last executing test programs: 11.99924297s ago: executing program 0 (id=641): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 11.028412434s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000200)={0x1f, @none}, 0x8) unshare(0x22020600) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 10.009872433s ago: executing program 0 (id=646): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x3ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 8.505429803s ago: executing program 0 (id=651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0) 8.282550912s ago: executing program 0 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none, 0x802}, 0xe) shutdown(r1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40854) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f0000000380), 0x2, 0x1, &(0x7f00000003c0), 0x0, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) 7.109858244s ago: executing program 1 (id=658): clock_gettime(0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r4, 0x1}, 0x14}}, 0x0) 7.057730558s ago: executing program 4 (id=659): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 5.818000506s ago: executing program 0 (id=660): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) clock_adjtime(0x5, 0x0) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x81b\x80\xfd') chdir(&(0x7f0000000380)='./file0\x00') socket(0x28, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 5.732417113s ago: executing program 2 (id=662): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x2c, r1, 0x10db0db96401d82d, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 5.673891328s ago: executing program 4 (id=663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5.497984414s ago: executing program 1 (id=664): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 5.497460594s ago: executing program 2 (id=665): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) pipe2$9p(0x0, 0x0) close_range(r0, r1, 0x2) getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@loose}, {@cache_none}, {@access_any}]}}) chdir(&(0x7f0000000540)='./file0\x00') sched_setscheduler(0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r8, 0x105, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x20}}, 0x0) 4.768142347s ago: executing program 4 (id=667): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r3, 0x3a3, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, &(0x7f00000001c0)=0x7, 0x4) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x0, 0x23, 0xa8, {0xa8, 0x7, "44916629b495f4d110d3df9228bc60ecc963b0192de495cfe6a161f51da8dafd7aad41fae0b400e5c7b9d2201a10bc28052853f05101b8a759222906ab277707759933fc2ce78706e97709b7517e510c55348cf1360331a8de2b2e7f5c5de57972b3fd0bf4325c448355dbff79d4bc876c638a984b9dbc257137eefe9c5118a36f2769e626d80002045fa0d089a178a0cb623a086c45f0742ca8e280c5ecc45387481f397c69"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f46000000050f46000507100200691f0014100407a1709329db7e7f39c7287110fc8e91660b1001042500084008008d14100a01020020000f7850000f3f00000f000000071002082a1f00"], &(0x7f0000000340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x7, 0x4, "064beb46", "19dad4e3"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x1, 0x0, 0x1, 0x2, 0xfff, 0x8}}}, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x20, 0xe, 0x46, "a9570e94c0aa9dc5e0847059d9c00fc62370110aa825316da650700dc58fdb0069d194eec0efc12e13208b89824438c401e25e947e50562d73ee3f14be98f71a5c2630690959"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0xb26a410014e74519, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x20, 0x20, [0xf00f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000740)={0x40, 0xb, 0x2, '.R'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x401}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="7477aeaba5a6"}, &(0x7f0000000800)={0x40, 0x17, 0x6}, &(0x7f0000000840)={0x40, 0x19, 0x2, "d09c"}, &(0x7f0000000880)={0x40, 0x1a, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000940)={0x40, 0x21, 0x1}}) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000240)=0x11) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, "87"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x2}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="17f8ffffffffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005004500000000000900020073797a3200000000050004000000000005000100070000000d0003006c6973743a73657400000000"], 0x48}}, 0x0) semget$private(0x0, 0x0, 0x423) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x40, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x40}}, 0x0) 4.49510968s ago: executing program 3 (id=669): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0x8281336) r2 = dup(0xffffffffffffffff) write$nbd(r2, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x968}, {&(0x7f0000000400)="3d9c7e9dd799fe2b", 0x8}], 0x2, 0xf1, 0x4) 4.479504822s ago: executing program 1 (id=670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none, 0x802}, 0xe) shutdown(r1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40854) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f0000000380), 0x2, 0x1, &(0x7f00000003c0), 0x0, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) 4.280006139s ago: executing program 3 (id=671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000200)={0x1f, @none}, 0x8) unshare(0x22020600) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, @fixed}, 0x8) 4.279444619s ago: executing program 2 (id=672): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0xfffffffffffffcfe) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.499790287s ago: executing program 1 (id=673): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.499137127s ago: executing program 4 (id=674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 3.289006405s ago: executing program 3 (id=675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x90) 3.148262777s ago: executing program 3 (id=676): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x3ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2.42975385s ago: executing program 4 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) 2.418442091s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200001400000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_open_dev$sndctrl(0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0)) 1.39150586s ago: executing program 1 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x9}) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x6611, 0x0) 1.39109479s ago: executing program 2 (id=680): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = syz_clone(0x4008200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) 1.280235769s ago: executing program 4 (id=681): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 539.418584ms ago: executing program 3 (id=682): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7d, 0x35}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="6100000000000000040000000000", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000240)="e9d4444963b4c3649d02e03888797f4aeb260958cf7e23eba728b2464b181eef040d08e1299ffd4dad5e9f0e1e23f27025fa63935044b1e1"}, 0x50) 19.683289ms ago: executing program 3 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @none, 0x802}, 0xe) shutdown(r1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x40854) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f0000000380), 0x2, 0x1, &(0x7f00000003c0), 0x0, 0x2) close(0xffffffffffffffff) close(0xffffffffffffffff) 15.501369ms ago: executing program 1 (id=684): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=685): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d00000067000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = dup(r3) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000002c0)={0x1, &(0x7f0000000140)=[{}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xd, 0x1, 0x200, &(0x7f0000000cc0)="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"}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r7 = gettid() process_vm_writev(r7, &(0x7f0000000240)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000340)=""/121, 0x79}], 0x2, &(0x7f0000121000)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) kernel console output (not intermixed with test programs): 4754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 103.231129][ T4751] ip6gretap0 speed is unknown, defaulting to 1000 [ 103.641907][ T4751] chnl_net:caif_netlink_parms(): no params data found [ 103.761514][ T4742] loop1: detected capacity change from 0 to 40427 [ 103.861878][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.863479][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.866085][ T4751] device bridge_slave_0 entered promiscuous mode [ 103.894064][ T4742] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.895954][ T4742] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.918257][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.920276][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.922542][ T4751] device bridge_slave_1 entered promiscuous mode [ 103.966973][ T4742] F2FS-fs (loop1): Found nat_bits in checkpoint [ 104.003219][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.007848][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.046952][ T4742] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 104.048789][ T4742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.112707][ T4751] team0: Port device team_slave_0 added [ 104.161547][ T4751] team0: Port device team_slave_1 added [ 104.233664][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.235445][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.255770][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.265319][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.266980][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.277745][ T4784] attempt to access beyond end of device [ 104.277745][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 104.295534][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.313775][ T4784] attempt to access beyond end of device [ 104.313775][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 104.317889][ T4784] attempt to access beyond end of device [ 104.317889][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 104.336124][ T4784] attempt to access beyond end of device [ 104.336124][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 104.341598][ T4784] attempt to access beyond end of device [ 104.341598][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 104.345744][ T4784] attempt to access beyond end of device [ 104.345744][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 104.348563][ T4784] attempt to access beyond end of device [ 104.348563][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 104.352193][ T4784] attempt to access beyond end of device [ 104.352193][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 104.354850][ T4784] attempt to access beyond end of device [ 104.354850][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 104.358743][ T4784] attempt to access beyond end of device [ 104.358743][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 104.424357][ T4790] ubi0: attaching mtd0 [ 104.432786][ T4790] ubi0: scanning is finished [ 104.433918][ T4790] ubi0: empty MTD device detected [ 104.488302][ T4790] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 104.632519][ T4751] device hsr_slave_0 entered promiscuous mode [ 104.749425][ T4751] device hsr_slave_1 entered promiscuous mode [ 104.809052][ T4751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.810838][ T4751] Cannot create hsr debugfs directory [ 104.919098][ T4069] Bluetooth: hci1: command 0x0409 tx timeout [ 105.293690][ T1677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.324152][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 105.326042][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 105.406109][ T1677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.545934][ T1677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.744868][ T4802] 9pnet: Insufficient options for proto=fd [ 105.750313][ T4802] loop4: detected capacity change from 0 to 16 [ 106.158514][ T4802] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported on this platform [ 106.207884][ T1677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.289481][ T4802] loop4: detected capacity change from 0 to 8 [ 106.389579][ T4802] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 106.538732][ T4794] loop0: detected capacity change from 0 to 32768 [ 106.719619][ T4794] XFS (loop0): Mounting V5 Filesystem [ 106.752885][ T4816] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.999320][ T4519] Bluetooth: hci1: command 0x041b tx timeout [ 107.129157][ T4794] XFS (loop0): Ending clean mount [ 107.167943][ T4819] ip6gretap0 speed is unknown, defaulting to 1000 [ 107.321588][ T4069] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x54/0x434, xfs_rmapbt block 0x14 [ 107.324358][ T4069] XFS (loop0): Unmount and run xfs_repair [ 107.325571][ T4069] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 107.327277][ T4069] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 107.334879][ T4069] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 107.336729][ T4069] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 107.338542][ T4069] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 107.357957][ T4069] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 107.360056][ T4069] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 107.361949][ T4069] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 107.375420][ T4069] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 107.377564][ T4794] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f4/0x2f8" at daddr 0x14 len 4 error 74 [ 107.408373][ T4794] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x164c/0x1f34 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 107.420058][ T4794] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 107.535974][ T4027] XFS (loop0): Unmounting Filesystem [ 107.788929][ T4751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.885377][ T4751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.931125][ T4751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.959282][ T4072] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 107.961364][ T4072] Bluetooth: hci5: Injecting HCI hardware error event [ 107.963220][ T4035] Bluetooth: hci5: hardware error 0x00 [ 108.016754][ T4751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.149590][ T4843] udc-core: couldn't find an available UDC or it's busy [ 108.151228][ T4843] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.359791][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.415504][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.417467][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.439561][ T4751] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.592876][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.680734][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.683537][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.686713][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.688812][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.698637][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.713612][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.737094][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.752511][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.754294][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.813306][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.817076][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.979549][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.982992][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.014374][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.031092][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.054751][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.089090][ T4519] Bluetooth: hci1: command 0x040f tx timeout [ 109.098019][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.125576][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.137801][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.155632][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.195514][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.279403][ T4784] handle_bad_sector: 24079 callbacks suppressed [ 109.279431][ T4784] attempt to access beyond end of device [ 109.279431][ T4784] loop1: rw=524288, want=58272, limit=40427 [ 109.295564][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.324948][ T4784] attempt to access beyond end of device [ 109.324948][ T4784] loop1: rw=524288, want=58280, limit=40427 [ 109.346642][ T4784] attempt to access beyond end of device [ 109.346642][ T4784] loop1: rw=524288, want=58288, limit=40427 [ 109.368324][ T4784] attempt to access beyond end of device [ 109.368324][ T4784] loop1: rw=524288, want=58296, limit=40427 [ 109.383510][ T4784] attempt to access beyond end of device [ 109.383510][ T4784] loop1: rw=524288, want=58304, limit=40427 [ 109.401870][ T4784] attempt to access beyond end of device [ 109.401870][ T4784] loop1: rw=524288, want=58312, limit=40427 [ 109.414222][ T4784] attempt to access beyond end of device [ 109.414222][ T4784] loop1: rw=524288, want=58320, limit=40427 [ 109.428173][ T4784] attempt to access beyond end of device [ 109.428173][ T4784] loop1: rw=524288, want=58328, limit=40427 [ 109.440680][ T4784] attempt to access beyond end of device [ 109.440680][ T4784] loop1: rw=524288, want=58336, limit=40427 [ 109.452593][ T4784] attempt to access beyond end of device [ 109.452593][ T4784] loop1: rw=524288, want=58344, limit=40427 [ 109.898823][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 109.901288][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 109.920837][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.922708][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.940484][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.026435][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.032493][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.052738][ T4871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.085608][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.088359][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.093668][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.099861][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.110357][ T4751] device veth0_vlan entered promiscuous mode [ 110.144782][ T4751] device veth1_vlan entered promiscuous mode [ 110.276712][ T4751] device veth0_macvtap entered promiscuous mode [ 110.322403][ T4751] device veth1_macvtap entered promiscuous mode [ 110.383780][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.404339][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.415699][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.429166][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.444094][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.455645][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.465833][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.476066][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.486121][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.496740][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.517301][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.538159][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.550041][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.560410][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.569594][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.579504][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.589668][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.600118][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.610416][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.620580][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.632020][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.648444][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.669846][ T4751] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.678293][ T4751] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.696003][ T4751] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.704925][ T4751] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.748571][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.752746][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.757460][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.774074][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.783568][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.794707][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.805135][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.821408][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.826128][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.864806][ T1677] device hsr_slave_0 left promiscuous mode [ 110.901276][ T1677] device hsr_slave_1 left promiscuous mode [ 110.989451][ T1677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.991129][ T1677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.013863][ T1677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.015650][ T1677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.019848][ T1677] device bridge_slave_1 left promiscuous mode [ 111.022542][ T1677] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.083448][ T1677] device bridge_slave_0 left promiscuous mode [ 111.084976][ T1677] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.159292][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 111.300451][ T1677] device veth1_macvtap left promiscuous mode [ 111.301739][ T1677] device veth0_macvtap left promiscuous mode [ 111.303167][ T1677] device veth1_vlan left promiscuous mode [ 111.305594][ T1677] device veth0_vlan left promiscuous mode [ 111.866543][ T1677] team0 (unregistering): Port device team_slave_1 removed [ 111.897842][ T1677] team0 (unregistering): Port device team_slave_0 removed [ 111.914967][ T1677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.971620][ T1677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.207999][ T1677] bond0 (unregistering): Released all slaves [ 112.328205][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.331746][ T4878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 112.353619][ T4887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.460462][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.462396][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.471293][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.717221][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.719775][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.724819][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.915875][ T4894] ip6gretap0 speed is unknown, defaulting to 1000 [ 113.000307][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 113.083676][ T4898] ip6gretap0 speed is unknown, defaulting to 1000 [ 113.249204][ T443] Bluetooth: hci1: command 0x0405 tx timeout [ 113.290279][ T4894] chnl_net:caif_netlink_parms(): no params data found [ 113.372601][ T4910] loop4: detected capacity change from 0 to 1024 [ 113.435328][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 113.484372][ T4910] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.514938][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.516613][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.519195][ T4894] device bridge_slave_0 entered promiscuous mode [ 113.531238][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.532894][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.535212][ T4894] device bridge_slave_1 entered promiscuous mode [ 113.717273][ T4894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.755870][ T4894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.469314][ T4784] handle_bad_sector: 32760 callbacks suppressed [ 114.469331][ T4784] attempt to access beyond end of device [ 114.469331][ T4784] loop1: rw=524288, want=59312, limit=40427 [ 114.473175][ T4784] attempt to access beyond end of device [ 114.473175][ T4784] loop1: rw=524288, want=59320, limit=40427 [ 114.475742][ T4784] attempt to access beyond end of device [ 114.475742][ T4784] loop1: rw=524288, want=59328, limit=40427 [ 114.478274][ T4784] attempt to access beyond end of device [ 114.478274][ T4784] loop1: rw=524288, want=59336, limit=40427 [ 114.530282][ T4784] attempt to access beyond end of device [ 114.530282][ T4784] loop1: rw=524288, want=59344, limit=40427 [ 114.532783][ T4784] attempt to access beyond end of device [ 114.532783][ T4784] loop1: rw=524288, want=59352, limit=40427 [ 114.569225][ T4784] attempt to access beyond end of device [ 114.569225][ T4784] loop1: rw=524288, want=59360, limit=40427 [ 114.571865][ T4784] attempt to access beyond end of device [ 114.571865][ T4784] loop1: rw=524288, want=59368, limit=40427 [ 114.576765][ T4894] team0: Port device team_slave_0 added [ 114.600705][ T4024] Bluetooth: hci3: command 0x0409 tx timeout [ 114.618050][ T4894] team0: Port device team_slave_1 added [ 114.637139][ T4784] attempt to access beyond end of device [ 114.637139][ T4784] loop1: rw=524288, want=59376, limit=40427 [ 114.640278][ T4784] attempt to access beyond end of device [ 114.640278][ T4784] loop1: rw=524288, want=59384, limit=40427 [ 114.745230][ T4930] loop2: detected capacity change from 0 to 2048 [ 115.354360][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.357347][ T4930] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.360128][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.399644][ T4894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.579481][ T4894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.581026][ T4894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.586593][ T4894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.996053][ T4941] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.001064][ T4941] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 116.003994][ T4941] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.003994][ T4941] [ 116.006613][ T4941] EXT4-fs (loop2): Total free blocks count 0 [ 116.008047][ T4941] EXT4-fs (loop2): Free/Dirty block details [ 116.009552][ T4941] EXT4-fs (loop2): free_blocks=2415919104 [ 116.010992][ T4941] EXT4-fs (loop2): dirty_blocks=64 [ 116.012374][ T4941] EXT4-fs (loop2): Block reservation details [ 116.013748][ T4941] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 116.591848][ T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 116.597364][ T4944] loop0: detected capacity change from 0 to 128 [ 116.610361][ T9] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.610361][ T9] [ 116.679160][ T4024] Bluetooth: hci3: command 0x041b tx timeout [ 116.795627][ T4946] x_tables: ip_tables: udplite match: only valid for protocol 136 [ 117.723233][ T4894] device hsr_slave_0 entered promiscuous mode [ 118.246932][ T4956] loop4: detected capacity change from 0 to 512 [ 118.553372][ T4894] device hsr_slave_1 entered promiscuous mode [ 119.225420][ T1960] Bluetooth: hci3: command 0x040f tx timeout [ 119.229341][ T4894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.231006][ T4894] Cannot create hsr debugfs directory [ 119.269343][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 119.321003][ T4956] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0) [ 119.488356][ T4784] handle_bad_sector: 8006 callbacks suppressed [ 119.488375][ T4784] attempt to access beyond end of device [ 119.488375][ T4784] loop1: rw=524288, want=58160, limit=40427 [ 119.493259][ T4784] attempt to access beyond end of device [ 119.493259][ T4784] loop1: rw=524288, want=58168, limit=40427 [ 119.495758][ T4784] attempt to access beyond end of device [ 119.495758][ T4784] loop1: rw=524288, want=58176, limit=40427 [ 119.530571][ T4784] attempt to access beyond end of device [ 119.530571][ T4784] loop1: rw=524288, want=58184, limit=40427 [ 119.533126][ T4784] attempt to access beyond end of device [ 119.533126][ T4784] loop1: rw=524288, want=58192, limit=40427 [ 119.535621][ T4784] attempt to access beyond end of device [ 119.535621][ T4784] loop1: rw=524288, want=58200, limit=40427 [ 119.602208][ T4894] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.608125][ T4784] attempt to access beyond end of device [ 119.608125][ T4784] loop1: rw=524288, want=58208, limit=40427 [ 119.610974][ T4784] attempt to access beyond end of device [ 119.610974][ T4784] loop1: rw=524288, want=58216, limit=40427 [ 119.616957][ T4784] attempt to access beyond end of device [ 119.616957][ T4784] loop1: rw=524288, want=58224, limit=40427 [ 119.623075][ T4968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 119.624419][ T4784] attempt to access beyond end of device [ 119.624419][ T4784] loop1: rw=524288, want=58232, limit=40427 [ 119.625093][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 119.752990][ T4894] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.838802][ T4978] udc-core: couldn't find an available UDC or it's busy [ 119.855431][ T4978] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.895501][ T4894] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.842484][ T4894] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.057079][ T4995] mmap: syz.0.214 (4995) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 121.139628][ T4994] udc-core: couldn't find an available UDC or it's busy [ 121.141182][ T4994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 121.239069][ T4069] Bluetooth: hci3: command 0x0419 tx timeout [ 121.273593][ T4894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.306264][ T4894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.357986][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 121.364875][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.365435][ T4894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.366474][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.389006][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.390689][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.392389][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.393976][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.395614][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.397124][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.398677][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.411811][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.414712][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.416285][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.417953][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.424877][ T4894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.436757][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 121.438421][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.440125][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.441760][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.443408][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.445152][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.446817][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.448317][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.482935][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.484708][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.486885][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.488613][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.505263][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.506828][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.508359][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.538061][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.539979][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.541553][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.543250][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.552082][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.557555][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.563017][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.568180][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.574653][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.581015][ T4069] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 121.605049][ T4069] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 121.754150][ T4894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.610030][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.615142][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.622953][ T4894] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.641575][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.644101][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.659966][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.661577][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.683641][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.688808][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.704259][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.729472][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.731081][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.751629][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.810115][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.812872][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.958460][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.968117][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.988492][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.008035][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.039601][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.040376][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.060486][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.072425][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.087678][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.304368][ T5026] loop0: detected capacity change from 0 to 1024 [ 123.317059][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.321613][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.359858][ T5026] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 123.370705][ T4894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.378209][ T5026] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 123.417819][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.432687][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.550511][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.552781][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.563574][ T4894] device veth0_vlan entered promiscuous mode [ 123.570486][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.572931][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.608551][ T4894] device veth1_vlan entered promiscuous mode [ 123.624448][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.760387][ T4894] device veth0_macvtap entered promiscuous mode [ 123.790906][ T4894] device veth1_macvtap entered promiscuous mode [ 123.985860][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.990050][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.999653][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.013250][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.042404][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.060851][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.063009][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.069845][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.072106][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.074484][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.091417][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.093755][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.096361][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.109426][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.113008][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.126964][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.130373][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.135751][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.138419][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.142184][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.144536][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.146723][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.170805][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.178076][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.188218][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.191054][ T4894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.193565][ T4894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.210441][ T4894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.215618][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.218331][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.237307][ T4894] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.269079][ T4894] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.271082][ T4894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.272866][ T4894] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.476082][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.477992][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.482794][ T4131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.489974][ T4784] handle_bad_sector: 15620 callbacks suppressed [ 124.489989][ T4784] attempt to access beyond end of device [ 124.489989][ T4784] loop1: rw=0, want=58760, limit=40427 [ 124.494142][ T4784] attempt to access beyond end of device [ 124.494142][ T4784] loop1: rw=0, want=58768, limit=40427 [ 124.510547][ T4784] attempt to access beyond end of device [ 124.510547][ T4784] loop1: rw=0, want=58776, limit=40427 [ 124.516454][ T4784] attempt to access beyond end of device [ 124.516454][ T4784] loop1: rw=0, want=58784, limit=40427 [ 124.545368][ T4784] attempt to access beyond end of device [ 124.545368][ T4784] loop1: rw=0, want=58792, limit=40427 [ 124.547887][ T4784] attempt to access beyond end of device [ 124.547887][ T4784] loop1: rw=0, want=58800, limit=40427 [ 124.555025][ T4382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.556987][ T4382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.564007][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.567826][ T4784] attempt to access beyond end of device [ 124.567826][ T4784] loop1: rw=0, want=58808, limit=40427 [ 124.583535][ T4784] attempt to access beyond end of device [ 124.583535][ T4784] loop1: rw=0, want=58816, limit=40427 [ 124.586004][ T4784] attempt to access beyond end of device [ 124.586004][ T4784] loop1: rw=0, want=58824, limit=40427 [ 124.588495][ T4784] attempt to access beyond end of device [ 124.588495][ T4784] loop1: rw=0, want=58832, limit=40427 [ 124.759101][ T4116] Bluetooth: hci3: command 0x0405 tx timeout [ 125.962781][ T5071] loop3: detected capacity change from 0 to 1024 [ 126.044142][ T5071] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 126.069705][ T5071] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 127.086728][ T5084] loop4: detected capacity change from 0 to 512 [ 127.915014][ T5084] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.239: bg 0: block 393: padding at end of block bitmap is not set [ 127.973923][ T5084] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 127.986098][ T5084] EXT4-fs (loop4): 2 truncates cleaned up [ 127.992004][ T5084] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.306621][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.429223][ T5118] Bluetooth: hci6: Frame reassembly failed (-84) [ 129.511639][ T4385] Bluetooth: hci6: Frame reassembly failed (-84) [ 129.533036][ T4385] Bluetooth: hci6: Frame reassembly failed (-84) [ 130.065393][ T4784] handle_bad_sector: 7209 callbacks suppressed [ 130.065412][ T4784] attempt to access beyond end of device [ 130.065412][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 130.083836][ T4784] attempt to access beyond end of device [ 130.083836][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 130.143291][ T4784] attempt to access beyond end of device [ 130.143291][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 130.145789][ T4784] attempt to access beyond end of device [ 130.145789][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 130.148291][ T4784] attempt to access beyond end of device [ 130.148291][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 130.161490][ T4784] attempt to access beyond end of device [ 130.161490][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 130.164119][ T4784] attempt to access beyond end of device [ 130.164119][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 130.166530][ T4784] attempt to access beyond end of device [ 130.166530][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 130.169533][ T7] usb 1-1: config 0 has no interfaces? [ 130.214191][ T4784] attempt to access beyond end of device [ 130.214191][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 130.216856][ T4784] attempt to access beyond end of device [ 130.216856][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 130.261310][ T7] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 130.264108][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 130.265964][ T7] usb 1-1: SerialNumber: syz [ 130.286203][ T7] usb 1-1: config 0 descriptor?? [ 130.535430][ T7] usb 1-1: USB disconnect, device number 6 [ 131.083799][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.085280][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.125290][ T5127] netlink: 'syz.4.250': attribute type 11 has an invalid length. [ 131.308118][ T5131] loop0: detected capacity change from 0 to 1024 [ 131.379463][ T5131] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 131.414251][ T5131] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 131.559050][ T3604] Bluetooth: hci6: command 0x1003 tx timeout [ 131.560457][ T4029] Bluetooth: hci6: sending frame failed (-49) [ 132.614756][ T5146] udc-core: couldn't find an available UDC or it's busy [ 132.616272][ T5146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 132.766364][ T5146] loop4: detected capacity change from 0 to 8192 [ 132.847128][ T5149] loop0: detected capacity change from 0 to 64 [ 132.848472][ T5146] loop4: p1 p3 p4 [ 132.851514][ T5146] loop4: partition table partially beyond EOD, truncated [ 132.856458][ T5146] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 132.866022][ T5146] loop4: p3 start 4294901760 is beyond EOD, truncated [ 132.867796][ T5146] loop4: p4 size 50331648 extends beyond EOD, truncated [ 132.949372][ T5149] hfs: invalid gid -1 [ 132.950532][ T5149] hfs: unable to parse mount options [ 134.114763][ T7] Bluetooth: hci6: command 0x1001 tx timeout [ 134.116288][ T4029] Bluetooth: hci6: sending frame failed (-49) [ 134.251213][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 134.264493][ T4170] udevd[4170]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.360293][ T4170] udevd[4170]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 134.397435][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 134.765120][ T5181] loop4: detected capacity change from 0 to 1024 [ 134.835459][ T5181] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 134.874615][ T5181] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 135.011889][ T26] audit: type=1326 audit(134.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.029370][ T26] audit: type=1326 audit(134.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.050130][ T26] audit: type=1326 audit(135.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.069267][ T4784] handle_bad_sector: 25051 callbacks suppressed [ 135.069285][ T4784] attempt to access beyond end of device [ 135.069285][ T4784] loop1: rw=524288, want=57920, limit=40427 [ 135.073300][ T4784] attempt to access beyond end of device [ 135.073300][ T4784] loop1: rw=524288, want=57928, limit=40427 [ 135.075950][ T4784] attempt to access beyond end of device [ 135.075950][ T4784] loop1: rw=524288, want=57936, limit=40427 [ 135.078772][ T26] audit: type=1326 audit(135.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.109109][ T26] audit: type=1326 audit(135.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.119220][ T4784] attempt to access beyond end of device [ 135.119220][ T4784] loop1: rw=524288, want=57944, limit=40427 [ 135.121675][ T4784] attempt to access beyond end of device [ 135.121675][ T4784] loop1: rw=524288, want=57952, limit=40427 [ 135.129254][ T26] audit: type=1326 audit(135.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.134141][ T26] audit: type=1326 audit(135.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.149186][ T4784] attempt to access beyond end of device [ 135.149186][ T4784] loop1: rw=524288, want=57960, limit=40427 [ 135.158518][ T26] audit: type=1326 audit(135.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.164971][ T4784] attempt to access beyond end of device [ 135.164971][ T4784] loop1: rw=524288, want=57968, limit=40427 [ 135.167390][ T4784] attempt to access beyond end of device [ 135.167390][ T4784] loop1: rw=524288, want=57976, limit=40427 [ 135.171756][ T26] audit: type=1326 audit(135.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 135.184243][ T4784] attempt to access beyond end of device [ 135.184243][ T4784] loop1: rw=524288, want=57984, limit=40427 [ 135.197211][ T4784] attempt to access beyond end of device [ 135.197211][ T4784] loop1: rw=524288, want=57992, limit=40427 [ 135.200043][ T26] audit: type=1326 audit(135.010:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x7ffc0000 [ 136.119174][ T3604] Bluetooth: hci6: command 0x1009 tx timeout [ 137.006449][ T5230] loop2: detected capacity change from 0 to 1024 [ 137.213777][ T5233] netlink: 'syz.3.282': attribute type 9 has an invalid length. [ 137.240875][ T5230] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 137.273175][ T5233] netlink: 'syz.3.282': attribute type 7 has an invalid length. [ 137.274888][ T5233] netlink: 'syz.3.282': attribute type 8 has an invalid length. [ 137.301754][ T5230] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 137.454562][ T5233] ax25_connect(): syz.3.282 uses autobind, please contact jreuter@yaina.de [ 137.467854][ T5233] process 'syz.3.282' launched './file1' with NULL argv: empty string added [ 139.433035][ T5257] loop2: detected capacity change from 0 to 512 [ 139.439385][ T5254] ip6gretap0 speed is unknown, defaulting to 1000 [ 139.589401][ T5257] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,i_version,,errors=continue. Quota mode: writeback. [ 140.087857][ T4784] handle_bad_sector: 21849 callbacks suppressed [ 140.087875][ T4784] attempt to access beyond end of device [ 140.087875][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 140.099066][ T4784] attempt to access beyond end of device [ 140.099066][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 140.101754][ T4784] attempt to access beyond end of device [ 140.101754][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 140.104376][ T4784] attempt to access beyond end of device [ 140.104376][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 140.106844][ T4784] attempt to access beyond end of device [ 140.106844][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 140.118327][ T5269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 140.119058][ T4784] attempt to access beyond end of device [ 140.119058][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 140.123689][ T4784] attempt to access beyond end of device [ 140.123689][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 140.126185][ T4784] attempt to access beyond end of device [ 140.126185][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 140.128739][ T4784] attempt to access beyond end of device [ 140.128739][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 140.162973][ T4784] attempt to access beyond end of device [ 140.162973][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 140.197536][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 140.344771][ T5275] loop4: detected capacity change from 0 to 1024 [ 140.346254][ T5273] binder: BINDER_SET_CONTEXT_MGR already set [ 140.347841][ T5273] binder: 5272:5273 ioctl 4018620d 20000040 returned -16 [ 140.425110][ T5275] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 140.491181][ T5275] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 140.561105][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.562739][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.577868][ T5254] device bridge_slave_0 entered promiscuous mode [ 140.606360][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.608269][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.611624][ T5254] device bridge_slave_1 entered promiscuous mode [ 140.645522][ T5281] loop0: detected capacity change from 0 to 512 [ 140.686100][ T5281] EXT4-fs (loop0): Ignoring removed nobh option [ 140.687403][ T5281] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.702128][ T5281] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.728894][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.732162][ T5281] EXT4-fs (loop0): 1 truncate cleaned up [ 140.733419][ T5281] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 140.750926][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.844771][ T5254] team0: Port device team_slave_0 added [ 140.867090][ T5254] team0: Port device team_slave_1 added [ 141.399122][ T3604] Bluetooth: hci7: command 0x0409 tx timeout [ 141.416588][ T4385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.426896][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.428742][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.436608][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.460631][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.469159][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.496312][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.581630][ T4385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.689858][ T4385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.058574][ T5300] udc-core: couldn't find an available UDC or it's busy [ 142.084084][ T5300] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.262128][ T5305] loop0: detected capacity change from 0 to 8 [ 142.315636][ T5254] device hsr_slave_0 entered promiscuous mode [ 142.393733][ T5254] device hsr_slave_1 entered promiscuous mode [ 142.405741][ T5305] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.407851][ T5305] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.427679][ T5305] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.438864][ T5305] SQUASHFS error: Unable to read inode 0x127 [ 142.439993][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.443673][ T5254] Cannot create hsr debugfs directory [ 142.460481][ T4385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.525503][ T5311] udc-core: couldn't find an available UDC or it's busy [ 142.527121][ T5311] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.578061][ T5303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 142.864333][ T5315] udc-core: couldn't find an available UDC or it's busy [ 142.865956][ T5315] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.479217][ T4519] Bluetooth: hci7: command 0x041b tx timeout [ 143.914555][ T5303] loop0: detected capacity change from 0 to 32768 [ 144.057538][ T5254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.083488][ T5303] XFS (loop0): Mounting V5 Filesystem [ 144.091443][ T5254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.188840][ T5254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.271373][ T5254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.314836][ T5303] XFS (loop0): Ending clean mount [ 144.523066][ T5354] loop2: detected capacity change from 0 to 1024 [ 144.543856][ T4027] XFS (loop0): Unmounting Filesystem [ 144.597865][ T5354] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 144.687563][ T5354] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 144.693585][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.703356][ T5358] loop4: detected capacity change from 0 to 512 [ 144.772115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.774505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.777528][ T5358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.815643][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.851358][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.853850][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.856764][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.858355][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.879451][ T5358] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.895667][ T5358] EXT4-fs (loop4): 1 truncate cleaned up [ 144.897099][ T5358] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,quota,,errors=continue. Quota mode: writeback. [ 144.920230][ T4385] device hsr_slave_0 left promiscuous mode [ 144.994123][ T4385] device hsr_slave_1 left promiscuous mode [ 145.105979][ T4784] handle_bad_sector: 34781 callbacks suppressed [ 145.105998][ T4784] attempt to access beyond end of device [ 145.105998][ T4784] loop1: rw=524288, want=58240, limit=40427 [ 145.125600][ T4784] attempt to access beyond end of device [ 145.125600][ T4784] loop1: rw=524288, want=58248, limit=40427 [ 145.128717][ T4784] attempt to access beyond end of device [ 145.128717][ T4784] loop1: rw=524288, want=58256, limit=40427 [ 145.138686][ T4784] attempt to access beyond end of device [ 145.138686][ T4784] loop1: rw=524288, want=58264, limit=40427 [ 145.142061][ T4784] attempt to access beyond end of device [ 145.142061][ T4784] loop1: rw=524288, want=58272, limit=40427 [ 145.144598][ T4784] attempt to access beyond end of device [ 145.144598][ T4784] loop1: rw=524288, want=58280, limit=40427 [ 145.147192][ T4784] attempt to access beyond end of device [ 145.147192][ T4784] loop1: rw=524288, want=58288, limit=40427 [ 145.150144][ T4784] attempt to access beyond end of device [ 145.150144][ T4784] loop1: rw=524288, want=58296, limit=40427 [ 145.153563][ T4784] attempt to access beyond end of device [ 145.153563][ T4784] loop1: rw=524288, want=58304, limit=40427 [ 145.156143][ T4784] attempt to access beyond end of device [ 145.156143][ T4784] loop1: rw=524288, want=58312, limit=40427 [ 145.160840][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.162716][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.168516][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.173154][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.189399][ T4385] device bridge_slave_1 left promiscuous mode [ 145.191187][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.070481][ T3604] Bluetooth: hci7: command 0x040f tx timeout [ 146.112347][ T4385] device bridge_slave_0 left promiscuous mode [ 146.142400][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.550784][ T4385] device veth1_macvtap left promiscuous mode [ 146.552833][ T4385] device veth0_macvtap left promiscuous mode [ 146.554349][ T4385] device veth1_vlan left promiscuous mode [ 146.555738][ T4385] device veth0_vlan left promiscuous mode [ 146.675687][ T5379] binder: 5378:5379 ERROR: BC_REGISTER_LOOPER called without request [ 146.694333][ T5379] binder: undelivered death notification, 0000000000000000 [ 148.579868][ T7] Bluetooth: hci7: command 0x0419 tx timeout [ 148.607644][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 148.653903][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 148.686823][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.794277][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.125593][ T4385] bond0 (unregistering): Released all slaves [ 149.244199][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 149.246814][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.262543][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.267084][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.268707][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.353685][ T5254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.355885][ T5254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.424321][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 149.427070][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 149.432968][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 149.435270][ T5401] loop4: detected capacity change from 0 to 1024 [ 149.436632][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.459706][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.462264][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.464839][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.466994][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.508115][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 149.515380][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.517806][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.522678][ T5401] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 149.547861][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.552608][ T5401] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 149.876520][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.878338][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.896238][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.964561][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.967010][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.013284][ T5254] device veth0_vlan entered promiscuous mode [ 150.015716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.018266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.023786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.039767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.061813][ T5254] device veth1_vlan entered promiscuous mode [ 150.117706][ T4784] handle_bad_sector: 19498 callbacks suppressed [ 150.117725][ T4784] attempt to access beyond end of device [ 150.117725][ T4784] loop1: rw=524288, want=59264, limit=40427 [ 150.127945][ T4784] attempt to access beyond end of device [ 150.127945][ T4784] loop1: rw=524288, want=59272, limit=40427 [ 150.131291][ T4784] attempt to access beyond end of device [ 150.131291][ T4784] loop1: rw=524288, want=59280, limit=40427 [ 150.141019][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.143602][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.146047][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.154425][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.160984][ T4784] attempt to access beyond end of device [ 150.160984][ T4784] loop1: rw=524288, want=59288, limit=40427 [ 150.182588][ T4784] attempt to access beyond end of device [ 150.182588][ T4784] loop1: rw=524288, want=59296, limit=40427 [ 150.183351][ T5254] device veth0_macvtap entered promiscuous mode [ 150.188062][ T4784] attempt to access beyond end of device [ 150.188062][ T4784] loop1: rw=524288, want=59304, limit=40427 [ 150.195318][ T4784] attempt to access beyond end of device [ 150.195318][ T4784] loop1: rw=524288, want=59312, limit=40427 [ 150.200468][ T4784] attempt to access beyond end of device [ 150.200468][ T4784] loop1: rw=524288, want=59320, limit=40427 [ 150.201282][ T5254] device veth1_macvtap entered promiscuous mode [ 150.207153][ T4784] attempt to access beyond end of device [ 150.207153][ T4784] loop1: rw=524288, want=59328, limit=40427 [ 150.215033][ T4784] attempt to access beyond end of device [ 150.215033][ T4784] loop1: rw=524288, want=59336, limit=40427 [ 150.272881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.275123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.280679][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.283000][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.285162][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.287401][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.319025][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.321334][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.323442][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.325640][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.327800][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.359481][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.363704][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.382656][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.384989][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.386981][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.421931][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.423884][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.442133][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.444253][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.463725][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.480312][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.490685][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.494383][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.503721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.508232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.511583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.518497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.539992][ T5254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.541932][ T5254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.543970][ T5254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.545880][ T5254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.599572][ T4519] Bluetooth: hci7: command 0x0405 tx timeout [ 150.700706][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.702840][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.707584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.782164][ T4374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.785097][ T4374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.789802][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.824955][ T5447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.332'. [ 153.161101][ T5453] loop3: detected capacity change from 0 to 1024 [ 153.236856][ T5453] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 153.273050][ T5453] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 153.746983][ T5461] loop0: detected capacity change from 0 to 2048 [ 153.955007][ T5461] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.338: bad orphan inode 8192 [ 153.959877][ T5461] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.011554][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 155.011567][ T26] audit: type=1326 audit(154.970:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.080995][ T26] audit: type=1326 audit(155.040:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.089781][ T26] audit: type=1326 audit(155.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.094704][ T26] audit: type=1326 audit(155.040:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.166474][ T26] audit: type=1326 audit(155.040:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.170370][ T4784] handle_bad_sector: 8348 callbacks suppressed [ 155.170388][ T4784] attempt to access beyond end of device [ 155.170388][ T4784] loop1: rw=0, want=58808, limit=40427 [ 155.176370][ T4784] attempt to access beyond end of device [ 155.176370][ T4784] loop1: rw=0, want=58816, limit=40427 [ 155.178773][ T4784] attempt to access beyond end of device [ 155.178773][ T4784] loop1: rw=0, want=58824, limit=40427 [ 155.195532][ T4784] attempt to access beyond end of device [ 155.195532][ T4784] loop1: rw=0, want=58832, limit=40427 [ 155.198047][ T4784] attempt to access beyond end of device [ 155.198047][ T4784] loop1: rw=0, want=58840, limit=40427 [ 155.205467][ T4784] attempt to access beyond end of device [ 155.205467][ T4784] loop1: rw=0, want=58848, limit=40427 [ 155.207963][ T4784] attempt to access beyond end of device [ 155.207963][ T4784] loop1: rw=0, want=58856, limit=40427 [ 155.211182][ T4784] attempt to access beyond end of device [ 155.211182][ T4784] loop1: rw=0, want=58864, limit=40427 [ 155.214176][ T26] audit: type=1326 audit(155.040:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.217341][ T4784] attempt to access beyond end of device [ 155.217341][ T4784] loop1: rw=0, want=58872, limit=40427 [ 155.222417][ T4784] attempt to access beyond end of device [ 155.222417][ T4784] loop1: rw=0, want=58880, limit=40427 [ 155.242621][ T26] audit: type=1326 audit(155.040:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.401047][ T26] audit: type=1326 audit(155.040:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.405835][ T26] audit: type=1326 audit(155.040:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 155.411007][ T26] audit: type=1326 audit(155.040:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.2.343" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffa1568428 code=0x7ffc0000 [ 156.778573][ T5503] loop0: detected capacity change from 0 to 1024 [ 156.804175][ T5503] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 156.921072][ T5503] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 158.735399][ T5534] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 158.761782][ T5534] CIFS mount error: No usable UNC path provided in device string! [ 158.761782][ T5534] [ 158.764293][ T5534] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 159.945247][ T5554] ptrace attach of "./syz-executor exec"[5555] was attempted by "./syz-executor exec"[5554] [ 160.073135][ T5543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.270307][ T4784] handle_bad_sector: 9373 callbacks suppressed [ 160.270330][ T4784] attempt to access beyond end of device [ 160.270330][ T4784] loop1: rw=524288, want=58392, limit=40427 [ 160.329620][ T4784] attempt to access beyond end of device [ 160.329620][ T4784] loop1: rw=524288, want=58400, limit=40427 [ 160.364110][ T4784] attempt to access beyond end of device [ 160.364110][ T4784] loop1: rw=524288, want=58408, limit=40427 [ 160.389479][ T4784] attempt to access beyond end of device [ 160.389479][ T4784] loop1: rw=524288, want=58416, limit=40427 [ 160.445362][ T4784] attempt to access beyond end of device [ 160.445362][ T4784] loop1: rw=524288, want=58424, limit=40427 [ 160.469696][ T4784] attempt to access beyond end of device [ 160.469696][ T4784] loop1: rw=524288, want=58432, limit=40427 [ 160.485530][ T4784] attempt to access beyond end of device [ 160.485530][ T4784] loop1: rw=524288, want=58440, limit=40427 [ 160.505256][ T4784] attempt to access beyond end of device [ 160.505256][ T4784] loop1: rw=524288, want=58448, limit=40427 [ 160.521103][ T4784] attempt to access beyond end of device [ 160.521103][ T4784] loop1: rw=524288, want=58456, limit=40427 [ 160.541142][ T4784] attempt to access beyond end of device [ 160.541142][ T4784] loop1: rw=524288, want=58464, limit=40427 [ 161.030909][ T4099] Bluetooth: hci7: command 0x0411 tx timeout [ 163.964973][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 164.078551][ T5616] loop3: detected capacity change from 0 to 1024 [ 164.118865][ T5616] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 164.129774][ T5616] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 164.343675][ T5623] IPVS: Scheduler module ip_vs_sip not found [ 165.297402][ T4784] handle_bad_sector: 7863 callbacks suppressed [ 165.297418][ T4784] attempt to access beyond end of device [ 165.297418][ T4784] loop1: rw=0, want=58136, limit=40427 [ 165.356616][ T5636] loop4: detected capacity change from 0 to 16 [ 165.471526][ T4784] attempt to access beyond end of device [ 165.471526][ T4784] loop1: rw=0, want=58144, limit=40427 [ 165.504037][ T4784] attempt to access beyond end of device [ 165.504037][ T4784] loop1: rw=0, want=58152, limit=40427 [ 165.506816][ T4784] attempt to access beyond end of device [ 165.506816][ T4784] loop1: rw=0, want=58160, limit=40427 [ 165.537520][ T5636] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.563751][ T4784] attempt to access beyond end of device [ 165.563751][ T4784] loop1: rw=0, want=58168, limit=40427 [ 165.566194][ T4784] attempt to access beyond end of device [ 165.566194][ T4784] loop1: rw=0, want=58176, limit=40427 [ 165.568598][ T4784] attempt to access beyond end of device [ 165.568598][ T4784] loop1: rw=0, want=58184, limit=40427 [ 165.593264][ T4784] attempt to access beyond end of device [ 165.593264][ T4784] loop1: rw=0, want=58192, limit=40427 [ 165.631063][ T4784] attempt to access beyond end of device [ 165.631063][ T4784] loop1: rw=0, want=58200, limit=40427 [ 165.633873][ T4784] attempt to access beyond end of device [ 165.633873][ T4784] loop1: rw=0, want=58208, limit=40427 [ 165.907585][ T5641] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown compression format 1 for nid 36, please upgrade kernel [ 165.910772][ T5641] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 166.802124][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 166.881148][ T5648] ptrace attach of "./syz-executor exec"[5649] was attempted by "./syz-executor exec"[5648] [ 167.171385][ T5655] loop3: detected capacity change from 0 to 1024 [ 167.229547][ T5655] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 167.962180][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 168.057234][ T5660] loop4: detected capacity change from 0 to 128 [ 168.105030][ T5660] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 168.139548][ T5660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.192391][ T5662] udc-core: couldn't find an available UDC or it's busy [ 168.194066][ T5662] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.759412][ T5667] udc-core: couldn't find an available UDC or it's busy [ 168.761157][ T5667] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 169.657677][ T4070] Bluetooth: hci2: command 0x0406 tx timeout [ 169.887986][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 169.987117][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 170.070054][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 170.232756][ T5689] udc-core: couldn't find an available UDC or it's busy [ 170.236638][ T5689] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.300972][ T4784] handle_bad_sector: 9151 callbacks suppressed [ 170.300989][ T4784] attempt to access beyond end of device [ 170.300989][ T4784] loop1: rw=0, want=57984, limit=40427 [ 170.316946][ T4784] attempt to access beyond end of device [ 170.316946][ T4784] loop1: rw=0, want=57992, limit=40427 [ 170.339374][ T4784] attempt to access beyond end of device [ 170.339374][ T4784] loop1: rw=0, want=58000, limit=40427 [ 170.344463][ T4784] attempt to access beyond end of device [ 170.344463][ T4784] loop1: rw=0, want=58008, limit=40427 [ 170.352520][ T4784] attempt to access beyond end of device [ 170.352520][ T4784] loop1: rw=0, want=58016, limit=40427 [ 170.364988][ T4784] attempt to access beyond end of device [ 170.364988][ T4784] loop1: rw=0, want=58024, limit=40427 [ 170.377374][ T4784] attempt to access beyond end of device [ 170.377374][ T4784] loop1: rw=0, want=58032, limit=40427 [ 170.419571][ T4784] attempt to access beyond end of device [ 170.419571][ T4784] loop1: rw=0, want=58040, limit=40427 [ 170.434802][ T4784] attempt to access beyond end of device [ 170.434802][ T4784] loop1: rw=0, want=58048, limit=40427 [ 170.444296][ T4784] attempt to access beyond end of device [ 170.444296][ T4784] loop1: rw=0, want=58056, limit=40427 [ 170.521737][ T5703] loop2: detected capacity change from 0 to 256 [ 170.525694][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 170.525708][ T26] audit: type=1326 audit(170.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881e7428 code=0x7ffc0000 [ 170.533450][ T26] audit: type=1326 audit(170.480:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881e7428 code=0x7ffc0000 [ 170.551990][ T26] audit: type=1326 audit(170.500:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=448 compat=0 ip=0xffff881e7428 code=0x7ffc0000 [ 170.556500][ T26] audit: type=1326 audit(170.500:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.1.412" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881e7428 code=0x7ffc0000 [ 172.969777][ T5685] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 173.522714][ T5728] ptrace attach of "./syz-executor exec"[5729] was attempted by "./syz-executor exec"[5728] [ 175.353528][ T5745] ip6gretap0 speed is unknown, defaulting to 1000 [ 175.371416][ T4784] handle_bad_sector: 9856 callbacks suppressed [ 175.371432][ T4784] attempt to access beyond end of device [ 175.371432][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 175.379657][ T4784] attempt to access beyond end of device [ 175.379657][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 175.526430][ T4784] attempt to access beyond end of device [ 175.526430][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 175.780493][ T4784] attempt to access beyond end of device [ 175.780493][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 175.858051][ T4784] attempt to access beyond end of device [ 175.858051][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 176.042635][ T4784] attempt to access beyond end of device [ 176.042635][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 176.045024][ T4784] attempt to access beyond end of device [ 176.045024][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 176.047398][ T4784] attempt to access beyond end of device [ 176.047398][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 176.110874][ T4784] attempt to access beyond end of device [ 176.110874][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 176.113316][ T4784] attempt to access beyond end of device [ 176.113316][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 176.217035][ T5751] udc-core: couldn't find an available UDC or it's busy [ 176.218532][ T5751] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.953107][ T5757] udc-core: couldn't find an available UDC or it's busy [ 176.954838][ T5757] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 177.323323][ T5769] ptrace attach of "./syz-executor exec"[5770] was attempted by "./syz-executor exec"[5769] [ 177.627856][ T5771] loop2: detected capacity change from 0 to 1024 [ 177.895205][ T5771] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 177.929277][ T5771] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 178.429702][ T5781] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 178.519850][ T5781] team0: Port device netdevsim0 added [ 179.239141][ T4519] Bluetooth: hci4: command 0x0406 tx timeout [ 179.893439][ T5801] sp0: Synchronizing with TNC [ 179.980299][ T5801] netlink: 'syz.2.443': attribute type 4 has an invalid length. [ 179.989462][ T5801] netlink: 'syz.2.443': attribute type 2 has an invalid length. [ 180.003544][ T5801] netlink: 'syz.2.443': attribute type 9 has an invalid length. [ 180.010762][ T5801] netlink: 'syz.2.443': attribute type 10 has an invalid length. [ 180.017190][ T5801] netlink: 'syz.2.443': attribute type 11 has an invalid length. [ 180.035532][ T5801] netlink: 'syz.2.443': attribute type 12 has an invalid length. [ 180.048753][ T5801] netlink: 'syz.2.443': attribute type 13 has an invalid length. [ 180.055103][ T5801] netlink: 'syz.2.443': attribute type 14 has an invalid length. [ 180.189392][ T5806] netlink: 4608 bytes leftover after parsing attributes in process `syz.4.445'. [ 180.322314][ T5806] loop4: detected capacity change from 0 to 1024 [ 180.381385][ T4784] handle_bad_sector: 9680 callbacks suppressed [ 180.381405][ T4784] attempt to access beyond end of device [ 180.381405][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 180.400387][ T4784] attempt to access beyond end of device [ 180.400387][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 180.425820][ T4784] attempt to access beyond end of device [ 180.425820][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 180.446574][ T4784] attempt to access beyond end of device [ 180.446574][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 180.467488][ T4784] attempt to access beyond end of device [ 180.467488][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 180.495846][ T4784] attempt to access beyond end of device [ 180.495846][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 180.519249][ T4784] attempt to access beyond end of device [ 180.519249][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 180.528145][ T4784] attempt to access beyond end of device [ 180.528145][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 180.554930][ T4784] attempt to access beyond end of device [ 180.554930][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 180.563215][ T4784] attempt to access beyond end of device [ 180.563215][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 181.052799][ T5813] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[5813] [ 181.804117][ T5817] loop3: detected capacity change from 0 to 1024 [ 181.833666][ T5817] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 181.867251][ T5817] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 182.554488][ T5825] loop3: detected capacity change from 0 to 2048 [ 183.370200][ T5825] UDF-fs: bad mount option "uiD3ÁÃ+…7ÂÌ%¤¾€²~Ýd=00000000000000000000" or missing value [ 183.411491][ T5830] block nbd4: shutting down sockets [ 185.925635][ T4784] handle_bad_sector: 5600 callbacks suppressed [ 185.925702][ T4784] attempt to access beyond end of device [ 185.925702][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 185.948462][ T4784] attempt to access beyond end of device [ 185.948462][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 185.960733][ T4784] attempt to access beyond end of device [ 185.960733][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 186.015332][ T4784] attempt to access beyond end of device [ 186.015332][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 186.120321][ T4784] attempt to access beyond end of device [ 186.120321][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 186.169454][ T4784] attempt to access beyond end of device [ 186.169454][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 186.208460][ T4784] attempt to access beyond end of device [ 186.208460][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 186.232070][ T4784] attempt to access beyond end of device [ 186.232070][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 186.266658][ T5855] loop4: detected capacity change from 0 to 1024 [ 186.289909][ T4784] attempt to access beyond end of device [ 186.289909][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 186.292522][ T4784] attempt to access beyond end of device [ 186.292522][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 186.422814][ T5855] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 186.453890][ T5855] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 189.398646][ T5899] bridge0: port 3(syz_tun) entered blocking state [ 189.416726][ T5899] bridge0: port 3(syz_tun) entered disabled state [ 189.449073][ T5899] device syz_tun entered promiscuous mode [ 189.458756][ T5899] bridge0: port 3(syz_tun) entered blocking state [ 189.460529][ T5899] bridge0: port 3(syz_tun) entered forwarding state [ 190.980742][ T4784] handle_bad_sector: 5767 callbacks suppressed [ 190.980761][ T4784] attempt to access beyond end of device [ 190.980761][ T4784] loop1: rw=524288, want=58688, limit=40427 [ 191.027126][ T4784] attempt to access beyond end of device [ 191.027126][ T4784] loop1: rw=524288, want=58696, limit=40427 [ 191.093001][ T4784] attempt to access beyond end of device [ 191.093001][ T4784] loop1: rw=524288, want=58704, limit=40427 [ 191.095464][ T4784] attempt to access beyond end of device [ 191.095464][ T4784] loop1: rw=524288, want=58712, limit=40427 [ 191.101315][ T4784] attempt to access beyond end of device [ 191.101315][ T4784] loop1: rw=524288, want=58720, limit=40427 [ 191.103770][ T4784] attempt to access beyond end of device [ 191.103770][ T4784] loop1: rw=524288, want=58728, limit=40427 [ 191.106236][ T4784] attempt to access beyond end of device [ 191.106236][ T4784] loop1: rw=524288, want=58736, limit=40427 [ 191.112731][ T4784] attempt to access beyond end of device [ 191.112731][ T4784] loop1: rw=524288, want=58744, limit=40427 [ 191.115350][ T4784] attempt to access beyond end of device [ 191.115350][ T4784] loop1: rw=524288, want=58752, limit=40427 [ 191.118647][ T4784] attempt to access beyond end of device [ 191.118647][ T4784] loop1: rw=524288, want=58760, limit=40427 [ 191.261503][ T5894] loop2: detected capacity change from 0 to 32768 [ 191.329895][ T5894] XFS: ikeep mount option is deprecated. [ 191.434229][ T5894] XFS (loop2): Mounting V5 Filesystem [ 191.545561][ T5917] loop4: detected capacity change from 0 to 32768 [ 191.552388][ T5894] XFS (loop2): Ending clean mount [ 191.565298][ T5894] XFS (loop2): Quotacheck needed: Please wait. [ 191.618338][ T5894] XFS (loop2): Quotacheck: Done. [ 191.649582][ T5917] XFS: ikeep mount option is deprecated. [ 191.793092][ T5917] XFS (loop4): Mounting V5 Filesystem [ 191.943372][ T5917] XFS (loop4): Ending clean mount [ 191.961150][ T5917] XFS (loop4): Quotacheck needed: Please wait. [ 192.034644][ T5917] XFS (loop4): Quotacheck: Done. [ 192.070892][ T4031] XFS (loop2): Unmounting Filesystem [ 192.166471][ T5938] loop3: detected capacity change from 0 to 1024 [ 192.204015][ T5938] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 192.205801][ T4256] XFS (loop4): Unmounting Filesystem [ 192.242979][ T5938] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 192.521658][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.523158][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.250217][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.485'. [ 194.917397][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 195.596998][ T5975] ptrace attach of "./syz-executor exec"[5976] was attempted by "./syz-executor exec"[5975] [ 196.015397][ T5985] loop3: detected capacity change from 0 to 1024 [ 196.079270][ T4784] handle_bad_sector: 15872 callbacks suppressed [ 196.079288][ T4784] attempt to access beyond end of device [ 196.079288][ T4784] loop1: rw=524288, want=59264, limit=40427 [ 196.083208][ T4784] attempt to access beyond end of device [ 196.083208][ T4784] loop1: rw=524288, want=59272, limit=40427 [ 196.085802][ T4784] attempt to access beyond end of device [ 196.085802][ T4784] loop1: rw=524288, want=59280, limit=40427 [ 196.088317][ T4784] attempt to access beyond end of device [ 196.088317][ T4784] loop1: rw=524288, want=59288, limit=40427 [ 196.156030][ T5985] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 196.183204][ T5985] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 196.200435][ T4784] attempt to access beyond end of device [ 196.200435][ T4784] loop1: rw=524288, want=59296, limit=40427 [ 196.203396][ T4784] attempt to access beyond end of device [ 196.203396][ T4784] loop1: rw=524288, want=59304, limit=40427 [ 196.206211][ T4784] attempt to access beyond end of device [ 196.206211][ T4784] loop1: rw=524288, want=59312, limit=40427 [ 196.281563][ T4784] attempt to access beyond end of device [ 196.281563][ T4784] loop1: rw=524288, want=59320, limit=40427 [ 196.297900][ T4784] attempt to access beyond end of device [ 196.297900][ T4784] loop1: rw=524288, want=59328, limit=40427 [ 196.333256][ T4784] attempt to access beyond end of device [ 196.333256][ T4784] loop1: rw=524288, want=59336, limit=40427 [ 196.588280][ T6000] Cannot find add_set index 0 as target [ 197.399749][ T5997] loop4: detected capacity change from 0 to 4096 [ 197.464385][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.497'. [ 197.546565][ T5997] NILFS (loop4): invalid segment: Checksum error in segment payload [ 197.572475][ T5997] NILFS (loop4): trying rollback from an earlier position [ 197.729823][ T5997] NILFS (loop4): recovery complete [ 197.760320][ T6010] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.727135][ T6021] capability: warning: `syz.4.501' uses deprecated v2 capabilities in a way that may be insecure [ 200.244876][ T6034] loop0: detected capacity change from 0 to 1024 [ 200.377638][ T6034] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 200.420676][ T6034] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 200.666151][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.508'. [ 201.139403][ T4784] handle_bad_sector: 6496 callbacks suppressed [ 201.139432][ T4784] attempt to access beyond end of device [ 201.139432][ T4784] loop1: rw=524288, want=58272, limit=40427 [ 201.146423][ T4784] attempt to access beyond end of device [ 201.146423][ T4784] loop1: rw=524288, want=58280, limit=40427 [ 202.627703][ T4784] attempt to access beyond end of device [ 202.627703][ T4784] loop1: rw=524288, want=58288, limit=40427 [ 202.679097][ T4784] attempt to access beyond end of device [ 202.679097][ T4784] loop1: rw=524288, want=58296, limit=40427 [ 202.681567][ T4784] attempt to access beyond end of device [ 202.681567][ T4784] loop1: rw=524288, want=58304, limit=40427 [ 202.684147][ T4784] attempt to access beyond end of device [ 202.684147][ T4784] loop1: rw=524288, want=58312, limit=40427 [ 202.686643][ T4784] attempt to access beyond end of device [ 202.686643][ T4784] loop1: rw=524288, want=58320, limit=40427 [ 202.729735][ T4784] attempt to access beyond end of device [ 202.729735][ T4784] loop1: rw=524288, want=58328, limit=40427 [ 202.732716][ T4784] attempt to access beyond end of device [ 202.732716][ T4784] loop1: rw=524288, want=58336, limit=40427 [ 202.760280][ T4784] attempt to access beyond end of device [ 202.760280][ T4784] loop1: rw=524288, want=58344, limit=40427 [ 202.815949][ T6059] loop0: detected capacity change from 0 to 2048 [ 202.934419][ T6059] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.555165][ T6080] ip6gretap0 speed is unknown, defaulting to 1000 [ 205.595725][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.519'. [ 205.793659][ T6085] loop0: detected capacity change from 0 to 1024 [ 205.853879][ T6085] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 205.877790][ T6085] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 206.175167][ T4784] handle_bad_sector: 6879 callbacks suppressed [ 206.175186][ T4784] attempt to access beyond end of device [ 206.175186][ T4784] loop1: rw=0, want=58304, limit=40427 [ 206.259264][ T4784] attempt to access beyond end of device [ 206.259264][ T4784] loop1: rw=0, want=58312, limit=40427 [ 206.261775][ T4784] attempt to access beyond end of device [ 206.261775][ T4784] loop1: rw=0, want=58320, limit=40427 [ 206.264226][ T4784] attempt to access beyond end of device [ 206.264226][ T4784] loop1: rw=0, want=58328, limit=40427 [ 206.266599][ T4784] attempt to access beyond end of device [ 206.266599][ T4784] loop1: rw=0, want=58336, limit=40427 [ 206.311850][ T4784] attempt to access beyond end of device [ 206.311850][ T4784] loop1: rw=0, want=58344, limit=40427 [ 206.314296][ T4784] attempt to access beyond end of device [ 206.314296][ T4784] loop1: rw=0, want=58352, limit=40427 [ 206.316692][ T4784] attempt to access beyond end of device [ 206.316692][ T4784] loop1: rw=0, want=58360, limit=40427 [ 206.379371][ T4784] attempt to access beyond end of device [ 206.379371][ T4784] loop1: rw=0, want=58368, limit=40427 [ 206.382407][ T4784] attempt to access beyond end of device [ 206.382407][ T4784] loop1: rw=0, want=58376, limit=40427 [ 206.561024][ T6097] ptrace attach of "./syz-executor exec"[6098] was attempted by "./syz-executor exec"[6097] [ 206.607629][ T6080] chnl_net:caif_netlink_parms(): no params data found [ 207.112528][ T6101] loop4: detected capacity change from 0 to 8 [ 207.145079][ T4411] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.258665][ T4411] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.396547][ T6089] loop0: detected capacity change from 0 to 4096 [ 207.428188][ T6080] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.445848][ T6109] loop3: detected capacity change from 0 to 2048 [ 207.447159][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.460694][ T6080] device bridge_slave_0 entered promiscuous mode [ 207.473636][ T4411] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.519231][ T6089] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 207.554555][ T6080] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.556232][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.558883][ T6080] device bridge_slave_1 entered promiscuous mode [ 207.569411][ T6089] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 207.692614][ T6109] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.981501][ T4411] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.024790][ T6080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.034976][ T6080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.155831][ T6080] team0: Port device team_slave_0 added [ 209.173761][ T6080] team0: Port device team_slave_1 added [ 209.274176][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.276005][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.282974][ T4027] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 209.307412][ T6080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.316840][ T6080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.328769][ T6080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.361803][ T6080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.115015][ T4072] Bluetooth: hci3: command 0x0409 tx timeout [ 210.231910][ T6080] device hsr_slave_0 entered promiscuous mode [ 210.270784][ T6080] device hsr_slave_1 entered promiscuous mode [ 210.287612][ T6122] loop3: detected capacity change from 0 to 512 [ 210.289816][ T6080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.291522][ T6080] Cannot create hsr debugfs directory [ 211.093075][ T6137] loop3: detected capacity change from 0 to 164 [ 211.257571][ T4784] handle_bad_sector: 13178 callbacks suppressed [ 211.258172][ T4784] attempt to access beyond end of device [ 211.258172][ T4784] loop1: rw=0, want=57728, limit=40427 [ 211.375904][ T4784] attempt to access beyond end of device [ 211.375904][ T4784] loop1: rw=0, want=57736, limit=40427 [ 211.426612][ T4784] attempt to access beyond end of device [ 211.426612][ T4784] loop1: rw=0, want=57744, limit=40427 [ 211.620716][ T4784] attempt to access beyond end of device [ 211.620716][ T4784] loop1: rw=0, want=57752, limit=40427 [ 211.694795][ T4784] attempt to access beyond end of device [ 211.694795][ T4784] loop1: rw=0, want=57760, limit=40427 [ 211.747205][ T4784] attempt to access beyond end of device [ 211.747205][ T4784] loop1: rw=0, want=57768, limit=40427 [ 211.767533][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.529'. [ 211.771407][ T4784] attempt to access beyond end of device [ 211.771407][ T4784] loop1: rw=0, want=57776, limit=40427 [ 211.773937][ T4784] attempt to access beyond end of device [ 211.773937][ T4784] loop1: rw=0, want=57784, limit=40427 [ 211.776351][ T4784] attempt to access beyond end of device [ 211.776351][ T4784] loop1: rw=0, want=57792, limit=40427 [ 211.778782][ T4784] attempt to access beyond end of device [ 211.778782][ T4784] loop1: rw=0, want=57800, limit=40427 [ 211.799643][ T6135] ISOFS: unable to read i-node block [ 211.840226][ T6139] loop2: detected capacity change from 0 to 1024 [ 211.998903][ T6139] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 212.008841][ T6139] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 212.602513][ T4072] Bluetooth: hci3: command 0x041b tx timeout [ 213.994558][ T6170] ptrace attach of "./syz-executor exec"[6178] was attempted by "./syz-executor exec"[6170] [ 214.306857][ T26] audit: type=1326 audit(214.260:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.540" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb42d8428 code=0x0 [ 214.679121][ T1960] Bluetooth: hci3: command 0x040f tx timeout [ 214.718859][ T6080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.771867][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 214.775774][ T6080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.873016][ T6080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.909131][ T6194] loop2: detected capacity change from 0 to 1024 [ 215.042603][ T6194] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 215.066156][ T6080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.093732][ T6194] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback. [ 215.257140][ T6203] loop3: detected capacity change from 0 to 256 [ 215.310316][ T6203] exfat: Bad value for 'uid' [ 215.439547][ T6203] fuse: Bad value for 'fd' [ 215.652932][ T6080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.817834][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.820420][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.877311][ T6080] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.938203][ T1677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.954864][ T1677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.975198][ T1677] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.976949][ T1677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.019444][ T1677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.036258][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.038742][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.043392][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.044911][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.077487][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.088558][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.209279][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.213370][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.215846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.218353][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.264257][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.272875][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.275411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.292426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.296763][ T6227] udc-core: couldn't find an available UDC or it's busy [ 216.298243][ T6227] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 216.312668][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.317784][ T6080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.352672][ T4784] handle_bad_sector: 11418 callbacks suppressed [ 216.352690][ T4784] attempt to access beyond end of device [ 216.352690][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 216.356544][ T4784] attempt to access beyond end of device [ 216.356544][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 216.398093][ T6222] ptrace attach of "./syz-executor exec"[6231] was attempted by "./syz-executor exec"[6222] [ 216.403956][ T4784] attempt to access beyond end of device [ 216.403956][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 216.430887][ T4784] attempt to access beyond end of device [ 216.430887][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 216.433539][ T4784] attempt to access beyond end of device [ 216.433539][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 216.436047][ T4784] attempt to access beyond end of device [ 216.436047][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 216.438501][ T4784] attempt to access beyond end of device [ 216.438501][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 216.442238][ T4784] attempt to access beyond end of device [ 216.442238][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 216.444821][ T4784] attempt to access beyond end of device [ 216.444821][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 216.447352][ T4784] attempt to access beyond end of device [ 216.447352][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 216.668274][ T6238] netlink: 'syz.3.551': attribute type 12 has an invalid length. [ 216.670618][ T6238] netlink: 'syz.3.551': attribute type 10 has an invalid length. [ 216.759184][ T4072] Bluetooth: hci3: command 0x0419 tx timeout [ 216.843766][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.845804][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.875092][ T6080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.929298][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 216.950089][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.952838][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.003526][ T6080] device veth0_vlan entered promiscuous mode [ 217.023526][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.026744][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.030832][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.057793][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.123552][ T4411] device hsr_slave_0 left promiscuous mode [ 217.206875][ T4411] device hsr_slave_1 left promiscuous mode [ 217.290539][ T6259] loop4: detected capacity change from 0 to 2048 [ 217.349390][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.353434][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.364768][ T4411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.377455][ T6265] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.379075][ T4411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.396007][ T4411] device bridge_slave_1 left promiscuous mode [ 217.403923][ T4411] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.149403][ T6270] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 218.168627][ T6270] Remounting filesystem read-only [ 218.175323][ T6270] NILFS error (device loop4): nilfs_check_page: size of directory #2 is not a multiple of chunk size [ 218.462897][ T6273] ptrace attach of "./syz-executor exec"[6275] was attempted by "./syz-executor exec"[6273] [ 218.493936][ T4411] device bridge_slave_0 left promiscuous mode [ 218.495501][ T4411] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.500401][ T4256] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 218.502063][ T4256] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 218.503663][ T4256] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 218.505284][ T4256] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 218.506811][ T4256] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 218.508478][ T4256] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 218.532814][ T4256] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 218.534451][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.536721][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.538868][ T4256] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 218.692832][ T6287] loop4: detected capacity change from 0 to 164 [ 218.725209][ T6287] Unable to read rock-ridge attributes [ 218.730266][ T4411] device veth1_macvtap left promiscuous mode [ 218.731906][ T4411] device veth0_macvtap left promiscuous mode [ 218.733392][ T4411] device veth1_vlan left promiscuous mode [ 218.734792][ T4411] device veth0_vlan left promiscuous mode [ 218.839207][ T4070] Bluetooth: hci3: command 0x0411 tx timeout [ 219.228008][ T4411] team0 (unregistering): Port device team_slave_1 removed [ 219.264586][ T4411] team0 (unregistering): Port device team_slave_0 removed [ 219.292039][ T4411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.358347][ T4411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.728836][ T6302] loop3: detected capacity change from 0 to 16 [ 221.385401][ T4784] handle_bad_sector: 15225 callbacks suppressed [ 221.386642][ T4784] attempt to access beyond end of device [ 221.386642][ T4784] loop1: rw=0, want=58872, limit=40427 [ 221.454527][ T4784] attempt to access beyond end of device [ 221.454527][ T4784] loop1: rw=0, want=58880, limit=40427 [ 221.456859][ T4784] attempt to access beyond end of device [ 221.456859][ T4784] loop1: rw=0, want=58888, limit=40427 [ 221.459337][ T4784] attempt to access beyond end of device [ 221.459337][ T4784] loop1: rw=0, want=58896, limit=40427 [ 221.461665][ T4784] attempt to access beyond end of device [ 221.461665][ T4784] loop1: rw=0, want=58904, limit=40427 [ 221.464229][ T4784] attempt to access beyond end of device [ 221.464229][ T4784] loop1: rw=0, want=58912, limit=40427 [ 221.466635][ T4784] attempt to access beyond end of device [ 221.466635][ T4784] loop1: rw=0, want=58920, limit=40427 [ 221.469067][ T4784] attempt to access beyond end of device [ 221.469067][ T4784] loop1: rw=0, want=58928, limit=40427 [ 221.471412][ T4784] attempt to access beyond end of device [ 221.471412][ T4784] loop1: rw=0, want=58936, limit=40427 [ 221.473803][ T4784] attempt to access beyond end of device [ 221.473803][ T4784] loop1: rw=0, want=58944, limit=40427 [ 221.563171][ T6302] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.614347][ T4411] bond0 (unregistering): Released all slaves [ 221.825388][ T6080] device veth1_vlan entered promiscuous mode [ 221.828249][ T6281] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 221.851530][ T6284] device lo entered promiscuous mode [ 221.874246][ T6290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.565'. [ 221.921385][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.924358][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.944489][ T6080] device veth0_macvtap entered promiscuous mode [ 221.993634][ T6080] device veth1_macvtap entered promiscuous mode [ 222.186005][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.273805][ T6320] ptrace attach of "./syz-executor exec"[6321] was attempted by "./syz-executor exec"[6320] [ 222.339447][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.341855][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.344385][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.362387][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.380302][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.398099][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.413382][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.433058][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.476486][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.566855][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.618066][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.642503][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.662327][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.685921][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.698107][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.729148][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.731411][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.749045][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.753202][ T6080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.755631][ T6080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.762224][ T6080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.770470][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.773430][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.776337][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.786267][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.811469][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.819657][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.837844][ T6080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.840633][ T6080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.842540][ T6080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.844585][ T6080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.080540][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.089393][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.172152][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.187985][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.190209][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.195316][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.483257][ T6345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 224.578070][ T6348] loop4: detected capacity change from 0 to 256 [ 224.772706][ T6352] netlink: 'syz.2.583': attribute type 25 has an invalid length. [ 224.774877][ T6352] netlink: 'syz.2.583': attribute type 7 has an invalid length. [ 224.891998][ T6355] loop0: detected capacity change from 0 to 512 [ 224.945345][ T6355] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (4740) [ 225.319950][ T4072] Bluetooth: hci1: command 0x0406 tx timeout [ 225.695429][ T6371] ptrace attach of "./syz-executor exec"[6372] was attempted by "./syz-executor exec"[6371] [ 226.934530][ T4784] handle_bad_sector: 18925 callbacks suppressed [ 226.934551][ T4784] attempt to access beyond end of device [ 226.934551][ T4784] loop1: rw=524288, want=57352, limit=40427 [ 226.938556][ T4784] attempt to access beyond end of device [ 226.938556][ T4784] loop1: rw=524288, want=57360, limit=40427 [ 226.989438][ T4784] attempt to access beyond end of device [ 226.989438][ T4784] loop1: rw=524288, want=57368, limit=40427 [ 226.991841][ T4784] attempt to access beyond end of device [ 226.991841][ T4784] loop1: rw=524288, want=57376, limit=40427 [ 227.048480][ T4072] Bluetooth: hci3: command 0x0405 tx timeout [ 227.052104][ T4784] attempt to access beyond end of device [ 227.052104][ T4784] loop1: rw=524288, want=57384, limit=40427 [ 227.054610][ T4784] attempt to access beyond end of device [ 227.054610][ T4784] loop1: rw=524288, want=57392, limit=40427 [ 227.104433][ T4784] attempt to access beyond end of device [ 227.104433][ T4784] loop1: rw=524288, want=57400, limit=40427 [ 227.106953][ T4784] attempt to access beyond end of device [ 227.106953][ T4784] loop1: rw=524288, want=57408, limit=40427 [ 227.127040][ T6386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 227.150685][ T4784] attempt to access beyond end of device [ 227.150685][ T4784] loop1: rw=524288, want=57416, limit=40427 [ 227.153305][ T4784] attempt to access beyond end of device [ 227.153305][ T4784] loop1: rw=524288, want=57424, limit=40427 [ 228.347631][ T6415] ptrace attach of "./syz-executor exec"[6416] was attempted by "./syz-executor exec"[6415] [ 228.721433][ T6421] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.874370][ T6430] netlink: 28 bytes leftover after parsing attributes in process `syz.1.607'. [ 230.705051][ T6468] ptrace attach of "./syz-executor exec"[6469] was attempted by "./syz-executor exec"[6468] [ 231.113177][ T6473] ip6gretap0 speed is unknown, defaulting to 1000 [ 231.351841][ T6479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.622'. [ 231.750584][ T6488] loop0: detected capacity change from 0 to 512 [ 232.319216][ T4784] handle_bad_sector: 15118 callbacks suppressed [ 232.319234][ T4784] attempt to access beyond end of device [ 232.319234][ T4784] loop1: rw=0, want=58016, limit=40427 [ 232.323215][ T4784] attempt to access beyond end of device [ 232.323215][ T4784] loop1: rw=0, want=58024, limit=40427 [ 232.325783][ T4784] attempt to access beyond end of device [ 232.325783][ T4784] loop1: rw=0, want=58032, limit=40427 [ 232.328334][ T4784] attempt to access beyond end of device [ 232.328334][ T4784] loop1: rw=0, want=58040, limit=40427 [ 232.400775][ T4784] attempt to access beyond end of device [ 232.400775][ T4784] loop1: rw=0, want=58048, limit=40427 [ 232.403427][ T4784] attempt to access beyond end of device [ 232.403427][ T4784] loop1: rw=0, want=58056, limit=40427 [ 232.446032][ T4784] attempt to access beyond end of device [ 232.446032][ T4784] loop1: rw=0, want=58064, limit=40427 [ 232.479413][ T4784] attempt to access beyond end of device [ 232.479413][ T4784] loop1: rw=0, want=58072, limit=40427 [ 232.482159][ T4784] attempt to access beyond end of device [ 232.482159][ T4784] loop1: rw=0, want=58080, limit=40427 [ 232.483229][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 232.484946][ T4784] attempt to access beyond end of device [ 232.484946][ T4784] loop1: rw=0, want=58088, limit=40427 [ 232.508420][ T6489] loop4: detected capacity change from 0 to 128 [ 232.587959][ T6496] ip6gretap0 speed is unknown, defaulting to 1000 [ 232.632079][ T6489] VFS: could not find a valid V7 on loop4. [ 233.377363][ T6505] loop4: detected capacity change from 0 to 2048 [ 233.658296][ T6505] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 233.994331][ T6514] ptrace attach of "./syz-executor exec"[6526] was attempted by "./syz-executor exec"[6514] [ 235.915548][ T6538] udc-core: couldn't find an available UDC or it's busy [ 235.917256][ T6538] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 236.816244][ T6549] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 237.336774][ T4784] handle_bad_sector: 9714 callbacks suppressed [ 237.337099][ T4784] attempt to access beyond end of device [ 237.337099][ T4784] loop1: rw=0, want=58288, limit=40427 [ 237.544515][ T4784] attempt to access beyond end of device [ 237.544515][ T4784] loop1: rw=0, want=58296, limit=40427 [ 237.547005][ T4784] attempt to access beyond end of device [ 237.547005][ T4784] loop1: rw=0, want=58304, limit=40427 [ 237.600316][ T4784] attempt to access beyond end of device [ 237.600316][ T4784] loop1: rw=0, want=58312, limit=40427 [ 237.602893][ T4784] attempt to access beyond end of device [ 237.602893][ T4784] loop1: rw=0, want=58320, limit=40427 [ 237.605251][ T4784] attempt to access beyond end of device [ 237.605251][ T4784] loop1: rw=0, want=58328, limit=40427 [ 237.619838][ T6551] device wg2 entered promiscuous mode [ 237.706634][ T4784] attempt to access beyond end of device [ 237.706634][ T4784] loop1: rw=0, want=58336, limit=40427 [ 237.721211][ T4784] attempt to access beyond end of device [ 237.721211][ T4784] loop1: rw=0, want=58344, limit=40427 [ 237.732926][ T4784] attempt to access beyond end of device [ 237.732926][ T4784] loop1: rw=0, want=58352, limit=40427 [ 237.751558][ T4784] attempt to access beyond end of device [ 237.751558][ T4784] loop1: rw=0, want=58360, limit=40427 [ 238.740356][ T6566] TCP: TCP_TX_DELAY enabled [ 239.076537][ T6568] loop0: detected capacity change from 0 to 2048 [ 239.274612][ T6568] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.736952][ T6579] ptrace attach of "./syz-executor exec"[6581] was attempted by "./syz-executor exec"[6579] [ 240.423915][ T6591] Zero length message leads to an empty skb [ 240.535749][ T6595] ax25_connect(): syz.3.652 uses autobind, please contact jreuter@yaina.de [ 242.946008][ T4784] handle_bad_sector: 9974 callbacks suppressed [ 242.946025][ T4784] attempt to access beyond end of device [ 242.946025][ T4784] loop1: rw=524288, want=58600, limit=40427 [ 242.964804][ T4784] attempt to access beyond end of device [ 242.964804][ T4784] loop1: rw=524288, want=58608, limit=40427 [ 242.967384][ T4784] attempt to access beyond end of device [ 242.967384][ T4784] loop1: rw=524288, want=58616, limit=40427 [ 242.970150][ T4784] attempt to access beyond end of device [ 242.970150][ T4784] loop1: rw=524288, want=58624, limit=40427 [ 242.972653][ T4784] attempt to access beyond end of device [ 242.972653][ T4784] loop1: rw=524288, want=58632, limit=40427 [ 242.975322][ T4784] attempt to access beyond end of device [ 242.975322][ T4784] loop1: rw=524288, want=58640, limit=40427 [ 242.977790][ T4784] attempt to access beyond end of device [ 242.977790][ T4784] loop1: rw=524288, want=58648, limit=40427 [ 242.980555][ T4784] attempt to access beyond end of device [ 242.980555][ T4784] loop1: rw=524288, want=58656, limit=40427 [ 242.983253][ T4784] attempt to access beyond end of device [ 242.983253][ T4784] loop1: rw=524288, want=58664, limit=40427 [ 242.985969][ T4784] attempt to access beyond end of device [ 242.985969][ T4784] loop1: rw=524288, want=58672, limit=40427 [ 243.098207][ T6618] loop3: detected capacity change from 0 to 2048 [ 243.174382][ T6618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.787423][ T6635] 9pnet: Insufficient options for proto=fd [ 243.796939][ T6637] ptrace attach of "./syz-executor exec"[6639] was attempted by "./syz-executor exec"[6637] [ 243.987872][ T6641] udc-core: couldn't find an available UDC or it's busy [ 243.989688][ T6641] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 246.322112][ T6669] loop3: detected capacity change from 0 to 2048 [ 246.449564][ T6669] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.329453][ T6672] 9pnet: Insufficient options for proto=fd [ 247.885734][ T6681] ptrace attach of "./syz-executor exec"[6690] was attempted by "./syz-executor exec"[6681] [ 248.270020][ T4784] handle_bad_sector: 14028 callbacks suppressed [ 248.270041][ T4784] attempt to access beyond end of device [ 248.270041][ T4784] loop1: rw=0, want=58704, limit=40427 [ 248.276632][ T4784] attempt to access beyond end of device [ 248.276632][ T4784] loop1: rw=0, want=58712, limit=40427 [ 248.281167][ T4784] attempt to access beyond end of device [ 248.281167][ T4784] loop1: rw=0, want=58720, limit=40427 [ 248.283744][ T4784] attempt to access beyond end of device [ 248.283744][ T4784] loop1: rw=0, want=58728, limit=40427 [ 248.481796][ T4784] attempt to access beyond end of device [ 248.481796][ T4784] loop1: rw=0, want=58736, limit=40427 [ 248.484170][ T4784] attempt to access beyond end of device [ 248.484170][ T4784] loop1: rw=0, want=58744, limit=40427 [ 248.486522][ T4784] attempt to access beyond end of device [ 248.486522][ T4784] loop1: rw=0, want=58752, limit=40427 [ 248.547320][ T4784] attempt to access beyond end of device [ 248.547320][ T4784] loop1: rw=0, want=58760, limit=40427 [ 248.641403][ T4784] attempt to access beyond end of device [ 248.641403][ T4784] loop1: rw=0, want=58768, limit=40427 [ 248.644127][ T4784] attempt to access beyond end of device [ 248.644127][ T4784] loop1: rw=0, want=58776, limit=40427 [ 248.840257][ T27] INFO: task syz.1.158:4742 blocked for more than 143 seconds. [ 248.846334][ T27] Not tainted 5.15.166-syzkaller #0 [ 248.849850][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.853960][ T27] task:syz.1.158 state:D stack: 0 pid: 4742 ppid: 4022 flags:0x00000001 [ 248.858093][ T27] Call trace: [ 248.858835][ T27] __switch_to+0x308/0x5e8 [ 248.862062][ T27] __schedule+0xf10/0x1e48 [ 248.863477][ T27] schedule+0x11c/0x1c8 [ 248.864370][ T27] rwsem_down_write_slowpath+0xd94/0x17e0 [ 248.865724][ T27] down_write+0xe8/0x12c [ 248.867870][ T27] do_truncate+0x1ac/0x28c [ 248.868824][ T27] path_openat+0x20c4/0x26cc [ 248.879574][ T27] do_filp_open+0x1a8/0x3b4 [ 248.884291][ T27] do_sys_openat2+0x128/0x3e0 [ 248.889727][ T27] __arm64_sys_openat+0x1f0/0x240 [ 248.892126][ T27] invoke_syscall+0x98/0x2b8 [ 248.895385][ T27] el0_svc_common+0x138/0x258 [ 248.899545][ T27] do_el0_svc+0x58/0x14c [ 248.902763][ T27] el0_svc+0x7c/0x1f0 [ 248.903637][ T27] el0t_64_sync_handler+0x84/0xe4 [ 248.908384][ T27] el0t_64_sync+0x1a0/0x1a4 [ 248.912888][ T27] INFO: task syz.1.158:4788 blocked for more than 143 seconds. [ 248.919473][ T27] Not tainted 5.15.166-syzkaller #0 [ 248.923029][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.930483][ T27] task:syz.1.158 state:D stack: 0 pid: 4788 ppid: 4022 flags:0x00000001 [ 248.934867][ T27] Call trace: [ 248.935723][ T27] __switch_to+0x308/0x5e8 [ 248.947607][ T27] __schedule+0xf10/0x1e48 [ 248.954909][ T27] schedule+0x11c/0x1c8 [ 248.958299][ T27] rwsem_down_write_slowpath+0xd94/0x17e0 [ 248.962426][ T27] down_write+0xe8/0x12c [ 248.964694][ T27] f2fs_fallocate+0x1cc/0x898 [ 248.969419][ T27] vfs_fallocate+0x478/0x5b4 [ 248.971349][ T27] ioctl_preallocate+0x2a0/0x34c [ 248.975623][ T27] do_vfs_ioctl+0x1d00/0x2a38 [ 248.977938][ T27] __arm64_sys_ioctl+0xe4/0x1c8 [ 248.992078][ T27] invoke_syscall+0x98/0x2b8 [ 248.993317][ T27] el0_svc_common+0x138/0x258 [ 248.995546][ T27] do_el0_svc+0x58/0x14c [ 248.997777][ T27] el0_svc+0x7c/0x1f0 [ 248.998886][ T27] el0t_64_sync_handler+0x84/0xe4 [ 249.012077][ T27] el0t_64_sync+0x1a0/0x1a4 [ 249.014462][ T27] [ 249.014462][ T27] Showing all locks held in the system: [ 249.024781][ T27] 1 lock held by khungtaskd/27: [ 249.028172][ T27] #0: ffff800014c817a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 249.035293][ T27] 2 locks held by getty/3776: [ 249.038861][ T149] block nbd2: Attempted send on invalid socket [ 249.042944][ T149] print_req_error: 6 callbacks suppressed [ 249.042957][ T149] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 249.048925][ T27] #0: ffff0000d4054098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x40/0x50 [ 249.053437][ T27] #1: ffff80001d5ee2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1204 [ 249.059302][ T27] 2 locks held by kworker/1:5/4070: [ 249.060914][ T27] #0: ffff0000c0021938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 249.063206][ T6703] SQUASHFS error: Failed to read block 0x0: -5 [ 249.063280][ T6703] unable to read squashfs_super_block [ 249.064500][ T27] #1: ffff80001fa97c00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 249.068683][ T27] 4 locks held by kworker/u4:11/4374: [ 249.078322][ T27] 4 locks held by kworker/u4:13/4379: [ 249.080685][ T27] #0: ffff0000c21d8138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 249.083479][ T27] #1: ffff8000209a7c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 249.086304][ T27] #2: ffff0000d1b020e0 (&type->s_umount_key#66){.+.+}-{3:3}, at: trylock_super+0x28/0xf8 [ 249.088656][ T27] #3: ffff0000d16d1108 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x3e8/0x6a0 [ 249.097179][ T27] 3 locks held by kworker/u4:15/4385: [ 249.098508][ T27] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x66c/0x11b8 [ 249.102436][ T27] #1: ffff8000209e7c00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6ac/0x11b8 [ 249.104824][ T27] #2: ffff800016be2128 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 249.106835][ T27] 2 locks held by syz.1.158/4742: [ 249.108013][ T27] #0: ffff0000d1b02460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 249.118161][ T27] #1: ffff0000e6299450 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x1ac/0x28c [ 249.122232][ T27] 8 locks held by syz.1.158/4784: [ 249.123348][ T27] 2 locks held by syz.1.158/4788: [ 249.124467][ T27] #0: ffff0000d1b02460 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x404/0x5b4 [ 249.126730][ T27] #1: ffff0000e6299450 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: f2fs_fallocate+0x1cc/0x898 [ 249.135503][ T27] 1 lock held by syz.0.660/6626: [ 249.136741][ T27] #0: ffff0000ddd3a010 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x80/0x1fc [ 249.140529][ T27] 2 locks held by syz.1.684/6698: [ 249.141759][ T27] #0: ffff800016be2128 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 249.143873][ T27] #1: ffff800014c85da8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x660 [ 249.146617][ T27] 2 locks held by syz.2.685/6701: [ 249.147879][ T27] 1 lock held by syz.2.685/6703: [ 249.155410][ T27] [ 249.155966][ T27] ============================================= [ 249.155966][ T27] [ 249.157948][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 249.160951][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.166-syzkaller #0 [ 249.160973][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.160980][ T27] Call trace: [ 249.160984][ T27] dump_backtrace+0x0/0x530 [ 249.161000][ T27] show_stack+0x2c/0x3c [ 249.161008][ T27] dump_stack_lvl+0x108/0x170 [ 249.161020][ T27] dump_stack+0x1c/0x58 [ 249.161028][ T27] panic+0x304/0x8bc [ 249.161038][ T27] hung_task_panic+0x0/0x2c [ 249.161050][ T27] kthread+0x37c/0x45c [ 249.161060][ T27] ret_from_fork+0x10/0x20 [ 249.161071][ T27] SMP: stopping secondary CPUs [ 249.161102][ T27] Kernel Offset: disabled [ 249.161106][ T27] CPU features: 0x8,000081c1,21302e40 [ 249.161113][ T27] Memory Limit: none [ 249.865867][ T27] Rebooting in 86400 seconds..