last executing test programs: 5m18.870659082s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000000)=0x2, 0x4) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m12.138030995s ago: executing program 0 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = getpgrp(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf2500000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x8044) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40, 0xb1, 0x14}, 0x18) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x12201, 0x0) 5m6.134476802s ago: executing program 0 (id=33): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0xff, 0xff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x40000) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m49.267310782s ago: executing program 32 (id=33): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0xff, 0xff}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_GET(r0, 0x0, 0x40000) connect$inet(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m36.559978297s ago: executing program 1 (id=66): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x50, 0x2, 0x4, 0x1010, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") sendmsg(0xffffffffffffffff, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r4, 0x400c9206, &(0x7f0000000340)={0x0, 0x0}) 4m32.223793284s ago: executing program 1 (id=71): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") creat(0x0, 0x18) r0 = open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="96", 0x1}]) 4m30.429012009s ago: executing program 1 (id=74): close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close(0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x1b6) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 4m24.575430605s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = getpgrp(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000130001002dbd7000fcdbdf2500000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x1000}}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x8044) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40, 0xb1, 0x14}, 0x18) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x12201, 0x0) 4m22.863153385s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 4m22.048241267s ago: executing program 1 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4m21.464929147s ago: executing program 4 (id=85): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) socket(0x400000000010, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 4m19.924809427s ago: executing program 4 (id=87): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x283}, {&(0x7f0000000480)="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", 0x1e9}, {&(0x7f0000000300)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790749e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9ddeccee9f654466794aee4d442d3e0ea68180697f37", 0xb5}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x4044040) 4m18.782552488s ago: executing program 4 (id=89): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x148, 0x1170, 0x1170, 0x0, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x322, 0xffffffff], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x4e23, 0x0, 0x0, 0x0, 0x4e22, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfe}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f0000000000)=0xb, 0x4) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x9, 0x3a, '//[,{\x87&', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2f) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000007e40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x7fff, 0xe3b, 0x80000000, 0x7f, 0x3, 0x7, 0xffffffff, 0x5, 0x5, 0x7fffffff, 0x0, 0x4, 0xfffffffc, 0x0, 0x4, 0x6, 0x5, 0x7fffffff, 0x100, 0x5, 0xd, 0x8, 0x8, 0x7, 0x7, 0x5, 0x80000000, 0x200, 0x10, 0xfffffffc, 0x7, 0x6, 0xc, 0x6, 0x0, 0x6, 0x0, 0x7fff, 0x1, 0x7, 0x4, 0xffffff03, 0x6, 0x6ea409a4, 0x8, 0xfffffff9, 0x9, 0x1000, 0x5, 0x1, 0x7c0, 0x1, 0x6, 0xff, 0x7, 0xc3a, 0x0, 0x6, 0x2, 0x6, 0xc213, 0x8, 0x40, 0x1, 0x546, 0x2, 0x7, 0x9, 0x3, 0x7ff, 0x200, 0x1, 0x0, 0x7, 0x6, 0x9, 0x3, 0x85bd, 0x100, 0x9, 0xfffffff9, 0x526b0e97, 0x101, 0xffff7fff, 0x1, 0x2, 0x2, 0x0, 0x3, 0x20000, 0xbf, 0x0, 0x3, 0x9, 0xe1, 0x5, 0x6, 0xffffffff, 0x7, 0x2, 0x7f, 0x200, 0xd, 0xffffff01, 0x8, 0x75, 0xcfbd, 0x9, 0xac, 0xa3, 0x1, 0x8, 0x1, 0x3, 0x6, 0xd0d, 0xfffffffc, 0x0, 0x9ac, 0x8, 0x4, 0x7, 0x5, 0x8001, 0x1, 0x481f, 0x2, 0x14000, 0xe, 0x6, 0x286, 0xf99, 0x4288974c, 0xe7d9, 0x7, 0x3, 0x0, 0x3, 0xfffff000, 0x0, 0x8, 0x80000001, 0xffff, 0x2, 0x6, 0x5, 0x9, 0xfffffffd, 0x1, 0x3, 0x3ff, 0x9, 0xfffff83b, 0x7, 0xea41, 0x5, 0x1, 0x5, 0x81, 0x4, 0x6, 0x3d, 0x10000, 0x6, 0x3, 0x1, 0x1, 0x5, 0x3, 0x3ff, 0x7, 0x4, 0x6572, 0x1, 0x3, 0x3, 0x7fffffff, 0x0, 0x3, 0x4, 0x8, 0xee, 0x80, 0xea3, 0xd18f, 0x2, 0x8, 0xdd8, 0x8, 0x6, 0x4, 0x2, 0x4, 0x100, 0x10001, 0x7cb, 0xba05, 0x0, 0x1, 0x3, 0x8, 0x8000, 0x5, 0xffffffff, 0x2, 0x7, 0xffffffff, 0x9, 0x8, 0x81, 0x3, 0x2, 0x4, 0x3, 0x5, 0x8, 0x6, 0x7, 0x1ff, 0x1, 0x7, 0x3846, 0x2, 0x6, 0x5, 0x6d0b, 0xffff02af, 0x8, 0x7, 0x8, 0x8, 0xfffffffe, 0x7, 0x8, 0x2, 0x8, 0x6, 0x4, 0x3, 0xe60, 0x2, 0xff7a, 0x9, 0x40, 0x8, 0x4, 0x0, 0x0, 0x9, 0x1, 0xfffff662, 0x5, 0x6, 0x42, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7c, 0x0, 0x9, 0x8, 0x20000000, 0x5, 0x9, 0x5, 0x8, 0x4, 0x2, 0x1, 0x1faf6368, 0xbe, 0x5, 0x3, 0x1, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x3ff, 0x4, 0x240b, 0x5, 0xc574, 0x35, 0x1, 0x5, 0x9, 0x5, 0x3, 0x7f, 0x1fc00, 0x808, 0x800, 0x8, 0x8001, 0x9, 0x8000001, 0x1, 0x10000, 0xfff, 0x6, 0xfffffff8, 0xc9, 0x3, 0x7, 0xd, 0x3, 0x0, 0x65, 0x7f, 0x0, 0x40, 0xff, 0xffffffd6, 0x7, 0xd331, 0x3, 0x7fffffff, 0x4, 0xffffffff, 0x7, 0x2, 0x8, 0x6, 0x2, 0x6, 0xffff1b87, 0x800, 0x5, 0xb72a, 0x6, 0xfffffff9, 0x2, 0x37fe1412, 0x3, 0x7, 0x4, 0x5, 0xffff, 0xbe6, 0x6, 0x736ba5e8, 0x8, 0x2, 0x5, 0x5, 0xff, 0x2d10, 0xfb, 0xffff0000, 0x10000, 0x3, 0x6, 0x7, 0x5, 0x8000, 0xffffffff, 0xc, 0x40aca, 0x6, 0xa271, 0x4b4, 0xc1, 0x101, 0x0, 0x9, 0xdd0, 0x8, 0xc6da, 0x8, 0x200, 0x7, 0x5, 0x6, 0x3, 0x8000, 0x8ce, 0xfe000000, 0x2, 0x0, 0x8, 0x5, 0xffff, 0x2, 0x9, 0x7fffffff, 0x0, 0x8, 0x2, 0x6ee3, 0xfffffff7, 0x1, 0x1, 0x2, 0xff, 0xb40c, 0x4, 0xffff, 0x80, 0x80000001, 0x96, 0x1, 0x3, 0xe3, 0xcf95, 0x52, 0xfe1e, 0x3, 0xa1c, 0xc, 0x8, 0x8, 0x5, 0x6df0c64b, 0x8, 0x0, 0x5, 0x6, 0xf7ea, 0xe, 0xb10, 0x400, 0xff, 0x3, 0x4, 0xfffffff8, 0x8, 0x49c7, 0x3, 0x1993, 0x1, 0x8, 0x206, 0x9, 0x0, 0x9, 0xd, 0x0, 0x3, 0x3, 0x0, 0x5, 0x1, 0x7, 0x8, 0x6, 0xc300, 0x81, 0x6, 0xb0, 0x9, 0x80, 0x9, 0x2, 0xbc73, 0x7, 0x6, 0x10001, 0x80000001, 0x7, 0x8, 0x6, 0x1, 0x0, 0x94, 0x4f4, 0x7, 0x5, 0x8, 0x6, 0xe51, 0x6, 0x2, 0x7, 0x4, 0x7, 0x8, 0xfffffff5, 0x6, 0xff, 0x401, 0x0, 0x1, 0x0, 0x1, 0x1, 0x6, 0x10, 0x0, 0x7f, 0xd, 0x101, 0xe93, 0x10001, 0x0, 0x7, 0x9, 0x4c, 0x0, 0x9f3, 0x2, 0xcda, 0xc, 0x1ff, 0x9, 0xfff, 0x3, 0x400, 0x300000, 0x472a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x6, 0xffffff8a, 0x5, 0x81, {0x1, 0x2, 0x5, 0x6, 0x31, 0x8}, {0x2, 0x0, 0x9a2a, 0xef, 0xac, 0xfffffffa}, 0x987, 0x101, 0x80000000}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 4m12.416610095s ago: executing program 1 (id=96): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) rmdir(&(0x7f0000000280)='./control\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 4m12.414917794s ago: executing program 4 (id=97): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0xa, 0x3, 0xf2c) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11}}], 0x18}, 0x2000c054) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x480, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) 4m11.56188195s ago: executing program 33 (id=96): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) rmdir(&(0x7f0000000280)='./control\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 4m11.52587746s ago: executing program 4 (id=99): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES32], 0x5, 0x327, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8, 0x0, 0xc}, 0xf) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x2200010, &(0x7f0000000380)=ANY=[], 0x1, 0x14e1, &(0x7f0000002ac0)="$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") ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) write$binfmt_elf32(r0, 0x0, 0x69) 3m56.252872316s ago: executing program 34 (id=99): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4a16, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES32], 0x5, 0x327, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x40d, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x9, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8, 0x0, 0xc}, 0xf) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x2200010, &(0x7f0000000380)=ANY=[], 0x1, 0x14e1, &(0x7f0000002ac0)="$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") ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000040)) write$binfmt_elf32(r0, 0x0, 0x69) 1m49.034832368s ago: executing program 3 (id=239): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m46.984385599s ago: executing program 3 (id=240): creat(&(0x7f0000000000)='./file0\x00', 0x6a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xffffffff, {0x0, 0x9, 0x0, 0x0, {0x4e25, 0x100, [0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x4], 0x0, [0x1]}, 0xf0fffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "88000000"}]}, 0x54}}, 0x40000) 1m38.865658673s ago: executing program 3 (id=247): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) 1m36.328219311s ago: executing program 3 (id=250): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m33.799264394s ago: executing program 3 (id=252): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x8090) 1m32.562922995s ago: executing program 3 (id=254): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chroot(&(0x7f0000000240)='./file0\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) close(r4) mount$overlay(0x0, 0x0, 0x0, 0x2040000, 0x0) 1m16.856834855s ago: executing program 35 (id=254): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chroot(&(0x7f0000000240)='./file0\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x585d4d9346027f5c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd, 0x1fff}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) close(r4) mount$overlay(0x0, 0x0, 0x0, 0x2040000, 0x0) 10.458616742s ago: executing program 2 (id=326): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003d00), 0x1, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) 7.585884522s ago: executing program 2 (id=328): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x1000}, {r0, 0x4008}, {}, {r1, 0x1004}, {r3, 0x4052}, {r3, 0x9500}], 0x6, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f0000000300)={[0x200]}, 0x8) 5.886714113s ago: executing program 5 (id=330): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x14, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0xfea8, 0xa) 5.243086479s ago: executing program 2 (id=331): syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000099b73a203d1b770168280102030109022400010000a0000904e20202fb9ba000090502020002020000090582020002000000"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002002900000003000100"/33]) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(r1, &(0x7f0000002080)="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", 0x2000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000b80)=0xc) statx(0xffffffffffffffff, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1, &(0x7f0000001040)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0001010000000904000012020600e1042406"], 0x0) 4.616906639s ago: executing program 5 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x75a5, 0x0, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000100), 0x0) r5 = dup2(r4, 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.379602909s ago: executing program 5 (id=333): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2(&(0x7f0000000000), 0x4800) 2.627664057s ago: executing program 5 (id=334): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.303980423s ago: executing program 2 (id=335): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x192) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./bus\x00', 0x88, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0], 0x3, 0x24a, &(0x7f0000000840)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 1.415536447s ago: executing program 5 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x50, 0x2, 0x4, 0x1010, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") sendmsg(0xffffffffffffffff, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r5, 0x400c9206, &(0x7f0000000340)={0x0, 0x0}) 1.312655158s ago: executing program 2 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x192) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./bus\x00', 0x88, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0], 0x3, 0x24a, &(0x7f0000000840)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 90.0628ms ago: executing program 2 (id=338): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, 0x0, 0x0) close(r4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x125d, 0x0) timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) 0s ago: executing program 5 (id=339): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): hange from 0 to 1024 [ 259.342986][ T6696] EXT4-fs: Ignoring removed oldalloc option [ 259.380725][ T6696] EXT4-fs: Ignoring removed bh option [ 259.415464][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.456765][ T6696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.881989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 259.909948][ T6452] team0: Port device team_slave_0 added [ 259.951982][ T6452] team0: Port device team_slave_1 added [ 259.986014][ T6528] team0: Port device team_slave_0 added [ 260.020174][ T6705] loop3: detected capacity change from 0 to 512 [ 260.029130][ T6528] team0: Port device team_slave_1 added [ 260.029235][ T6705] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.057540][ T6705] EXT4-fs (loop3): 1 truncate cleaned up [ 260.092139][ T6705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.397733][ T6194] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.554847][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.572065][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.575206][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.749959][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.175547][ T6698] loop2: detected capacity change from 0 to 40427 [ 261.295800][ T6698] F2FS-fs (loop2): Image doesn't support compression [ 261.350960][ T6698] F2FS-fs (loop2): build fault injection rate: 690 [ 261.390246][ T6698] F2FS-fs (loop2): build fault injection type: 0x35f7 [ 261.432997][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.446984][ T6698] F2FS-fs (loop2): invalid crc value [ 261.627901][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.5.147'. [ 261.684082][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.684114][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.684161][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.686614][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.686636][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.686690][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.692388][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.5.147'. [ 262.522175][ T6698] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 262.533812][ T6698] F2FS-fs (loop2): Start checkpoint disabled! [ 262.573635][ T6698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 262.656152][ T6194] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.709950][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.731720][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.801536][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.078227][ T6194] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.560975][ T6194] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.677890][ T6528] hsr_slave_0: entered promiscuous mode [ 263.707032][ T6528] hsr_slave_1: entered promiscuous mode [ 263.733254][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 263.739057][ T6528] Cannot create hsr debugfs directory [ 263.893512][ T6452] hsr_slave_0: entered promiscuous mode [ 263.908205][ T6452] hsr_slave_1: entered promiscuous mode [ 263.919299][ T6452] debugfs: 'hsr0' already exists in 'hsr' [ 263.935274][ T6452] Cannot create hsr debugfs directory [ 265.128739][ T6717] loop3: detected capacity change from 0 to 40427 [ 265.269019][ T6717] F2FS-fs (loop3): invalid crc value [ 265.370332][ T6744] loop2: detected capacity change from 0 to 128 [ 265.456024][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 265.581818][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.588237][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.682505][ T6717] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 265.806363][ T6717] F2FS-fs (loop3): Start checkpoint disabled! [ 267.369388][ T6752] binfmt_misc: register: failed to install interpreter file ./file0 [ 268.227549][ T6194] bridge_slave_1: left allmulticast mode [ 268.247545][ T6194] bridge_slave_1: left promiscuous mode [ 268.301908][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.355435][ T6194] bridge_slave_0: left allmulticast mode [ 268.361161][ T6194] bridge_slave_0: left promiscuous mode [ 268.387785][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.414017][ T6194] bridge_slave_1: left allmulticast mode [ 268.430463][ T6194] bridge_slave_1: left promiscuous mode [ 268.440898][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.477599][ T6194] bridge_slave_0: left allmulticast mode [ 268.489204][ T6194] bridge_slave_0: left promiscuous mode [ 268.499221][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.337626][ T6767] loop5: detected capacity change from 0 to 40427 [ 271.372555][ T6767] F2FS-fs (loop5): Image doesn't support compression [ 271.389529][ T6767] F2FS-fs (loop5): build fault injection rate: 690 [ 271.411631][ T6767] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 271.454972][ T6767] F2FS-fs (loop5): invalid crc value [ 271.506438][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.557502][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.589252][ T6194] bond0 (unregistering): Released all slaves [ 271.787519][ T6767] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 271.838139][ T6767] F2FS-fs (loop5): Start checkpoint disabled! [ 271.902093][ T6767] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 272.138694][ T6767] syz.5.156: attempt to access beyond end of device [ 272.138694][ T6767] loop5: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 272.296655][ T6774] loop2: detected capacity change from 0 to 512 [ 272.375007][ T6774] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.414178][ T6774] EXT4-fs (loop2): 1 truncate cleaned up [ 272.432469][ T6774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.507286][ T6767] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x24d/0xc30 [ 272.520839][ T6767] syz.5.156: attempt to access beyond end of device [ 272.520839][ T6767] loop5: rw=2049, sector=45096, nr_sectors = 72 limit=40427 [ 272.813904][ T6026] kworker/u8:10: attempt to access beyond end of device [ 272.813904][ T6026] loop5: rw=2049, sector=45168, nr_sectors = 16 limit=40427 [ 273.666593][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 273.666645][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.666671][ T6026] Workqueue: writeback wb_workfn (flush-7:5) [ 273.666751][ T6026] Call Trace: [ 273.666763][ T6026] [ 273.666778][ T6026] dump_stack_lvl+0x16c/0x1f0 [ 273.666851][ T6026] f2fs_handle_critical_error+0x624/0x9f0 [ 273.666908][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.666960][ T6026] ? f2fs_build_fault_attr+0x53/0x1f0 [ 273.667017][ T6026] f2fs_write_end_io+0x958/0xcf0 [ 273.667081][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 273.667145][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.667206][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 273.667261][ T6026] bio_endio+0x713/0x860 [ 273.667333][ T6026] submit_bio_noacct+0x306/0x1ed0 [ 273.667399][ T6026] __submit_merged_bio+0x33c/0x770 [ 273.667461][ T6026] __submit_merged_write_cond+0x319/0x3f0 [ 273.667534][ T6026] f2fs_write_cache_pages+0x2067/0x2570 [ 273.667634][ T6026] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 273.667719][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.667767][ T6026] ? ieee80211_inform_bss+0x781/0x1140 [ 273.667833][ T6026] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 273.667901][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.667949][ T6026] ? rcu_is_watching+0x12/0xc0 [ 273.668030][ T6026] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 273.668156][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.668213][ T6026] f2fs_write_data_pages+0x4ad/0xd90 [ 273.668288][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 273.668363][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.668410][ T6026] ? __lock_acquire+0xb97/0x1ce0 [ 273.668483][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 273.668554][ T6026] do_writepages+0x27a/0x600 [ 273.668616][ T6026] ? __pfx_do_writepages+0x10/0x10 [ 273.668664][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.668718][ T6026] ? reacquire_held_locks+0xcd/0x1f0 [ 273.668779][ T6026] ? writeback_sb_inodes+0x3b0/0xfa0 [ 273.668839][ T6026] __writeback_single_inode+0x160/0xfb0 [ 273.668899][ T6026] ? __pfx___writeback_single_inode+0x10/0x10 [ 273.668954][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.668999][ T6026] ? do_raw_spin_unlock+0x172/0x230 [ 273.669044][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669098][ T6026] writeback_sb_inodes+0x60d/0xfa0 [ 273.669179][ T6026] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 273.669237][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669285][ T6026] ? do_raw_spin_lock+0x12c/0x2b0 [ 273.669400][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669449][ T6026] ? rcu_is_watching+0x12/0xc0 [ 273.669500][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669548][ T6026] ? queue_io+0x3f6/0x520 [ 273.669600][ T6026] wb_writeback+0x419/0xb70 [ 273.669667][ T6026] ? __pfx_wb_writeback+0x10/0x10 [ 273.669724][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669787][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.669835][ T6026] ? mark_held_locks+0x49/0x80 [ 273.669908][ T6026] wb_workfn+0x14d/0xbe0 [ 273.669972][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670024][ T6026] ? __pfx_wb_workfn+0x10/0x10 [ 273.670086][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670140][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670191][ T6026] ? preempt_schedule_thunk+0x16/0x30 [ 273.670268][ T6026] process_one_work+0x9cf/0x1b70 [ 273.670337][ T6026] ? __pfx_process_one_work+0x10/0x10 [ 273.670383][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670445][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670493][ T6026] ? assign_work+0x1a0/0x250 [ 273.670539][ T6026] worker_thread+0x6c8/0xf10 [ 273.670595][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670646][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670698][ T6026] ? __kthread_parkme+0x19e/0x250 [ 273.670760][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670812][ T6026] ? __pfx_worker_thread+0x10/0x10 [ 273.670857][ T6026] kthread+0x3c5/0x780 [ 273.670899][ T6026] ? __pfx_kthread+0x10/0x10 [ 273.670942][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 273.670990][ T6026] ? rcu_is_watching+0x12/0xc0 [ 273.671042][ T6026] ? __pfx_kthread+0x10/0x10 [ 273.671085][ T6026] ret_from_fork+0x56d/0x730 [ 273.671122][ T6026] ? __pfx_kthread+0x10/0x10 [ 273.671163][ T6026] ret_from_fork_asm+0x1a/0x30 [ 273.671241][ T6026] [ 274.094069][ T6026] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 274.101140][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 274.101187][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.101212][ T6026] Workqueue: writeback wb_workfn (flush-7:5) [ 274.101284][ T6026] Call Trace: [ 274.101296][ T6026] [ 274.101311][ T6026] dump_stack_lvl+0x16c/0x1f0 [ 274.101382][ T6026] f2fs_handle_critical_error+0x624/0x9f0 [ 274.101437][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.101490][ T6026] ? f2fs_build_fault_attr+0x53/0x1f0 [ 274.101542][ T6026] f2fs_write_end_io+0x958/0xcf0 [ 274.101605][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 274.101663][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.101723][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 274.101774][ T6026] bio_endio+0x713/0x860 [ 274.101839][ T6026] submit_bio_noacct+0x306/0x1ed0 [ 274.101904][ T6026] __submit_merged_bio+0x33c/0x770 [ 274.101963][ T6026] __submit_merged_write_cond+0x319/0x3f0 [ 274.102029][ T6026] f2fs_write_cache_pages+0x2067/0x2570 [ 274.102120][ T6026] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 274.102188][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.102233][ T6026] ? ieee80211_inform_bss+0x781/0x1140 [ 274.102294][ T6026] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 274.102357][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.102400][ T6026] ? rcu_is_watching+0x12/0xc0 [ 274.102475][ T6026] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 274.102608][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.102659][ T6026] f2fs_write_data_pages+0x4ad/0xd90 [ 274.102731][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.102803][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.102847][ T6026] ? __lock_acquire+0xb97/0x1ce0 [ 274.102915][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 274.102979][ T6026] do_writepages+0x27a/0x600 [ 274.103038][ T6026] ? __pfx_do_writepages+0x10/0x10 [ 274.103084][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.103129][ T6026] ? reacquire_held_locks+0xcd/0x1f0 [ 274.103195][ T6026] ? writeback_sb_inodes+0x3b0/0xfa0 [ 274.103260][ T6026] __writeback_single_inode+0x160/0xfb0 [ 274.103323][ T6026] ? __pfx___writeback_single_inode+0x10/0x10 [ 274.103381][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.103432][ T6026] ? do_raw_spin_unlock+0x172/0x230 [ 274.103483][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.103542][ T6026] writeback_sb_inodes+0x60d/0xfa0 [ 274.103628][ T6026] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 274.103692][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.103743][ T6026] ? do_raw_spin_lock+0x12c/0x2b0 [ 274.103865][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.103914][ T6026] ? rcu_is_watching+0x12/0xc0 [ 274.103966][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104013][ T6026] ? queue_io+0x3f6/0x520 [ 274.104069][ T6026] wb_writeback+0x419/0xb70 [ 274.104139][ T6026] ? __pfx_wb_writeback+0x10/0x10 [ 274.104193][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104261][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104312][ T6026] ? mark_held_locks+0x49/0x80 [ 274.104386][ T6026] wb_workfn+0x14d/0xbe0 [ 274.104454][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104509][ T6026] ? __pfx_wb_workfn+0x10/0x10 [ 274.104575][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104631][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104688][ T6026] ? preempt_schedule_thunk+0x16/0x30 [ 274.104770][ T6026] process_one_work+0x9cf/0x1b70 [ 274.104843][ T6026] ? __pfx_process_one_work+0x10/0x10 [ 274.104893][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.104957][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.105006][ T6026] ? assign_work+0x1a0/0x250 [ 274.105056][ T6026] worker_thread+0x6c8/0xf10 [ 274.105116][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.105170][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.105223][ T6026] ? __kthread_parkme+0x19e/0x250 [ 274.105283][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.105339][ T6026] ? __pfx_worker_thread+0x10/0x10 [ 274.105389][ T6026] kthread+0x3c5/0x780 [ 274.105434][ T6026] ? __pfx_kthread+0x10/0x10 [ 274.105480][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 274.105530][ T6026] ? rcu_is_watching+0x12/0xc0 [ 274.105585][ T6026] ? __pfx_kthread+0x10/0x10 [ 274.105632][ T6026] ret_from_fork+0x56d/0x730 [ 274.105672][ T6026] ? __pfx_kthread+0x10/0x10 [ 274.105720][ T6026] ret_from_fork_asm+0x1a/0x30 [ 274.105804][ T6026] [ 274.530427][ T6776] loop3: detected capacity change from 0 to 40427 [ 274.540036][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.567008][ T6776] F2FS-fs (loop3): Image doesn't support compression [ 274.573783][ T6776] F2FS-fs (loop3): build fault injection rate: 690 [ 274.580308][ T6776] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 274.607715][ T6026] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 274.683710][ T6776] F2FS-fs (loop3): invalid crc value [ 275.454766][ T6776] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 275.878888][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.912418][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.984301][ T6194] bond0 (unregistering): Released all slaves [ 276.018444][ T6776] F2FS-fs (loop3): Start checkpoint disabled! [ 276.062116][ T6776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 277.242513][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.5.159'. [ 277.311699][ T6796] netlink: 36 bytes leftover after parsing attributes in process `syz.5.159'. [ 277.991904][ T6194] tipc: Left network mode [ 278.323423][ T6801] loop2: detected capacity change from 0 to 1024 [ 278.334312][ T6801] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.380622][ T6801] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.163: Invalid block bitmap block 0 in block_group 0 [ 278.400992][ T6801] Quota error (device loop2): write_blk: dquota write failed [ 278.409165][ T6801] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 278.420075][ T6801] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.163: Failed to acquire dquot type 0 [ 278.463326][ T6801] EXT4-fs error (device loop2): ext4_free_blocks:6695: comm syz.2.163: Freeing blocks not in datazone - block = 0, count = 4096 [ 278.477963][ T6801] EXT4-fs error (device loop2): ext4_read_inode_bitmap:138: comm syz.2.163: Invalid inode bitmap blk 0 in block_group 0 [ 278.492395][ T6801] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 278.492745][ T6011] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 278.503192][ T6801] EXT4-fs (loop2): 1 orphan inode deleted [ 278.520481][ T6801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.643913][ T6806] loop5: detected capacity change from 0 to 1024 [ 278.671261][ T6011] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 0 [ 278.687523][ T6806] EXT4-fs: Ignoring removed oldalloc option [ 278.726169][ T6806] EXT4-fs: Ignoring removed bh option [ 278.869480][ T6806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.894902][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.239975][ T6815] loop3: detected capacity change from 0 to 128 [ 279.259783][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.294566][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.302732][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.312325][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.313704][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.319579][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.327948][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.298776][ T6596] bridge_slave_0: entered allmulticast mode [ 280.307357][ T6596] bridge_slave_0: entered promiscuous mode [ 280.316646][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.323828][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.331017][ T6596] bridge_slave_1: entered allmulticast mode [ 280.339245][ T6596] bridge_slave_1: entered promiscuous mode [ 281.261550][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.374346][ T6818] loop2: detected capacity change from 0 to 8192 [ 281.896838][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.751929][ T5885] Bluetooth: hci6: command tx timeout [ 283.198173][ T6840] loop3: detected capacity change from 0 to 512 [ 283.346566][ T6840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.529746][ T6840] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.357167][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.761899][ T5885] Bluetooth: hci6: command tx timeout [ 286.557922][ T6596] team0: Port device team_slave_0 added [ 286.842113][ T5885] Bluetooth: hci6: command tx timeout [ 286.890228][ T6596] team0: Port device team_slave_1 added [ 287.605377][ T6864] binfmt_misc: register: failed to install interpreter file ./file0 [ 288.207873][ T6528] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 288.237787][ T6528] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 288.554674][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.575547][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.654404][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.713835][ T6528] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 288.823564][ T6194] hsr_slave_0: left promiscuous mode [ 288.839111][ T6194] hsr_slave_1: left promiscuous mode [ 288.848748][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.871234][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.893082][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.900607][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.084282][ T5885] Bluetooth: hci6: command tx timeout [ 289.096621][ T6871] netlink: 36 bytes leftover after parsing attributes in process `syz.5.174'. [ 289.163940][ T6872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.174'. [ 289.832292][ T6194] hsr_slave_0: left promiscuous mode [ 289.849397][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.873290][ T6194] hsr_slave_1: left promiscuous mode [ 289.879564][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.888733][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.923849][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.931358][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.129124][ T6194] veth1_macvtap: left promiscuous mode [ 290.132599][ T6877] loop3: detected capacity change from 0 to 1024 [ 290.151925][ T6194] veth0_macvtap: left promiscuous mode [ 290.157864][ T6194] veth1_vlan: left promiscuous mode [ 290.158724][ T6877] EXT4-fs: Ignoring removed oldalloc option [ 290.167888][ T6194] veth0_vlan: left promiscuous mode [ 290.180528][ T6877] EXT4-fs: Ignoring removed bh option [ 290.202327][ T6194] veth1_macvtap: left promiscuous mode [ 290.207905][ T6194] veth0_macvtap: left promiscuous mode [ 290.225804][ T6194] veth1_vlan: left promiscuous mode [ 290.231252][ T6194] veth0_vlan: left promiscuous mode [ 290.265449][ T6877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.473062][ T30] audit: type=1800 audit(1758879251.456:4): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.175" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 291.630922][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.126234][ T6890] loop3: detected capacity change from 0 to 128 [ 293.367291][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 293.376439][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 293.385317][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 293.394241][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 293.403749][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 295.483798][ T5881] Bluetooth: hci3: command tx timeout [ 295.604908][ T6905] loop3: detected capacity change from 0 to 1024 [ 295.615153][ T6905] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 295.654122][ T6905] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.180: Invalid block bitmap block 0 in block_group 0 [ 295.670243][ T6905] Quota error (device loop3): write_blk: dquota write failed [ 295.677810][ T6905] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 295.687961][ T6905] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.180: Failed to acquire dquot type 0 [ 295.716237][ T6905] EXT4-fs error (device loop3): ext4_free_blocks:6695: comm syz.3.180: Freeing blocks not in datazone - block = 0, count = 4096 [ 295.731386][ T6905] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.180: Invalid inode bitmap blk 0 in block_group 0 [ 295.745880][ T6905] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 295.755201][ T6905] EXT4-fs (loop3): 1 orphan inode deleted [ 295.765965][ T6905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.828128][ T6026] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 295.837409][ T6026] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 0 [ 296.144885][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.184489][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 296.671295][ T6913] loop3: detected capacity change from 0 to 512 [ 296.699016][ T6913] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 296.758408][ T6913] EXT4-fs (loop3): 1 truncate cleaned up [ 296.792578][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 296.801818][ T6913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.723265][ T6920] EXT4-fs error (device loop3): __ext4_iget:5464: inode #12: block 2: comm syz.3.182: invalid block [ 297.736032][ T5881] Bluetooth: hci3: command tx timeout [ 298.371602][ T6920] EXT4-fs (loop3): Remounting filesystem read-only [ 299.768873][ T6923] binfmt_misc: register: failed to install interpreter file ./file0 [ 299.802654][ T5881] Bluetooth: hci3: command tx timeout [ 299.933134][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.178407][ T6927] loop3: detected capacity change from 0 to 512 [ 300.296214][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.354667][ T6927] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.654531][ T5885] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 300.664182][ T5885] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 300.673152][ T5885] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 300.686672][ T5885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 300.701851][ T5885] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 301.488863][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 301.529539][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 301.785009][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.881983][ T6935] loop3: detected capacity change from 0 to 1024 [ 301.882362][ T5885] Bluetooth: hci3: command tx timeout [ 301.890054][ T6935] EXT4-fs: Ignoring removed oldalloc option [ 301.900623][ T6935] EXT4-fs: Ignoring removed bh option [ 301.969883][ T6935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.339484][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.346894][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.373208][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.951636][ T5885] Bluetooth: hci7: command tx timeout [ 302.968663][ T6528] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 303.353227][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.557836][ T6942] loop5: detected capacity change from 0 to 512 [ 303.621732][ T6942] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.781625][ T6942] EXT4-fs (loop5): 1 truncate cleaned up [ 303.834004][ T6942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.998071][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.007199][ T5885] Bluetooth: hci7: command tx timeout [ 307.861631][ T5885] Bluetooth: hci7: command tx timeout [ 307.894410][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 308.640194][ T6894] chnl_net:caif_netlink_parms(): no params data found [ 310.131609][ T5885] Bluetooth: hci7: command tx timeout [ 311.792784][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.828054][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.837987][ T6812] bridge_slave_0: entered allmulticast mode [ 311.847947][ T6812] bridge_slave_0: entered promiscuous mode [ 311.858703][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.872122][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.939245][ T7016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 311.991109][ T6812] bridge_slave_1: entered allmulticast mode [ 312.005764][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.197'. [ 312.057887][ T6812] bridge_slave_1: entered promiscuous mode [ 312.982980][ T7022] loop2: detected capacity change from 0 to 1024 [ 313.013830][ T7022] EXT4-fs: Ignoring removed oldalloc option [ 313.019893][ T7022] EXT4-fs: Ignoring removed bh option [ 313.159154][ T7022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.224200][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 313.390440][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.425902][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.456260][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.476715][ T6894] bridge_slave_0: entered allmulticast mode [ 313.504792][ T6894] bridge_slave_0: entered promiscuous mode [ 313.731231][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.814258][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.831784][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.839169][ T6894] bridge_slave_1: entered allmulticast mode [ 313.855781][ T6894] bridge_slave_1: entered promiscuous mode [ 314.095858][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.313579][ T7041] loop3: detected capacity change from 0 to 1024 [ 314.411735][ T7041] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 314.427131][ T7027] loop5: detected capacity change from 0 to 40427 [ 314.937780][ T7027] F2FS-fs (loop5): Image doesn't support compression [ 315.299280][ T7027] F2FS-fs (loop5): build fault injection rate: 690 [ 315.306085][ T7027] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 315.380401][ T7027] F2FS-fs (loop5): invalid crc value [ 315.425553][ T7041] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.200: Invalid block bitmap block 0 in block_group 0 [ 315.489162][ T7041] Quota error (device loop3): write_blk: dquota write failed [ 315.572329][ T7041] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 315.584395][ T7041] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.200: Failed to acquire dquot type 0 [ 315.599145][ T7041] EXT4-fs error (device loop3): ext4_free_blocks:6695: comm syz.3.200: Freeing blocks not in datazone - block = 0, count = 4096 [ 315.672823][ T7051] loop2: detected capacity change from 0 to 1024 [ 315.677549][ T6812] team0: Port device team_slave_0 added [ 315.679676][ T7041] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.200: Invalid inode bitmap blk 0 in block_group 0 [ 315.705764][ T6044] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 315.742122][ T6044] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:12: Failed to release dquot type 0 [ 315.764903][ T6812] team0: Port device team_slave_1 added [ 315.802086][ T7041] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 315.816963][ T7051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.909174][ T7027] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 315.962582][ T7041] EXT4-fs (loop3): 1 orphan inode deleted [ 315.970758][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.015724][ T7027] F2FS-fs (loop5): Start checkpoint disabled! [ 316.034598][ T7027] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 316.142702][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.184734][ T7027] syz.5.199: attempt to access beyond end of device [ 316.184734][ T7027] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 316.199736][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.242603][ T6930] bridge_slave_0: entered allmulticast mode [ 316.297637][ T6930] bridge_slave_0: entered promiscuous mode [ 316.683690][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.111755][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.119164][ T6930] bridge_slave_1: entered allmulticast mode [ 317.136469][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.145509][ T6930] bridge_slave_1: entered promiscuous mode [ 317.287986][ T6011] kworker/u8:9: attempt to access beyond end of device [ 317.287986][ T6011] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 317.346486][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 317.346536][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.346562][ T6011] Workqueue: writeback wb_workfn (flush-7:5) [ 317.346637][ T6011] Call Trace: [ 317.346650][ T6011] [ 317.346666][ T6011] dump_stack_lvl+0x16c/0x1f0 [ 317.346738][ T6011] f2fs_handle_critical_error+0x624/0x9f0 [ 317.346800][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.346852][ T6011] ? f2fs_build_fault_attr+0x53/0x1f0 [ 317.346911][ T6011] f2fs_write_end_io+0x958/0xcf0 [ 317.346982][ T6011] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 317.347047][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.347109][ T6011] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 317.347164][ T6011] bio_endio+0x713/0x860 [ 317.347237][ T6011] submit_bio_noacct+0x306/0x1ed0 [ 317.347306][ T6011] __submit_merged_bio+0x33c/0x770 [ 317.347370][ T6011] __submit_merged_write_cond+0x319/0x3f0 [ 317.347444][ T6011] f2fs_write_cache_pages+0x2067/0x2570 [ 317.347547][ T6011] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 317.347618][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.347669][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.347718][ T6011] ? find_held_lock+0x2b/0x80 [ 317.347773][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.347830][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.347879][ T6011] ? do_raw_spin_unlock+0x172/0x230 [ 317.347957][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.348007][ T6011] ? f2fs_available_free_memory+0x279/0xa30 [ 317.348162][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.348225][ T6011] f2fs_write_data_pages+0x4ad/0xd90 [ 317.348307][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 317.348392][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.348442][ T6011] ? __lock_acquire+0xb97/0x1ce0 [ 317.348513][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 317.348586][ T6011] do_writepages+0x27a/0x600 [ 317.348652][ T6011] ? __pfx_do_writepages+0x10/0x10 [ 317.348703][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.348754][ T6011] ? reacquire_held_locks+0xcd/0x1f0 [ 317.348821][ T6011] ? writeback_sb_inodes+0x3b0/0xfa0 [ 317.348888][ T6011] __writeback_single_inode+0x160/0xfb0 [ 317.348963][ T6011] ? __pfx___writeback_single_inode+0x10/0x10 [ 317.349020][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349072][ T6011] ? do_raw_spin_unlock+0x172/0x230 [ 317.349119][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349179][ T6011] writeback_sb_inodes+0x60d/0xfa0 [ 317.349269][ T6011] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 317.349324][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349374][ T6011] ? find_held_lock+0x2b/0x80 [ 317.349518][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349569][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.349624][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349673][ T6011] ? queue_io+0x3f6/0x520 [ 317.349727][ T6011] wb_writeback+0x419/0xb70 [ 317.349797][ T6011] ? __pfx_wb_writeback+0x10/0x10 [ 317.349849][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349914][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.349969][ T6011] ? mark_held_locks+0x49/0x80 [ 317.350044][ T6011] wb_workfn+0x14d/0xbe0 [ 317.350107][ T6011] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.350174][ T6011] ? __pfx_wb_workfn+0x10/0x10 [ 317.350236][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350291][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350346][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350393][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.350454][ T6011] process_one_work+0x9cf/0x1b70 [ 317.350528][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 317.350574][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350638][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350686][ T6011] ? assign_work+0x1a0/0x250 [ 317.350734][ T6011] worker_thread+0x6c8/0xf10 [ 317.350794][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350845][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.350893][ T6011] ? __kthread_parkme+0x19e/0x250 [ 317.350958][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.351009][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 317.351055][ T6011] kthread+0x3c5/0x780 [ 317.351097][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.351142][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.351190][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.351242][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.351287][ T6011] ret_from_fork+0x56d/0x730 [ 317.351324][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.351367][ T6011] ret_from_fork_asm+0x1a/0x30 [ 317.351456][ T6011] [ 317.897018][ T6011] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 317.916656][ T6011] CPU: 1 UID: 0 PID: 6011 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 317.916711][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.916738][ T6011] Workqueue: writeback wb_workfn (flush-7:5) [ 317.916818][ T6011] Call Trace: [ 317.916832][ T6011] [ 317.916847][ T6011] dump_stack_lvl+0x16c/0x1f0 [ 317.916920][ T6011] f2fs_handle_critical_error+0x624/0x9f0 [ 317.916984][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.917036][ T6011] ? f2fs_build_fault_attr+0x53/0x1f0 [ 317.917096][ T6011] f2fs_write_end_io+0x958/0xcf0 [ 317.917162][ T6011] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 317.917230][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.917295][ T6011] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 317.917351][ T6011] bio_endio+0x713/0x860 [ 317.917426][ T6011] submit_bio_noacct+0x306/0x1ed0 [ 317.917497][ T6011] __submit_merged_bio+0x33c/0x770 [ 317.917564][ T6011] __submit_merged_write_cond+0x319/0x3f0 [ 317.917640][ T6011] f2fs_write_cache_pages+0x2067/0x2570 [ 317.917748][ T6011] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 317.917823][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.917873][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.917922][ T6011] ? find_held_lock+0x2b/0x80 [ 317.917983][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918039][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918088][ T6011] ? do_raw_spin_unlock+0x172/0x230 [ 317.918156][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918206][ T6011] ? f2fs_available_free_memory+0x279/0xa30 [ 317.918357][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918418][ T6011] f2fs_write_data_pages+0x4ad/0xd90 [ 317.918497][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 317.918581][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918630][ T6011] ? __lock_acquire+0xb97/0x1ce0 [ 317.918699][ T6011] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 317.918772][ T6011] do_writepages+0x27a/0x600 [ 317.918837][ T6011] ? __pfx_do_writepages+0x10/0x10 [ 317.918888][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.918946][ T6011] ? reacquire_held_locks+0xcd/0x1f0 [ 317.919012][ T6011] ? writeback_sb_inodes+0x3b0/0xfa0 [ 317.919077][ T6011] __writeback_single_inode+0x160/0xfb0 [ 317.919140][ T6011] ? __pfx___writeback_single_inode+0x10/0x10 [ 317.919195][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.919245][ T6011] ? do_raw_spin_unlock+0x172/0x230 [ 317.919293][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.919352][ T6011] writeback_sb_inodes+0x60d/0xfa0 [ 317.919441][ T6011] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 317.919495][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.919544][ T6011] ? find_held_lock+0x2b/0x80 [ 317.919685][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.919734][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.919788][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.919837][ T6011] ? queue_io+0x3f6/0x520 [ 317.919893][ T6011] wb_writeback+0x419/0xb70 [ 317.919970][ T6011] ? __pfx_wb_writeback+0x10/0x10 [ 317.920022][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920090][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920138][ T6011] ? mark_held_locks+0x49/0x80 [ 317.920215][ T6011] wb_workfn+0x14d/0xbe0 [ 317.920281][ T6011] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.920350][ T6011] ? __pfx_wb_workfn+0x10/0x10 [ 317.920414][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920470][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920527][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920576][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.920639][ T6011] process_one_work+0x9cf/0x1b70 [ 317.920713][ T6011] ? __pfx_process_one_work+0x10/0x10 [ 317.920761][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920828][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.920877][ T6011] ? assign_work+0x1a0/0x250 [ 317.920931][ T6011] worker_thread+0x6c8/0xf10 [ 317.920992][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.921045][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.921093][ T6011] ? __kthread_parkme+0x19e/0x250 [ 317.921155][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.921209][ T6011] ? __pfx_worker_thread+0x10/0x10 [ 317.921255][ T6011] kthread+0x3c5/0x780 [ 317.921300][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.921347][ T6011] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.921396][ T6011] ? rcu_is_watching+0x12/0xc0 [ 317.921448][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.921493][ T6011] ret_from_fork+0x56d/0x730 [ 317.921530][ T6011] ? __pfx_kthread+0x10/0x10 [ 317.921573][ T6011] ret_from_fork_asm+0x1a/0x30 [ 317.921662][ T6011] [ 318.230332][ T7065] loop2: detected capacity change from 0 to 512 [ 318.252308][ T6011] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 318.450818][ T6894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.496342][ T7065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 318.549561][ T6894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.611655][ T7065] EXT4-fs (loop2): 1 truncate cleaned up [ 318.657950][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.074335][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.096612][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.219612][ T7069] EXT4-fs error (device loop2): __ext4_iget:5464: inode #12: block 2: comm syz.2.203: invalid block [ 319.378480][ T7069] EXT4-fs (loop2): Remounting filesystem read-only [ 319.427333][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.611787][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.618879][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.711709][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.896829][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.500723][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.647011][ T6894] team0: Port device team_slave_0 added [ 320.751998][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.807390][ T6894] team0: Port device team_slave_1 added [ 321.169795][ T7078] loop5: detected capacity change from 0 to 128 [ 321.264671][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.841646][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.643923][ T6894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.680532][ T6930] team0: Port device team_slave_0 added [ 323.713241][ T6930] team0: Port device team_slave_1 added [ 324.275860][ T6812] hsr_slave_0: entered promiscuous mode [ 324.308030][ T6812] hsr_slave_1: entered promiscuous mode [ 324.490010][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 324.551991][ T7095] netlink: 36 bytes leftover after parsing attributes in process `syz.2.207'. [ 324.751653][ T6894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.887682][ T6894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.292044][ T6894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.598269][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.632614][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.711778][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.744212][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.751198][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.966009][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.957692][ T7091] loop5: detected capacity change from 0 to 40427 [ 326.990019][ T7091] F2FS-fs (loop5): Image doesn't support compression [ 327.012330][ T7091] F2FS-fs (loop5): build fault injection rate: 690 [ 327.039255][ T7091] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 327.074110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.080551][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.112171][ T7091] F2FS-fs (loop5): invalid crc value [ 327.393456][ T6894] hsr_slave_0: entered promiscuous mode [ 327.410790][ T6894] hsr_slave_1: entered promiscuous mode [ 327.425701][ T6894] debugfs: 'hsr0' already exists in 'hsr' [ 327.431743][ T7091] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 327.441748][ T6894] Cannot create hsr debugfs directory [ 327.454095][ T7091] F2FS-fs (loop5): Start checkpoint disabled! [ 327.468181][ T7091] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 327.473650][ T6930] hsr_slave_0: entered promiscuous mode [ 327.485851][ T6930] hsr_slave_1: entered promiscuous mode [ 327.516490][ T6930] debugfs: 'hsr0' already exists in 'hsr' [ 327.535167][ T6930] Cannot create hsr debugfs directory [ 327.574809][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.884954][ T7114] loop3: detected capacity change from 0 to 1024 [ 327.946747][ T7119] loop2: detected capacity change from 0 to 512 [ 327.960824][ T7119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 327.964718][ T7114] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.209749][ T7119] EXT4-fs (loop2): 1 truncate cleaned up [ 328.243957][ T7119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.099934][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.047819][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.781627][ T7147] netlink: 36 bytes leftover after parsing attributes in process `syz.5.218'. [ 332.959116][ T7149] netlink: 36 bytes leftover after parsing attributes in process `syz.5.218'. [ 333.358972][ T7156] loop2: detected capacity change from 0 to 512 [ 333.379898][ T7129] wg2: left promiscuous mode [ 333.446748][ T7156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.512726][ T7156] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.881335][ T6812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 333.918802][ T6812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.040226][ T6812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.486385][ T6812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.896617][ T6194] bridge_slave_1: left allmulticast mode [ 334.921640][ T6194] bridge_slave_1: left promiscuous mode [ 334.946651][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.979686][ T6194] bridge_slave_0: left allmulticast mode [ 334.991506][ T6194] bridge_slave_0: left promiscuous mode [ 334.997556][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.093939][ T6194] bridge_slave_1: left allmulticast mode [ 335.122317][ T6194] bridge_slave_1: left promiscuous mode [ 335.128117][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.177115][ T6194] bridge_slave_0: left allmulticast mode [ 335.201609][ T6194] bridge_slave_0: left promiscuous mode [ 335.207510][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.241433][ T6194] bridge_slave_1: left allmulticast mode [ 335.258160][ T6194] bridge_slave_1: left promiscuous mode [ 335.277309][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.321645][ T6194] bridge_slave_0: left allmulticast mode [ 335.327423][ T6194] bridge_slave_0: left promiscuous mode [ 335.348764][ T7185] loop3: detected capacity change from 0 to 1024 [ 335.351631][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.457499][ T6194] bridge_slave_1: left allmulticast mode [ 335.478279][ T6194] bridge_slave_1: left promiscuous mode [ 335.497247][ T7185] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.513277][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.636360][ T6194] bridge_slave_0: left allmulticast mode [ 335.649753][ T7185] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz.3.222: Invalid block bitmap block 0 in block_group 0 [ 335.677817][ T6194] bridge_slave_0: left promiscuous mode [ 335.722964][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.751392][ T7185] Quota error (device loop3): write_blk: dquota write failed [ 335.783919][ T7166] loop5: detected capacity change from 0 to 40427 [ 335.797191][ T7166] F2FS-fs (loop5): Image doesn't support compression [ 335.825214][ T7185] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 335.873504][ T7166] F2FS-fs (loop5): build fault injection rate: 690 [ 335.880028][ T7166] F2FS-fs (loop5): build fault injection type: 0x35f7 [ 335.908433][ T7185] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.222: Failed to acquire dquot type 0 [ 335.933630][ T7166] F2FS-fs (loop5): invalid crc value [ 336.005558][ T7185] EXT4-fs error (device loop3): ext4_free_blocks:6695: comm syz.3.222: Freeing blocks not in datazone - block = 0, count = 4096 [ 336.091045][ T7185] EXT4-fs error (device loop3): ext4_read_inode_bitmap:138: comm syz.3.222: Invalid inode bitmap blk 0 in block_group 0 [ 336.122185][ T6178] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 336.146045][ T6178] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 0 [ 336.178431][ T7185] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 336.222379][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.241190][ T7185] EXT4-fs (loop3): 1 orphan inode deleted [ 336.282055][ T7185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.312381][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.320843][ T7166] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.371010][ T6194] bond0 (unregistering): Released all slaves [ 336.423436][ T7166] F2FS-fs (loop5): Start checkpoint disabled! [ 336.451777][ T7166] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 336.535292][ T7166] syz.5.220: attempt to access beyond end of device [ 336.535292][ T7166] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 336.626242][ T7193] syz.5.220: attempt to access beyond end of device [ 336.626242][ T7193] loop5: rw=2049, sector=77960, nr_sectors = 376 limit=40427 [ 336.659222][ T7193] syz.5.220: attempt to access beyond end of device [ 336.659222][ T7193] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 336.840827][ T7166] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x101/0x2760 [ 336.854493][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.935323][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.030106][ T6026] kworker/u8:10: attempt to access beyond end of device [ 337.030106][ T6026] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 337.051730][ T6194] bond0 (unregistering): Released all slaves [ 337.081602][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 337.081650][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.081682][ T6026] Workqueue: writeback wb_workfn (flush-7:5) [ 337.081750][ T6026] Call Trace: [ 337.081762][ T6026] [ 337.081777][ T6026] dump_stack_lvl+0x16c/0x1f0 [ 337.081841][ T6026] f2fs_handle_critical_error+0x624/0x9f0 [ 337.081895][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.081941][ T6026] ? f2fs_build_fault_attr+0x53/0x1f0 [ 337.081997][ T6026] f2fs_write_end_io+0x958/0xcf0 [ 337.082056][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.082117][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.082176][ T6026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 337.082227][ T6026] bio_endio+0x713/0x860 [ 337.082295][ T6026] submit_bio_noacct+0x306/0x1ed0 [ 337.082359][ T6026] __submit_merged_bio+0x33c/0x770 [ 337.082420][ T6026] __submit_merged_write_cond+0x319/0x3f0 [ 337.082489][ T6026] f2fs_write_cache_pages+0x2067/0x2570 [ 337.082612][ T6026] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 337.082685][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.082731][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.082776][ T6026] ? find_held_lock+0x2b/0x80 [ 337.082827][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.082879][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.082923][ T6026] ? do_raw_spin_unlock+0x172/0x230 [ 337.082986][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.083031][ T6026] ? f2fs_available_free_memory+0x279/0xa30 [ 337.083158][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.083203][ T6026] ? lock_acquire+0x179/0x350 [ 337.083264][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.083320][ T6026] f2fs_write_data_pages+0x4ad/0xd90 [ 337.083391][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.083467][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.083512][ T6026] ? __lock_acquire+0xb97/0x1ce0 [ 337.083583][ T6026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 337.083648][ T6026] do_writepages+0x27a/0x600 [ 337.083711][ T6026] ? __pfx_do_writepages+0x10/0x10 [ 337.083758][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.083803][ T6026] ? reacquire_held_locks+0xcd/0x1f0 [ 337.083863][ T6026] ? writeback_sb_inodes+0x3b0/0xfa0 [ 337.083922][ T6026] __writeback_single_inode+0x160/0xfb0 [ 337.083980][ T6026] ? __pfx___writeback_single_inode+0x10/0x10 [ 337.084031][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084076][ T6026] ? do_raw_spin_unlock+0x172/0x230 [ 337.084120][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084174][ T6026] writeback_sb_inodes+0x60d/0xfa0 [ 337.084253][ T6026] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 337.084302][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084347][ T6026] ? find_held_lock+0x2b/0x80 [ 337.084473][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084518][ T6026] ? rcu_is_watching+0x12/0xc0 [ 337.084574][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084619][ T6026] ? queue_io+0x3f6/0x520 [ 337.084674][ T6026] wb_writeback+0x419/0xb70 [ 337.084738][ T6026] ? __pfx_wb_writeback+0x10/0x10 [ 337.084786][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084847][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.084892][ T6026] ? mark_held_locks+0x49/0x80 [ 337.084962][ T6026] wb_workfn+0x14d/0xbe0 [ 337.085021][ T6026] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 337.085083][ T6026] ? __pfx_wb_workfn+0x10/0x10 [ 337.085141][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085192][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085244][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085289][ T6026] ? rcu_is_watching+0x12/0xc0 [ 337.085346][ T6026] process_one_work+0x9cf/0x1b70 [ 337.085415][ T6026] ? __pfx_process_one_work+0x10/0x10 [ 337.085458][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085518][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085570][ T6026] ? assign_work+0x1a0/0x250 [ 337.085616][ T6026] worker_thread+0x6c8/0xf10 [ 337.085676][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085724][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085769][ T6026] ? __kthread_parkme+0x19e/0x250 [ 337.085825][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.085874][ T6026] ? __pfx_worker_thread+0x10/0x10 [ 337.085917][ T6026] kthread+0x3c5/0x780 [ 337.085958][ T6026] ? __pfx_kthread+0x10/0x10 [ 337.085999][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.086044][ T6026] ? rcu_is_watching+0x12/0xc0 [ 337.086093][ T6026] ? __pfx_kthread+0x10/0x10 [ 337.086134][ T6026] ret_from_fork+0x56d/0x730 [ 337.086169][ T6026] ? __pfx_kthread+0x10/0x10 [ 337.086210][ T6026] ret_from_fork_asm+0x1a/0x30 [ 337.086287][ T6026] [ 337.540248][ T6026] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 337.706047][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.737408][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.750179][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.758992][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.767175][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 338.144554][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.212350][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.244464][ T6194] bond0 (unregistering): Released all slaves [ 338.515322][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.529855][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.576392][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.591262][ T7197] loop5: detected capacity change from 0 to 1024 [ 338.603653][ T6194] bond0 (unregistering): Released all slaves [ 338.714653][ T7197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.988493][ T7202] loop2: detected capacity change from 0 to 512 [ 339.093215][ T7202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.530757][ T7202] EXT4-fs (loop2): 1 truncate cleaned up [ 339.587233][ T7202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.951639][ T5881] Bluetooth: hci2: command tx timeout [ 339.995401][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.886464][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.665374][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.752458][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.847476][ T6194] hsr_slave_0: left promiscuous mode [ 341.961944][ T6194] hsr_slave_1: left promiscuous mode [ 341.968087][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.051998][ T5881] Bluetooth: hci2: command tx timeout [ 342.095161][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.257614][ T6194] hsr_slave_0: left promiscuous mode [ 342.343989][ T6194] hsr_slave_1: left promiscuous mode [ 342.386842][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.472277][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.598456][ T6194] hsr_slave_0: left promiscuous mode [ 342.724894][ T6194] hsr_slave_1: left promiscuous mode [ 342.757073][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.809061][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.121732][ T5881] Bluetooth: hci2: command tx timeout [ 344.321694][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 344.534571][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 345.053069][ T7239] binfmt_misc: register: failed to install interpreter file ./file0 [ 346.208809][ T5881] Bluetooth: hci2: command tx timeout [ 346.727445][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 346.791245][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 347.511874][ T7245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'. [ 347.572672][ T7246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.230'. [ 348.354426][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 348.361100][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.396419][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 348.897996][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 348.936879][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 349.493995][ T7256] loop2: detected capacity change from 0 to 1024 [ 349.522597][ T7256] EXT4-fs: Ignoring removed oldalloc option [ 349.528597][ T7256] EXT4-fs: Ignoring removed bh option [ 349.673087][ T7256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.962034][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.291712][ T7273] loop5: detected capacity change from 0 to 512 [ 352.342037][ T7273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 352.546959][ T7273] EXT4-fs (loop5): 1 truncate cleaned up [ 352.689745][ T7273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.594276][ T7277] EXT4-fs error (device loop5): __ext4_iget:5464: inode #12: block 2: comm syz.5.235: invalid block [ 354.476637][ T7277] EXT4-fs (loop5): Remounting filesystem read-only [ 355.578171][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.820496][ T6930] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 355.927242][ T6930] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 356.111796][ T6930] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 356.246799][ T6930] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 356.371437][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 358.091899][ T5885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 358.101724][ T5885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 358.110586][ T5885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 358.123046][ T5885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 358.144554][ T5885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 358.355741][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.394193][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.401407][ T7194] bridge_slave_0: entered allmulticast mode [ 358.456147][ T7194] bridge_slave_0: entered promiscuous mode [ 358.500434][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.526063][ T7306] loop3: detected capacity change from 0 to 8192 [ 358.531630][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.539597][ T7194] bridge_slave_1: entered allmulticast mode [ 358.600240][ T7194] bridge_slave_1: entered promiscuous mode [ 360.018258][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.146982][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.201679][ T5885] Bluetooth: hci4: command tx timeout [ 360.834731][ T7194] team0: Port device team_slave_0 added [ 361.011068][ T7194] team0: Port device team_slave_1 added [ 362.281802][ T5885] Bluetooth: hci4: command tx timeout [ 362.906820][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.972511][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.148132][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.187784][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.209637][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.319360][ T7335] binfmt_misc: register: failed to install interpreter file ./file0 [ 363.856739][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.361692][ T5881] Bluetooth: hci4: command tx timeout [ 364.396129][ T5885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.404851][ T5885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.412958][ T5885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.421545][ T5885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.431026][ T5885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.708860][ T7194] hsr_slave_0: entered promiscuous mode [ 364.776028][ T7194] hsr_slave_1: entered promiscuous mode [ 364.810531][ T7194] debugfs: 'hsr0' already exists in 'hsr' [ 364.819649][ T7194] Cannot create hsr debugfs directory [ 366.454411][ T5881] Bluetooth: hci4: command tx timeout [ 366.521683][ T5881] Bluetooth: hci3: command tx timeout [ 368.511305][ T7375] loop5: detected capacity change from 0 to 128 [ 368.635178][ T7375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.653329][ T5881] Bluetooth: hci3: command tx timeout [ 368.838577][ T7375] EXT4-fs (loop5): Test dummy encryption mode enabled [ 369.095028][ T7375] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.319551][ T7375] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.488324][ T7375] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 370.538087][ T7382] loop2: detected capacity change from 0 to 16 [ 370.562605][ T7382] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 370.682164][ T5885] Bluetooth: hci3: command tx timeout [ 370.898662][ T7384] loop3: detected capacity change from 0 to 8192 [ 371.119736][ T7386] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 371.352042][ T7386] loop2: detected capacity change from 0 to 1024 [ 371.370326][ T7386] EXT4-fs: Ignoring removed i_version option [ 371.376915][ T7386] EXT4-fs: inline encryption not supported [ 371.596510][ T7386] EXT4-fs (loop2): Test dummy encryption mode enabled [ 371.678079][ T7386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.175098][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.871795][ T5885] Bluetooth: hci3: command tx timeout [ 373.227341][ T7308] chnl_net:caif_netlink_parms(): no params data found [ 374.103785][ T7399] loop2: detected capacity change from 0 to 1024 [ 374.143500][ T7399] EXT4-fs: Ignoring removed oldalloc option [ 374.186467][ T7399] EXT4-fs: Ignoring removed bh option [ 374.297673][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.605530][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.756316][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 375.768047][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 377.293952][ T7342] chnl_net:caif_netlink_parms(): no params data found [ 377.552108][ T7308] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.584898][ T7308] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.621874][ T7308] bridge_slave_0: entered allmulticast mode [ 377.671315][ T7308] bridge_slave_0: entered promiscuous mode [ 377.707496][ T7308] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.748883][ T7308] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.776830][ T7308] bridge_slave_1: entered allmulticast mode [ 377.807074][ T7308] bridge_slave_1: entered promiscuous mode [ 379.586098][ T7308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.626950][ T7308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.143927][ T7308] team0: Port device team_slave_0 added [ 380.365548][ T7308] team0: Port device team_slave_1 added [ 380.418834][ T5864] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.440916][ T7342] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.458577][ T7342] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.471908][ T7342] bridge_slave_0: entered allmulticast mode [ 380.490268][ T7342] bridge_slave_0: entered promiscuous mode [ 380.498896][ T6194] bridge_slave_1: left allmulticast mode [ 380.521015][ T6194] bridge_slave_1: left promiscuous mode [ 380.562111][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.639481][ T6194] bridge_slave_0: left allmulticast mode [ 380.667829][ T6194] bridge_slave_0: left promiscuous mode [ 380.701888][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.785617][ T6194] bridge_slave_1: left allmulticast mode [ 380.799007][ T6194] bridge_slave_1: left promiscuous mode [ 380.820008][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.841276][ T6194] bridge_slave_0: left allmulticast mode [ 380.883105][ T6194] bridge_slave_0: left promiscuous mode [ 380.889024][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.961421][ T6194] bridge_slave_1: left allmulticast mode [ 381.011128][ T6194] bridge_slave_1: left promiscuous mode [ 381.022953][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.680188][ T6194] bridge_slave_0: left allmulticast mode [ 381.689896][ T6194] bridge_slave_0: left promiscuous mode [ 381.710513][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.171618][ T7447] loop5: detected capacity change from 0 to 512 [ 382.188375][ T7447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 382.293685][ T7447] EXT4-fs (loop5): 1 truncate cleaned up [ 382.377939][ T7447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.722489][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.785295][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.834281][ T6194] bond0 (unregistering): Released all slaves [ 382.966839][ T7451] EXT4-fs error (device loop5): __ext4_iget:5464: inode #12: block 2: comm syz.5.260: invalid block [ 383.170069][ T7451] EXT4-fs (loop5): Remounting filesystem read-only [ 383.700149][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.219473][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.238437][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.257756][ T6194] bond0 (unregistering): Released all slaves [ 385.529373][ T7463] loop2: detected capacity change from 0 to 1024 [ 385.569534][ T7463] EXT4-fs: Ignoring removed oldalloc option [ 385.618285][ T7463] EXT4-fs: Ignoring removed bh option [ 385.698264][ T7465] binfmt_misc: register: failed to install interpreter file ./file0 [ 385.907858][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.177345][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.203873][ T6194] bond0 (unregistering): Released all slaves [ 386.267326][ T7463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.496635][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.566382][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.711571][ T7308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.776659][ T7342] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.908242][ T7342] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.091915][ T7342] bridge_slave_1: entered allmulticast mode [ 387.124362][ T7342] bridge_slave_1: entered promiscuous mode [ 387.548832][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.594013][ T7473] loop5: detected capacity change from 0 to 512 [ 387.652203][ T7473] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 387.731890][ T6194] hsr_slave_0: left promiscuous mode [ 387.738546][ T6194] hsr_slave_1: left promiscuous mode [ 387.759811][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.773399][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.797767][ T7473] EXT4-fs (loop5): 1 truncate cleaned up [ 387.837564][ T7473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.908749][ T6194] hsr_slave_0: left promiscuous mode [ 388.813311][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.819726][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.564930][ T6194] hsr_slave_1: left promiscuous mode [ 389.604469][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.639073][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.906011][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.006074][ T6194] hsr_slave_0: left promiscuous mode [ 390.080781][ T6194] hsr_slave_1: left promiscuous mode [ 390.114369][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.178957][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.193147][ T7487] loop5: detected capacity change from 0 to 512 [ 390.367957][ T7487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 390.461731][ T7487] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.654940][ T7495] loop2: detected capacity change from 0 to 512 [ 391.688013][ T7495] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.731834][ T7495] EXT4-fs: Ignoring removed mblk_io_submit option [ 391.814373][ T7495] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 391.935362][ T7495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 392.009249][ T7495] System zones: 1-12 [ 392.026628][ T7495] EXT4-fs error (device loop2): ext4_iget_extra_inode:5103: inode #15: comm syz.2.270: corrupted in-inode xattr: e_value size too large [ 392.045256][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.063074][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 392.075548][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 392.088787][ T7495] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.270: couldn't read orphan inode 15 (err -117) [ 392.101305][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 392.112670][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 392.175610][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.759426][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 393.787482][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 393.802754][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.960789][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 394.204316][ T5885] Bluetooth: hci6: command tx timeout [ 394.792893][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.272'. [ 394.812621][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.272'. [ 395.094282][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 395.164381][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 395.940974][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 395.997369][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 396.284805][ T5885] Bluetooth: hci6: command tx timeout [ 397.450344][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.471936][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.491179][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.503856][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.520823][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.534045][ T7308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.541025][ T7308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.639738][ T7308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.679260][ T7194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.842258][ T7504] gretap0: entered promiscuous mode [ 397.848918][ T7504] macsec1: entered promiscuous mode [ 397.881152][ T7504] macsec1: entered allmulticast mode [ 397.911812][ T7504] gretap0: entered allmulticast mode [ 398.180592][ T7342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.362683][ T5885] Bluetooth: hci6: command tx timeout [ 398.379942][ T7308] hsr_slave_0: entered promiscuous mode [ 398.412432][ T7308] hsr_slave_1: entered promiscuous mode [ 398.423528][ T7342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.594454][ T7517] loop2: detected capacity change from 0 to 40427 [ 398.664372][ T7517] F2FS-fs (loop2): invalid crc value [ 399.651681][ T5885] Bluetooth: hci5: command tx timeout [ 399.823052][ T7517] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 399.856365][ T7517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 399.856526][ T7535] loop5: detected capacity change from 0 to 512 [ 399.901103][ T7342] team0: Port device team_slave_0 added [ 399.942086][ T7535] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 400.154870][ T7535] EXT4-fs (loop5): 1 truncate cleaned up [ 400.183186][ T7535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.259630][ T7342] team0: Port device team_slave_1 added [ 400.451977][ T5885] Bluetooth: hci6: command tx timeout [ 401.460461][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.494983][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.516639][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.634251][ T7342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.741554][ T5885] Bluetooth: hci5: command tx timeout [ 401.750828][ T7342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.911658][ T7342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.007929][ T7342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.918282][ T5867] syz-executor: attempt to access beyond end of device [ 402.918282][ T5867] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 403.000717][ T5867] CPU: 1 UID: 0 PID: 5867 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 403.000775][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.000800][ T5867] Call Trace: [ 403.000814][ T5867] [ 403.000829][ T5867] dump_stack_lvl+0x16c/0x1f0 [ 403.000907][ T5867] f2fs_handle_critical_error+0x624/0x9f0 [ 403.000966][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.001018][ T5867] ? f2fs_build_fault_attr+0x53/0x1f0 [ 403.001078][ T5867] f2fs_write_end_io+0x958/0xcf0 [ 403.001143][ T5867] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.001209][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.001273][ T5867] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 403.001330][ T5867] bio_endio+0x713/0x860 [ 403.001404][ T5867] submit_bio_noacct+0x306/0x1ed0 [ 403.001479][ T5867] __submit_merged_bio+0x33c/0x770 [ 403.001545][ T5867] __submit_merged_write_cond+0x319/0x3f0 [ 403.001620][ T5867] f2fs_write_cache_pages+0x2067/0x2570 [ 403.001730][ T5867] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 403.001807][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.001855][ T5867] ? __kasan_check_byte+0x13/0x50 [ 403.001896][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.001948][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.001996][ T5867] ? rcu_is_watching+0x12/0xc0 [ 403.002050][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002102][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002150][ T5867] ? __kasan_check_byte+0x13/0x50 [ 403.002210][ T5867] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 403.002271][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002404][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002453][ T5867] ? add_lock_to_list+0x9d/0x130 [ 403.002519][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002600][ T5867] f2fs_write_data_pages+0x4ad/0xd90 [ 403.002684][ T5867] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.002747][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002812][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.002869][ T5867] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 403.002939][ T5867] do_writepages+0x27a/0x600 [ 403.003002][ T5867] ? __pfx_do_writepages+0x10/0x10 [ 403.003054][ T5867] ? do_raw_spin_unlock+0x172/0x230 [ 403.003101][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.003149][ T5867] ? _raw_spin_unlock+0x28/0x50 [ 403.003214][ T5867] filemap_fdatawrite_wbc+0x104/0x160 [ 403.003267][ T5867] ? stack_trace_save+0x8e/0xc0 [ 403.003325][ T5867] __filemap_fdatawrite_range+0xb9/0x100 [ 403.003395][ T5867] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 403.003466][ T5867] ? check_path.constprop.0+0x24/0x50 [ 403.003599][ T5867] ? find_held_lock+0x2b/0x80 [ 403.003654][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.003712][ T5867] ? do_raw_spin_unlock+0x172/0x230 [ 403.003758][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.003815][ T5867] f2fs_sync_dirty_inodes+0x2a9/0x990 [ 403.003913][ T5867] block_operations+0x2b0/0xfe0 [ 403.003998][ T5867] ? __pfx_block_operations+0x10/0x10 [ 403.004063][ T5867] ? add_lock_to_list+0x9d/0x130 [ 403.004193][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004242][ T5867] ? down_write+0x14d/0x200 [ 403.004284][ T5867] ? __pfx_down_write+0x10/0x10 [ 403.004328][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004377][ T5867] ? rcu_is_watching+0x12/0xc0 [ 403.004439][ T5867] f2fs_write_checkpoint+0x2b8/0x4c60 [ 403.004489][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004538][ T5867] ? kfree+0x2b4/0x4d0 [ 403.004587][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004642][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004699][ T5867] ? rcu_is_watching+0x12/0xc0 [ 403.004749][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.004798][ T5867] ? kthread_stop+0x273/0x630 [ 403.004846][ T5867] kill_f2fs_super+0x3c2/0x470 [ 403.004887][ T5867] ? __pfx_kill_f2fs_super+0x10/0x10 [ 403.004924][ T5867] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.005015][ T5867] deactivate_locked_super+0xc1/0x1a0 [ 403.005081][ T5867] deactivate_super+0xde/0x100 [ 403.005146][ T5867] cleanup_mnt+0x225/0x450 [ 403.005216][ T5867] task_work_run+0x150/0x240 [ 403.005266][ T5867] ? __pfx_task_work_run+0x10/0x10 [ 403.005309][ T5867] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.005362][ T5867] ? __pfx___x64_sys_umount+0x10/0x10 [ 403.005418][ T5867] exit_to_user_mode_loop+0xeb/0x110 [ 403.005465][ T5867] do_syscall_64+0x41c/0x4e0 [ 403.005509][ T5867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.005551][ T5867] RIP: 0033:0x7fbe633901f7 [ 403.005583][ T5867] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 403.005624][ T5867] RSP: 002b:00007ffc4c05f0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 403.005663][ T5867] RAX: 0000000000000000 RBX: 00007fbe63411d7d RCX: 00007fbe633901f7 [ 403.005699][ T5867] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4c05f180 [ 403.005725][ T5867] RBP: 00007ffc4c05f180 R08: 0000000000000000 R09: 0000000000000000 [ 403.005750][ T5867] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4c060210 [ 403.005777][ T5867] R13: 00007fbe63411d7d R14: 0000000000061cdc R15: 00007ffc4c060250 [ 403.005838][ T5867] [ 403.565602][ T5867] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 403.685424][ T7342] hsr_slave_0: entered promiscuous mode [ 403.719052][ T7342] hsr_slave_1: entered promiscuous mode [ 403.769039][ T7342] debugfs: 'hsr0' already exists in 'hsr' [ 403.795717][ T7342] Cannot create hsr debugfs directory [ 403.816391][ T5885] Bluetooth: hci5: command tx timeout [ 403.891743][ T5945] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 404.071610][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 404.131560][ T5945] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 404.151885][ T5945] usb 6-1: config 0 has no interface number 0 [ 404.159117][ T5945] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.193537][ T5945] usb 6-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.222141][ T5945] usb 6-1: config 0 interface 28 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 404.271652][ T5945] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 404.280810][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.388695][ T5945] usb 6-1: config 0 descriptor?? [ 404.992444][ T5945] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.5-1/input28 [ 405.077550][ T5945] sony 0003:1345:3008.0001: failed to claim input [ 405.209524][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 406.018984][ T5885] Bluetooth: hci5: command tx timeout [ 406.226321][ T5945] usb 6-1: USB disconnect, device number 2 [ 406.342988][ T7308] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 406.443782][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 406.510848][ T7576] fido_id[7576]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 406.571620][ T7308] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 406.880853][ T7308] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 407.042030][ T7308] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 407.165410][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.181872][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.199452][ T7518] bridge_slave_0: entered allmulticast mode [ 407.216481][ T7518] bridge_slave_0: entered promiscuous mode [ 407.628527][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.646588][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.665514][ T7518] bridge_slave_1: entered allmulticast mode [ 407.707045][ T7518] bridge_slave_1: entered promiscuous mode [ 407.821220][ T7518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.830613][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.838364][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.846259][ T7497] bridge_slave_0: entered allmulticast mode [ 407.857033][ T7497] bridge_slave_0: entered promiscuous mode [ 407.929326][ T7518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.978556][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.992912][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.000852][ T7497] bridge_slave_1: entered allmulticast mode [ 408.018414][ T7497] bridge_slave_1: entered promiscuous mode [ 408.225242][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.451413][ T7518] team0: Port device team_slave_0 added [ 408.509507][ T7518] team0: Port device team_slave_1 added [ 408.574324][ T7615] loop2: detected capacity change from 0 to 256 [ 408.921134][ T7615] FAT-fs (loop2): Directory bread(block 64) failed [ 408.930586][ T7615] FAT-fs (loop2): Directory bread(block 65) failed [ 408.939030][ T7615] FAT-fs (loop2): Directory bread(block 66) failed [ 408.945784][ T7615] FAT-fs (loop2): Directory bread(block 67) failed [ 408.953343][ T7615] FAT-fs (loop2): Directory bread(block 68) failed [ 408.960072][ T7615] FAT-fs (loop2): Directory bread(block 69) failed [ 408.967602][ T7615] FAT-fs (loop2): Directory bread(block 70) failed [ 408.974638][ T7615] FAT-fs (loop2): Directory bread(block 71) failed [ 408.982911][ T7615] FAT-fs (loop2): Directory bread(block 72) failed [ 408.989637][ T7615] FAT-fs (loop2): Directory bread(block 73) failed [ 409.284348][ T7615] syz.2.286: attempt to access beyond end of device [ 409.284348][ T7615] loop2: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 409.662363][ T7617] loop5: detected capacity change from 0 to 4096 [ 409.671086][ T7617] EXT4-fs: Ignoring removed i_version option [ 409.677930][ T7617] EXT4-fs: Ignoring removed orlov option [ 409.684220][ T7617] EXT4-fs: Ignoring removed mblk_io_submit option [ 409.690693][ T7617] ext4: Bad value for 'inode_readahead_blks' [ 410.966057][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.139153][ T7497] team0: Port device team_slave_0 added [ 411.308764][ T7497] team0: Port device team_slave_1 added [ 411.381935][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.389732][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.431688][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 411.460071][ T7518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.634103][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 411.682630][ T5931] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 411.700979][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.732865][ T5931] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 411.765139][ T7518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.766347][ T5931] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.784107][ T7518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.810995][ T7518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.827088][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.860604][ T5931] usb 3-1: Product: syz [ 411.881528][ T5931] usb 3-1: Manufacturer: Ф [ 411.886088][ T5931] usb 3-1: SerialNumber: syz [ 412.045842][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.064164][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.115336][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.638354][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.646405][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.676955][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.146675][ T7497] hsr_slave_0: entered promiscuous mode [ 413.166681][ T7497] hsr_slave_1: entered promiscuous mode [ 413.193892][ T7497] debugfs: 'hsr0' already exists in 'hsr' [ 413.199714][ T7497] Cannot create hsr debugfs directory [ 413.412502][ T7518] hsr_slave_0: entered promiscuous mode [ 413.464934][ T7518] hsr_slave_1: entered promiscuous mode [ 413.471430][ T7518] debugfs: 'hsr0' already exists in 'hsr' [ 413.558475][ T7518] Cannot create hsr debugfs directory [ 414.717941][ T5881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.729652][ T5881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.737840][ T5881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.746913][ T5881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.755749][ T5881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.882104][ T5931] usb 3-1: 0:2 : does not exist [ 414.990407][ T5931] usb 3-1: USB disconnect, device number 3 [ 415.253932][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.823928][ T6194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.910927][ T7342] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.959747][ T7342] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 416.102516][ T7672] loop2: detected capacity change from 0 to 512 [ 416.151593][ T7672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 416.211709][ T7672] EXT4-fs (loop2): 1 truncate cleaned up [ 416.219691][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.459736][ T6194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.528032][ T7342] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.569025][ T7342] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.763674][ T7678] EXT4-fs error (device loop2): __ext4_iget:5464: inode #12: block 2: comm syz.2.293: invalid block [ 416.788166][ T7678] EXT4-fs (loop2): Remounting filesystem read-only [ 416.853452][ T5885] Bluetooth: hci2: command tx timeout [ 417.428985][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.595563][ T7684] loop2: detected capacity change from 0 to 1024 [ 417.649872][ T7684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.763407][ T6194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.104427][ T6194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.929387][ T5885] Bluetooth: hci2: command tx timeout [ 418.982313][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.298731][ T7497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 419.315071][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 419.441333][ T7497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 419.479652][ T7497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 419.628274][ T7497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 420.021978][ T6194] bridge_slave_1: left allmulticast mode [ 420.036991][ T6194] bridge_slave_1: left promiscuous mode [ 420.049379][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.079575][ T6194] bridge_slave_0: left allmulticast mode [ 420.091261][ T6194] bridge_slave_0: left promiscuous mode [ 420.098579][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.121166][ T6194] bridge_slave_1: left allmulticast mode [ 420.127138][ T6194] bridge_slave_1: left promiscuous mode [ 420.133059][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.146528][ T6194] bridge_slave_0: left allmulticast mode [ 420.153703][ T6194] bridge_slave_0: left promiscuous mode [ 420.159405][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.357761][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.370987][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.382564][ T6194] bond0 (unregistering): Released all slaves [ 420.784438][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.798057][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.810901][ T6194] bond0 (unregistering): Released all slaves [ 420.992181][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.999410][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.006643][ T5885] Bluetooth: hci2: command tx timeout [ 421.016128][ T7648] bridge_slave_0: entered allmulticast mode [ 421.026024][ T7648] bridge_slave_0: entered promiscuous mode [ 421.039412][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.053206][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.062095][ T7648] bridge_slave_1: entered allmulticast mode [ 421.070218][ T7648] bridge_slave_1: entered promiscuous mode [ 421.268895][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.290532][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.621741][ T7648] team0: Port device team_slave_0 added [ 421.630656][ T7648] team0: Port device team_slave_1 added [ 421.730106][ T6194] hsr_slave_0: left promiscuous mode [ 421.742832][ T6194] hsr_slave_1: left promiscuous mode [ 421.754747][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.773326][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.797532][ T6194] hsr_slave_0: left promiscuous mode [ 421.813365][ T6194] hsr_slave_1: left promiscuous mode [ 421.822885][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.841846][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.872832][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.890963][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.956595][ T6194] veth1_macvtap: left promiscuous mode [ 421.997417][ T6194] veth0_macvtap: left promiscuous mode [ 422.020586][ T6194] veth1_vlan: left promiscuous mode [ 422.077079][ T6194] veth0_vlan: left promiscuous mode [ 422.692098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 423.082371][ T5885] Bluetooth: hci2: command tx timeout [ 423.214512][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.223824][ T5881] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.231676][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.240092][ T5881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.251807][ T5881] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.435203][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 425.463863][ T5881] Bluetooth: hci3: command tx timeout [ 425.556799][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 426.604497][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 426.689321][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 427.408809][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.482472][ T5881] Bluetooth: hci3: command tx timeout [ 427.590006][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.597440][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.624138][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.387940][ T7518] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.492241][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.499194][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.543618][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.609411][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.624141][ T7518] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.689629][ T7518] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.842375][ T7518] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.584660][ T5881] Bluetooth: hci3: command tx timeout [ 429.787563][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.794743][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.808795][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.815955][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.956039][ T7648] hsr_slave_0: entered promiscuous mode [ 429.979706][ T7648] hsr_slave_1: entered promiscuous mode [ 429.999369][ T7648] debugfs: 'hsr0' already exists in 'hsr' [ 430.012351][ T7648] Cannot create hsr debugfs directory [ 430.558702][ T7497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.494718][ T7734] chnl_net:caif_netlink_parms(): no params data found [ 431.568201][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.646971][ T5885] Bluetooth: hci3: command tx timeout [ 432.003864][ T7518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.193433][ T7734] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.200726][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.223054][ T7734] bridge_slave_0: entered allmulticast mode [ 432.231021][ T7734] bridge_slave_0: entered promiscuous mode [ 432.270697][ T7518] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.351085][ T7734] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.358845][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.371987][ T7734] bridge_slave_1: entered allmulticast mode [ 432.380377][ T7734] bridge_slave_1: entered promiscuous mode [ 432.473896][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.481052][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.499684][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.506845][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.610817][ T7734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.665129][ T7734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.739711][ T7783] loop5: detected capacity change from 0 to 512 [ 432.773921][ T7648] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 432.805214][ T7783] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 432.835222][ T7783] EXT4-fs (loop5): 1 truncate cleaned up [ 432.849373][ T7783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.067269][ T7734] team0: Port device team_slave_0 added [ 433.095523][ T7734] team0: Port device team_slave_1 added [ 433.145555][ T7648] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 433.322560][ T6194] bridge_slave_1: left allmulticast mode [ 433.390803][ T6194] bridge_slave_1: left promiscuous mode [ 433.484744][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.744389][ T6194] bridge_slave_0: left allmulticast mode [ 433.760309][ T6194] bridge_slave_0: left promiscuous mode [ 433.780736][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.821281][ T6194] bridge_slave_1: left allmulticast mode [ 433.851885][ T6194] bridge_slave_1: left promiscuous mode [ 433.857681][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.897112][ T6194] bridge_slave_0: left allmulticast mode [ 433.922335][ T6194] bridge_slave_0: left promiscuous mode [ 433.938156][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.946481][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.672543][ T7791] netlink: 'syz.5.305': attribute type 4 has an invalid length. [ 434.790897][ T7792] netlink: 'syz.5.305': attribute type 4 has an invalid length. [ 435.252409][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.276411][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.295170][ T6194] bond0 (unregistering): Released all slaves [ 435.522940][ T6194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.545899][ T6194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.571613][ T6194] bond0 (unregistering): Released all slaves [ 435.730335][ T7648] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 435.761422][ T7648] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 436.091531][ T7799] loop2: detected capacity change from 0 to 128 [ 436.384892][ T30] audit: type=1804 audit(1758879396.386:5): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.306" name="/newroot/103/bus/bus" dev="loop2" ino=1048622 res=1 errno=0 [ 436.960240][ T7802] netlink: 284 bytes leftover after parsing attributes in process `syz.5.307'. [ 437.108592][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.932019][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.015974][ T7734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.238788][ T7734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.247414][ T7734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.275584][ T7734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.352161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 438.406572][ T7811] loop2: detected capacity change from 0 to 512 [ 438.413559][ T6194] hsr_slave_0: left promiscuous mode [ 438.430239][ T7811] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.448785][ T6194] hsr_slave_1: left promiscuous mode [ 438.456015][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.485226][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.498010][ T7813] loop5: detected capacity change from 0 to 16 [ 438.531083][ T7813] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 438.545210][ T6194] hsr_slave_0: left promiscuous mode [ 438.561500][ T6194] hsr_slave_1: left promiscuous mode [ 438.567557][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.586873][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.065306][ T7818] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 440.244924][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 440.984722][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 441.600553][ T7830] binfmt_misc: register: failed to install interpreter file ./file0 [ 442.401539][ T5945] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 442.564404][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.597708][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 442.638317][ T5945] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 442.658184][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.688799][ T5945] usb 3-1: config 0 descriptor?? [ 442.712136][ T6194] team0 (unregistering): Port device team_slave_1 removed [ 442.763290][ T6194] team0 (unregistering): Port device team_slave_0 removed [ 443.556630][ T7734] hsr_slave_0: entered promiscuous mode [ 443.573228][ T7734] hsr_slave_1: entered promiscuous mode [ 443.604824][ T7497] veth0_vlan: entered promiscuous mode [ 443.753405][ T7835] loop5: detected capacity change from 0 to 8192 [ 444.460540][ T7497] veth1_vlan: entered promiscuous mode [ 444.853114][ T5945] usbhid 3-1:0.0: can't add hid device: -71 [ 444.879499][ T5945] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 444.951138][ T5945] usb 3-1: USB disconnect, device number 4 [ 445.008861][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.031078][ T7518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.676228][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.163631][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.170823][ T5972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.086884][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.106328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.064801][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.072021][ T5972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.071772][ T5881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.083207][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.101152][ T5881] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.115839][ T5881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.125180][ T5881] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.379258][ T7879] loop5: detected capacity change from 0 to 128 [ 452.416007][ T7879] EXT4-fs (loop5): Test dummy encryption mode enabled [ 452.491353][ T7879] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 452.525987][ T7879] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 453.971411][ T7518] veth0_vlan: entered promiscuous mode [ 454.034222][ T5864] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.202679][ T5881] Bluetooth: hci4: command tx timeout [ 454.222416][ T7889] fuse: Bad value for 'fd' [ 454.331738][ T7891] loop5: detected capacity change from 0 to 256 [ 454.333648][ T7518] veth1_vlan: entered promiscuous mode [ 454.496266][ T7891] syz.5.322: attempt to access beyond end of device [ 454.496266][ T7891] loop5: rw=2049, sector=256, nr_sectors = 100 limit=256 [ 454.587504][ T7734] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 454.701872][ T7734] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 454.719324][ T7734] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 454.806777][ T7734] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 454.950009][ T7875] chnl_net:caif_netlink_parms(): no params data found [ 455.042997][ T7905] loop2: detected capacity change from 0 to 16 [ 455.078889][ T7905] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 455.137825][ T7905] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 455.221022][ T7905] loop2: detected capacity change from 0 to 1024 [ 455.303036][ T7905] EXT4-fs: Ignoring removed i_version option [ 455.351174][ T7905] EXT4-fs: inline encryption not supported [ 455.369286][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.394376][ T7905] EXT4-fs (loop2): Test dummy encryption mode enabled [ 455.469981][ T7905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.507576][ T7518] veth0_macvtap: entered promiscuous mode [ 456.368001][ T5881] Bluetooth: hci4: command tx timeout [ 456.540218][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.567188][ T7518] veth1_macvtap: entered promiscuous mode [ 456.761894][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.781880][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.789070][ T7875] bridge_slave_0: entered allmulticast mode [ 456.872270][ T7875] bridge_slave_0: entered promiscuous mode [ 456.987733][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.000596][ T7922] random: crng reseeded on system resumption [ 457.231815][ T7923] loop5: detected capacity change from 0 to 1024 [ 457.250050][ T7923] EXT4-fs: Ignoring removed orlov option [ 457.476438][ T7923] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 457.981695][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.993566][ T7875] bridge_slave_1: entered allmulticast mode [ 458.007583][ T7923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.112566][ T7875] bridge_slave_1: entered promiscuous mode [ 458.811556][ T5881] Bluetooth: hci4: command tx timeout [ 459.768753][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.850997][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.110243][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.378061][ T6026] bridge_slave_1: left allmulticast mode [ 460.385059][ T6026] bridge_slave_1: left promiscuous mode [ 460.472715][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.596735][ T6026] bridge_slave_0: left allmulticast mode [ 460.625771][ T6026] bridge_slave_0: left promiscuous mode [ 460.650527][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.846377][ T5881] Bluetooth: hci4: command tx timeout [ 460.995924][ T5885] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 461.005516][ T5885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 461.020304][ T5885] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 461.047139][ T5885] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 461.060119][ T5885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.481618][ T5758] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 462.528460][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.548224][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.566353][ T6026] bond0 (unregistering): Released all slaves [ 462.620491][ T7875] team0: Port device team_slave_0 added [ 462.631176][ T7875] team0: Port device team_slave_1 added [ 463.331581][ T5885] Bluetooth: hci6: command tx timeout [ 463.482695][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 463.491019][ T5758] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 463.507453][ T5758] usb 3-1: config 0 has no interface number 0 [ 463.513647][ T5758] usb 3-1: config 0 interface 226 has no altsetting 0 [ 463.524175][ T5758] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0177, bcdDevice=28.68 [ 463.538687][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.543622][ T6026] hsr_slave_0: left promiscuous mode [ 463.547822][ T5758] usb 3-1: Product: syz [ 463.563935][ T5758] usb 3-1: Manufacturer: syz [ 463.569294][ T6026] hsr_slave_1: left promiscuous mode [ 463.569296][ T5758] usb 3-1: SerialNumber: syz [ 463.572984][ T5758] usb 3-1: config 0 descriptor?? [ 463.585806][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.606487][ T5758] ftdi_sio 3-1:0.226: FTDI USB Serial Device converter detected [ 463.614494][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.634302][ T5758] ftdi_sio ttyUSB0: unknown device type: 0x2868 [ 463.657907][ T6026] veth1_vlan: left promiscuous mode [ 463.676018][ T6026] veth0_vlan: left promiscuous mode [ 463.864303][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.877487][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.890432][ T5758] usb 3-1: USB disconnect, device number 5 [ 463.910496][ T5758] ftdi_sio 3-1:0.226: device disconnected [ 464.281163][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 464.327297][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 464.758132][ T7960] loop2: detected capacity change from 0 to 16 [ 464.782471][ T7960] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 464.883656][ T7960] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 465.282638][ T7963] loop2: detected capacity change from 0 to 1024 [ 465.289884][ T7963] EXT4-fs: Ignoring removed i_version option [ 465.297031][ T7963] EXT4-fs: inline encryption not supported [ 465.323233][ T7963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 465.362288][ T7963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.403596][ T5885] Bluetooth: hci6: command tx timeout [ 465.597871][ T7967] loop5: detected capacity change from 0 to 512 [ 465.607581][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.637080][ T7967] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 465.714166][ T7967] EXT4-fs (loop5): 1 truncate cleaned up [ 465.752569][ T7967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.848388][ T7970] loop2: detected capacity change from 0 to 16 [ 465.886275][ T7970] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 465.942468][ T7970] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 466.048377][ T7970] loop2: detected capacity change from 0 to 1024 [ 466.064321][ T7970] EXT4-fs: Ignoring removed i_version option [ 466.134524][ T7970] EXT4-fs: inline encryption not supported [ 466.191929][ T7970] EXT4-fs (loop2): Test dummy encryption mode enabled [ 466.229879][ T7972] EXT4-fs error (device loop5): __ext4_iget:5464: inode #12: block 2: comm syz.5.336: invalid block [ 466.258858][ T7972] EXT4-fs (loop5): Remounting filesystem read-only [ 466.630941][ T7970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.796668][ T5867] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.911993][ T5864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.214948][ T7977] [ 467.217431][ T7977] ============================= [ 467.222555][ T7977] WARNING: suspicious RCU usage [ 467.227412][ T7977] syzkaller #0 Not tainted [ 467.231997][ T7977] ----------------------------- [ 467.236854][ T7977] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 467.245845][ T7977] [ 467.245845][ T7977] other info that might help us debug this: [ 467.245845][ T7977] [ 467.256461][ T7977] [ 467.256461][ T7977] rcu_scheduler_active = 2, debug_locks = 1 [ 467.264743][ T7977] 1 lock held by syz.5.339/7977: [ 467.269724][ T7977] #0: ffffffff8e5c0c20 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x344/0x780 [ 467.280809][ T7977] [ 467.280809][ T7977] stack backtrace: [ 467.286956][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.5.339 Not tainted syzkaller #0 PREEMPT(full) [ 467.287010][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 467.287039][ T7977] Call Trace: [ 467.287052][ T7977] [ 467.287067][ T7977] dump_stack_lvl+0x16c/0x1f0 [ 467.287143][ T7977] lockdep_rcu_suspicious+0x166/0x260 [ 467.287225][ T7977] get_callchain_entry+0x278/0x3f0 [ 467.287300][ T7977] get_perf_callchain+0xdb/0x760 [ 467.287372][ T7977] ? __pfx_get_perf_callchain+0x10/0x10 [ 467.287449][ T7977] ? __pfx___schedule+0x10/0x10 [ 467.287514][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.287569][ T7977] ? find_held_lock+0x2b/0x80 [ 467.287631][ T7977] __bpf_get_stack+0x4f5/0xa10 [ 467.287707][ T7977] ? __pfx___bpf_get_stack+0x10/0x10 [ 467.287776][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.287843][ T7977] bpf_get_stack+0x32/0x40 [ 467.287915][ T7977] bpf_get_stack_raw_tp+0x1dd/0x280 [ 467.287975][ T7977] bpf_prog_b8a90dd1efcc4ad9+0x46/0x4e [ 467.288015][ T7977] bpf_prog_test_run_syscall+0x5b3/0x780 [ 467.288093][ T7977] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 467.288169][ T7977] ? fput+0x9b/0xd0 [ 467.288221][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.288276][ T7977] ? __bpf_prog_get+0x97/0x2a0 [ 467.288348][ T7977] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 467.288424][ T7977] __sys_bpf+0x1050/0x4de0 [ 467.288472][ T7977] ? __pfx_futex_wake+0x10/0x10 [ 467.288532][ T7977] ? __pfx___sys_bpf+0x10/0x10 [ 467.288585][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.288637][ T7977] ? css_rstat_updated+0x1c2/0x510 [ 467.288709][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.288762][ T7977] ? do_futex+0x122/0x350 [ 467.288838][ T7977] ? __pfx_do_futex+0x10/0x10 [ 467.288936][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.289000][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.289055][ T7977] ? xfd_validate_state+0x61/0x180 [ 467.289145][ T7977] __x64_sys_bpf+0x78/0xc0 [ 467.289197][ T7977] ? srso_alias_return_thunk+0x5/0xfbef5 [ 467.289251][ T7977] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.289324][ T7977] do_syscall_64+0xcd/0x4e0 [ 467.289369][ T7977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.289414][ T7977] RIP: 0033:0x7fb17af8eec9 [ 467.289446][ T7977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.289492][ T7977] RSP: 002b:00007fb17be4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.289533][ T7977] RAX: ffffffffffffffda RBX: 00007fb17b1e5fa0 RCX: 00007fb17af8eec9 [ 467.289563][ T7977] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 467.289591][ T7977] RBP: 00007fb17b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.289619][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.289647][ T7977] R13: 00007fb17b1e6038 R14: 00007fb17b1e5fa0 R15: 00007fff09a7e388 [ 467.289704][ T7977] [ 467.509791][ T5885] Bluetooth: hci6: command tx timeout [ 468.296288][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.303564][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.329546][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.355900][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.363245][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.390058][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.545306][ T7875] hsr_slave_0: entered promiscuous mode [ 468.553392][ T7875] hsr_slave_1: entered promiscuous mode [ 468.559696][ T7875] debugfs: 'hsr0' already exists in 'hsr' [ 468.566976][ T7875] Cannot create hsr debugfs directory [ 468.693583][ T7648] veth0_vlan: entered promiscuous mode [ 468.710726][ T7734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.774069][ T7648] veth1_vlan: entered promiscuous mode [ 468.808213][ T7734] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.974720][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.981901][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.095156][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.102339][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.137278][ T7648] veth0_macvtap: entered promiscuous mode [ 469.204552][ T7648] veth1_macvtap: entered promiscuous mode [ 469.300770][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 469.462889][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.516196][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.652655][ T5885] Bluetooth: hci6: command tx timeout [ 469.658462][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.667600][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.675131][ T7941] bridge_slave_0: entered allmulticast mode [ 469.684410][ T7941] bridge_slave_0: entered promiscuous mode [ 469.720697][ T6047] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.735873][ T6047] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.745249][ T6047] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.758010][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.769347][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.783321][ T7941] bridge_slave_1: entered allmulticast mode [ 469.791833][ T7941] bridge_slave_1: entered promiscuous mode [ 469.845767][ T6026] bridge_slave_1: left allmulticast mode [ 469.860111][ T6026] bridge_slave_1: left promiscuous mode [ 469.866674][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.879969][ T6026] bridge_slave_0: left allmulticast mode [ 469.887106][ T6026] bridge_slave_0: left promiscuous mode [ 469.893341][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.169100][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.180917][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.193827][ T6026] bond0 (unregistering): Released all slaves [ 470.219351][ T6047] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.302794][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.317587][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.368218][ T6026] hsr_slave_0: left promiscuous mode [ 470.375290][ T6026] hsr_slave_1: left promiscuous mode [ 470.381220][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.390917][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.413011][ T6026] veth1_macvtap: left promiscuous mode [ 470.419147][ T6026] veth0_macvtap: left promiscuous mode [ 470.424989][ T6026] veth1_vlan: left promiscuous mode [ 470.430612][ T6026] veth0_vlan: left promiscuous mode [ 470.773204][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 470.806912][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 471.106612][ T7875] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.126101][ T7875] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.146846][ T7941] team0: Port device team_slave_0 added [ 471.162677][ T7941] team0: Port device team_slave_1 added [ 471.198637][ T7875] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 471.223844][ T7875] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 471.294165][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.301120][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.328031][ T7941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.373774][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.385963][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.413921][ T7941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.453256][ T7734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.577266][ T7941] hsr_slave_0: entered promiscuous mode [ 471.585979][ T7941] hsr_slave_1: entered promiscuous mode [ 471.593095][ T7941] debugfs: 'hsr0' already exists in 'hsr' [ 471.598904][ T7941] Cannot create hsr debugfs directory [ 471.610799][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.626861][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.810637][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.829734][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.177928][ T7734] veth0_vlan: entered promiscuous mode [ 472.198623][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.260288][ T7734] veth1_vlan: entered promiscuous mode [ 472.298349][ T7875] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.328703][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.335848][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.382261][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.389383][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.429371][ T7734] veth0_macvtap: entered promiscuous mode [ 472.480166][ T7734] veth1_macvtap: entered promiscuous mode [ 472.620594][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.656189][ T7941] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 472.695386][ T7734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.745240][ T7941] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 472.783135][ T7941] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 472.806439][ T7941] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.848892][ T6047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.865894][ T6047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.898352][ T6047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.911882][ T6047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.176335][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.211758][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.271143][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.280968][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.295124][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.364109][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.404135][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.416665][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.423827][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.484364][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.491566][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.259660][ T7875] veth0_vlan: entered promiscuous mode [ 474.270249][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.299573][ T7875] veth1_vlan: entered promiscuous mode [ 474.378116][ T7875] veth0_macvtap: entered promiscuous mode [ 474.398627][ T7875] veth1_macvtap: entered promiscuous mode [ 474.465224][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.494869][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.523169][ T6026] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.547687][ T6026] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.568779][ T6026] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.591561][ T6011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.744585][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.758229][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.890093][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.908521][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.100028][ T7941] veth0_vlan: entered promiscuous mode [ 475.120361][ T7941] veth1_vlan: entered promiscuous mode [ 475.187381][ T7941] veth0_macvtap: entered promiscuous mode [ 475.199053][ T7941] veth1_macvtap: entered promiscuous mode [ 475.251887][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.274243][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.295125][ T1147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.318811][ T1147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.351226][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.376961][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.492709][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.523831][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.590342][ T6194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.608870][ T6194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50