T10815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 895.232380][T10815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 895.281670][ T8279] syz-executor: attempt to access beyond end of device [ 895.281670][ T8279] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 895.469068][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.018267][T10838] loop0: detected capacity change from 0 to 256 [ 896.079743][T10838] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 896.122995][T10838] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 896.198436][T10838] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 896.244965][T10838] UDF-fs: Scanning with blocksize 512 failed [ 896.263151][T10838] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 896.360499][T10838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.197883][T10848] loop1: detected capacity change from 0 to 164 [ 897.224076][T10846] loop2: detected capacity change from 0 to 2048 [ 897.768480][T10848] Unable to read rock-ridge attributes [ 897.778545][T10846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 897.830444][ T7776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 897.844245][ T7776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 897.844672][T10848] Unable to read rock-ridge attributes [ 897.861914][ T7776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 897.872388][ T7776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 898.007912][ T7776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 898.016406][ T7776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 900.115166][ T7778] Bluetooth: hci1: command tx timeout [ 901.334942][ T5672] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 901.606250][ T5672] usb 1-1: Using ep0 maxpacket: 16 [ 901.670962][ T41] device hsr_slave_0 left promiscuous mode [ 901.699229][ T41] device hsr_slave_1 left promiscuous mode [ 901.722175][T10866] loop3: detected capacity change from 0 to 40427 [ 901.735115][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 901.745271][ T5672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.766217][T10866] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 901.779548][T10866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 901.791119][ T5672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.803211][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 901.819595][ T5672] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 901.845679][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 901.853168][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.859605][ T5672] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 901.892847][ T41] device bridge_slave_1 left promiscuous mode [ 901.901600][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.911261][T10866] F2FS-fs (loop3): Found nat_bits in checkpoint [ 901.912370][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.948667][ T41] device bridge_slave_0 left promiscuous mode [ 901.974425][ T5672] usb 1-1: config 0 descriptor?? [ 901.975214][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.105644][T10866] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 902.114594][T10866] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 902.122983][ T41] device veth1_macvtap left promiscuous mode [ 902.134992][ T41] device veth0_macvtap left promiscuous mode [ 902.141146][ T41] device veth1_vlan left promiscuous mode [ 902.175040][ T41] device veth0_vlan left promiscuous mode [ 902.185312][ T7778] Bluetooth: hci1: command tx timeout [ 902.461871][T10878] loop2: detected capacity change from 0 to 40427 [ 902.543904][T10901] syz.3.1379: attempt to access beyond end of device [ 902.543904][T10901] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 902.576107][T10901] syz.3.1379: attempt to access beyond end of device [ 902.576107][T10901] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 902.755462][ T5672] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0017/input/input32 [ 902.805488][ T5672] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 903.076324][T10878] F2FS-fs (loop2): invalid crc value [ 903.111026][T10878] F2FS-fs (loop2): Found nat_bits in checkpoint [ 903.122068][T10687] usb 1-1: USB disconnect, device number 14 [ 903.315092][T10878] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 903.413245][T10132] syz-executor: attempt to access beyond end of device [ 903.413245][T10132] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 904.107212][T10913] loop3: detected capacity change from 0 to 128 [ 904.172158][ T26] audit: type=1800 audit(1727152846.694:2237): pid=10913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1387" name="bus" dev="loop3" ino=1048841 res=0 errno=0 [ 904.314960][ T7778] Bluetooth: hci1: command tx timeout [ 904.906109][T10916] loop0: detected capacity change from 0 to 2048 [ 904.934765][T10916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 905.215150][T10920] loop3: detected capacity change from 0 to 128 [ 905.947536][T10920] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 905.966003][T10920] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 906.045677][T10922] loop2: detected capacity change from 0 to 2048 [ 906.053231][T10922] ext4: Unknown parameter 'uid' [ 906.226902][ T8133] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 906.347236][ T7776] Bluetooth: hci1: command tx timeout [ 906.408949][T10933] loop1: detected capacity change from 0 to 512 [ 906.888735][T10933] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 907.077799][T10933] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1392: invalid indirect mapped block 8 (level 2) [ 907.175547][T10933] EXT4-fs (loop1): Remounting filesystem read-only [ 907.182903][T10933] EXT4-fs (loop1): 1 truncate cleaned up [ 907.200670][T10933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 907.258955][T10933] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 907.335405][T10933] EXT4-fs (loop1): Remounting filesystem read-only [ 907.438994][T10392] EXT4-fs (loop1): unmounting filesystem. [ 907.469500][ T41] team0 (unregistering): Port device team_slave_1 removed [ 907.636713][ T41] team0 (unregistering): Port device team_slave_0 removed [ 907.803650][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.889370][T10150] EXT4-fs (loop3): unmounting filesystem. [ 907.998167][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.121129][T10938] loop0: detected capacity change from 0 to 40427 [ 908.151220][T10938] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 908.171830][T10938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 908.244106][T10941] loop1: detected capacity change from 0 to 40427 [ 908.305935][T10941] F2FS-fs (loop1): invalid crc value [ 908.327830][T10938] F2FS-fs (loop0): Found nat_bits in checkpoint [ 908.354832][T10941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 908.584399][T10941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 908.595538][T10938] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 908.640534][T10938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 908.725622][T10392] syz-executor: attempt to access beyond end of device [ 908.725622][T10392] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 909.161639][T10962] syz.0.1393: attempt to access beyond end of device [ 909.161639][T10962] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 909.211726][T10962] syz.0.1393: attempt to access beyond end of device [ 909.211726][T10962] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 911.572288][T10977] loop1: detected capacity change from 0 to 128 [ 911.715411][ T26] audit: type=1800 audit(1727152854.174:2238): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1400" name="bus" dev="loop1" ino=1048843 res=0 errno=0 [ 912.172956][T10976] loop3: detected capacity change from 0 to 256 [ 912.219020][T10976] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 912.294923][ T26] audit: type=1800 audit(1727152854.804:2239): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1403" name="file2" dev="loop3" ino=1048844 res=0 errno=0 [ 912.419821][T10984] loop0: detected capacity change from 0 to 256 [ 912.467236][T10984] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 912.510045][T10986] loop1: detected capacity change from 0 to 128 [ 912.516897][T10984] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 912.587039][ T26] audit: type=1800 audit(1727152855.144:2240): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1401" name="file1" dev="loop0" ino=1048845 res=0 errno=0 [ 912.630113][T10986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 912.646868][T10984] syz.0.1401: attempt to access beyond end of device [ 912.646868][T10984] loop0: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 912.715114][T10986] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 912.749406][T10983] syz.0.1401: attempt to access beyond end of device [ 912.749406][T10983] loop0: rw=0, sector=448, nr_sectors = 8 limit=256 [ 912.750782][T10984] syz.0.1401: attempt to access beyond end of device [ 912.750782][T10984] loop0: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 912.788131][T10984] syz.0.1401: attempt to access beyond end of device [ 912.788131][T10984] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 912.864036][T10984] syz.0.1401: attempt to access beyond end of device [ 912.864036][T10984] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 912.864785][T10983] syz.0.1401: attempt to access beyond end of device [ 912.864785][T10983] loop0: rw=0, sector=448, nr_sectors = 8 limit=256 [ 912.880053][T10984] syz.0.1401: attempt to access beyond end of device [ 912.880053][T10984] loop0: rw=0, sector=440, nr_sectors = 8 limit=256 [ 913.051245][T10996] loop3: detected capacity change from 0 to 2048 [ 913.094246][T10996] ext4: Unknown parameter 'uid' [ 913.188375][ T8133] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 913.530031][T10392] EXT4-fs (loop1): unmounting filesystem. [ 916.097374][ T41] bond0 (unregistering): Released all slaves [ 916.195440][T11017] loop2: detected capacity change from 0 to 512 [ 916.276106][T11020] loop1: detected capacity change from 0 to 128 [ 916.386498][ T26] audit: type=1800 audit(1727152858.904:2241): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1415" name="bus" dev="loop1" ino=1048847 res=0 errno=0 [ 916.693809][T11017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 916.793362][T11017] ext4 filesystem being mounted at /36/bus supports timestamps until 2038 (0x7fffffff) [ 917.081905][T10855] chnl_net:caif_netlink_parms(): no params data found [ 917.230627][T10132] EXT4-fs (loop2): unmounting filesystem. [ 917.842514][T11043] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 918.608514][T10855] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.637261][T10855] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.661038][T10855] device bridge_slave_0 entered promiscuous mode [ 918.680493][T10855] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.695580][T10855] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.736339][T10855] device bridge_slave_1 entered promiscuous mode [ 918.871026][T10855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.907279][T10855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.124324][T10855] team0: Port device team_slave_0 added [ 919.154667][T10855] team0: Port device team_slave_1 added [ 919.168053][T11057] loop2: detected capacity change from 0 to 128 [ 919.282863][T11057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 919.356744][T11057] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 919.421779][T10855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.452579][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.538446][T11064] loop3: detected capacity change from 0 to 512 [ 919.577949][T11064] ext4: Unknown parameter 'nojournal_checksum"dax' [ 919.593694][T10855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.803585][T10855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.833354][T10855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.901458][T10855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.870307][T10132] EXT4-fs (loop2): unmounting filesystem. [ 921.198514][T10855] device hsr_slave_0 entered promiscuous mode [ 921.245874][T10855] device hsr_slave_1 entered promiscuous mode [ 921.397097][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 923.406204][T11092] loop0: detected capacity change from 0 to 256 [ 923.475367][T11077] device bridge_slave_1 left promiscuous mode [ 923.483693][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.768110][T11094] loop1: detected capacity change from 0 to 16 [ 923.774128][T11077] device bridge_slave_0 left promiscuous mode [ 923.782032][T11094] erofs: (device loop1): mounted with root inode @ nid 36. [ 923.803591][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.860235][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 923.873932][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 923.885417][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 923.894676][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 923.915281][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 923.929603][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 923.939403][T11094] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 923.949591][T11094] bio_check_eod: 707 callbacks suppressed [ 923.949611][T11094] syz.1.1429: attempt to access beyond end of device [ 923.949611][T11094] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 923.977890][T11094] syz.1.1429: attempt to access beyond end of device [ 923.977890][T11094] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 923.999245][T11094] syz.1.1429: attempt to access beyond end of device [ 923.999245][T11094] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 924.014670][T11094] syz.1.1429: attempt to access beyond end of device [ 924.014670][T11094] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 924.036879][T11094] syz.1.1429: attempt to access beyond end of device [ 924.036879][T11094] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 924.052046][T11094] syz.1.1429: attempt to access beyond end of device [ 924.052046][T11094] loop1: rw=524288, sector=13478624032, nr_sectors = 8 limit=16 [ 924.105162][ T3686] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 924.152250][T11097] input: syz0 as /devices/virtual/input/input33 [ 924.469062][T11105] loop3: detected capacity change from 0 to 2048 [ 924.523855][T11105] ext4: Unknown parameter 'uid' [ 924.536006][ T3686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.550865][ T3686] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.595067][ T3686] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.614445][ T3686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.646926][ T3686] usb 3-1: config 0 descriptor?? [ 925.127281][ T3686] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 925.145189][ T3686] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 925.153254][ T3686] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 925.201086][ T3686] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 925.330706][ T154] usb 3-1: USB disconnect, device number 22 [ 925.518628][T11123] loop1: detected capacity change from 0 to 128 [ 925.579069][T11123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 925.589186][T11123] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 925.800938][T10855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 926.095028][T11130] loop2: detected capacity change from 0 to 512 [ 926.116325][T11130] ext4: Unknown parameter 'nojournal_checksum"dax' [ 926.124262][T10855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 926.151913][T10855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 926.182648][ T7460] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 926.875858][T10855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 926.976767][T10392] EXT4-fs (loop1): unmounting filesystem. [ 926.992277][ T3844] device hsr_slave_0 left promiscuous mode [ 927.214033][ T3844] device hsr_slave_1 left promiscuous mode [ 927.222594][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.230241][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.238873][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.246386][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.254574][ T3844] device bridge_slave_1 left promiscuous mode [ 927.260948][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.280109][ T3844] device bridge_slave_0 left promiscuous mode [ 927.295195][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.305354][ T7778] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 927.314098][ T7778] Bluetooth: hci3: Injecting HCI hardware error event [ 927.327824][ T7776] Bluetooth: hci3: hardware error 0x00 [ 927.430036][ T3844] device veth1_macvtap left promiscuous mode [ 927.459089][ T3844] device veth0_macvtap left promiscuous mode [ 927.481122][ T3844] device veth1_vlan left promiscuous mode [ 927.499332][ T3844] device veth0_vlan left promiscuous mode [ 928.502745][ T7778] Bluetooth: hci4: unexpected cc 0x1407 length: 100 > 9 [ 929.384997][ T7776] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 930.364539][T11145] loop3: detected capacity change from 0 to 40427 [ 930.386183][T11145] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 930.393984][T11145] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 930.395076][ T154] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 930.496097][T11145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 930.506925][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 930.604512][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 930.635478][T11145] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 930.642580][T11145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 930.775891][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 930.791868][ T154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 930.897520][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.052915][T11163] syz.3.1440: attempt to access beyond end of device [ 931.052915][T11163] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 931.079238][T11163] syz.3.1440: attempt to access beyond end of device [ 931.079238][T11163] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 931.468001][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.474354][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.565896][ T154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 931.585007][ T154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.593061][ T154] usb 2-1: Product: syz [ 931.598207][ T154] usb 2-1: Manufacturer: syz [ 931.602833][ T154] usb 2-1: SerialNumber: syz [ 931.792621][T11166] loop2: detected capacity change from 0 to 128 [ 931.874221][T11166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 931.985460][T11166] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 932.458979][ T7778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 932.470985][ T7778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 932.479926][ T7778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 932.497620][ T7778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 932.516597][ T7778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 932.534423][ T7778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 932.632767][ T154] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 932.651206][ T7778] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 932.660603][ T7778] Bluetooth: hci4: Injecting HCI hardware error event [ 932.663678][T10132] EXT4-fs (loop2): unmounting filesystem. [ 932.670272][ T7776] Bluetooth: hci4: hardware error 0x00 [ 932.711714][ T154] cdc_ncm 2-1:1.0: bind() failure [ 932.717194][ T14] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 932.738404][ T154] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 932.801266][ T154] cdc_ncm 2-1:1.1: bind() failure [ 932.804487][T11175] loop2: detected capacity change from 0 to 16 [ 932.831754][T11175] erofs: (device loop2): mounted with root inode @ nid 36. [ 932.838335][ T154] usb 2-1: USB disconnect, device number 13 [ 932.885201][ T7778] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 932.909959][T11175] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 932.950773][ T26] audit: type=1800 audit(1727152875.504:2242): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1449" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 932.974531][T11175] syz.2.1449 (11175) used greatest stack depth: 18864 bytes left [ 933.115260][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.133371][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 933.153855][ T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 933.164158][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.207277][ T14] usb 4-1: config 0 descriptor?? [ 933.306831][T11181] loop1: detected capacity change from 0 to 512 [ 933.324595][T11181] EXT4-fs (loop1): Test dummy encryption mode enabled [ 933.541459][T11181] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1451: casefold flag without casefold feature [ 933.690225][T11181] EXT4-fs (loop1): get root inode failed [ 933.787823][T11181] EXT4-fs (loop1): mount failed [ 934.037670][ T3844] bond0 (unregistering): Released all slaves [ 934.156654][ T14] usbhid 4-1:0.0: can't add hid device: -71 [ 934.162682][ T14] usbhid: probe of 4-1:0.0 failed with error -71 [ 934.164901][ T26] audit: type=1326 audit(1727152876.714:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.195504][ T14] usb 4-1: USB disconnect, device number 16 [ 934.255934][ T26] audit: type=1326 audit(1727152876.714:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.314428][T11189] loop2: detected capacity change from 0 to 256 [ 934.375925][ T26] audit: type=1326 audit(1727152876.734:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.488980][ T26] audit: type=1326 audit(1727152876.734:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.523157][ T26] audit: type=1326 audit(1727152876.734:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.546840][ T26] audit: type=1326 audit(1727152876.734:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.573375][ T26] audit: type=1326 audit(1727152876.734:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 934.605483][ T7778] Bluetooth: hci0: command tx timeout [ 934.745460][ T7776] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 934.854782][ T26] audit: type=1326 audit(1727152876.734:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 935.052471][ T26] audit: type=1326 audit(1727152876.734:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.2.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff5ed57def9 code=0x7ffc0000 [ 935.115220][T10855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.263007][T10855] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.337067][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 935.371445][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 935.399667][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 935.472077][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 935.511412][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.518610][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.594243][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 935.638101][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 935.680908][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 935.710491][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.717696][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.735318][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 935.773294][T11170] chnl_net:caif_netlink_parms(): no params data found [ 935.789855][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.817137][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.828506][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.852254][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.876140][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.903186][T10855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 935.915025][ T6827] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 935.935665][T10855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.056427][ T3844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.104086][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 936.126204][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 936.154999][ T6827] usb 3-1: Using ep0 maxpacket: 16 [ 936.155814][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 936.186555][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 936.212086][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 936.231060][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 936.275410][ T6827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.296651][ T6827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.327230][ T6827] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.365240][ T6827] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 936.405118][ T6827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.443881][ T6827] usb 3-1: config 0 descriptor?? [ 936.475685][T11211] loop3: detected capacity change from 0 to 40427 [ 936.497775][ T3844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.526393][T11211] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 936.540290][T11211] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 936.637020][T11211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 936.652098][ T3844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.675130][ T7776] Bluetooth: hci0: command tx timeout [ 936.814417][T11211] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 936.833827][T11211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 936.901104][ T3844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.987286][ T6827] usbhid 3-1:0.0: can't add hid device: -71 [ 936.993339][ T6827] usbhid: probe of 3-1:0.0 failed with error -71 [ 937.051293][ T6827] usb 3-1: USB disconnect, device number 23 [ 937.118378][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.128670][T11170] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.148816][T11170] device bridge_slave_0 entered promiscuous mode [ 937.160246][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 937.234230][T11245] syz.3.1457: attempt to access beyond end of device [ 937.234230][T11245] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 937.259475][T11245] syz.3.1457: attempt to access beyond end of device [ 937.259475][T11245] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 937.466319][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.760663][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.828821][T11170] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.837226][T11170] device bridge_slave_1 entered promiscuous mode [ 937.923283][T10855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.931761][T11256] loop1: detected capacity change from 0 to 512 [ 937.939982][T11256] EXT4-fs (loop1): Test dummy encryption mode enabled [ 937.962279][T11256] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1462: casefold flag without casefold feature [ 937.978850][T11256] EXT4-fs (loop1): get root inode failed [ 937.984540][T11256] EXT4-fs (loop1): mount failed [ 938.028765][T11170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.099417][T11170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.108850][ T6827] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 938.244807][T11170] team0: Port device team_slave_0 added [ 938.302364][T11170] team0: Port device team_slave_1 added [ 938.325138][ T6827] usb 3-1: device descriptor read/64, error -71 [ 938.402803][T11170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.420521][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.474406][T11170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.595030][ T6827] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 938.760810][ T7776] Bluetooth: hci0: command tx timeout [ 938.792945][T11170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.802486][T11170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.805062][ T6827] usb 3-1: device descriptor read/64, error -71 [ 939.335345][T11170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.598273][T11170] device hsr_slave_0 entered promiscuous mode [ 939.627337][T11170] device hsr_slave_1 entered promiscuous mode [ 939.645305][T11170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.652916][T11170] Cannot create hsr debugfs directory [ 939.726147][ T6827] usb usb3-port1: attempt power cycle [ 939.768073][ T3685] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 939.910990][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 939.921685][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 939.960598][T11289] loop3: detected capacity change from 0 to 2048 [ 939.981771][T11289] ext4: Unknown parameter 'uid' [ 940.025046][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 940.033803][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 940.044638][T10855] device veth0_vlan entered promiscuous mode [ 940.045946][ T7460] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.135154][ T6827] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 940.143013][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 940.158634][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 940.191278][T10855] device veth1_vlan entered promiscuous mode [ 940.215404][ T3685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.235372][ T3685] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.235471][ T6827] usb 3-1: device descriptor read/8, error -71 [ 940.265027][ T3685] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.283989][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.320758][ T3685] usb 2-1: config 0 descriptor?? [ 940.467919][T10855] device veth0_macvtap entered promiscuous mode [ 940.537383][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 940.545102][ T6827] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 940.566048][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 940.577303][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 940.642593][ T6827] usb 3-1: device descriptor read/8, error -71 [ 940.673512][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 940.690507][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 940.775599][ T6827] usb usb3-port1: unable to enumerate USB device [ 940.825276][ T7778] Bluetooth: hci0: command tx timeout [ 940.968962][ T3685] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 940.977195][ T3685] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 940.985893][ T3685] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 941.014591][ T3685] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 941.036630][ T3685] usb 2-1: USB disconnect, device number 14 [ 941.087201][T10855] device veth1_macvtap entered promiscuous mode [ 941.269182][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.279957][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.309321][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.326504][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.342203][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.353854][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.379824][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 941.404598][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.439591][T10855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.488434][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 941.502910][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 942.329111][T11330] xt_hashlimit: overflow, rate too high: 0 [ 942.627875][ T3844] device hsr_slave_0 left promiscuous mode [ 942.649074][ T3844] device hsr_slave_1 left promiscuous mode [ 942.671115][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 942.697821][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.722415][ T3844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 942.750599][ T3844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.774619][ T3844] device bridge_slave_1 left promiscuous mode [ 942.799031][ T3844] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.828049][ T3844] device bridge_slave_0 left promiscuous mode [ 942.850642][ T3844] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.912265][ T3844] device veth1_macvtap left promiscuous mode [ 942.920911][ T3844] device veth0_macvtap left promiscuous mode [ 942.932275][ T3844] device veth1_vlan left promiscuous mode [ 942.950917][ T3844] device veth0_vlan left promiscuous mode [ 943.122120][T11337] loop3: detected capacity change from 0 to 1024 [ 943.173224][T11337] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 943.590297][ T3929] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 943.625340][ T3929] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 388 with error 28 [ 943.640332][ T3929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 943.640332][ T3929] [ 943.651736][ T3929] EXT4-fs (loop3): Total free blocks count 0 [ 943.658039][ T3929] EXT4-fs (loop3): Free/Dirty block details [ 943.663970][ T3929] EXT4-fs (loop3): free_blocks=68451041280 [ 943.684997][ T3929] EXT4-fs (loop3): dirty_blocks=400 [ 943.690332][ T3929] EXT4-fs (loop3): Block reservation details [ 943.696998][ T3929] EXT4-fs (loop3): i_reserved_data_blocks=25 [ 943.743375][T10150] EXT4-fs (loop3): unmounting filesystem. [ 944.170227][T11356] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 944.971647][T11358] loop3: detected capacity change from 0 to 2048 [ 945.022647][T11358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.041578][ T3844] team0 (unregistering): Port device team_slave_1 removed [ 945.169481][ T3844] team0 (unregistering): Port device team_slave_0 removed [ 945.172215][T11360] loop3: detected capacity change from 0 to 512 [ 945.201604][T11360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 945.242095][ T3844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.251064][T11360] EXT4-fs error (device loop3): __ext4_fill_super:5399: inode #2: comm syz.3.1475: casefold flag without casefold feature [ 945.264610][T11360] EXT4-fs (loop3): get root inode failed [ 945.272705][T11360] EXT4-fs (loop3): mount failed [ 945.321584][ T3844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.865856][ T3844] bond0 (unregistering): Released all slaves [ 946.114239][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.125229][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.135566][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.346169][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.404510][T10855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.460460][T10855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.541906][T10855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.936821][ T3971] ------------[ cut here ]------------ [ 946.942740][ T3971] WARNING: CPU: 1 PID: 3971 at net/wireless/core.h:246 cfg80211_ch_switch_notify+0x44f/0x770 [ 946.953023][ T3971] Modules linked in: [ 946.957059][ T3971] CPU: 1 PID: 3971 Comm: kworker/u4:15 Not tainted 6.1.111-syzkaller #0 [ 946.965458][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 946.975571][ T3971] Workqueue: phy57 ieee80211_csa_finalize_work [ 946.981786][ T3971] RIP: 0010:cfg80211_ch_switch_notify+0x44f/0x770 [ 946.988289][ T3971] Code: 4d 89 ec 44 8b 6c 24 04 e9 b8 fd ff ff e8 b9 b3 7d f7 0f 0b e9 f6 fd ff ff e8 ad b3 7d f7 0f 0b e9 a0 fd ff ff e8 a1 b3 7d f7 <0f> 0b e9 71 fc ff ff 0f 0b 42 0f b6 04 23 84 c0 0f 85 45 01 00 00 [ 947.007978][ T3971] RSP: 0018:ffffc9000558fbd0 EFLAGS: 00010293 [ 947.014084][ T3971] RAX: ffffffff8a0cfb9f RBX: 0000000000000000 RCX: ffff88807b639dc0 [ 947.022125][ T3971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.024252][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 947.030140][ T3971] RBP: ffff8880579c8c90 R08: ffffffff8a0cf80a R09: fffffbfff1d33cae [ 947.044740][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 947.046199][ T3971] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 947.046222][ T3971] R13: ffff888078620760 R14: ffff8880579ca330 R15: ffff888078622c98 [ 947.046243][ T3971] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 947.079374][ T3971] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.086037][ T3971] CR2: 00007f81fe2656c0 CR3: 00000000620bc000 CR4: 00000000003506e0 [ 947.094110][ T3971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 947.102159][ T3971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 947.108194][ T3732] ------------[ cut here ]------------ [ 947.110188][ T3971] Call Trace: [ 947.116221][ T3732] WARNING: CPU: 0 PID: 3732 at net/wireless/core.h:246 cfg80211_ch_switch_started_notify+0x2ee/0x5b0 [ 947.119207][ T3971] [ 947.130073][ T3732] Modules linked in: [ 947.133003][ T3971] ? __warn+0x15a/0x520 [ 947.136916][ T3732] CPU: 0 PID: 3732 Comm: kworker/u4:7 Not tainted 6.1.111-syzkaller #0 [ 947.141057][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.149321][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 947.155148][ T3971] ? report_bug+0x2af/0x500 [ 947.165223][ T3732] Workqueue: phy58 ieee80211_iface_work [ 947.169715][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.175316][ T3732] [ 947.181117][ T3971] ? handle_bug+0x3d/0x70 [ 947.183430][ T3732] RIP: 0010:cfg80211_ch_switch_started_notify+0x2ee/0x5b0 [ 947.187790][ T3971] ? exc_invalid_op+0x16/0x40 [ 947.194919][ T3732] Code: 5f 5d c3 e8 24 a8 7d f7 e9 fe fe ff ff e8 1a a8 7d f7 0f 0b e9 40 ff ff ff e8 0e a8 7d f7 0f 0b e9 e6 fe ff ff e8 02 a8 7d f7 <0f> 0b e9 d7 fd ff ff 0f 0b 48 b8 00 00 00 00 00 fc ff df 0f b6 04 [ 947.199594][ T3971] ? asm_exc_invalid_op+0x16/0x20 [ 947.219237][ T3732] RSP: 0018:ffffc900046373e8 EFLAGS: 00010283 [ 947.224273][ T3971] ? cfg80211_ch_switch_notify+0xba/0x770 [ 947.224318][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.230408][ T3732] [ 947.230421][ T3732] RAX: ffffffff8a0d073e RBX: ffff888025338368 RCX: 0000000000100000 [ 947.236161][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.241953][ T3732] RDX: ffffc90015812000 RSI: 0000000000001d9c RDI: 0000000000001d9d [ 947.244288][ T3971] ieee80211_csa_finalize_work+0xf8/0x140 [ 947.252365][ T3732] RBP: 0000000000000000 R08: ffffffff8a0d050f R09: ffffed1004a6746a [ 947.258202][ T3971] ? process_one_work+0x7a9/0x11d0 [ 947.266196][ T3732] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 947.271905][ T3971] process_one_work+0x8a9/0x11d0 [ 947.279940][ T3732] R13: ffff888065fd0760 R14: ffff888025338c90 R15: dffffc0000000000 [ 947.285097][ T3971] ? worker_detach_from_pool+0x260/0x260 [ 947.293038][ T3732] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 947.298010][ T3971] ? _raw_spin_lock_irqsave+0x120/0x120 [ 947.306028][ T3732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 947.311744][ T3971] ? kthread_data+0x4e/0xc0 [ 947.321025][ T3732] CR2: 00007fff6f558b9c CR3: 000000007f9ec000 CR4: 00000000003506f0 [ 947.326600][ T3971] ? wq_worker_running+0x97/0x190 [ 947.333166][ T3732] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 947.337688][ T3971] worker_thread+0xa47/0x1200 [ 947.345678][ T3732] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 947.350703][ T3971] ? _raw_spin_unlock+0x40/0x40 [ 947.358676][ T3732] Call Trace: [ 947.363351][ T3971] kthread+0x28d/0x320 [ 947.371328][ T3732] [ 947.376183][ T3971] ? worker_clr_flags+0x190/0x190 [ 947.379457][ T3732] ? __warn+0x15a/0x520 [ 947.383511][ T3971] ? kthread_blkcg+0xd0/0xd0 [ 947.386467][ T3732] ? cfg80211_ch_switch_started_notify+0x2ee/0x5b0 [ 947.391484][ T3971] ret_from_fork+0x1f/0x30 [ 947.395684][ T3732] ? report_bug+0x2af/0x500 [ 947.400286][ T3971] [ 947.406789][ T3732] ? cfg80211_ch_switch_started_notify+0x2ee/0x5b0 [ 947.411231][ T3971] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 947.411252][ T3971] CPU: 1 PID: 3971 Comm: kworker/u4:15 Not tainted 6.1.111-syzkaller #0 [ 947.411277][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 947.411292][ T3971] Workqueue: phy57 ieee80211_csa_finalize_work [ 947.411332][ T3971] Call Trace: [ 947.411343][ T3971] [ 947.411352][ T3971] dump_stack_lvl+0x1e3/0x2cb [ 947.411392][ T3971] ? nf_tcp_handle_invalid+0x642/0x642 [ 947.411447][ T3971] ? panic+0x764/0x764 [ 947.411483][ T3971] ? vscnprintf+0x59/0x80 [ 947.411515][ T3971] panic+0x318/0x764 [ 947.411545][ T3971] ? __warn+0x169/0x520 [ 947.411573][ T3971] ? memcpy_page_flushcache+0xfc/0xfc [ 947.411614][ T3971] ? ret_from_fork+0x1f/0x30 [ 947.411653][ T3971] __warn+0x348/0x520 [ 947.411678][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.411719][ T3971] report_bug+0x2af/0x500 [ 947.411742][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.411785][ T3971] handle_bug+0x3d/0x70 [ 947.411807][ T3971] exc_invalid_op+0x16/0x40 [ 947.411830][ T3971] asm_exc_invalid_op+0x16/0x20 [ 947.411863][ T3971] RIP: 0010:cfg80211_ch_switch_notify+0x44f/0x770 [ 947.411899][ T3971] Code: 4d 89 ec 44 8b 6c 24 04 e9 b8 fd ff ff e8 b9 b3 7d f7 0f 0b e9 f6 fd ff ff e8 ad b3 7d f7 0f 0b e9 a0 fd ff ff e8 a1 b3 7d f7 <0f> 0b e9 71 fc ff ff 0f 0b 42 0f b6 04 23 84 c0 0f 85 45 01 00 00 [ 947.411925][ T3971] RSP: 0018:ffffc9000558fbd0 EFLAGS: 00010293 [ 947.411947][ T3971] RAX: ffffffff8a0cfb9f RBX: 0000000000000000 RCX: ffff88807b639dc0 [ 947.411965][ T3971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.411980][ T3971] RBP: ffff8880579c8c90 R08: ffffffff8a0cf80a R09: fffffbfff1d33cae [ 947.411999][ T3971] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 947.412017][ T3971] R13: ffff888078620760 R14: ffff8880579ca330 R15: ffff888078622c98 [ 947.412045][ T3971] ? cfg80211_ch_switch_notify+0xba/0x770 [ 947.412078][ T3971] ? cfg80211_ch_switch_notify+0x44f/0x770 [ 947.412132][ T3971] ieee80211_csa_finalize_work+0xf8/0x140 [ 947.412169][ T3971] ? process_one_work+0x7a9/0x11d0 [ 947.412197][ T3971] process_one_work+0x8a9/0x11d0 [ 947.412246][ T3971] ? worker_detach_from_pool+0x260/0x260 [ 947.412282][ T3971] ? _raw_spin_lock_irqsave+0x120/0x120 [ 947.412310][ T3971] ? kthread_data+0x4e/0xc0 [ 947.412352][ T3971] ? wq_worker_running+0x97/0x190 [ 947.412378][ T3971] worker_thread+0xa47/0x1200 [ 947.412421][ T3971] ? _raw_spin_unlock+0x40/0x40 [ 947.412466][ T3971] kthread+0x28d/0x320 [ 947.412487][ T3971] ? worker_clr_flags+0x190/0x190 [ 947.412513][ T3971] ? kthread_blkcg+0xd0/0xd0 [ 947.412538][ T3971] ret_from_fork+0x1f/0x30 [ 947.412590][ T3971] [ 947.416122][ T3971] Kernel Offset: disabled [ 947.688208][ T3971] Rebooting in 86400 seconds..