last executing test programs: 16.649828632s ago: executing program 1 (id=709): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x22000c0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x143042, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) ftruncate(r2, 0x2008002) sendfile(r1, r2, 0x0, 0x80000001) 10.462116862s ago: executing program 0 (id=725): syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000003,overriderockperm,nojoliet,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c736273303030303030306f729f1aa17b8fbad6b73030303030303030302c6f76657272696465726f636b7065726d2c756e686964652c757466382c6d6f64653d3078303030303030303030303030303038312c6e6f726f636b2c00"], 0x4, 0x3f1, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086607, 0x20001412) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x9, 0x0, 0x0) 10.391067199s ago: executing program 4 (id=726): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) unshare(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x103382) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) prctl$PR_GET_ENDIAN(0x13, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="0404"], 0xd) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @any, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x14) 9.37900159s ago: executing program 0 (id=728): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r1, 0x8000) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000ffffc001) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) 9.285227028s ago: executing program 1 (id=730): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) unshare(0x2a020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) readahead(r4, 0x3, 0xdd4) 9.242103851s ago: executing program 4 (id=731): socket$inet6(0xa, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x0, 0x0, 0x599}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 8.013954261s ago: executing program 0 (id=734): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd300}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr=0x64010102, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000080)=ANY=[], 0x85, 0x1501, &(0x7f0000000280)="$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") 7.626095053s ago: executing program 3 (id=735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000200000007c80000040000000000000000000000000f80000000000000000380001000000000000000300000003000000239bb0f4a4a3c02be500000000000000006be1982d1976e95b"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0xf, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740)='H', 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1000000, &(0x7f00000005c0)) 7.375489952s ago: executing program 1 (id=737): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev}, {@remote, 0xfffffffc}, {@multicast2}, {@private=0xa010100}, {@empty}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x96) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.290364139s ago: executing program 3 (id=738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007060103000000000000200000000000050001000e000000a5"], 0x1c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040a0102"], 0x14}}, 0x0) 7.290113059s ago: executing program 4 (id=739): write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3fffff) 6.352874925s ago: executing program 3 (id=740): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x13, 0xa10, &(0x7f00000001c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c00)='./file1/file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x4d2, &(0x7f00000002c0)="$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") ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.079904997s ago: executing program 0 (id=741): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000280)={0xa, 0x4e25, 0x0, @local}, 0x1c, 0x0, 0x0, 0x0, 0x1f0}}], 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x5}, 0x10) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x85}}, 0x0) 6.075284918s ago: executing program 4 (id=742): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 6.055980139s ago: executing program 2 (id=743): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @prog_id}, 0x20) write(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={0xffffffffffffffff, 0x20, &(0x7f00000010c0)={&(0x7f0000000040)=""/41, 0x29, 0x0, &(0x7f00000000c0)=""/4096, 0x1000}}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee0", 0x51}], 0x1}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x2, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 5.92020663s ago: executing program 4 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000300)=[{&(0x7f0000000180)="9b", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x1e8640, 0x0) 5.437565639s ago: executing program 0 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000700)=""/49) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 5.436779629s ago: executing program 1 (id=746): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 4.306206551s ago: executing program 4 (id=747): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f0000000900)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 4.288441583s ago: executing program 2 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) dup(0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) 3.879877066s ago: executing program 1 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 3.854566788s ago: executing program 3 (id=751): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f0000000380)=ANY=[], 0x21, 0x1506, &(0x7f0000001b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x3, r5}]}, 0x24}}, 0x0) 2.672209223s ago: executing program 2 (id=752): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000dd2482ad4da9d0ae35a821557365d84a68bfdd55e9edb34f60d11837e57768a7cda393f98c27336f05834014174536cc7c806e4369d1c6566af57c447e44ca72da517b62b8cae803a913ce55af6741c724a13e593c5ea610aa5e8f45babd7553d6cec45a5f9daf2269be1a6c35f78307ea3c07865622e3213ce36b7940eb3c574a1769b1b0749c16cbe074453c6fa76200411cc9b812d1013997c5aa3eda8ec70000000000000000000"], 0x1, 0x5d3, &(0x7f00000006c0)="$eJzs3U9oHNcdB/DvrGXZ64KzSewkLYWKGEwbU1urbWoXCnVLKTqEYuglV2GvY+G1EqRNUUIp6v9rjznkkB7UQ069pvQQmp576l13Q++6uczs7GptKYoUy9pV8/nA2/fevpk37/0887Qzi9kAX1mLb+b0RoosXnljvaxvbXZ6W5udB8NykjNJGsnMIEuxkhSfJTczSPl6+WbdXfF5x3n94ScfXv7g486gNlOnavvGfvsdzEadMpfkVJ0fVX+3n7q/YjTDMmCXhoGDSXu0y8Zhdn/K6xaYBsXg7+YureRckrP154DUq0PjeEd39A61ygEAAMAJ9dx2trOe85MeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwk9e//F3VqDMtzKYa//z9bv5e6fKJ9OukBAAAAAAAAAMAR+NZ2trOe88P6o6L6zv/VqnKhev1a3s1aulnN1axnKf30s5p2ktZYR7PrS/3+avsAey7suefC8cwXAAAAAAAAAP5P/TaLO9//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANCiSU4OsSheG5VYaM0nOJpktt9tI/jEsn2SfTnoAAAAAcAye28521nN+WH9UVPf8L1X3/WfzblbSz3L66aWbO9WzgMFdf2Nrs9Pb2uw8KNPufn/830MNo+oxg2cPex95vtri4miPxfwsv8iVzOVWVrOcX2Yp/XQzl59WpaUUadVPL1rDce493puP1W590VhfqUbSzN0sV2O7mtt5O73cSaOaQ7XN/kf8TRmd4ke1A8boTp2XM/pznU+HVhWR06OIzNexL6Px/P6ROOR58uSR2mmMnkFdeAYxP1fnZaz/ONUxXxg7+17aPxLJd/7zz1v3eiv3791duzI9U/qSnoxEZywSL3+lIjFbR2Owih5utXy12vd8lvPzvJ076eZ65tPOjcznB1lI57Ez7OIBrrXG4a61S9+uC80kf6rz6VDG9fmxuI6vdK2qbfydnSi9cPQr0sw36kJ5jN/V+XR4MhLtsUi8uH8k/vKofF3rrdxfvbf0zgGPd7nOy8v2D1O1NpfnywvlP1ZVe/zsKNte3LOtXbVdGLU1drVdHLV90ZU6W3+G293ToO3lPds6VdsrY217fcoBYOqde+3cbPNh89/Nj5q/b95rvnH2J2dunPnmbE7/a+bvp/7W+Gvjh8Vr+Si/3rn/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvry1996/v9TrdVcVFBQURoVJr0zAs3at/+Cda2vvvf/d5QdLb3Xf6q4s3Lh+43rn++3vXbu73OvOD14nPUrgWdj5oz/pkQAAAAAAAAAAAAAHdRz/nWDScwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtsU3c3ojRdrzV+fL+tZmp1emYXlny5kkjSTFr5Lis+RmBimtse6KzzvO6w8/+fDyBx93dvqaGW7f2G+/g9moU+aSnKrzo+rv9lP3V4xmWAbs0jBwMGn/CwAA//+tLA7Z") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x4207, r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x0) 2.445025262s ago: executing program 1 (id=753): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x225, &(0x7f0000000d80)="$eJzsmL+LE0EUx78z2cwlIqLNFTZXeOCJXnLZoFwT9ATBSoTzZ2fw1uPM3kVyK3gBwcPGRjsLwcbCf8Diiqss7PwHBC1UECxMYWFjs/J2J5u5TC4TVqx8n2L4zrz3Zua9zL4iYBjmv+Xrl1+fn55fvHIKwEHMYkqvfy8AQqRaGv6fXtw/+bxx4eWbj6/fbRx6uDu8H4XE8d6F0pjzPQBvlwqIspOy6N8kZvVkBjLTVyFxQuvrEKhofQsS17QOIHBT67uGbpN/pXJnLQwqt9vhCokFGmo0+DTUh+/X2xZY0fM4jmNh2De3uq1mGAYdQ3jaNsLkFlSsIVN2WGvaql8RCr0liYZxP6rijSePt2ner82CUb8aJGo6iToElvX6Iqb6tUlLYuR/1BvsX7DyH5ktuZLBlXYpFY2fo3yUM3yMODKfJ6oZzlE652zTYeS5BvZGFTEwUSVz3dAhqOxaJCue+y2e1T9ojkMvTZrFs7L9uP+FyJVFX0z3dt/bpm+u8Fi4jxCTv5/SpHfuf4j5K1ZGtyX/pmL7XezDTto/4lcCx43+5Bn9oxqt36tubnXn19abq8FqsOH79TMCeHTaryaNKB2tvjfoz+WkPx0w9i/u46ukwoNmFHVq6aiEQhlR1PGTuW98P8s77R9Kh0W4COBYOqG2qbIdC9YZQqU+MvElNWc7MQzDMAzDMAzDMAzDMAzD5GIGIvkX1IF/OfH+EwAA//9hel62") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000480)="bee954abc1e89ba79973c8a56d65aae6bb55a334283274bffe0a61bdeae323881653bf1fa5773e0e22af77d6cc9a5b9d3b34ec0ca1cd7e0c2740781d8db6ef100765e50ba82ba1473d48780cd1a302562481f69af5f543b6d55a4c658c9fde692918ad8937c088977efab893a2576cf30b4882cd12cfa0e4286823f568a5333420c918c23e0329bedd1876abcfbe5d5c4538f326b3654e05ca9dc0cfce4336ffcb3894") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x0, 0x0, 0xd, "8be5143a9de81e98b6c5088d5d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1035) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [{0x18, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "0600"/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 2.423743013s ago: executing program 0 (id=754): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000180)={{}, "6d16d9ea9cdad34d2521f3f7cb4f5aad64c0e3ea6294c64add52aafad755f47d3ac5e888d9a8f0bce833b866d398c93f3c58650c587a2f4a8fe36a4665d85002bab98d9990c668b4dc07e21b082db93d0aa0875a761cb396006c071fd6004c9000788dd5e99cadee53890417d4e00d9506cd996be6587d84bb1dce47f84392f119fd1884be90ff9e4f1961a03abf62d8f849b2e65016523c531cc7f79714f0ee6d9da9c0087bc3e29dff70b32ef2a1c6c8e607bc75a1fd5ec8a454eb13348d7114d188596f203006c1244ff880d6ee7969915071d3f35a60722ebf0a15ec3922b49cbddbdac18febd71077a6aada8cb10bd8808e39615afdce4c67d4472ba3dd317b7ac7e302a8814b75a7ec5fb4a89e1964d1c752e23ffcb9b59952b763b52546f589c71e1c132981291f39ffe9991a754170f2f7cac853fd3ba16bb161eaf64a7114e4ac3e51fc5a42bc2847bcafb87061b90f147e096f838a7b2bfee9ed7394532325224b71a993f150021baf369cc6e3c379098d47740cf262976ad8434dae36d64fa2accbe519ad078b0bb5e7a2c0f0075095226b8f96c6fc55971177f02940e50a80503b5ec7a3b30927d943429912b33a6279ffa6e5a4a59c1e944fcd507e7491502cf6612bfe4bd3b1543d010eb79556677a3f295f993727b7317f1e55f56f5528caa25143bf4375f02596a5a1f573b39e4989b00cdc4c1ba08013a4c090869bf3dbc7c7b13aac86cade0aa31fc809044a21460ca7724298d9fe82983b2909f77b4b3c517d5c17cca6b839d9e0fc05d45695a36f420d609dbcc8917f2e33238b402e26837c7583bbeb2f4cf00eceb32f4612570989d9792fec7e971ccf4a4c56e9e7cb2f907782467b59975234783d85b9e8964ffb3deb2857102d7162af6c9c21f94a30a8c4583530341880a613422ecad2f75ac984f36c645bb7a15c4d8a9817fdd7479778e20583514e8290b19b5b2733e63bcacec38a0a736943bb26e79dd61068522feabb797d2c29569ae9ea5beaceb1b17ef9454317444657fe263c53e666198f43c13972e61a0a776707dbbf6b7b06f66e0ab6da89e11403424ab57b2e612b27af7d8f7a0e4147db8ac74cfb3df1398f6b0525bfbb584f1e75a82278257b280831f76ac26ec778eb298b9bddebd5abaf803d662cb9e0daed769ed8df96e5817b7fb9b40a78497a9d58aec15ced9a2cf4d0e34acae68f0c7d6c89959632ee93a27f30c6d8e3941cb080a1129e3829e485e42ac939a9307ede48bd3f5ca1cd1217781b76eb12f02aa2b2d2a26467ea4c486b493009971a2a62f2baf7ee6d1cce519d86ad3b2913142802155c9e16216d5ad212a3e1ee70c5e3d5b4d7bda798dd7a2c1bd0de39401030277ea0f12b1e84744491812652c07ad88c70398d07b5b3ca5e868550f9fee706480577d17651f6af563f17d1845e0a34b74c125b0fa6d9cd9a2214ddb3cd23ae16f68418f52d0811cb541aae0e5d0f975aff599c283353658eb6d8d614f8595ed60afe89f365a588a2691e22f4ede5cde098e1c4a78e26ef6ec3b2575250857ce2e95176291f968e57cbd5558b8ced3a2ede4ab537b562dd2e7d6914a9f0322c46758ee0b779fb3b15c1c99fd7662d57da8a998de9757b62e1fcf770f2e2095fdb4d9195f1453d5424d9b932b4a47059d5d65ee3928d6ec9bdee041b39e30a3930a5ea3d01c426572b16b59ab9c02fe4724f6b4686e150fed254591e3a85c3f95b133991a53de8d9b7184327ef67b172df941bc2ea754e2d399cc7b15b6a4120ebcf9f035ffe0f7d4f52f3eaacb19f4354d29d8fcf4d998e2738449a22d2e09be553a83a8ff6e2a49c5dac1e511d11ded4fe935b285d8038fb87ce97db38b4aa81455a436ad9e4d15fd3faf01b5a505885135ee5f00df4e849dcdb053dfe644dd5bc584d40ad8495fa249d3c386754c8c698647fd85447450be746e496d36778027ad987a77145cde3543c256df90fa7d468eeb35be0812c33808437674f5156e3756784639524fb9f4729b050cdd080fdb32d277b73c0bc0ed9e4317c2e41c80797324b7dbe823ead07b9ebab466177c3c53b1c2c9566a588f1ee992fd671b08584eda4706b6735289c8e024fb9630bb79a6fdb5eb85460f42d0455181909644581f882ac37bdba7669a65fcc86cc33dbe2bd0c1f2d50ad04fd8d1cfdc0d9a259b171b4b13ca86ba0cb19330be8b5b64fbc104fd36c700fbf6c3be65f614d395c75efbe79add2c5ca7dae20575510401bbad262f91ea44358e523f3ee0261995dfde5d437e7bc4a2860ad5f6348321c9ae71868f4197b1eb70e0251095b156abe4bb15aade065139a25965542a66bc2775b1702bbfad7d384bc2b511dc657e6b2d3f2e2180068239551a378254d1c32efc53a0e128a8492bf529e7b00d549b3694e2a564711011888e42e70bd69686fa6524c6a00e09cb1bb171c62dcdd73a7ec51a6f39627d17c665291c6ff5c2e4b3a1e12d61aebcd48311f0c81e559183f59492f61219c0d793aad60b8f98872df3aa3648b0f1a017aa87b85e043d7bffdd8c520bfd045857bc3b99747dd2da54cf1c5f8f896013b7ac0f9ea53b8cee111ca894db68dbb45282802942a4d11d42dcd7737da34c8da0b62912f098b9976fc0fbabe3161099cf4954bcfd0a48e45b56bfb8cb522d075e4836cfbd03243e3186f4322a85fd6be177b632d546f1a3aea6852a7dab72e18609a68bd718ef651ec07d19f82db9fcc37a67fac46ab6e1edcfa10b8e3ef0de9b1007157e0778a9af2ef48127abc971f7eb75d8ed7e3549e104ccece02aa8e570d00cfc8c44325e16aea80daf3dc46ae7f05f83c895ceb854810da0401d4175404fceb89f81551b312c1a2a3756c3ee66d905bd05d4eb5d915f28671abd5e2581c521edfdce73b507a766defe24a9159ae8262673026a44e83c314e24d5437ea0e6db253c71d4edd2ad1de6a6863fd3763164efc390c1cda99ab3a65ac6ee11c3a552c58ac44567519afc6f9e312f282517509f1fb8f58cc51dfcdc7de5fb1b6a0f12368cd917e309f67ddaf3df2ca3c16af9d9f06b8e8fa33d57f92f514d0e57d84b74a8cb6bd54965f581121878af4e3de488914c79f376ca7d93498a180e2241cca739a480c077cdadfe5efcaab581112add1ba28aaa634da07b0069437b5d68dbaae9732f8bf5c5cfd287ce310a1f13396250b6baee759c6018395eeb419333b30495a50b3d2371b02bc1d023c3be956a064af463284a2d7fcb0b6fff1d1a6bf2fd7d133986943641cddb8bcd7fae100808f9d464fabf7cdc2d8f0c3e64215c59ec5430e994c3ad46908787525b45160fe7853234b9a1849e3b584533146688323cfe193255c33e2db9b86487c5a56e7b6e55235b735afbc145209fe136d2bcdfae934d24f55a516008c9824e52d7a5a886a45fa36ca22645fd5463f2d45fc1099f158d49af9c4bd233520b05af80e8018e2979d8aea220e963245e9629556750d5214ae3d9b4627660b95a13d74786feb9b17288ec27378669507c03f8fdb7e0d7e03fe0cc21677fcaf10dc524f313aba0e1db26de228ae03d7e0abfc703c59f008b301bc9bee2b65845e35baebc0b2e777f5c86f90cc48d4e5ab2aebee3b5bad80db39e02473ebe9766d4d1f7088034e06ba25d1a8b511321f874713e4fbb0c945d2c227ba9578a7b6b4367166480d0128212f93e15c15d96adc90c929b03deaf78ea5d65e5bbaec5922c23a9ed6c453811e976c3b4eba54877168a198ad75c692cc8d8631ab1dacf79c9b57c2ef8d342b0fd821d218b9f84de1cf0ef39a2dae508794d8609b00cec7384376915c4a0cd3fd75ae34a5fe22cfa401cc944e3ad9c526ed13a39ae8077a44376bb30b606608e16c7a8e7b14ee446a4658de659bd7b92c96582d295028a487d2fc553f781e1337ebf84097950af1c4e0c2d0d3e88446c4da06034180c0245f6a9fdf4f85e205cf53382943c85ffe25de17de078b2582bf01d0ec6aac2dc4b05782fd01e92c67a986e015fe7a9bef0ba503f6fd43b1e539b2e52e04b339af0298e9041891d5d5b181aa818097fb3ca5694fa4a279575b78d501cbfd5fd2f66d19cbb38051a1993dc0297935576ba3581393e05e059b24b4b601af9f6b970d43486383982d0463d81c397dff6ef59cba83de6c878d537739a9245ba781c270c20783605499a60173d32ef0aa7eb6521b6a89df14801aee6623d1e217819aa918205c227c041f2bfade23c360ae3b117858a5968106499adb30c11fa57ba186685074d239ee051db362607a9288256ee4b418f865d96977e8d2e5bcfebacb2ba11fd9d150ecca1be44fc52811d8b2060dc200f6545cd7f6b30def7f50a9d3f4a06352904ef3263daa4ec34364d1413584f0e75d7b0e682f66b648f68dfa2aaccc5df43430b852cf98a6950ddd088a1a5afe08265e099a89d66d1d99ace61b5a715f54105689f04c24e866ce13d1457d215907070e2dd27dd31ee59c641eced8f077841ce3ac0c564a855fb6c1d28a1f55562d5e346273d72600d6cef5a625a9d22cea267a89b574a6cd8b817180ec9e008c30349d3e9034a64a318aab96d7d915560960a467013886d35e209c6b080b11bab809984396ecb98010cfe00ca5d8accf1a9424b5315973fd03d9d99dc8825677430effe73e8db18cc3fb7b61505eb15a45744372ac67ed96068bbb218a702c6eb4270b2ab1f109f7f35f111952f73e79760b56ba65b9632e9b6a943fee3e3bf841b82b26ac53d3037bec938c76c907804626d69922a01b5ef7e08c98ecef8c8f2ec81cb5ff16aa9faad78d9d2cea84f9de58ab410e6add0f9760610be54138893e5c9b7c0cb04ef4d4d17b4095f5d5a35608f13b957b03b333e317000ed97ef46e8260959246092fb46469fb818cb73e5b45f009372459d1815766f1e3ca1321d08c9fd1e52e4aa89888e043775ab7cc3fb1853fd8cdf5cfc366e2163a30eda93767653f8bb5ef8783fd8b34784c54753d51379ca76f08f2fe0f3ed5a9605b8b3ba222772c6b029858aa5b9b0e8b8adad797a7a6e9b260e07c6d7a32b46cc83b3a59f45d60138abe791d0c56caa3908991302b2b55accf2dba530e4c2bcb4fe30ff7119f5541ea244d40e535c5568eafca7aa6314360b6337e0e75b9fb5b7d2079acff40110a72011bf59b57c38e0e66617fb4e7d1e46670c8bcaf40a33aac84f032b48338c277cc8fe70a350085a48b1a8c4fc2b9b6fe113839a3bd751ae5bc01d2175a6bfb324ca9c1de41acdb3772289e3ab2652aec9e3c916cf415dc8bc065b94e8a930e91776a2d3e814b552a67312716901e0a16b077ab5a25c199b3bfd44ede57bcabebda6c2785b1ef2ba871c61b147296d63b4f3d44cf1553cda281d371b4aa74cd6fdfc1f4b5647f7b8c46b1b62bd8ebd3388d19ca2b48390f17ba0e75d638da8ffc926b2704520cc9c2d19bdec1f595e7e6e9df15891561dc5e49932973c2180e2ddffd9b60b425d89a697734ac42f9c83eedfe26deaeb81cced2beca62e5bef5ec792ffa6fc617adb6c394bc1eaca7fea1798cd71625c7f0fcc28d6ca966d8dbdb59d0d9d60237e1b3228f46ed193c9bf013362326f8733c7de64446b2fc158cb97afeccc519867d9a2be3d76c3afa8759292c355aca31396b653a455439c910ca9676ca2e99de9ad6691811fb5df5701e29d7cc3923c284df68c3cda322406cffeb81f2ecf01a963c09c8c68974d3c05f1fbd8328938a6d1f16f326b0a6b89f05efb3a74051a20b0cfec6c37b"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1.292153425s ago: executing program 2 (id=755): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={0x14, 0x15, 0xa, 0x201}, 0x14}}, 0x0) 1.291544735s ago: executing program 3 (id=756): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc43, &(0x7f00000011c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00') 177.418236ms ago: executing program 2 (id=757): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@private0, @remote, @empty, 0x0, 0x0, 0x5, 0x100, 0x0, 0x2400048, r2}) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000200)=0x10, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000000)=0x800, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r6, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, 0x0}, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(r6, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="b61157afbdcaad0a858eb75d7d89b000c0f3d48e40201352ceadbe67dd67ca9e5ffa8872824c68ddfbc7d798d29551f06e8bbd938ab77f3c21356667d15738c544c3d7b82436c3d49265f21e6b315b7a328711d3d90d42fa06e5d19c9797f816c37dcdb89821c6505c18e7ca8f33f29dd9b23720ab57f5c639cf5d87d14468c11c73d495b805c5a73350804823c57fef7dc9ccf57cf6ff2d3c80078ade10bf5dc4c1baf3290289080236a57f942f9c6b2a28e5933365aba94eef3ccad2a4764e801c8a47f64197a1731d99a34d2d1534d5d38c68ad805160ea55dbef0da738fcb03c6c", @ANYRES8=r7, @ANYRES64], 0x100000530) connect$nfc_raw(r3, &(0x7f0000000000)={0x27, r7, 0x0, 0x2}, 0x10) 170.22µs ago: executing program 2 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 3 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000f78500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000d1088500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.080713][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 154.110870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.156284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.185502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.225538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.240167][ T5022] loop2: detected capacity change from 0 to 256 [ 154.252768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.289403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.338639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.020312][ T5006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 155.155917][ T3647] EXT4-fs (loop4): unmounting filesystem. [ 156.336992][ T5061] loop4: detected capacity change from 0 to 2048 [ 156.351815][ T5062] loop2: detected capacity change from 0 to 512 [ 156.375330][ T5062] journal_path: Lookup failure for './bus' [ 156.423838][ T5062] EXT4-fs: error: could not find journal device path [ 156.457071][ T5061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.976432][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.983825][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.149765][ T4798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.829057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.856807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.905556][ T4235] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.942035][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.989464][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.002836][ T4235] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 158.027210][ T4798] device veth0_vlan entered promiscuous mode [ 158.037454][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.050573][ T5087] loop0: detected capacity change from 0 to 64 [ 158.061552][ T4235] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.061552][ T4235] [ 158.061564][ T5088] loop3: detected capacity change from 0 to 128 [ 158.082215][ T3835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.100150][ T4798] device veth1_vlan entered promiscuous mode [ 158.131601][ T5088] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 158.142552][ T4235] EXT4-fs (loop4): Total free blocks count 0 [ 158.167543][ T4235] EXT4-fs (loop4): Free/Dirty block details [ 158.316309][ T4798] device veth0_macvtap entered promiscuous mode [ 158.332660][ T4235] EXT4-fs (loop4): free_blocks=2415919104 [ 158.339628][ T5088] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 158.354985][ T4235] EXT4-fs (loop4): dirty_blocks=16 [ 158.618804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.645223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.732280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.984476][ T4235] EXT4-fs (loop4): Block reservation details [ 158.990679][ T4235] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 159.056889][ T3647] EXT4-fs (loop4): unmounting filesystem. [ 159.256865][ T4798] device veth1_macvtap entered promiscuous mode [ 159.271152][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.389757][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.475450][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.486329][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.496480][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.507255][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.659380][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.806781][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.830924][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.871656][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.911388][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.935015][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.945590][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.960431][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 160.972103][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.980827][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.990571][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.999514][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.010604][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.740003][ T4798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.750227][ T4798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.761568][ T4798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.770642][ T4798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.090578][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.141358][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.221946][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.272162][ T5142] netlink: 5 bytes leftover after parsing attributes in process `syz.2.306'. [ 164.279502][ T5120] kvm [5119]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x5500000800 [ 164.287132][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.311100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.351032][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.359312][ T5120] kvm [5119]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x7100000800 [ 164.372672][ T5145] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 164.381066][ T5142] loop2: detected capacity change from 0 to 1024 [ 164.409058][ T5120] kvm [5119]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xa600000000 [ 164.464869][ T5120] kvm [5119]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xb200000000 [ 164.478339][ T5142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.805250][ T5164] loop4: detected capacity change from 0 to 2048 [ 165.874536][ T4031] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.936884][ T5164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 166.134878][ T4031] usb 3-1: Using ep0 maxpacket: 8 [ 166.254197][ T4031] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.264809][ T4031] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.306424][ T3647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 166.337318][ T4031] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 166.354241][ T3680] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.371011][ T4031] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.423764][ T4031] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.461042][ T4031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.565078][ T4031] usbtmc 3-1:16.0: bulk endpoints not found [ 166.608049][ T5178] bridge0: port 3(syz_tun) entered disabled state [ 166.644092][ T3680] usb 1-1: Using ep0 maxpacket: 16 [ 166.688723][ T5178] device syz_tun left promiscuous mode [ 166.703739][ T5178] bridge0: port 3(syz_tun) entered disabled state [ 166.774564][ T3680] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 166.792940][ T3680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.816518][ T5178] EXT4-fs (loop4): unmounting filesystem. [ 166.834615][ T3680] usb 1-1: config 0 descriptor?? [ 166.897122][ T3680] usb 1-1: interface 1 not found [ 166.964222][ T4529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.101216][ T4529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.151798][ T3680] usb 1-1: USB disconnect, device number 4 [ 167.213484][ T5192] random: crng reseeded on system resumption [ 167.345475][ T4529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.437986][ T4529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.869717][ T3641] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.881080][ T3641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.901542][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.925697][ T4032] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.794739][ T3752] usb 3-1: USB disconnect, device number 6 [ 168.804204][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.812060][ T3641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 168.819829][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.111055][ T5212] input: syz0 as /devices/virtual/input/input11 [ 169.344274][ T4032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.365459][ T4032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.384174][ T4032] usb 4-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 169.404221][ T4032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.426292][ T4032] usb 4-1: config 0 descriptor?? [ 169.471275][ T5200] chnl_net:caif_netlink_parms(): no params data found [ 169.692660][ T5232] loop2: detected capacity change from 0 to 512 [ 169.719769][ T5232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.772862][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.774862][ T5232] EXT4-fs (loop2): 1 orphan inode deleted [ 169.781862][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.791356][ T5232] EXT4-fs (loop2): 1 truncate cleaned up [ 169.795904][ T5200] device bridge_slave_0 entered promiscuous mode [ 169.804585][ T5232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.043338][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.168027][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.411884][ T4032] wacom 0003:056A:0315.0004: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 170.434435][ T5200] device bridge_slave_1 entered promiscuous mode [ 170.527727][ T4032] wacom 0003:056A:0315.0004: hidraw0: USB HID v8.00 Device [HID 056a:0315] on usb-dummy_hcd.3-1/input0 [ 170.547131][ T4032] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0315.0004/input/input12 [ 170.621139][ T4032] usb 4-1: USB disconnect, device number 4 [ 170.865528][ T3651] Bluetooth: hci4: command tx timeout [ 171.034097][ T3680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.328159][ T3638] EXT4-fs (loop2): unmounting filesystem. [ 171.341813][ T5200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.387435][ T5200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.418153][ T3680] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 171.437454][ T3680] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 171.475162][ T3680] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 171.559038][ T3680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 171.695944][ T3680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 172.339044][ T3752] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.356203][ T5200] team0: Port device team_slave_0 added [ 172.387515][ T3680] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.423388][ T3680] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.462618][ T3680] usb 2-1: Product: syz [ 172.466636][ T5200] team0: Port device team_slave_1 added [ 172.604341][ T3680] usb 2-1: Manufacturer: syz [ 172.777368][ T3680] cdc_wdm 2-1:1.0: skipping garbage [ 172.834614][ T3752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.868084][ T3680] cdc_wdm 2-1:1.0: skipping garbage [ 172.934221][ T3651] Bluetooth: hci4: command tx timeout [ 172.946406][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.951828][ T3752] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.963727][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.017545][ T3680] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 173.028081][ T3752] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 173.038320][ T3680] cdc_wdm 2-1:1.0: Unknown control protocol [ 173.060283][ T3680] usb 2-1: USB disconnect, device number 3 [ 173.068845][ T3752] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.108899][ T3752] usb 1-1: config 0 descriptor?? [ 173.140987][ T5200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.160014][ T5200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.170149][ T5200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.202186][ T5200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.913882][ T4529] device hsr_slave_0 left promiscuous mode [ 173.926370][ T4529] device hsr_slave_1 left promiscuous mode [ 173.933532][ T4529] device bridge_slave_1 left promiscuous mode [ 173.939889][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.949203][ T4529] device bridge_slave_0 left promiscuous mode [ 173.955900][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.809188][ T4529] device veth1_macvtap left promiscuous mode [ 174.815726][ T4529] device veth0_macvtap left promiscuous mode [ 174.821925][ T4529] device veth1_vlan left promiscuous mode [ 174.835233][ T5281] loop0: detected capacity change from 0 to 256 [ 174.851143][ T4529] device veth0_vlan left promiscuous mode [ 174.998112][ T3752] wacom 0003:056A:0016.0005: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 175.024422][ T3650] Bluetooth: hci4: command tx timeout [ 175.052374][ T3752] wacom 0003:056A:0016.0005: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.0-1/input0 [ 175.072451][ T3752] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0016.0005/input/input15 [ 175.896276][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 175.904211][ T3650] Bluetooth: hci1: command 0x0406 tx timeout [ 175.904293][ T3651] Bluetooth: hci3: command 0x0406 tx timeout [ 176.189452][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 176.193438][ T5301] loop1: detected capacity change from 0 to 8 [ 176.409663][ T4529] team0 (unregistering): Port device team_slave_0 removed [ 176.832271][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.870440][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.104162][ T47] Bluetooth: hci4: command tx timeout [ 177.212918][ T4529] bond0 (unregistering): Released all slaves [ 177.306784][ T5250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 177.324670][ T5286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'. [ 177.358491][ T5298] netlink: 'syz.1.333': attribute type 4 has an invalid length. [ 177.368632][ T3752] usb 1-1: USB disconnect, device number 5 [ 177.486575][ T5200] device hsr_slave_0 entered promiscuous mode [ 177.523906][ T5298] syz.1.333 (5298) used greatest stack depth: 19384 bytes left [ 178.000424][ T5200] device hsr_slave_1 entered promiscuous mode [ 178.232471][ T5319] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 178.252880][ T5319] device vlan2 entered promiscuous mode [ 178.264376][ T5319] batman_adv: batadv0: Adding interface: vlan2 [ 178.272463][ T5319] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.299251][ T5319] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 178.562565][ T5326] loop0: detected capacity change from 0 to 2048 [ 178.659390][ T5326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.008668][ T56] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 181.127702][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 181.273809][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [ 181.273809][ T56] [ 181.312878][ T56] EXT4-fs (loop0): Total free blocks count 0 [ 181.327790][ T56] EXT4-fs (loop0): Free/Dirty block details [ 181.374847][ T56] EXT4-fs (loop0): free_blocks=2415919104 [ 181.452946][ T56] EXT4-fs (loop0): dirty_blocks=16 [ 181.460007][ T56] EXT4-fs (loop0): Block reservation details [ 181.471870][ T56] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 181.556838][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 182.749877][ T5370] netpci0: tun_chr_ioctl cmd 1074025677 [ 182.793178][ T5370] netpci0: linktype set to 805 [ 184.055076][ T5394] loop1: detected capacity change from 0 to 256 [ 184.118257][ T5200] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 184.126269][ T5394] exfat: Bad value for 'dmask' [ 184.165221][ T5200] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 184.255431][ T5398] input: syz1 as /devices/virtual/input/input18 [ 184.489456][ T5200] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 184.901772][ T5200] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.635894][ T5200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.715336][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.739438][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.750682][ T5200] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.806306][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.828311][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.864559][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.871837][ T4889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.975860][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.054930][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.104466][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.134881][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.142065][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.249174][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.106865][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.127173][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.155670][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.175322][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.194551][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.207547][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.262396][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.439944][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.700972][ T5200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.948198][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.059491][ T5432] netlink: 'syz.2.358': attribute type 10 has an invalid length. [ 190.263705][ T5447] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 190.263705][ T5447] The task syz.1.361 (5447) triggered the difference, watch for misbehavior. [ 190.839681][ T5432] device team0 left promiscuous mode [ 190.845416][ T5432] device team_slave_0 left promiscuous mode [ 190.853265][ T5432] device team_slave_1 left promiscuous mode [ 190.925069][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.932325][ T5432] device team0 entered promiscuous mode [ 190.967995][ T5432] device team_slave_0 entered promiscuous mode [ 190.984376][ T5432] device team_slave_1 entered promiscuous mode [ 191.421882][ T5432] bond0: (slave team0): Enslaving as an active interface with an up link [ 191.788143][ T5459] fuse: Bad value for 'fd' [ 192.316831][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.340241][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.490066][ T5471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.367'. [ 192.620218][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 192.639409][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.686710][ T5200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.309212][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.110580][ T5506] input: syz1 as /devices/virtual/input/input19 [ 195.914360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.080470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.102417][ T5508] loop0: detected capacity change from 0 to 1024 [ 196.572959][ T5515] loop2: detected capacity change from 0 to 16 [ 196.587243][ T5515] erofs: (device loop2): mounted with root inode @ nid 36. [ 196.698913][ T5515] erofs: (device loop2): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 196.708297][ T5515] erofs: (device loop2): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 196.717947][ T5515] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 196.727242][ T5515] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 196.736787][ T5515] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 196.746525][ T5515] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 196.758497][ T5515] syz.2.374: attempt to access beyond end of device [ 196.758497][ T5515] loop2: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 196.772796][ T5515] syz.2.374: attempt to access beyond end of device [ 196.772796][ T5515] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 196.787285][ T5515] syz.2.374: attempt to access beyond end of device [ 196.787285][ T5515] loop2: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 196.802252][ T5515] syz.2.374: attempt to access beyond end of device [ 196.802252][ T5515] loop2: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 196.816958][ T5515] syz.2.374: attempt to access beyond end of device [ 196.816958][ T5515] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 196.832109][ T5515] syz.2.374: attempt to access beyond end of device [ 196.832109][ T5515] loop2: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 196.846505][ T5515] syz.2.374: attempt to access beyond end of device [ 196.846505][ T5515] loop2: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 197.485565][ T5200] device veth0_vlan entered promiscuous mode [ 197.616271][ T5200] device veth1_vlan entered promiscuous mode [ 198.598461][ T5529] loop3: detected capacity change from 0 to 256 [ 198.690164][ T5529] exfat: Bad value for 'dmask' [ 200.235698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.258068][ C1] eth0: bad gso: type: 1, size: 1408 [ 200.272221][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.281657][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.298388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.307183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.315308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.332251][ T5200] device veth0_macvtap entered promiscuous mode [ 200.486818][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.499108][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.522071][ T5200] device veth1_macvtap entered promiscuous mode [ 200.738917][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.801405][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.862475][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.925044][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.986505][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.055249][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.114178][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.207728][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.219305][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.229425][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.240087][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.250035][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.331879][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.402911][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.495380][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.512586][ T5554] loop3: detected capacity change from 0 to 128 [ 201.529362][ T5200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.586740][ T5200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.597569][ T5554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.607581][ T5554] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038 (0x7fffffff) [ 201.621772][ T5200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.649238][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.698198][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.752990][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.805071][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.848103][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.925212][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.166311][ T5200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.189213][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 203.237214][ T5200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.250143][ T5200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.274048][ T5200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.301861][ T5586] loop0: detected capacity change from 0 to 16 [ 203.323420][ T5586] erofs: (device loop0): mounted with root inode @ nid 36. [ 203.580227][ T5590] loop3: detected capacity change from 0 to 1024 [ 204.368315][ T5590] EXT4-fs: Ignoring removed oldalloc option [ 204.426606][ T5590] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 204.480067][ T5590] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 204.574571][ T5590] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 204.610302][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.639105][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.667019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.696772][ T5590] journal_init_common: Cannot get buffer for journal superblock [ 204.732352][ T5590] EXT4-fs (loop3): Could not load journal inode [ 204.740000][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.756075][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.810395][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.108061][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.315'. [ 206.340822][ T5628] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 206.425970][ T5635] netlink: 96 bytes leftover after parsing attributes in process `syz.2.398'. [ 207.481689][ T5639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.580026][ T5655] loop2: detected capacity change from 0 to 2048 [ 208.675206][ T5655] loop2: p4 < > [ 208.700557][ T5655] FAT-fs (loop2p4): bogus number of reserved sectors [ 208.732427][ T5655] FAT-fs (loop2p4): Can't find a valid FAT filesystem [ 209.889984][ T5674] loop0: detected capacity change from 0 to 1024 [ 209.988451][ T5674] hfsplus: xattr searching failed [ 210.189559][ T5674] hfsplus: b-tree write err: -5, ino 3 [ 211.053210][ T5689] loop4: detected capacity change from 0 to 512 [ 211.110922][ T5689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.149450][ T5689] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.192315][ T5689] EXT4-fs (loop4): DAX unsupported by block device. [ 211.284701][ T5694] loop0: detected capacity change from 0 to 1024 [ 211.550936][ T5704] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.600430][ T5710] netlink: 164 bytes leftover after parsing attributes in process `syz.3.418'. [ 212.946556][ T5724] loop1: detected capacity change from 0 to 512 [ 212.987004][ T5724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.078184][ T5724] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.114125][ T5724] EXT4-fs (loop1): DAX unsupported by block device. [ 213.396785][ T5737] (syz.2.422,5737,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 213.405936][ T5737] (syz.2.422,5737,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 214.064560][ T5712] loop0: detected capacity change from 0 to 32768 [ 216.152256][ T5757] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 216.270857][ T5759] binder: 5758:5759 ioctl c018620b 20000380 returned -14 [ 216.597348][ T5761] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.498022][ T5783] loop3: detected capacity change from 0 to 512 [ 217.538685][ T5783] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.554385][ T5783] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.605638][ T5778] loop2: detected capacity change from 0 to 32768 [ 217.612345][ T5783] EXT4-fs (loop3): DAX unsupported by block device. [ 217.632825][ T5778] (syz.2.436,5778,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 217.644441][ T5778] (syz.2.436,5778,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 217.710873][ T3625] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.689142][ T5805] loop2: detected capacity change from 0 to 256 [ 222.850762][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'. [ 222.890571][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 223.047700][ T5806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.140868][ T5814] loop1: detected capacity change from 0 to 16 [ 223.264252][ T5814] erofs: (device loop1): mounted with root inode @ nid 36. [ 223.295328][ T5814] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 223.304855][ T5814] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36 [ 223.314475][ T5814] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 223.324077][ T5814] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 223.333776][ T5814] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 223.343263][ T5814] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 223.352746][ T5814] syz.1.446: attempt to access beyond end of device [ 223.352746][ T5814] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 223.366878][ T5814] syz.1.446: attempt to access beyond end of device [ 223.366878][ T5814] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 223.381160][ T5814] syz.1.446: attempt to access beyond end of device [ 223.381160][ T5814] loop1: rw=524288, sector=6520, nr_sectors = 16 limit=16 [ 223.395173][ T5814] syz.1.446: attempt to access beyond end of device [ 223.395173][ T5814] loop1: rw=524288, sector=34359736328, nr_sectors = 16 limit=16 [ 223.409668][ T5814] syz.1.446: attempt to access beyond end of device [ 223.409668][ T5814] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 223.423516][ T5814] syz.1.446: attempt to access beyond end of device [ 223.423516][ T5814] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 223.437688][ T5814] syz.1.446: attempt to access beyond end of device [ 223.437688][ T5814] loop1: rw=524288, sector=536576856, nr_sectors = 16 limit=16 [ 223.732250][ T5806] syz.4.444 (5806) used greatest stack depth: 19072 bytes left [ 224.329685][ T5820] loop1: detected capacity change from 0 to 1024 [ 224.362446][ T5820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.850757][ T3651] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 229.927204][ T5863] device syz_tun entered promiscuous mode [ 230.002644][ T5863] device batadv_slave_0 entered promiscuous mode [ 231.020713][ T5872] loop2: detected capacity change from 0 to 4096 [ 231.053480][ T5872] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 231.085310][ T5872] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 232.188464][ T5902] netlink: 'syz.1.470': attribute type 7 has an invalid length. [ 232.212672][ T5899] loop2: detected capacity change from 0 to 1764 [ 232.221197][ T5902] netlink: 'syz.1.470': attribute type 39 has an invalid length. [ 232.289278][ T5850] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.314025][ T5902] bridge1: port 1(gretap1) entered blocking state [ 232.344144][ T5902] bridge1: port 1(gretap1) entered disabled state [ 232.412728][ T5897] loop2: detected capacity change from 0 to 512 [ 232.424071][ T5902] device gretap1 entered promiscuous mode [ 232.452372][ T5906] netlink: 'syz.1.470': attribute type 7 has an invalid length. [ 232.467653][ T5906] netlink: 'syz.1.470': attribute type 39 has an invalid length. [ 232.477983][ T5850] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 234.656355][ T5915] device pim6reg1 entered promiscuous mode [ 234.748505][ T3651] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 234.757667][ T3651] Bluetooth: hci3: Injecting HCI hardware error event [ 234.768462][ T3651] Bluetooth: hci3: hardware error 0x00 [ 235.092278][ T5931] loop0: detected capacity change from 0 to 256 [ 236.549360][ T5936] loop2: detected capacity change from 0 to 2048 [ 236.667147][ T5936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.855722][ T3651] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 237.925242][ T5953] 9pnet_fd: p9_fd_create_tcp (5953): problem connecting socket to 127.0.0.1 [ 241.608201][ T26] audit: type=1326 audit(1724705254.561:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x7ffc0000 [ 241.963526][ T5967] loop3: detected capacity change from 0 to 1024 [ 242.303498][ T26] audit: type=1326 audit(1724705254.561:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x7ffc0000 [ 242.374288][ T26] audit: type=1326 audit(1724705254.561:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ffb40379e79 code=0x7ffc0000 [ 243.124249][ T5975] hfsplus: xattr search failed [ 243.496936][ T26] audit: type=1326 audit(1724705254.561:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x7ffc0000 [ 243.545696][ T26] audit: type=1326 audit(1724705254.561:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x7ffc0000 [ 243.669993][ T5980] xt_bpf: check failed: parse error [ 243.751951][ T5981] binder: 5979:5981 ioctl c0306201 20000000 returned -14 [ 243.966490][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.986022][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.003686][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.024314][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.039098][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.055460][ T3641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.710833][ T5999] loop3: detected capacity change from 0 to 512 [ 244.791963][ T5999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.801228][ T5999] ext4 filesystem being mounted at /101/bus supports timestamps until 2038 (0x7fffffff) [ 244.940752][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 246.139428][ T47] Bluetooth: hci1: command tx timeout [ 246.342731][ T3638] device syz_tun left promiscuous mode [ 246.499320][ T6012] netlink: 'syz.1.498': attribute type 25 has an invalid length. [ 246.509964][ T6012] netlink: 'syz.1.498': attribute type 8 has an invalid length. [ 246.526028][ T6012] netlink: 44 bytes leftover after parsing attributes in process `syz.1.498'. [ 246.535514][ T6012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.498'. [ 246.672080][ T51] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.796561][ T51] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.874168][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 246.890760][ T51] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.915906][ T6016] loop1: detected capacity change from 0 to 8192 [ 246.936910][ T6016] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.977449][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.032905][ T6016] FAT-fs (loop1): Filesystem has been set read-only [ 247.082640][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.112396][ T51] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.127115][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.144450][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.151516][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.185228][ T5989] device bridge_slave_0 entered promiscuous mode [ 247.194328][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.215822][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.223179][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.269303][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.281908][ T5989] device bridge_slave_1 entered promiscuous mode [ 247.314154][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.322983][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.375275][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.459669][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.832153][ T6016] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 247.848697][ T26] audit: type=1800 audit(1724705260.801:47): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.500" name="file2" dev="loop1" ino=1048643 res=0 errno=0 [ 247.924536][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.942677][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.953537][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 247.986169][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 247.996906][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.006053][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.014872][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 248.022941][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 248.116743][ T6038] loop3: detected capacity change from 0 to 1024 [ 248.125147][ T6016] syz.1.500 (6016) used greatest stack depth: 18976 bytes left [ 248.214292][ T47] Bluetooth: hci1: command tx timeout [ 248.237970][ T5989] team0: Port device team_slave_0 added [ 248.277882][ T6038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 248.286616][ T6038] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038 (0x7fffffff) [ 248.296868][ T5989] team0: Port device team_slave_1 added [ 248.380540][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.390741][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.420591][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.436179][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.443589][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.472122][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.500734][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 248.760612][ T6058] loop3: detected capacity change from 0 to 2048 [ 248.845281][ T6058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 249.313709][ T5989] device hsr_slave_0 entered promiscuous mode [ 249.490456][ T5989] device hsr_slave_1 entered promiscuous mode [ 249.582396][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 249.599802][ T5989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.607845][ T5989] Cannot create hsr debugfs directory [ 250.439574][ T3641] Bluetooth: hci1: command tx timeout [ 250.811076][ T47] Bluetooth: hci4: command tx timeout [ 251.316716][ T6097] loop3: detected capacity change from 0 to 512 [ 251.342344][ T6097] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 251.449902][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.515: iget: bad i_size value: -67835469387268086 [ 251.511853][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.515: couldn't read orphan inode 15 (err -117) [ 251.541413][ T6097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 251.559781][ T6097] ext2 filesystem being mounted at /109/file0 supports timestamps until 2038 (0x7fffffff) [ 251.579600][ T5989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.660394][ T6097] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.515: Directory hole found for htree leaf block 0 [ 251.669157][ T3091] udevd[3091]: worker [5850] terminated by signal 33 (Unknown signal 33) [ 251.697076][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 251.736845][ T3091] udevd[3091]: worker [5850] failed while handling '/devices/virtual/block/loop3' [ 251.763254][ T5989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.052892][ T5989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.903281][ T3651] Bluetooth: hci4: command tx timeout [ 252.909391][ T3651] Bluetooth: hci1: command tx timeout [ 254.934541][ T3651] Bluetooth: hci4: command tx timeout [ 255.027116][ T5989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.167239][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 255.375622][ T6136] loop3: detected capacity change from 0 to 512 [ 255.403061][ T6136] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 255.576813][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.127690][ T6136] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 256.150658][ T6136] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 256.193671][ T6136] System zones: 0-2, 18-18, 34-34 [ 256.285481][ T6136] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.523: bad orphan inode 15 [ 256.325390][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.364857][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.372259][ T6136] ext4_test_bit(bit=14, block=18) = 1 [ 256.379221][ T6136] is_bad_inode(inode)=0 [ 256.390277][ T6136] NEXT_ORPHAN(inode)=2264924160 [ 256.404038][ T6136] max_ino=32 [ 256.405171][ T6035] device bridge_slave_0 entered promiscuous mode [ 256.407403][ T6136] i_nlink=0 [ 256.424284][ T6136] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 256.457393][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.484202][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.495163][ T6035] device bridge_slave_1 entered promiscuous mode [ 256.532302][ T6136] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.523: bg 0: block 80: padding at end of block bitmap is not set [ 256.581261][ T6154] loop1: detected capacity change from 0 to 1024 [ 256.609576][ T6136] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 256.659912][ T6136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.054140][ T3651] Bluetooth: hci4: command tx timeout [ 257.419583][ T5989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.634662][ T6154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.655532][ T6154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.689453][ T6154] EXT4-fs (loop1): Test dummy encryption mode enabled [ 257.747855][ T6154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 257.797783][ T5989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.853317][ T51] device batadv_slave_0 left promiscuous mode [ 257.861104][ T6154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.907681][ T51] device hsr_slave_0 left promiscuous mode [ 257.915606][ T51] device hsr_slave_1 left promiscuous mode [ 257.924147][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.941865][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.972662][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.984336][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.993805][ T51] device bridge_slave_1 left promiscuous mode [ 258.011304][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.043533][ T51] device bridge_slave_0 left promiscuous mode [ 258.061026][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.135240][ T6154] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 258.135835][ T51] device team0 left promiscuous mode [ 258.170000][ T51] device team_slave_0 left promiscuous mode [ 258.187156][ T51] device team_slave_1 left promiscuous mode [ 258.209664][ T51] device veth1_macvtap left promiscuous mode [ 258.234618][ T51] device veth0_macvtap left promiscuous mode [ 258.240814][ T51] device veth1_vlan left promiscuous mode [ 258.250182][ T51] device veth0_vlan left promiscuous mode [ 258.264706][ T4798] EXT4-fs (loop1): unmounting filesystem. [ 258.365624][ T6183] loop0: detected capacity change from 0 to 16 [ 258.416271][ T6183] erofs: (device loop0): mounted with root inode @ nid 36. [ 258.711170][ T51] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 258.973859][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 259.336427][ T6193] loop3: detected capacity change from 0 to 8 [ 259.374466][ T6193] SQUASHFS error: lzo decompression failed, data probably corrupt [ 259.382755][ T6193] SQUASHFS error: Failed to read block 0x91: -5 [ 259.422031][ T6193] SQUASHFS error: Unable to read metadata cache entry [8f] [ 259.472455][ T6193] SQUASHFS error: Unable to read inode 0x11f [ 259.627919][ T51] team0 (unregistering): Port device team_slave_1 removed [ 259.691570][ T51] team0 (unregistering): Port device team_slave_0 removed [ 259.785731][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.843364][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.307015][ T51] bond0 (unregistering): (slave team0): Releasing backup interface [ 260.484811][ T51] bond0 (unregistering): Released all slaves [ 260.599661][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.620327][ T5989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 260.660017][ T6200] team0: Device geneve2 is up. Set it down before adding it as a team port [ 260.721985][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.744402][ T5989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 260.850312][ T6210] loop0: detected capacity change from 0 to 1024 [ 260.863830][ T6035] team0: Port device team_slave_0 added [ 260.897136][ T6035] team0: Port device team_slave_1 added [ 261.283027][ T6213] sch_fq: defrate 0 ignored. [ 261.301264][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.333716][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.366024][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.392614][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.428309][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.463078][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.824185][ T26] audit: type=1107 audit(1724705274.691:48): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 262.505116][ T6035] device hsr_slave_0 entered promiscuous mode [ 262.578426][ T6035] device hsr_slave_1 entered promiscuous mode [ 262.619523][ T6035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.644387][ T6035] Cannot create hsr debugfs directory [ 262.784272][ T3641] Bluetooth: hci0: command 0x0406 tx timeout [ 262.907728][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.659347][ C1] eth0: bad gso: type: 1, size: 1408 [ 263.724877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 263.744934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 263.925313][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.966157][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.410966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.514248][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.521604][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.886060][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.934609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.952005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.969955][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.977113][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.042181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.121929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.186439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.239649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.280105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.327430][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.370279][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.647902][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.690929][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.836490][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.865010][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.907328][ T5989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.214144][ T4034] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.594350][ T4034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.616243][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.623748][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.635964][ T4034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.669178][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.676639][ T4034] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 266.712431][ T6035] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.719365][ T4034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.760202][ T4034] usb 4-1: config 0 descriptor?? [ 266.773476][ T6035] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.809856][ T6035] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.867571][ T6035] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.108118][ T6262] loop3: detected capacity change from 0 to 2048 [ 267.176054][ T6262] loop3: p1 < > p4 [ 267.181298][ T6262] loop3: p4 size 8388608 extends beyond EOD, truncated [ 267.210085][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.241823][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.258246][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.278459][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.302464][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.321624][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.347968][ T3706] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.355170][ T3706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.434731][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.463741][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.478298][ T4034] kye 0003:0458:501A.0006: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 267.513113][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.521581][ T4034] kye 0003:0458:501A.0006: tablet-enabling feature report not found [ 267.541166][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.548354][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.561758][ T4034] kye 0003:0458:501A.0006: tablet enabling failed [ 267.593734][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.605043][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.629468][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.641968][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.691230][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.716985][ T4030] usb 4-1: USB disconnect, device number 5 [ 267.732240][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.755387][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.771397][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.796607][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.818279][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.835924][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.924586][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.933185][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.960325][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.969438][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.980084][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.005656][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.013573][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.037523][ T5989] device veth0_vlan entered promiscuous mode [ 268.066205][ T5989] device veth1_vlan entered promiscuous mode [ 268.194287][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.236169][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.304440][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.332086][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.342712][ T6311] tipc: Failed to remove unknown binding: 66,1,1/0:979889449/979889451 [ 268.351842][ T6311] tipc: Failed to remove unknown binding: 66,1,1/0:979889449/979889451 [ 268.353975][ T5989] device veth0_macvtap entered promiscuous mode [ 268.422700][ T5989] device veth1_macvtap entered promiscuous mode [ 268.451151][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.465628][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.513625][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.537260][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.557775][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.587808][ T6320] loop3: detected capacity change from 0 to 64 [ 268.600894][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.644041][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.669872][ T26] audit: type=1800 audit(1724705281.621:49): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.556" name="file2" dev="loop3" ino=22 res=0 errno=0 [ 268.687182][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.719422][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.742171][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.760162][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.793314][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.812887][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.855080][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.879772][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.922940][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.047154][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.074186][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.123824][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.140126][ T6329] loop0: detected capacity change from 0 to 1024 [ 269.151383][ T5989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.220171][ T6333] process 'syz.3.557' launched './file0' with NULL argv: empty string added [ 269.421680][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.436949][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.448704][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.466028][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.480449][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.492106][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.662832][ T5989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.692216][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.714971][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.731369][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.757632][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.782309][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.835760][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.850171][ T6337] loop3: detected capacity change from 0 to 128 [ 269.867183][ T5989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.029380][ T6337] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 270.098987][ T5989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.147438][ T6337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.199593][ T5989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.303020][ T5989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.184260][ T26] audit: type=1326 audit(1724705284.121:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6344 comm="syz.0.561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x0 [ 271.213370][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.399783][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.414975][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.467624][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.522068][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 271.536469][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.547342][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.556014][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.574205][ T3641] Bluetooth: hci0: command tx timeout [ 271.610757][ T6035] device veth0_vlan entered promiscuous mode [ 271.659295][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.709506][ T6035] device veth1_vlan entered promiscuous mode [ 271.746948][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.800504][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.811050][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.848476][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 271.857558][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 271.867462][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.887179][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 271.897398][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.912743][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 271.928682][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.937361][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.953795][ T6035] device veth0_macvtap entered promiscuous mode [ 271.978771][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 272.002741][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.020174][ T6035] device veth1_macvtap entered promiscuous mode [ 272.088990][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.213845][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.224486][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.235190][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.245603][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.256393][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.062008][ T3641] Bluetooth: hci0: command tx timeout [ 274.070070][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.094024][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.123097][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.139368][ T6376] fuse: root generation should be zero [ 274.227200][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.247075][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.361251][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.370106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.435890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.458772][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.470355][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.487619][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.498181][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.508233][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.519447][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.530704][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.541793][ T6387] loop3: detected capacity change from 0 to 512 [ 274.541796][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.558251][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.570548][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.582856][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.622705][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.630556][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.639613][ T6331] device bridge_slave_0 entered promiscuous mode [ 274.647824][ T6387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.657027][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.679186][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.688116][ T6387] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038 (0x7fffffff) [ 274.715719][ T6035] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.764148][ T6035] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.772891][ T6035] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.805497][ T6035] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.827646][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.846351][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.882541][ T6331] device bridge_slave_1 entered promiscuous mode [ 275.114152][ T4345] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 275.166013][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.238148][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.311279][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x6d00000800 [ 275.346187][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x14500000800 [ 275.356536][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x14600000000 [ 275.371601][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1cd00000800 [ 275.387503][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x2e500000800 [ 275.402349][ T6331] team0: Port device team_slave_0 added [ 275.407664][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x45e00000000 [ 275.451129][ T6397] kvm [6396]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x6ce00000000 [ 275.475530][ T6331] team0: Port device team_slave_1 added [ 275.487761][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.511904][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.519945][ T4345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.543741][ T4345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.629205][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.629762][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.649238][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.658117][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.694399][ T4345] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.711547][ T4345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.724073][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.730057][ T4345] usb 4-1: SerialNumber: syz [ 275.762877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 275.773810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 275.851573][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.863155][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.903555][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.046672][ T4345] usb 4-1: 0:2 : does not exist [ 276.063508][ T6405] loop2: detected capacity change from 0 to 512 [ 276.076027][ T6331] device hsr_slave_0 entered promiscuous mode [ 276.077598][ T4345] usb 4-1: unit 5: unexpected type 0x0d [ 276.088418][ T6331] device hsr_slave_1 entered promiscuous mode [ 276.099820][ T6405] EXT4-fs (loop2): Unsupported encryption level 9 [ 276.113313][ T6331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.129429][ T6331] Cannot create hsr debugfs directory [ 276.129957][ T4345] usb 4-1: USB disconnect, device number 6 [ 276.137051][ T3641] Bluetooth: hci0: command tx timeout [ 276.173280][ T51] device gretap1 left promiscuous mode [ 276.189848][ T6405] loop2: detected capacity change from 0 to 512 [ 276.197109][ T6405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.199488][ T51] bridge1: port 1(gretap1) entered disabled state [ 276.253379][ T6405] EXT4-fs (loop2): orphan cleanup on readonly fs [ 276.276301][ T6405] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 276.299910][ T6405] EXT4-fs (loop2): 1 truncate cleaned up [ 276.306432][ T6405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.509630][ T6419] loop4: detected capacity change from 0 to 136 [ 276.640965][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 277.789639][ T6035] EXT4-fs (loop2): unmounting filesystem. [ 279.129787][ T3641] Bluetooth: hci0: command tx timeout [ 279.416192][ T6446] loop3: detected capacity change from 0 to 64 [ 279.630520][ T26] audit: type=1800 audit(1724705292.581:51): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.578" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 279.831626][ T6436] loop2: detected capacity change from 0 to 32768 [ 279.952473][ T51] device hsr_slave_0 left promiscuous mode [ 279.967080][ T51] device hsr_slave_1 left promiscuous mode [ 280.074543][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.082080][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.131407][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.161896][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.220892][ T51] batman_adv: batadv0: Removing interface: vlan2 [ 280.262374][ T51] device bridge_slave_1 left promiscuous mode [ 280.295025][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.369272][ T51] device bridge_slave_0 left promiscuous mode [ 280.414291][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.497416][ T51] device hsr_slave_0 left promiscuous mode [ 280.594869][ T51] device hsr_slave_1 left promiscuous mode [ 280.611224][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.629910][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.638417][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.654382][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.672908][ T51] device bridge_slave_1 left promiscuous mode [ 280.684505][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.718570][ T51] device bridge_slave_0 left promiscuous mode [ 280.734291][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.875003][ T51] device veth1_macvtap left promiscuous mode [ 280.881089][ T51] device veth0_macvtap left promiscuous mode [ 280.897994][ T51] device veth1_vlan left promiscuous mode [ 280.903844][ T51] device veth0_vlan left promiscuous mode [ 280.931524][ T51] device veth1_macvtap left promiscuous mode [ 280.940421][ T51] device veth0_macvtap left promiscuous mode [ 280.958214][ T51] device veth1_vlan left promiscuous mode [ 280.974426][ T51] device veth0_vlan left promiscuous mode [ 281.089628][ T6453] loop4: detected capacity change from 0 to 8192 [ 281.186076][ T6449] loop3: detected capacity change from 0 to 32768 [ 281.471337][ T6449] XFS (loop3): Mounting V5 Filesystem [ 281.883717][ T6453] loop4: detected capacity change from 0 to 512 [ 281.902694][ T6449] XFS (loop3): Ending clean mount [ 281.989530][ T6453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 282.014670][ T6453] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 282.033914][ T6474] loop2: detected capacity change from 0 to 16 [ 282.039364][ T3642] XFS (loop3): Unmounting Filesystem [ 282.069957][ T6474] erofs: (device loop2): mounted with root inode @ nid 36. [ 282.138583][ T6453] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.581: Directory hole found for htree leaf block 0 [ 282.190135][ T6457] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.581: Directory hole found for htree leaf block 0 [ 282.262292][ T6471] kvm [6470]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 282.285746][ T6471] kvm [6470]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 282.314828][ T5989] EXT4-fs (loop4): unmounting filesystem. [ 282.470994][ T6479] binder: 6478:6479 ioctl c0306201 0 returned -14 [ 282.504043][ T3752] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 282.864262][ T3752] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 282.883598][ T3752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.907844][ T3752] usb 3-1: config 0 descriptor?? [ 283.191425][ T3752] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 283.239626][ T51] team0 (unregistering): Port device team_slave_1 removed [ 283.341594][ T51] team0 (unregistering): Port device team_slave_0 removed [ 283.408728][ T6493] loop0: detected capacity change from 0 to 256 [ 283.418026][ T3680] usb 3-1: USB disconnect, device number 7 [ 283.442764][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.545235][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.880555][ T6496] loop0: detected capacity change from 0 to 1024 [ 283.917659][ T6496] EXT4-fs: Invalid want_extra_isize 137 [ 284.633477][ T51] bond0 (unregistering): Released all slaves [ 284.644766][ T4030] libceph: connect (1)[c::]:6789 error -101 [ 284.664404][ T6498] loop2: detected capacity change from 0 to 32768 [ 284.666287][ T4030] libceph: mon0 (1)[c::]:6789 connect error [ 284.734519][ T6498] XFS (loop2): Mounting V5 Filesystem [ 284.831422][ T6498] XFS (loop2): Ending clean mount [ 284.966691][ T4030] libceph: connect (1)[c::]:6789 error -101 [ 284.975859][ T4030] libceph: mon0 (1)[c::]:6789 connect error [ 284.997571][ T6498] xfs: Unknown parameter ' Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔' [ 285.138764][ T6035] XFS (loop2): Unmounting Filesystem [ 285.202814][ T6520] loop0: detected capacity change from 0 to 4096 [ 285.340345][ T6520] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 285.359762][ T6502] ceph: No mds server is up or the cluster is laggy [ 285.675776][ T51] team0 (unregistering): Port device team_slave_1 removed [ 287.080821][ T6538] loop2: detected capacity change from 0 to 128 [ 287.136589][ T51] team0 (unregistering): Port device team_slave_0 removed [ 287.274015][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.480546][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.082820][ T51] bond0 (unregistering): Released all slaves [ 289.203148][ T6484] : renamed from pim6reg1 [ 289.229989][ T6331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.248744][ T6331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 289.267086][ T6331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 289.289032][ T6331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 289.505801][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.564890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.613316][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.629903][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.656600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.666793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.687367][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.694575][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.763630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.781540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.800881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.820695][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.827900][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.864375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.913698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.941089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.983315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.016584][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 290.026271][ T6561] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 290.049319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 290.060802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.086824][ T6560] loop2: detected capacity change from 0 to 2048 [ 290.105922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.120564][ T6560] Alternate GPT is invalid, using primary GPT. [ 290.128592][ T6560] loop2: p1 p2 p3 [ 290.157522][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.180220][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.237803][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.260130][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 290.286737][ T6331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.692829][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 291.716044][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 291.749525][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.811284][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 291.831421][ T3837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.911253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 291.953199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.992869][ T6331] device veth0_vlan entered promiscuous mode [ 292.009764][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 292.029706][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 292.065083][ T6331] device veth1_vlan entered promiscuous mode [ 292.166279][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 292.181215][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 292.208405][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 292.260830][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 292.301607][ T6331] device veth0_macvtap entered promiscuous mode [ 292.349873][ T6331] device veth1_macvtap entered promiscuous mode [ 292.457866][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.488425][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.508339][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.533341][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.584559][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.605666][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.626212][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.655286][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.690531][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.737723][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.791778][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.813985][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.833986][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.847975][ T6590] Bluetooth: MGMT ver 1.22 [ 292.864714][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.884916][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.905925][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.938964][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.966919][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.989422][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.002041][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.019929][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.040308][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.067807][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 293.098783][ T3679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 293.135528][ T6331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.151300][ T6331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.178104][ T6331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.200629][ T6331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.252103][ T6592] can: request_module (can-proto-0) failed. [ 293.260378][ T3641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.272945][ T3641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.281456][ T3641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.314174][ T3641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.326840][ T3641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.335697][ T3641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.515760][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.534778][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.590876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 293.728290][ T6604] device syzkaller0 entered promiscuous mode [ 293.880812][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.916543][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.552899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 294.679905][ T6614] loop0: detected capacity change from 0 to 512 [ 294.719611][ T6614] EXT4-fs (loop0): Test dummy encryption mode enabled [ 294.865710][ T6614] EXT4-fs error (device loop0): __ext4_iget:5055: inode #11: block 1: comm syz.0.616: invalid block [ 294.896781][ T6614] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.616: couldn't read orphan inode 11 (err -117) [ 294.925438][ T6614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.474879][ T3651] Bluetooth: hci5: command tx timeout [ 295.999491][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 297.580803][ T3651] Bluetooth: hci5: command tx timeout [ 298.958996][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 299.063692][ T6652] loop3: detected capacity change from 0 to 256 [ 299.156422][ T6652] FAT-fs (loop3): Unrecognized mount option "K hcheck=strict" or missing value [ 299.237148][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 299.488906][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.506892][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.577015][ T6668] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 300.371842][ T6668] loop1: detected capacity change from 0 to 32768 [ 300.381592][ T3651] Bluetooth: hci5: command tx timeout [ 300.424361][ T6596] device bridge_slave_0 entered promiscuous mode [ 300.434512][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.441826][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.450227][ T6596] device bridge_slave_1 entered promiscuous mode [ 300.489030][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.749552][ T6674] loop0: detected capacity change from 0 to 512 [ 300.758815][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.775957][ T6674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 300.797047][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.816753][ T6672] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.911257][ T6674] EXT4-fs (loop0): 1 truncate cleaned up [ 300.935448][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.937899][ T6674] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.000733][ T6596] team0: Port device team_slave_0 added [ 301.028674][ T6596] team0: Port device team_slave_1 added [ 301.102062][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.292543][ T6674] deleting an unspecified loop device is not supported. [ 301.313875][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.381801][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.411076][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.458716][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 301.468471][ T6683] dccp_close: ABORT with 3732 bytes unread [ 301.494372][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.541335][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.558334][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.620544][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.756608][ T6596] device hsr_slave_0 entered promiscuous mode [ 302.465869][ T3651] Bluetooth: hci5: command tx timeout [ 302.566446][ T6596] device hsr_slave_1 entered promiscuous mode [ 304.635749][ T6723] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 305.167589][ T6723] loop2: detected capacity change from 0 to 32768 [ 305.561912][ T6709] kvm [6704]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x8ff [ 305.693241][ T6709] kvm [6704]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xff [ 305.703696][ T6709] kvm [6704]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x8ff, nop [ 305.746418][ T6709] kvm [6704]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x8ff [ 306.521819][ T6729] loop1: detected capacity change from 0 to 2048 [ 306.682787][ T6733] loop3: detected capacity change from 0 to 512 [ 306.721421][ T6735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.738021][ T6737] loop0: detected capacity change from 0 to 1024 [ 306.752629][ T6733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 306.760796][ T6737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.857336][ T6737] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.888954][ T6733] EXT4-fs (loop3): 1 truncate cleaned up [ 306.973285][ T6733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.319107][ T6750] device batadv0 entered promiscuous mode [ 308.322236][ T3642] EXT4-fs (loop3): unmounting filesystem. [ 308.334554][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 308.449399][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.884606][ T6758] loop3: detected capacity change from 0 to 8 [ 309.891077][ T6758] squashfs: Unknown parameter '' [ 310.108765][ T6596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.147032][ T6596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.216305][ T6596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.763490][ T6596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.060330][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 311.093459][ T6763] loop1: detected capacity change from 0 to 32768 [ 311.138254][ T51] device hsr_slave_0 left promiscuous mode [ 311.150929][ T6763] XFS (loop1): Mounting V5 Filesystem [ 311.156866][ T51] device hsr_slave_1 left promiscuous mode [ 311.172611][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.182954][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.231367][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.251752][ T6763] XFS (loop1): Ending clean mount [ 311.261882][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.281368][ T6763] XFS (loop1): Quotacheck needed: Please wait. [ 311.290508][ T51] device bridge_slave_1 left promiscuous mode [ 311.314287][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.323175][ T51] device bridge_slave_0 left promiscuous mode [ 311.336409][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.392087][ T6763] XFS (loop1): Quotacheck: Done. [ 311.408993][ T51] device veth1_macvtap left promiscuous mode [ 311.417259][ T51] device veth0_macvtap left promiscuous mode [ 311.423583][ T51] device veth1_vlan left promiscuous mode [ 311.433597][ T51] device veth0_vlan left promiscuous mode [ 311.892766][ T6331] XFS (loop1): Unmounting Filesystem [ 312.003499][ T6790] loop3: detected capacity change from 0 to 8 [ 312.057577][ T3641] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 312.074869][ T26] audit: type=1326 audit(1724705325.031:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6787 comm="syz.3.654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715e379e79 code=0x0 [ 312.797382][ T6792] loop3: detected capacity change from 0 to 4096 [ 312.804842][ T6792] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 312.860426][ T6792] ntfs: volume version 3.1. [ 312.978175][ T6802] cgroup: Unknown subsys name 'rootcontext' [ 313.273546][ T6807] loop2: detected capacity change from 0 to 2048 [ 313.321549][ T6809] loop0: detected capacity change from 0 to 512 [ 313.348581][ T6807] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 313.373479][ T6807] UDF-fs: Scanning with blocksize 512 failed [ 313.433696][ T6807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.442513][ T6809] EXT4-fs (loop0): 1 orphan inode deleted [ 313.442545][ T6809] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 313.442639][ T6809] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038 (0x7fffffff) [ 314.670339][ T51] team0 (unregistering): Port device team_slave_1 removed [ 314.790341][ T6820] loop2: detected capacity change from 0 to 256 [ 315.182500][ T26] audit: type=1800 audit(1724705328.041:53): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.660" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 315.315644][ T51] team0 (unregistering): Port device team_slave_0 removed [ 315.464545][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.480852][ T3644] EXT4-fs (loop0): unmounting filesystem. [ 315.623753][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.814157][ T51] bond0 (unregistering): Released all slaves [ 317.024263][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.045111][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.206893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.216270][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.239553][ T6596] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.274242][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.307905][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.330016][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.337312][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.434090][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.455070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.482335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.520664][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.527868][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.558824][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.578070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.604585][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.774939][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.374652][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.454746][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.463688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.492476][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.501304][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.518024][ T6596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.559570][ T6596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.580101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.614932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.824156][ T6861] x_tables: ip_tables: MASQUERADE target: used from hooks OUTPUT, but only usable from POSTROUTING [ 320.586171][ T6868] loop1: detected capacity change from 0 to 512 [ 320.668798][ T6868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 320.686128][ T6868] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 320.758822][ T6874] device batadv0 entered promiscuous mode [ 320.873590][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.914467][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.966265][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.976865][ T6596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.680026][ T6331] EXT4-fs (loop1): unmounting filesystem. [ 323.025973][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.055445][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.098305][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.115222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.137187][ T6596] device veth0_vlan entered promiscuous mode [ 323.147966][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.166793][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.193628][ T6596] device veth1_vlan entered promiscuous mode [ 323.228968][ T6907] loop1: detected capacity change from 0 to 1024 [ 323.281734][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.317740][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.355488][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.398409][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.441140][ T6907] hfsplus: xattr searching failed [ 323.446661][ T6596] device veth0_macvtap entered promiscuous mode [ 323.500253][ T6596] device veth1_macvtap entered promiscuous mode [ 323.540999][ T6907] hfsplus: b-tree write err: -5, ino 3 [ 323.561381][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.607329][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.648421][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.688205][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.718477][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.754053][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.781557][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.819154][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.873111][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.911084][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.930579][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.977514][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.002272][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.027387][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.136362][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.227366][ T6917] loop1: detected capacity change from 0 to 8 [ 324.244305][ T3641] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 324.334105][ T26] audit: type=1326 audit(1724705337.261:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.1.682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f986e379e79 code=0x0 [ 324.934632][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.970257][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.011592][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.042769][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.053789][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.064687][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.072753][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.086949][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.093349][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.106335][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.107441][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.124407][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.131768][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.140852][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.156244][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.213224][ T6596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.222451][ T6596] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.237557][ T6596] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.246848][ T6925] loop1: detected capacity change from 0 to 1024 [ 325.248931][ T6596] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.253782][ T6925] hfsplus: unable to parse mount options [ 325.498293][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.508397][ T6929] loop0: detected capacity change from 0 to 164 [ 325.529253][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.560811][ T6929] Unable to read rock-ridge attributes [ 325.586684][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.589200][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.604119][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.616190][ T6929] Unable to read rock-ridge attributes [ 325.645999][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.901727][ T6942] loop1: detected capacity change from 0 to 512 [ 325.909287][ T6942] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 325.926028][ T6942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 325.944949][ T6942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 325.958061][ T6942] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.696: bg 0: block 361: padding at end of block bitmap is not set [ 326.243676][ T6920] chnl_net:caif_netlink_parms(): no params data found [ 326.691250][ T6942] EXT4-fs (loop1): Remounting filesystem read-only [ 326.734742][ T6942] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 326.774858][ T6942] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.696: attempt to clear invalid blocks 33619980 len 1 [ 326.861730][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.887768][ T6942] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.696: invalid indirect mapped block 1811939328 (level 0) [ 326.942920][ T6942] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.696: invalid indirect mapped block 2185560079 (level 1) [ 327.011546][ T6942] EXT4-fs (loop1): 1 truncate cleaned up [ 327.024413][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.044882][ T6942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 327.060333][ T6920] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.074284][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.105321][ T6920] device bridge_slave_0 entered promiscuous mode [ 327.175262][ T3641] Bluetooth: hci1: command tx timeout [ 327.226349][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.277307][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.288138][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.318994][ T6920] device bridge_slave_1 entered promiscuous mode [ 327.498767][ T6940] device veth0_vlan left promiscuous mode [ 327.521575][ T6940] device veth0_vlan entered promiscuous mode [ 327.580610][ T6940] syz.1.696 (6940) used greatest stack depth: 18616 bytes left [ 327.590319][ T6331] EXT4-fs (loop1): unmounting filesystem. [ 327.607633][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.681938][ T6962] loop1: detected capacity change from 0 to 512 [ 327.696964][ T6920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.720430][ T6962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 327.733056][ T6920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.793354][ T6962] EXT4-fs (loop1): 1 truncate cleaned up [ 327.820564][ T6962] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 327.887795][ T6920] team0: Port device team_slave_0 added [ 327.916018][ T6920] team0: Port device team_slave_1 added [ 327.974415][ T6331] EXT4-fs (loop1): unmounting filesystem. [ 328.225478][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.415094][ T6971] x_tables: ip_tables: MASQUERADE target: used from hooks OUTPUT, but only usable from POSTROUTING [ 329.165740][ T6973] loop4: detected capacity change from 0 to 8 [ 329.524710][ T3641] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 329.736755][ T3641] Bluetooth: hci1: command tx timeout [ 329.743195][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.785051][ T6920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.798854][ T26] audit: type=1326 audit(1724705342.751:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.4.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdefb79e79 code=0x0 [ 329.885781][ T6920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.899093][ T6920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.000987][ T6920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.104165][ T6920] device hsr_slave_0 entered promiscuous mode [ 330.110953][ T6920] device hsr_slave_1 entered promiscuous mode [ 330.120700][ T6920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.128434][ T6920] Cannot create hsr debugfs directory [ 330.388963][ T6986] loop2: detected capacity change from 0 to 1024 [ 330.418478][ T6986] hfsplus: xattr searching failed [ 330.446596][ T6986] hfsplus: b-tree write err: -5, ino 3 [ 331.626218][ T6920] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.690594][ T6920] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.706482][ T6920] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.725381][ T6920] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.814189][ T3641] Bluetooth: hci1: command tx timeout [ 331.865377][ T51] device hsr_slave_0 left promiscuous mode [ 331.871932][ T51] device hsr_slave_1 left promiscuous mode [ 331.878933][ T51] batman_adv: batadv0: Removing interface: team0 [ 331.886343][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.893861][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.903440][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.911205][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.919928][ T51] device bridge_slave_1 left promiscuous mode [ 331.926849][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.935721][ T51] device bridge_slave_0 left promiscuous mode [ 331.941963][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.969049][ T51] device veth1_macvtap left promiscuous mode [ 331.975703][ T51] device veth0_macvtap left promiscuous mode [ 331.981830][ T51] device veth1_vlan left promiscuous mode [ 331.988478][ T51] device veth0_vlan left promiscuous mode [ 332.658878][ T51] team0 (unregistering): Port device team_slave_1 removed [ 332.714187][ T51] team0 (unregistering): Port device team_slave_0 removed [ 332.759447][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.802572][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.269723][ T51] bond0 (unregistering): Released all slaves [ 333.595920][ T6920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.990515][ T3641] Bluetooth: hci1: command tx timeout [ 333.996691][ T7016] loop1: detected capacity change from 0 to 256 [ 334.041241][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.063414][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 334.079233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.131738][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 334.148643][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.160060][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 334.164529][ T4529] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.175998][ T4529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.184029][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 334.192829][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.201726][ T4529] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.208863][ T4529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.364703][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 334.373113][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 334.382755][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 334.401759][ T7021] input: syz0 as /devices/virtual/input/input20 [ 334.407112][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 334.549346][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.575113][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.987870][ T7023] veth1_vlan: mtu less than device minimum [ 335.001621][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 335.025348][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.057772][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 335.067364][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.082701][ T6920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.110708][ T6920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.131852][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.146246][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.470504][ T7042] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 335.538986][ T7042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.822002][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.838368][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.882184][ T6920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.988534][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.021764][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.089810][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.107668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.153487][ T6920] device veth0_vlan entered promiscuous mode [ 336.170987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.206151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.250948][ T6920] device veth1_vlan entered promiscuous mode [ 336.371179][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.399941][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 336.458701][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.495081][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.549573][ T6920] device veth0_macvtap entered promiscuous mode [ 336.596271][ T7047] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 336.635064][ T6920] device veth1_macvtap entered promiscuous mode [ 336.668668][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 336.705080][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 336.767323][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.808911][ T7050] kvm [7049]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xcf00000871 [ 336.827172][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.868074][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.887621][ T7050] kvm [7049]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x25d000008e5, nop [ 336.917014][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.977921][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.004999][ T7056] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 337.011821][ T7056] PKCS7: Only support pkcs7_signedData type [ 337.022005][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.060701][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.079667][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.123564][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.172570][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.215541][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.263017][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.298468][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.359690][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.410128][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.457063][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.511766][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.552724][ T6920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.588689][ T6920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.642932][ T6920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.719968][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 337.749745][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 337.807177][ T6920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.838943][ T6920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.877760][ T6920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.931907][ T6920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.782591][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.812121][ T4529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.846754][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.868056][ T4529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.913813][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.964504][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.536629][ T7074] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.279842][ C1] eth0: bad gso: type: 1, size: 1408 [ 342.411864][ T26] audit: type=1326 audit(1724705355.361:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7099 comm="syz.0.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb40379e79 code=0x0 [ 342.576215][ T52] block nbd2: Attempted send on invalid socket [ 342.583599][ T52] I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 342.599213][ T7103] qnx4: unable to read the superblock [ 344.313248][ T7134] loop2: detected capacity change from 0 to 1024 [ 344.367101][ T7134] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 344.382396][ T7134] EXT4-fs (loop2): write access will be enabled during recovery [ 344.391387][ T7134] EXT4-fs (loop2): barriers disabled [ 344.400465][ T7134] JBD2: no valid journal superblock found [ 344.418979][ T7134] EXT4-fs (loop2): error loading journal [ 344.454502][ T3651] Bluetooth: hci5: command tx timeout [ 345.671877][ T7153] loop3: detected capacity change from 0 to 1764 [ 345.722946][ T7156] netlink: 'syz.0.741': attribute type 7 has an invalid length. [ 345.732527][ T7156] netlink: 'syz.0.741': attribute type 39 has an invalid length. [ 345.829502][ T7150] loop3: detected capacity change from 0 to 512 [ 345.838677][ T7161] bridge2: port 1(gretap1) entered blocking state [ 345.874198][ T7161] bridge2: port 1(gretap1) entered disabled state [ 345.889138][ T7161] device gretap1 entered promiscuous mode [ 345.932897][ T7156] netlink: 'syz.0.741': attribute type 7 has an invalid length. [ 345.950414][ T7156] netlink: 'syz.0.741': attribute type 39 has an invalid length. [ 345.983551][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 346.006598][ T7162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.958076][ T7184] loop3: detected capacity change from 0 to 256 [ 349.018730][ T7184] exfat: Unknown parameter 'qY3aK' [ 349.320558][ T7194] loop1: detected capacity change from 0 to 16 [ 349.323647][ T7191] loop2: detected capacity change from 0 to 1024 [ 349.344932][ T7194] erofs: (device loop1): mounted with root inode @ nid 36. [ 350.344004][ T4025] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.564384][ T7201] loop3: detected capacity change from 0 to 2048 [ 350.675149][ T7201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.975131][ T4025] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 351.052734][ T4025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.342366][ T4025] usb 2-1: config 0 descriptor?? [ 351.539080][ T7212] loop4: detected capacity change from 0 to 16 [ 351.575644][ T4025] cp210x 2-1:0.0: cp210x converter detected [ 351.596604][ T7212] erofs: (device loop4): mounted with root inode @ nid 36. [ 351.721221][ T6920] ================================================================== [ 351.729419][ T6920] BUG: KASAN: slab-out-of-bounds in udf_readdir+0xc5f/0x2240 [ 351.736806][ T6920] Write of size 73 at addr ffff888077cde4b6 by task syz-executor/6920 [ 351.744963][ T6920] [ 351.747296][ T6920] CPU: 0 PID: 6920 Comm: syz-executor Not tainted 6.1.106-syzkaller #0 [ 351.755710][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 351.765954][ T6920] Call Trace: [ 351.769245][ T6920] [ 351.772172][ T6920] dump_stack_lvl+0x1e3/0x2cb [ 351.776868][ T6920] ? nf_tcp_handle_invalid+0x642/0x642 [ 351.782347][ T6920] ? panic+0x764/0x764 [ 351.786426][ T6920] ? _printk+0xd1/0x111 [ 351.790593][ T6920] ? __virt_addr_valid+0x17f/0x530 [ 351.795715][ T6920] ? __virt_addr_valid+0x17f/0x530 [ 351.800840][ T6920] print_report+0x15f/0x4f0 [ 351.805353][ T6920] ? __virt_addr_valid+0x17f/0x530 [ 351.810477][ T6920] ? __virt_addr_valid+0x17f/0x530 [ 351.815599][ T6920] ? __virt_addr_valid+0x45b/0x530 [ 351.820723][ T6920] ? __phys_addr+0xb6/0x170 [ 351.825236][ T6920] ? udf_readdir+0xc5f/0x2240 [ 351.829908][ T6920] kasan_report+0x136/0x160 [ 351.834399][ T6920] ? udf_readdir+0xc5f/0x2240 [ 351.839152][ T6920] kasan_check_range+0x27f/0x290 [ 351.844070][ T6920] ? udf_readdir+0xc5f/0x2240 [ 351.848733][ T6920] memcpy+0x3c/0x60 [ 351.852526][ T6920] udf_readdir+0xc5f/0x2240 [ 351.857021][ T6920] ? load_block_bitmap+0x520/0x520 [ 351.862125][ T6920] ? __might_sleep+0xb0/0xb0 [ 351.866698][ T6920] ? aa_file_perm+0x3e3/0xf60 [ 351.871368][ T6920] ? trace_raw_output_contention_end+0xd0/0xd0 [ 351.877509][ T6920] ? load_block_bitmap+0x520/0x520 [ 351.882616][ T6920] ? __fdget_pos+0x2ba/0x360 [ 351.887190][ T6920] ? end_current_label_crit_section+0x147/0x170 [ 351.893425][ T6920] ? common_file_perm+0x17d/0x1d0 [ 351.898434][ T6920] ? fsnotify_perm+0x439/0x590 [ 351.903179][ T6920] iterate_dir+0x224/0x560 [ 351.907576][ T6920] ? load_block_bitmap+0x520/0x520 [ 351.912670][ T6920] __se_sys_getdents64+0x209/0x4f0 [ 351.917764][ T6920] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 351.923730][ T6920] ? __x64_sys_getdents64+0x80/0x80 [ 351.928909][ T6920] ? filldir+0x6f0/0x6f0 [ 351.933241][ T6920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 351.939232][ T6920] ? lockdep_hardirqs_on+0x94/0x130 [ 351.944415][ T6920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 351.950392][ T6920] do_syscall_64+0x3b/0xb0 [ 351.954795][ T6920] ? clear_bhb_loop+0x45/0xa0 [ 351.959457][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.965343][ T6920] RIP: 0033:0x7ff79b7ac013 [ 351.969741][ T6920] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 351.989330][ T6920] RSP: 002b:00007ffffc61deb8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 351.997724][ T6920] RAX: ffffffffffffffda RBX: 000055555697a600 RCX: 00007ff79b7ac013 [ 352.005679][ T6920] RDX: 0000000000008000 RSI: 000055555697a600 RDI: 0000000000000005 [ 352.013631][ T6920] RBP: 000055555697a5d4 R08: 0000000000000000 R09: 0000000000000000 [ 352.021581][ T6920] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 352.029532][ T6920] R13: 0000000000000010 R14: 000055555697a5d0 R15: 00007ffffc620160 [ 352.037492][ T6920] [ 352.040491][ T6920] [ 352.042794][ T6920] Allocated by task 6920: [ 352.047096][ T6920] kasan_set_track+0x4b/0x70 [ 352.051672][ T6920] __kasan_kmalloc+0x97/0xb0 [ 352.056242][ T6920] udf_readdir+0xb78/0x2240 [ 352.060728][ T6920] iterate_dir+0x224/0x560 [ 352.065122][ T6920] __se_sys_getdents64+0x209/0x4f0 [ 352.070213][ T6920] do_syscall_64+0x3b/0xb0 [ 352.074613][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.080495][ T6920] [ 352.082798][ T6920] Last potentially related work creation: [ 352.088491][ T6920] kasan_save_stack+0x3b/0x60 [ 352.093152][ T6920] __kasan_record_aux_stack+0xb0/0xc0 [ 352.098503][ T6920] kvfree_call_rcu+0x116/0x8c0 [ 352.103246][ T6920] inetdev_event+0x38a/0x1490 [ 352.107905][ T6920] raw_notifier_call_chain+0xd0/0x170 [ 352.113263][ T6920] dev_close_many+0x37c/0x530 [ 352.117920][ T6920] unregister_netdevice_many+0x4f7/0x17a0 [ 352.123621][ T6920] sit_exit_batch_net+0x43c/0x480 [ 352.128633][ T6920] cleanup_net+0x763/0xb60 [ 352.133032][ T6920] process_one_work+0x8a9/0x11d0 [ 352.137976][ T6920] worker_thread+0xa47/0x1200 [ 352.142633][ T6920] kthread+0x28d/0x320 [ 352.146682][ T6920] ret_from_fork+0x1f/0x30 [ 352.151080][ T6920] [ 352.153386][ T6920] Second to last potentially related work creation: [ 352.159950][ T6920] kasan_save_stack+0x3b/0x60 [ 352.164613][ T6920] __kasan_record_aux_stack+0xb0/0xc0 [ 352.169970][ T6920] call_rcu+0x163/0xa10 [ 352.174102][ T6920] fib_create_info+0x189c/0x2500 [ 352.179020][ T6920] fib_table_insert+0x1f2/0x1f20 [ 352.183939][ T6920] fib_add_ifaddr+0x47f/0x1730 [ 352.188857][ T6920] fib_netdev_event+0x620/0x730 [ 352.193692][ T6920] raw_notifier_call_chain+0xd0/0x170 [ 352.199045][ T6920] __dev_notify_flags+0x304/0x610 [ 352.204051][ T6920] dev_change_flags+0xe7/0x190 [ 352.208795][ T6920] do_setlink+0xcf4/0x3de0 [ 352.213198][ T6920] rtnl_newlink+0x172c/0x2050 [ 352.217859][ T6920] rtnetlink_rcv_msg+0x818/0xff0 [ 352.222778][ T6920] netlink_rcv_skb+0x1cd/0x410 [ 352.227697][ T6920] netlink_unicast+0x7d8/0x970 [ 352.232524][ T6920] netlink_sendmsg+0xa26/0xd60 [ 352.237359][ T6920] __sys_sendto+0x480/0x600 [ 352.241851][ T6920] __x64_sys_sendto+0xda/0xf0 [ 352.246515][ T6920] do_syscall_64+0x3b/0xb0 [ 352.250914][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.256797][ T6920] [ 352.259099][ T6920] The buggy address belongs to the object at ffff888077cde400 [ 352.259099][ T6920] which belongs to the cache kmalloc-256 of size 256 [ 352.273131][ T6920] The buggy address is located 182 bytes inside of [ 352.273131][ T6920] 256-byte region [ffff888077cde400, ffff888077cde500) [ 352.286384][ T6920] [ 352.288688][ T6920] The buggy address belongs to the physical page: [ 352.295082][ T6920] page:ffffea0001df3780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77cde [ 352.305218][ T6920] head:ffffea0001df3780 order:1 compound_mapcount:0 compound_pincount:0 [ 352.313607][ T6920] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 352.321578][ T6920] raw: 00fff00000010200 ffffea0001da5900 dead000000000003 ffff888012841b40 [ 352.330140][ T6920] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 352.338700][ T6920] page dumped because: kasan: bad access detected [ 352.345103][ T6920] page_owner tracks the page as allocated [ 352.350807][ T6920] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3633, tgid 3633 (syz-executor), ts 55240649787, free_ts 55236635514 [ 352.372164][ T6920] post_alloc_hook+0x18d/0x1b0 [ 352.376925][ T6920] get_page_from_freelist+0x322e/0x33b0 [ 352.382460][ T6920] __alloc_pages+0x28d/0x770 [ 352.387036][ T6920] alloc_slab_page+0x6a/0x150 [ 352.391699][ T6920] new_slab+0x84/0x2d0 [ 352.395754][ T6920] ___slab_alloc+0xc20/0x1270 [ 352.400416][ T6920] __kmem_cache_alloc_node+0x19f/0x260 [ 352.405858][ T6920] __kmalloc+0xa1/0x230 [ 352.409998][ T6920] fib_create_info+0xa37/0x2500 [ 352.414843][ T6920] fib_table_insert+0x1f2/0x1f20 [ 352.419781][ T6920] fib_add_ifaddr+0x47f/0x1730 [ 352.424535][ T6920] fib_inetaddr_event+0x12b/0x2b0 [ 352.429561][ T6920] blocking_notifier_call_chain+0x104/0x1b0 [ 352.435448][ T6920] __inet_insert_ifa+0x9cb/0xbd0 [ 352.440377][ T6920] inet_rtm_newaddr+0x8d3/0x18e0 [ 352.445313][ T6920] rtnetlink_rcv_msg+0x818/0xff0 [ 352.450248][ T6920] page last free stack trace: [ 352.454904][ T6920] free_unref_page_prepare+0xf63/0x1120 [ 352.460436][ T6920] free_unref_page+0x33/0x3e0 [ 352.465099][ T6920] qlist_free_all+0x76/0xe0 [ 352.469587][ T6920] kasan_quarantine_reduce+0x156/0x170 [ 352.475031][ T6920] __kasan_slab_alloc+0x1f/0x70 [ 352.479859][ T6920] slab_post_alloc_hook+0x52/0x3a0 [ 352.485039][ T6920] kmem_cache_alloc_node+0x136/0x310 [ 352.490307][ T6920] __alloc_skb+0xde/0x670 [ 352.494620][ T6920] netlink_sendmsg+0x6f8/0xd60 [ 352.499368][ T6920] __sys_sendto+0x480/0x600 [ 352.503854][ T6920] __x64_sys_sendto+0xda/0xf0 [ 352.508517][ T6920] do_syscall_64+0x3b/0xb0 [ 352.512919][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.518795][ T6920] [ 352.521157][ T6920] Memory state around the buggy address: [ 352.526764][ T6920] ffff888077cde380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 352.534807][ T6920] ffff888077cde400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 352.542844][ T6920] >ffff888077cde480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 [ 352.550878][ T6920] ^ [ 352.558922][ T6920] ffff888077cde500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 352.566959][ T6920] ffff888077cde580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 352.575095][ T6920] ================================================================== [ 352.598715][ T4025] usb 2-1: cp210x converter now attached to ttyUSB0 [ 352.795772][ T6920] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 352.803007][ T6920] CPU: 1 PID: 6920 Comm: syz-executor Not tainted 6.1.106-syzkaller #0 [ 352.811257][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.821322][ T6920] Call Trace: [ 352.824610][ T6920] [ 352.827540][ T6920] dump_stack_lvl+0x1e3/0x2cb [ 352.832235][ T6920] ? nf_tcp_handle_invalid+0x642/0x642 [ 352.837708][ T6920] ? panic+0x764/0x764 [ 352.841796][ T6920] ? preempt_schedule_common+0xa6/0xd0 [ 352.847271][ T6920] ? vscnprintf+0x59/0x80 [ 352.851614][ T6920] panic+0x318/0x764 [ 352.855513][ T6920] ? check_panic_on_warn+0x1d/0xa0 [ 352.860632][ T6920] ? memcpy_page_flushcache+0xfc/0xfc [ 352.866104][ T6920] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 352.872605][ T6920] ? _raw_spin_unlock+0x40/0x40 [ 352.877479][ T6920] check_panic_on_warn+0x7e/0xa0 [ 352.882435][ T6920] ? udf_readdir+0xc5f/0x2240 [ 352.887125][ T6920] end_report+0x66/0x110 [ 352.891373][ T6920] kasan_report+0x143/0x160 [ 352.895888][ T6920] ? udf_readdir+0xc5f/0x2240 [ 352.900581][ T6920] kasan_check_range+0x27f/0x290 [ 352.905542][ T6920] ? udf_readdir+0xc5f/0x2240 [ 352.910227][ T6920] memcpy+0x3c/0x60 [ 352.914046][ T6920] udf_readdir+0xc5f/0x2240 [ 352.918573][ T6920] ? load_block_bitmap+0x520/0x520 [ 352.923704][ T6920] ? __might_sleep+0xb0/0xb0 [ 352.928305][ T6920] ? aa_file_perm+0x3e3/0xf60 [ 352.932997][ T6920] ? trace_raw_output_contention_end+0xd0/0xd0 [ 352.939165][ T6920] ? load_block_bitmap+0x520/0x520 [ 352.944327][ T6920] ? __fdget_pos+0x2ba/0x360 [ 352.948924][ T6920] ? end_current_label_crit_section+0x147/0x170 [ 352.955179][ T6920] ? common_file_perm+0x17d/0x1d0 [ 352.960218][ T6920] ? fsnotify_perm+0x439/0x590 [ 352.965001][ T6920] iterate_dir+0x224/0x560 [ 352.969425][ T6920] ? load_block_bitmap+0x520/0x520 [ 352.974549][ T6920] __se_sys_getdents64+0x209/0x4f0 [ 352.979667][ T6920] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 352.985659][ T6920] ? __x64_sys_getdents64+0x80/0x80 [ 352.990857][ T6920] ? filldir+0x6f0/0x6f0 [ 352.995109][ T6920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 353.001088][ T6920] ? lockdep_hardirqs_on+0x94/0x130 [ 353.006285][ T6920] ? syscall_enter_from_user_mode+0x2e/0x230 [ 353.012265][ T6920] do_syscall_64+0x3b/0xb0 [ 353.016683][ T6920] ? clear_bhb_loop+0x45/0xa0 [ 353.021363][ T6920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.027264][ T6920] RIP: 0033:0x7ff79b7ac013 [ 353.031683][ T6920] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 353.051303][ T6920] RSP: 002b:00007ffffc61deb8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 353.059732][ T6920] RAX: ffffffffffffffda RBX: 000055555697a600 RCX: 00007ff79b7ac013 [ 353.068420][ T6920] RDX: 0000000000008000 RSI: 000055555697a600 RDI: 0000000000000005 [ 353.076407][ T6920] RBP: 000055555697a5d4 R08: 0000000000000000 R09: 0000000000000000 [ 353.084473][ T6920] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 353.092453][ T6920] R13: 0000000000000010 R14: 000055555697a5d0 R15: 00007ffffc620160 [ 353.100446][ T6920] [ 353.103726][ T6920] Kernel Offset: disabled [ 353.108039][ T6920] Rebooting in 86400 seconds..