last executing test programs: 45.261623918s ago: executing program 1 (id=874): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x3, &(0x7f0000001f00)=""/4096, 0x1000) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) 43.080781111s ago: executing program 1 (id=878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 42.078694825s ago: executing program 1 (id=880): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff2}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.316982559s ago: executing program 1 (id=886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x5422) 39.964516153s ago: executing program 1 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) rt_sigtimedwait(&(0x7f0000000180), 0x0, 0x0, 0x8) wait4(r2, 0x0, 0x20000000, 0x0) 39.017178813s ago: executing program 1 (id=898): syz_emit_ethernet(0x7a, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400003"], 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) 34.527756719s ago: executing program 3 (id=912): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 29.416825329s ago: executing program 3 (id=927): bpf$ENABLE_STATS(0x20, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300001d000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000040)={'wg2\x00', @multicast}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x88800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@ipv4, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in6=@mcast1}}]}, 0x154}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00222200000006231306e53f070c0000000aa7e19349a4a1f783000000000b060070b492", @ANYRESDEC=r2, @ANYRES8=r3], 0x0}, 0x0) 26.641421662s ago: executing program 3 (id=932): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x80000001, 0x0) 25.618148008s ago: executing program 3 (id=934): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) rename(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x18) 24.476633913s ago: executing program 3 (id=936): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f00000002c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "01040077b052072e53ebf9e0460800"}) 21.3043725s ago: executing program 3 (id=940): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11.66891105s ago: executing program 4 (id=963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r5}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 11.621834764s ago: executing program 4 (id=964): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) memfd_secret(0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 10.389425347s ago: executing program 4 (id=966): mkdir(&(0x7f0000000600)='./file1\x00', 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 10.341062951s ago: executing program 4 (id=967): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x0, 0x0, {0x35}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 9.303952848s ago: executing program 4 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x1, 0x0, 0x0, {0x0, @ah_ip6_spec={@loopback, @loopback}, {}, @udp_ip4_spec={@rand_addr, @private}, {0x0, @dev}}}}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 9.299869118s ago: executing program 0 (id=971): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000840)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@jqfmt_vfsold}, {@orlov}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x3, 0x43c, &(0x7f0000001080)="$eJzs28trXNUfAPDvvZOkv/TxSyz10bRqtIrBR9KktXbhRlFwIwi6qMuYpCV22kgTwZagUaQupeBeBDeCf4Er3Yi6EtzqXgpFsml1NXJn7m1mJpM0j0mmdT4fuMk5957JOd+598ycc09uAF1rOPuRROyPiN8jYqCWbSwwXPt1a3lx6u/lxakkKpU3/0qq5W4uL04VRYvX7SsyPRHpp0kcaVHv/OUr5yfL5ZlLeX5s4cJ7Y/OXrzw3e2Hy3My5mYsTp0+fPDH+wqmJ59sSZxbXzaEP544efu3ta69Pnbn2zs/fJkX8TXG0yfB6B5+sVNpcXWcdqEsnPR1sCJtSqnXT6K32/4EoxcrJG4hXP+lo44AdValUKg+sfXipAvyHJdHpFgCdUXzRZ/PfYtulocdd4cZLtQlQFvetfKsd6Yk0L9PbNL9tp+GIOLP0z5fZFjtzHwIAoMH32fjn2VbjvzTq7wv9P19DGYyI+yLiYESciohDEXF/RLXsgxHx0Cbrb14kWT3+Sa9vKbANysZ/L+ZrW43jv2L0F4OlPHegGn9vcna2PHM8f09GondPlh9fp44fXvnt87WO1Y//si2rvxgL5u243rOn8TXTkwuT24m53o2PI4Z6WsWf3F4JSCLicEQMbbGO2ae/ObrWsTvHv442rDNVvop4qnb+l6Ip/kKy/vrk2P+iPHN8rLgqVvvl16tvrFX/tuJvg+z87215/d+OfzCpX6+d33wdV//4bM05zVav/77krYZ9H0wuLFwaj+gr5Y2u3z/RVG5ipXwW/8ix1v3/YKy8E0ciIruIH46IRyLi0bztj0XE4xFxbJ34f3r5iXe3Hv/OyuKf3tT5X0n0RfOe1onS+R+/a6h0cDPxZ+f/ZDU1ku/ZyOffRtq1tasZAAAA7j1pROxPknS0SEeajo7W/of/UOxNy3PzC8+cnXv/4nTtGYHB6E2LO10DdfdDx/NpfZGfaMqfyO8bf1Hqr+ZHp+bK050OHrrcvmqfX93/M3+WOt06YMd5Xgu6l/4P3Uv/h+6l/0P3atH/+zvRDmD3tfr+/6gD7QB2X1P/t+wHXcT8H7qX/g/dS/+HrjTfH3d+SH4Dia/zBYPt/h2JeyUR6V3RDIkdSnT6kwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/g0AAP//ITfjyg==") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/105, 0x69) 8.911176221s ago: executing program 0 (id=972): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="383f64d83a04ee94219d9e4b8a44c8e7a53731d262650dafe80500141e87b25032", 0x21}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.435861211s ago: executing program 2 (id=973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000feff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006}]}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000005700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@newtaction={0x230, 0x2e, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, {0x1ec, 0x1, [@m_ipt={0x40, 0x11, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x6, 0x6, "8342"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x1a8, 0xc, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x48, 0x6, {0xd, 'filter\x00', 0x3, 0x8000, "c35f3296f107dc589a0cc56d51efa55c35c9a6f79e9fde349edf55330300"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xe0e06137f97efd7c, 0x2}}}}]}]}, 0x230}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000300)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@dioread_lock}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e9, &(0x7f00000004c0)="$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") 8.344639719s ago: executing program 0 (id=974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a000f018650dcba"], 0x1c}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.452575564s ago: executing program 2 (id=975): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79c, &(0x7f0000001ec0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.303205996s ago: executing program 0 (id=976): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_NAME(0xf, &(0x7f0000001200)='blkio.throttle.io_serviced_recursive\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b40)={0x4, 0x0, [{0x1, 0x7e, &(0x7f0000000480)=""/126}, {0x1000, 0x1000, &(0x7f0000001ec0)=""/4096}, {0x2004, 0x2c, &(0x7f0000000500)=""/44}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e80)) syz_emit_vhci(0x0, 0x7) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 7.13732744s ago: executing program 0 (id=977): socket$kcm(0x2, 0x0, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) 6.980633453s ago: executing program 2 (id=978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) shmget$private(0x0, 0x2000, 0x78000840, &(0x7f0000ffb000/0x2000)=nil) 5.703906001s ago: executing program 2 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46100) fallocate(r1, 0x0, 0x0, 0x1000) 1.788540969s ago: executing program 2 (id=980): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000008004"]) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x8, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f0000000000), 0x0}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'bond0\x00'}, 0x18) r5 = io_uring_setup(0xc3d, &(0x7f0000000100)) close(r5) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x77359400}, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, 0x39, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) 47.218386ms ago: executing program 4 (id=981): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003100)={0x2c, r1, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r2 = openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./bus/file0\x00', &(0x7f00000006c0)={0x101800, 0xa8, 0x11}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000051090100000000009500000000000000bf91000000000000b7020000000004008500000084000000b700000000000000950000001f000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a80)={r5}, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r6, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7615}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xe13102979b8a1346) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000020"], 0xfe44, 0x0) 625.28µs ago: executing program 0 (id=982): unshare(0x20000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000ec0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 2 (id=983): mount(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x6, 0x333, &(0x7f0000000440)="$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") ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000009c0)={{}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0xf3c}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000%00000000000007,discard,\x00'], 0x1, 0x14f5, &(0x7f0000001580)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080062, &(0x7f0000001340)={[{@prjquota}, {@norecovery}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): NF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.665357][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.672484][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.723264][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.743953][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.819510][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.826725][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.919748][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.939134][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.975710][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 400.193049][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 400.315696][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 400.438167][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 400.542590][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 401.049952][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 401.396307][ T8103] loop4: detected capacity change from 0 to 2048 [ 402.215148][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.223699][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.276090][ T7928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.288578][ T8103] loop4: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 [ 402.288817][ T8103] loop4: p1 size 50331648 extends beyond EOD, [ 402.397741][ T7928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.464775][ T8103] truncated [ 402.489784][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.508656][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 402.549876][ T8103] loop4: p2 start 16908804 is beyond EOD, truncated [ 402.579281][ T8103] loop4: p5 size 50331648 extends beyond EOD, truncated [ 402.612006][ T8103] loop4: p6 start 16908804 is beyond EOD, truncated [ 402.645627][ T8126] loop3: detected capacity change from 0 to 1024 [ 402.652437][ T8103] loop4: p7 size 50331648 extends beyond EOD, truncated [ 402.700851][ T8103] loop4: p8 start 16908804 is beyond EOD, truncated [ 402.740734][ T8103] loop4: p9 size 50331648 extends beyond EOD, truncated [ 402.761459][ T8103] loop4: p10 start 16908804 is beyond EOD, truncated [ 402.773827][ T7942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.803119][ T8103] loop4: p11 size 50331648 extends beyond EOD, truncated [ 402.812888][ T7942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.826430][ T8103] loop4: p12 start 16908804 is beyond EOD, truncated [ 402.833151][ T8103] loop4: p13 size 50331648 extends beyond EOD, truncated [ 402.850246][ T7942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.876697][ T7942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.900358][ T8103] loop4: p14 start 16908804 is beyond EOD, truncated [ 402.926888][ T8103] loop4: p15 size 50331648 extends beyond EOD, truncated [ 402.963103][ T8103] loop4: p16 start 16908804 is beyond EOD, truncated [ 402.994913][ T8103] loop4: p17 size 50331648 extends beyond EOD, truncated [ 403.125018][ T8103] loop4: p18 start 16908804 is beyond EOD, truncated [ 403.131975][ T8103] loop4: p19 size 50331648 extends beyond EOD, truncated [ 403.194959][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.219658][ T8103] loop4: p20 start 16908804 is beyond EOD, truncated [ 403.244141][ T7942] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.274822][ T8103] loop4: p21 size 50331648 extends beyond EOD, truncated [ 403.304223][ T7928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.344149][ T8103] loop4: p22 start 16908804 is beyond EOD, truncated [ 403.372703][ T8103] loop4: p23 size 50331648 extends beyond EOD, truncated [ 403.423585][ T8103] loop4: p24 start 16908804 is beyond EOD, truncated [ 403.447910][ T8103] loop4: p25 size 50331648 extends beyond EOD, truncated [ 403.481106][ T7928] device veth0_vlan entered promiscuous mode [ 403.501811][ T8103] loop4: p26 start 16908804 is beyond EOD, truncated [ 403.527724][ T7928] device veth1_vlan entered promiscuous mode [ 403.535252][ T8103] loop4: p27 size 50331648 extends beyond EOD, truncated [ 403.561458][ T8103] loop4: p28 start 16908804 is beyond EOD, truncated [ 403.574905][ T4821] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 403.595675][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 403.603409][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 403.617803][ T8103] loop4: p29 size 50331648 extends beyond EOD, truncated [ 403.631187][ T8103] loop4: p30 start 16908804 is beyond EOD, truncated [ 403.632029][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.644973][ T8103] loop4: p31 size 50331648 extends beyond EOD, truncated [ 403.651675][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.660347][ T8103] loop4: p32 start 16908804 is beyond EOD, truncated [ 403.660411][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 403.671107][ T8103] loop4: p33 size 50331648 extends beyond EOD, truncated [ 403.685263][ T8103] loop4: p34 start 16908804 is beyond EOD, truncated [ 403.691973][ T8103] loop4: p35 size 50331648 extends beyond EOD, truncated [ 403.701396][ T8103] loop4: p36 start 16908804 is beyond EOD, truncated [ 403.708456][ T8103] loop4: p37 size 50331648 extends beyond EOD, truncated [ 403.717457][ T8103] loop4: p38 start 16908804 is beyond EOD, truncated [ 403.724157][ T8103] loop4: p39 size 50331648 extends beyond EOD, truncated [ 403.741049][ T8103] loop4: p40 start 16908804 is beyond EOD, truncated [ 403.755838][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 403.793173][ T8103] loop4: p41 size 50331648 extends beyond EOD, truncated [ 403.809481][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 403.821197][ T8103] loop4: p42 start 16908804 is beyond EOD, truncated [ 403.833586][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 403.849538][ T8103] loop4: p43 size 50331648 extends beyond EOD, truncated [ 403.858573][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 403.859618][ T8151] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 403.867411][ T8103] loop4: p44 start 16908804 is beyond EOD, [ 403.883716][ T4821] usb 4-1: Using ep0 maxpacket: 8 [ 403.896980][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 403.941558][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 403.950589][ T8103] truncated [ 403.961264][ T8103] loop4: p45 size 50331648 extends beyond EOD, truncated [ 403.969749][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 403.985289][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 403.994627][ T8103] loop4: p46 start 16908804 is beyond EOD, truncated [ 404.002917][ T8103] loop4: p47 size 50331648 extends beyond EOD, truncated [ 404.011018][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.020581][ T8103] loop4: p48 start 16908804 is beyond EOD, truncated [ 404.027623][ T4821] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 404.038537][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.045664][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.054873][ T4821] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 3 [ 404.064112][ T8103] loop4: p49 size 50331648 extends beyond EOD, truncated [ 404.079792][ T8103] loop4: p50 start 16908804 is beyond EOD, truncated [ 404.099176][ T8103] loop4: p51 size 50331648 extends beyond EOD, truncated [ 404.104352][ T7928] device veth0_macvtap entered promiscuous mode [ 404.116344][ T8103] loop4: p52 start 16908804 is beyond EOD, truncated [ 404.125523][ T8103] loop4: p53 size 50331648 extends beyond EOD, truncated [ 404.142085][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.158235][ T8103] loop4: p54 start 16908804 is beyond EOD, truncated [ 404.166254][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.186216][ T8103] loop4: p55 size 50331648 extends beyond EOD, truncated [ 404.196558][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.215850][ T8103] loop4: p56 start 16908804 is beyond EOD, truncated [ 404.223203][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.230344][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.239309][ T4821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=f0.c9 [ 404.254219][ T4821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.265841][ T8103] loop4: p57 size 50331648 extends beyond EOD, truncated [ 404.272998][ T4821] usb 4-1: Product: syz [ 404.282843][ T8103] loop4: p58 start 16908804 is beyond EOD, truncated [ 404.290640][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 404.295098][ T8103] loop4: p59 size 50331648 extends beyond EOD, [ 404.299878][ T4821] usb 4-1: Manufacturer: syz [ 404.302641][ T8103] truncated [ 404.313492][ T4821] usb 4-1: SerialNumber: syz [ 404.324024][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.336721][ T8103] loop4: p60 start 16908804 is beyond EOD, truncated [ 404.343443][ T8103] loop4: p61 size 50331648 extends beyond EOD, truncated [ 404.351629][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.378177][ T8103] loop4: p62 start 16908804 is beyond EOD, truncated [ 404.387936][ T7928] device veth1_macvtap entered promiscuous mode [ 404.408098][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 404.419961][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 404.427510][ T8103] loop4: p63 size 50331648 extends beyond EOD, truncated [ 404.437134][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.458059][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.466435][ T8103] loop4: p64 start 16908804 is beyond EOD, truncated [ 404.482230][ T8103] loop4: p65 size 50331648 extends beyond EOD, truncated [ 404.485307][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.509392][ T8103] loop4: p66 start 16908804 is beyond EOD, truncated [ 404.510003][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.525766][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.540071][ T8103] loop4: p67 size 50331648 extends beyond EOD, truncated [ 404.587474][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.605062][ T4821] snd-usb-6fire 4-1:2.0: unknown device firmware state received from device: [ 404.605894][ T8103] loop4: p68 start 16908804 is beyond EOD, truncated [ 404.614377][ T4821] d8 70 a4 ab 2e b6 ee 60 [ 404.639115][ T4821] snd-usb-6fire: probe of 4-1:2.0 failed with error -5 [ 404.644809][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.666778][ T8103] loop4: p69 size 50331648 extends beyond EOD, truncated [ 404.674505][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.690813][ T8103] loop4: p70 start 16908804 is beyond EOD, truncated [ 404.705561][ T8103] loop4: p71 size 50331648 extends beyond EOD, truncated [ 404.709698][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.730485][ T8103] loop4: p72 start 16908804 is beyond EOD, truncated [ 404.737581][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.755681][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.758784][ T8103] loop4: p73 size 50331648 extends beyond EOD, [ 404.775031][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.780576][ T8103] truncated [ 404.788232][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.814525][ T8103] loop4: p74 start 16908804 is beyond EOD, truncated [ 404.833213][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.838201][ T8103] loop4: p75 size 50331648 extends beyond EOD, truncated [ 404.854989][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 404.863595][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.888273][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.899420][ T8103] loop4: p76 start 16908804 is beyond EOD, truncated [ 404.906000][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.913605][ T8103] loop4: p77 size 50331648 extends beyond EOD, truncated [ 404.927095][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.941092][ T8103] loop4: p78 start 16908804 is beyond EOD, truncated [ 404.949216][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.963302][ T8103] loop4: p79 size 50331648 extends beyond EOD, truncated [ 404.966791][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.990651][ T8103] loop4: p80 start 16908804 is beyond EOD, truncated [ 405.002531][ T7942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.023883][ T8103] loop4: p81 size 50331648 extends beyond EOD, truncated [ 405.046083][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.059140][ T3799] usb 4-1: USB disconnect, device number 12 [ 405.068512][ T8103] loop4: p82 start 16908804 is beyond EOD, truncated [ 405.075869][ T8103] loop4: p83 size 50331648 extends beyond EOD, truncated [ 405.085587][ T8103] loop4: p84 start 16908804 is beyond EOD, truncated [ 405.092307][ T8103] loop4: p85 size 50331648 extends beyond EOD, truncated [ 405.099199][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.116051][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.121718][ T8103] loop4: p86 start 16908804 is beyond EOD, truncated [ 405.132101][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.149080][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.149366][ T8103] loop4: p87 size 50331648 extends beyond EOD, [ 405.159600][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.175667][ T8103] truncated [ 405.177213][ T7928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.193984][ T8103] loop4: p88 start 16908804 is beyond EOD, truncated [ 405.197660][ T7928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.216460][ T7928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.229821][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.238186][ T8103] loop4: p89 size 50331648 extends beyond EOD, truncated [ 405.248829][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.262414][ T8103] loop4: p90 start 16908804 is beyond EOD, truncated [ 405.265531][ T7928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.304949][ T8103] loop4: p91 size 50331648 extends beyond EOD, truncated [ 405.321743][ T8103] loop4: p92 start 16908804 is beyond EOD, truncated [ 405.336238][ T7928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.364766][ T8103] loop4: p93 size 50331648 extends beyond EOD, truncated [ 405.366207][ T7928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.380004][ T8103] loop4: p94 start 16908804 is beyond EOD, truncated [ 405.400937][ T8103] loop4: p95 size 50331648 extends beyond EOD, truncated [ 405.411176][ T7928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.507413][ T8103] loop4: p96 start 16908804 is beyond EOD, truncated [ 405.538717][ T8103] loop4: p97 size 50331648 extends beyond EOD, truncated [ 405.582299][ T8103] loop4: p98 start 16908804 is beyond EOD, truncated [ 405.636894][ T8103] loop4: p99 size 50331648 extends beyond EOD, truncated [ 405.683466][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.693291][ T8103] loop4: p100 start 16908804 is beyond EOD, truncated [ 405.761738][ T8103] loop4: p101 size 50331648 extends beyond EOD, truncated [ 405.784810][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.819405][ T8103] loop4: p102 start 16908804 is beyond EOD, truncated [ 405.861181][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 405.868885][ T5494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.916114][ T5494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.945020][ T8103] loop4: p103 size 50331648 extends beyond EOD, truncated [ 405.976821][ T8103] loop4: p104 start 16908804 is beyond EOD, truncated [ 405.995756][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.068760][ T8103] loop4: p105 size 50331648 extends beyond EOD, truncated [ 406.122018][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.131814][ T8103] loop4: p106 start 16908804 is beyond EOD, truncated [ 406.140103][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.154733][ T8103] loop4: p107 size 50331648 extends beyond EOD, truncated [ 406.166360][ T7942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.186515][ T8103] loop4: p108 start 16908804 is beyond EOD, truncated [ 406.193338][ T8103] loop4: p109 size 50331648 extends beyond EOD, truncated [ 406.221822][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.250491][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.263477][ T8103] loop4: p110 start 16908804 is beyond EOD, truncated [ 406.274310][ T8103] loop4: p111 size 50331648 extends beyond EOD, truncated [ 406.314734][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.323081][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.340794][ T8103] loop4: p112 start 16908804 is beyond EOD, truncated [ 406.350639][ T8103] loop4: p113 size 50331648 extends beyond EOD, truncated [ 406.366431][ T7942] device veth0_vlan entered promiscuous mode [ 406.383171][ T8103] loop4: p114 start 16908804 is beyond EOD, truncated [ 406.393124][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.409406][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.420480][ T8103] loop4: p115 size 50331648 extends beyond EOD, truncated [ 406.436024][ T7942] device veth1_vlan entered promiscuous mode [ 406.454769][ T8103] loop4: p116 start 16908804 is beyond EOD, truncated [ 406.461585][ T8103] loop4: p117 size 50331648 extends beyond EOD, truncated [ 406.502330][ T8103] loop4: p118 start 16908804 is beyond EOD, truncated [ 406.512029][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.528611][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.540070][ T8103] loop4: p119 size 50331648 extends beyond EOD, truncated [ 406.553594][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.570311][ T8103] loop4: p120 start 16908804 is beyond EOD, truncated [ 406.582732][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.597485][ T8103] loop4: p121 size 50331648 extends beyond EOD, truncated [ 406.612905][ T7942] device veth0_macvtap entered promiscuous mode [ 406.623965][ T8103] loop4: p122 start 16908804 is beyond EOD, truncated [ 406.652785][ T7942] device veth1_macvtap entered promiscuous mode [ 406.666578][ T8103] loop4: p123 size 50331648 extends beyond EOD, truncated [ 406.688375][ T8103] loop4: p124 start 16908804 is beyond EOD, truncated [ 406.710586][ T8103] loop4: p125 size 50331648 extends beyond EOD, truncated [ 406.724067][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.744300][ T8103] loop4: p126 start 16908804 is beyond EOD, truncated [ 406.751627][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.772809][ T8103] loop4: p127 size 50331648 extends beyond EOD, truncated [ 406.782767][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.799736][ T8103] loop4: p128 start 16908804 is beyond EOD, truncated [ 406.808751][ T8103] loop4: p129 size 50331648 extends beyond EOD, truncated [ 406.821897][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.834531][ T8103] loop4: p130 start 16908804 is beyond EOD, truncated [ 406.850487][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.865321][ T8103] loop4: p131 size 50331648 extends beyond EOD, truncated [ 406.879817][ T8103] loop4: p132 start 16908804 is beyond EOD, truncated [ 406.888222][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.934868][ T8103] loop4: p133 size 50331648 extends beyond EOD, truncated [ 406.952950][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.971750][ T8103] loop4: p134 start 16908804 is beyond EOD, truncated [ 406.973169][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.979072][ T8103] loop4: p135 size 50331648 extends beyond EOD, truncated [ 406.990797][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.002996][ T8103] loop4: p136 start 16908804 is beyond EOD, [ 407.006132][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.006151][ T8103] truncated [ 407.013571][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.050497][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.080577][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 407.088270][ T8103] loop4: p137 size 50331648 extends beyond EOD, truncated [ 407.096278][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 407.109207][ T8103] loop4: p138 start 16908804 is beyond EOD, truncated [ 407.116901][ T8103] loop4: p139 size 50331648 extends beyond EOD, truncated [ 407.125636][ T8103] loop4: p140 start 16908804 is beyond EOD, truncated [ 407.133326][ T8103] loop4: p141 size 50331648 extends beyond EOD, truncated [ 407.134275][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 407.142428][ T8103] loop4: p142 start 16908804 is beyond EOD, truncated [ 407.172264][ T8103] loop4: p143 size 50331648 extends beyond EOD, truncated [ 407.193290][ T8103] loop4: p144 start 16908804 is beyond EOD, truncated [ 407.210125][ T8103] loop4: p145 size 50331648 extends beyond EOD, truncated [ 407.221506][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.236068][ T8103] loop4: p146 start 16908804 is beyond EOD, truncated [ 407.248473][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.253038][ T8103] loop4: p147 size 50331648 extends beyond EOD, [ 407.264261][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.268660][ T8103] truncated [ 407.290189][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.317385][ T26] audit: type=1326 audit(1725066966.782:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8197 comm="syz.2.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7ba579eb9 code=0x0 [ 407.323283][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.345643][ T8103] loop4: p148 start 16908804 is beyond EOD, truncated [ 407.372831][ T8103] loop4: p149 size 50331648 extends beyond EOD, truncated [ 407.382722][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.385762][ T8103] loop4: p150 start 16908804 is beyond EOD, truncated [ 407.413372][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.424701][ T8103] loop4: p151 size 50331648 extends beyond EOD, truncated [ 407.445686][ T8103] loop4: p152 start 16908804 is beyond EOD, truncated [ 407.453675][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.457183][ T8103] loop4: p153 size 50331648 extends beyond EOD, [ 407.471747][ T7942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.481103][ T8103] truncated [ 407.497327][ T7942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.499635][ T8103] loop4: p154 start 16908804 is beyond EOD, [ 407.515330][ T7942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.527969][ T8103] truncated [ 407.536098][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 407.549909][ T8103] loop4: p155 size 50331648 extends beyond EOD, truncated [ 407.551492][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.574509][ T7942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.591570][ T8103] loop4: p156 start 16908804 is beyond EOD, truncated [ 407.611566][ T8103] loop4: p157 size 50331648 extends beyond EOD, truncated [ 407.618317][ T7942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.629450][ T7942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.631971][ T8103] loop4: p158 start 16908804 is beyond EOD, [ 407.642527][ T7942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.648976][ T8103] truncated [ 407.664405][ T8205] loop3: detected capacity change from 0 to 512 [ 407.674407][ T8103] loop4: p159 size 50331648 extends beyond EOD, truncated [ 407.704760][ T8103] loop4: p160 start 16908804 is beyond EOD, truncated [ 407.727646][ T8205] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 407.746754][ T8205] EXT4-fs (loop3): orphan cleanup on readonly fs [ 407.760506][ T8103] loop4: p161 size 50331648 extends beyond EOD, truncated [ 407.809860][ T8205] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 407.822223][ T8103] loop4: p162 start 16908804 is beyond EOD, truncated [ 407.841162][ T3783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.849651][ T8103] loop4: p163 size 50331648 extends beyond EOD, truncated [ 407.853844][ T3783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.872353][ T8103] loop4: p164 start 16908804 is beyond EOD, truncated [ 407.885038][ T8205] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 407.892958][ T8103] loop4: p165 size 50331648 extends beyond EOD, [ 407.905378][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 407.906759][ T8205] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 407.912636][ T8103] truncated [ 407.929790][ T8205] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.789: casefold flag without casefold feature [ 407.951011][ T8205] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.789: unexpected EA_INODE flag [ 407.963114][ T3783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.964381][ T8103] loop4: p166 start 16908804 is beyond EOD, [ 407.977546][ T3783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.985076][ T8103] truncated [ 408.008053][ T8205] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.789: couldn't read orphan inode 16 (err -117) [ 408.025799][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 408.037895][ T8205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 408.053610][ T8103] loop4: p167 size 50331648 extends beyond EOD, truncated [ 408.069380][ T8103] loop4: p168 start 16908804 is beyond EOD, truncated [ 408.119371][ T8103] loop4: p169 size 50331648 extends beyond EOD, truncated [ 408.155033][ T8103] loop4: p170 start 16908804 is beyond EOD, truncated [ 408.161885][ T8103] loop4: p171 size 50331648 extends beyond EOD, truncated [ 408.182331][ T8208] loop1: detected capacity change from 0 to 512 [ 408.210826][ T8103] loop4: p172 start 16908804 is beyond EOD, truncated [ 408.224281][ T8103] loop4: p173 size 50331648 extends beyond EOD, truncated [ 408.254492][ T8103] loop4: p174 start 16908804 is beyond EOD, truncated [ 408.272910][ T7719] EXT4-fs (loop3): unmounting filesystem. [ 408.275370][ T8103] loop4: p175 size 50331648 extends beyond EOD, truncated [ 408.294308][ T8103] loop4: p176 start 16908804 is beyond EOD, truncated [ 408.301808][ T8103] loop4: p177 size 50331648 extends beyond EOD, truncated [ 408.310673][ T8208] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.759: inode #1: comm syz.1.759: iget: illegal inode # [ 408.318583][ T8103] loop4: p178 start 16908804 is beyond EOD, truncated [ 408.333712][ T8103] loop4: p179 size 50331648 extends beyond EOD, truncated [ 408.342181][ T8103] loop4: p180 start 16908804 is beyond EOD, truncated [ 408.349347][ T8103] loop4: p181 size 50331648 extends beyond EOD, truncated [ 408.357499][ T8103] loop4: p182 start 16908804 is beyond EOD, truncated [ 408.364306][ T8103] loop4: p183 size 50331648 extends beyond EOD, truncated [ 408.372760][ T8103] loop4: p184 start 16908804 is beyond EOD, truncated [ 408.379612][ T8103] loop4: p185 size 50331648 extends beyond EOD, truncated [ 408.396924][ T8103] loop4: p186 start 16908804 is beyond EOD, truncated [ 408.403816][ T8103] loop4: p187 size 50331648 extends beyond EOD, truncated [ 408.412109][ T8103] loop4: p188 start 16908804 is beyond EOD, truncated [ 408.419194][ T8103] loop4: p189 size 50331648 extends beyond EOD, truncated [ 408.420965][ T8208] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.759: error while reading EA inode 1 err=-117 [ 408.437996][ T8103] loop4: p190 start 16908804 is beyond EOD, truncated [ 408.447892][ T8103] loop4: p191 size 50331648 extends beyond EOD, truncated [ 408.456798][ T8103] loop4: p192 start 16908804 is beyond EOD, truncated [ 408.463688][ T8103] loop4: p193 size 50331648 extends beyond EOD, truncated [ 408.501373][ T8208] EXT4-fs (loop1): 1 orphan inode deleted [ 408.508880][ T8103] loop4: p194 start 16908804 is beyond EOD, truncated [ 408.517579][ T8208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 408.529528][ T8103] loop4: p195 size 50331648 extends beyond EOD, truncated [ 408.569306][ T8103] loop4: p196 start 16908804 is beyond EOD, truncated [ 408.935280][ T8103] loop4: p197 size 50331648 extends beyond EOD, truncated [ 409.496785][ T8103] loop4: p198 start 16908804 is beyond EOD, truncated [ 409.534875][ T8103] loop4: p199 size 50331648 extends beyond EOD, truncated [ 409.575547][ T8103] loop4: p200 start 16908804 is beyond EOD, truncated [ 409.594738][ T8103] loop4: p201 size 50331648 extends beyond EOD, truncated [ 409.619456][ T8103] loop4: p202 start 16908804 is beyond EOD, truncated [ 409.742727][ T8103] loop4: p203 size 50331648 extends beyond EOD, truncated [ 409.753257][ T7942] EXT4-fs (loop1): unmounting filesystem. [ 409.782841][ T8103] loop4: p204 start 16908804 is beyond EOD, truncated [ 409.805535][ T8103] loop4: p205 size 50331648 extends beyond EOD, truncated [ 409.813735][ T8103] loop4: p206 start 16908804 is beyond EOD, truncated [ 409.829462][ T8103] loop4: p207 size 50331648 extends beyond EOD, truncated [ 409.840135][ T8103] loop4: p208 start 16908804 is beyond EOD, truncated [ 409.849714][ T8103] loop4: p209 size 50331648 extends beyond EOD, truncated [ 409.864366][ T8103] loop4: p210 start 16908804 is beyond EOD, truncated [ 409.872849][ T8103] loop4: p211 size 50331648 extends beyond EOD, truncated [ 409.899574][ T8103] loop4: p212 start 16908804 is beyond EOD, truncated [ 409.922380][ T8233] loop0: detected capacity change from 0 to 1024 [ 409.934854][ T8103] loop4: p213 size 50331648 extends beyond EOD, truncated [ 409.958126][ T8103] loop4: p214 start 16908804 is beyond EOD, truncated [ 409.983217][ T8103] loop4: p215 size 50331648 extends beyond EOD, truncated [ 409.992980][ T8103] loop4: p216 start 16908804 is beyond EOD, truncated [ 409.994770][ T3925] blk_print_req_error: 111 callbacks suppressed [ 409.994782][ T3925] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.000372][ T8103] loop4: p217 size 50331648 extends beyond EOD, truncated [ 410.024239][ T8103] loop4: p218 start 16908804 is beyond EOD, truncated [ 410.032312][ T8103] loop4: p219 size 50331648 extends beyond EOD, truncated [ 410.037842][ T8233] netlink: 25 bytes leftover after parsing attributes in process `syz.0.796'. [ 410.040894][ T8103] loop4: p220 start 16908804 is beyond EOD, truncated [ 410.056577][ T8103] loop4: p221 size 50331648 extends beyond EOD, truncated [ 410.071029][ T8103] loop4: p222 start 16908804 is beyond EOD, truncated [ 410.083935][ T8103] loop4: p223 size 50331648 extends beyond EOD, truncated [ 410.095594][ T8103] loop4: p224 start 16908804 is beyond EOD, truncated [ 410.104857][ T8103] loop4: p225 size 50331648 extends beyond EOD, truncated [ 410.134905][ T8233] device gretap0 entered promiscuous mode [ 410.146443][ T8103] loop4: p226 start 16908804 is beyond EOD, truncated [ 410.169363][ T8103] loop4: p227 size 50331648 extends beyond EOD, truncated [ 410.213667][ T8103] loop4: p228 start 16908804 is beyond EOD, truncated [ 410.368154][ T8103] loop4: p229 size 50331648 extends beyond EOD, truncated [ 410.441025][ T8103] loop4: p230 start 16908804 is beyond EOD, truncated [ 410.483882][ T8244] loop0: detected capacity change from 0 to 64 [ 410.503667][ T8103] loop4: p231 size 50331648 extends beyond EOD, truncated [ 410.605678][ T8103] loop4: p232 start 16908804 is beyond EOD, truncated [ 410.709863][ T8103] loop4: p233 size 50331648 extends beyond EOD, truncated [ 410.825408][ T8244] Trying to free block not in datazone [ 410.830965][ T8244] Trying to free block not in datazone [ 410.858590][ T8244] Trying to free block not in datazone [ 410.998759][ T8103] loop4: p234 start 16908804 is beyond EOD, truncated [ 411.094910][ T8103] loop4: p235 size 50331648 extends beyond EOD, truncated [ 411.115627][ T8103] loop4: p236 start 16908804 is beyond EOD, truncated [ 411.122436][ T8103] loop4: p237 size 50331648 extends beyond EOD, truncated [ 411.215681][ T8103] loop4: p238 start 16908804 is beyond EOD, truncated [ 411.260197][ T8103] loop4: p239 size 50331648 extends beyond EOD, truncated [ 411.313685][ T8103] loop4: p240 start 16908804 is beyond EOD, truncated [ 411.331493][ T8103] loop4: p241 size 50331648 extends beyond EOD, truncated [ 411.373190][ T8103] loop4: p242 start 16908804 is beyond EOD, truncated [ 411.392533][ T8103] loop4: p243 size 50331648 extends beyond EOD, truncated [ 411.427473][ T8103] loop4: p244 start 16908804 is beyond EOD, truncated [ 411.434315][ T8103] loop4: p245 size 50331648 extends beyond EOD, truncated [ 411.500278][ T8256] loop3: detected capacity change from 0 to 512 [ 411.525767][ T8256] EXT4-fs: Ignoring removed bh option [ 411.543340][ T8103] loop4: p246 start 16908804 is beyond EOD, truncated [ 411.585608][ T8103] loop4: p247 size 50331648 extends beyond EOD, truncated [ 411.629416][ T8252] loop0: detected capacity change from 0 to 8192 [ 411.663002][ T8103] loop4: p248 start 16908804 is beyond EOD, truncated [ 411.703865][ T8256] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.803: invalid block [ 411.794034][ T8259] loop1: detected capacity change from 0 to 64 [ 411.977270][ T8259] Trying to free block not in datazone [ 411.982882][ T8259] Trying to free block not in datazone [ 412.012485][ T8259] Trying to free block not in datazone [ 412.403999][ T8103] loop4: p249 size 50331648 extends beyond EOD, truncated [ 412.420967][ T8256] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.803: couldn't read orphan inode 15 (err -117) [ 412.434554][ T8256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 412.456382][ T8103] loop4: p250 start 16908804 is beyond EOD, truncated [ 412.479063][ T8103] loop4: p251 size 50331648 extends beyond EOD, truncated [ 412.573762][ T8103] loop4: p252 start 16908804 is beyond EOD, truncated [ 412.626765][ T8103] loop4: p253 size 50331648 extends beyond EOD, truncated [ 412.700823][ T8103] loop4: p254 start 16908804 is beyond EOD, truncated [ 412.754380][ T8103] loop4: p255 size 50331648 extends beyond EOD, truncated [ 413.144291][ T3644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.157102][ T3646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.166106][ T3644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.184420][ T3646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.194168][ T3646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 413.204040][ T3644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.650576][ T7719] EXT4-fs (loop3): unmounting filesystem. [ 416.003552][ T3634] Bluetooth: hci6: command tx timeout [ 418.799352][ T3634] Bluetooth: hci6: command tx timeout [ 418.969430][ T8295] loop3: detected capacity change from 0 to 256 [ 418.992083][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.025722][ T8295] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 420.061042][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.236804][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 420.549835][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.633853][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.685175][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.694797][ T8295] loop3: detected capacity change from 256 to 0 [ 420.701328][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.711166][ T8300] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 420.740043][ T8262] device bridge_slave_0 entered promiscuous mode [ 420.747532][ T8300] exFAT-fs (loop3): Filesystem has been set read-only [ 420.779960][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.815467][ T7719] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 420.822689][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.833516][ T8262] device bridge_slave_1 entered promiscuous mode [ 420.836231][ T7719] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 420.865659][ T3634] Bluetooth: hci6: command tx timeout [ 421.059182][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.237596][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.491307][ T8262] team0: Port device team_slave_0 added [ 421.600748][ T8262] team0: Port device team_slave_1 added [ 421.772663][ T56] tipc: Disabling bearer [ 421.790096][ T8329] device ip6tnl1 entered promiscuous mode [ 421.796007][ T56] tipc: Left network mode [ 421.909587][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.953154][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.979187][ C1] vkms_vblank_simulate: vblank timer overrun [ 422.194777][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.272432][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.513414][ T8342] loop3: detected capacity change from 0 to 64 [ 422.573771][ T8342] Trying to free block not in datazone [ 422.579310][ T8342] Trying to free block not in datazone [ 422.588841][ T8342] Trying to free block not in datazone [ 422.605931][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.795026][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.910617][ T8349] loop0: detected capacity change from 0 to 512 [ 422.944834][ T3634] Bluetooth: hci6: command tx timeout [ 423.052346][ T8349] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.825: invalid indirect mapped block 10 (level 1) [ 423.084368][ T8262] device hsr_slave_0 entered promiscuous mode [ 423.100193][ T8262] device hsr_slave_1 entered promiscuous mode [ 423.135110][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.152733][ T8349] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.825: invalid indirect mapped block 8 (level 1) [ 423.158030][ T8356] loop2: detected capacity change from 65536 to 59853 [ 423.183876][ T8262] Cannot create hsr debugfs directory [ 423.226137][ T8349] EXT4-fs (loop0): 1 truncate cleaned up [ 423.284821][ T8349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 423.515396][ T8369] EXT4-fs error (device loop0): ext4_discard_preallocations:5114: comm syz.0.825: Error -117 loading buddy information for 14592488 [ 423.675042][ T8369] EXT4-fs error (device loop0): ext4_discard_preallocations:5114: comm syz.0.825: Error -117 loading buddy information for 14592488 [ 423.802256][ T8369] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #18: comm syz.0.825: attempt to clear invalid blocks 37 len 12 [ 423.896789][ T8369] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.825: Invalid inode table block 0 in block_group 0 [ 423.971408][ T8373] loop1: detected capacity change from 0 to 8192 [ 424.004772][ T8369] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5879: Corrupt filesystem [ 424.025922][ T8369] EXT4-fs error (device loop0): ext4_punch_hole:4151: inode #18: comm syz.0.825: mark_inode_dirty error [ 424.085045][ T8374] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #18: block 37: comm syz.0.825: lblock 0 mapped to illegal pblock 37 (length 12) [ 424.112884][ T8374] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #18: block 37: comm syz.0.825: lblock 0 mapped to illegal pblock 37 (length 4) [ 424.222628][ T7928] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 424.247839][ T7928] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 424.374391][ T7928] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 424.451924][ T7928] EXT4-fs (loop0): unmounting filesystem. [ 425.401645][ T8262] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.627898][ T8262] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.668309][ T8262] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.713103][ T3644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 425.726516][ T3644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 425.735641][ T3644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.748722][ T3644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.759601][ T3644] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.768046][ T56] device hsr_slave_0 left promiscuous mode [ 425.768191][ T3644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.806527][ T56] device hsr_slave_1 left promiscuous mode [ 425.838877][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.856697][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.873815][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.925564][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.060664][ T56] device veth1_macvtap left promiscuous mode [ 426.118542][ T56] device veth0_macvtap left promiscuous mode [ 426.145577][ T56] device veth1_vlan left promiscuous mode [ 426.151433][ T56] device veth0_vlan left promiscuous mode [ 427.500863][ T8414] loop1: detected capacity change from 0 to 256 [ 427.607879][ T8414] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 427.824828][ T3644] Bluetooth: hci1: command tx timeout [ 428.391269][ T8414] loop1: detected capacity change from 256 to 0 [ 428.421567][ T8422] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 428.483115][ T8422] exFAT-fs (loop1): Filesystem has been set read-only [ 428.753455][ T7942] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 428.814170][ T7942] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 428.852342][ T8428] loop3: detected capacity change from 0 to 256 [ 428.917529][ T26] audit: type=1804 audit(1725066988.372:491): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.845" name="/newroot/23/file1/file0" dev="loop3" ino=1048733 res=1 errno=0 [ 429.449032][ T7719] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 429.457802][ T7719] FAT-fs (loop3): Filesystem has been set read-only [ 429.469972][ T7719] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 429.692031][ T56] team0 (unregistering): Port device team_slave_1 removed [ 429.764296][ T56] team0 (unregistering): Port device team_slave_0 removed [ 429.836574][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.904809][ T3644] Bluetooth: hci1: command tx timeout [ 429.933899][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.574355][ T56] bond0 (unregistering): Released all slaves [ 430.614927][ T8262] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.092249][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.138469][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.160493][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.173751][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.199460][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 431.232402][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.242643][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.260547][ T5494] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.267718][ T5494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.276966][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.285983][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.305106][ T5494] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.312218][ T5494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.327225][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.337307][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.348963][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.360615][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.382896][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.394270][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.403299][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.414244][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.470347][ T8262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 431.480811][ T8262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.508731][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.517597][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.528504][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.539163][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.548151][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.612717][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.642615][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.654027][ T8399] device bridge_slave_0 entered promiscuous mode [ 431.695736][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.710892][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.719140][ T8399] device bridge_slave_1 entered promiscuous mode [ 431.825858][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.856632][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.869069][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.970105][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.984814][ T3644] Bluetooth: hci1: command tx timeout [ 432.001213][ T8399] team0: Port device team_slave_0 added [ 432.028894][ T8399] team0: Port device team_slave_1 added [ 432.109237][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.132639][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.164067][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.179592][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.235379][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.263897][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.278531][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.313844][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.347505][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.362530][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.398663][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.461764][ T8399] device hsr_slave_0 entered promiscuous mode [ 432.484422][ T8399] device hsr_slave_1 entered promiscuous mode [ 432.496608][ T8399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.525287][ T8399] Cannot create hsr debugfs directory [ 432.750571][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.863336][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.879330][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.889365][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.925901][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.942158][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.953542][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.971241][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.981992][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.998491][ T8262] device veth0_vlan entered promiscuous mode [ 433.051157][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.084351][ T8262] device veth1_vlan entered promiscuous mode [ 433.112453][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 433.140361][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 433.149708][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.162985][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.183488][ T8262] device veth0_macvtap entered promiscuous mode [ 433.199036][ T8262] device veth1_macvtap entered promiscuous mode [ 433.228847][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.239566][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.253313][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.265642][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.278349][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.289114][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.299519][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.310259][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.320371][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.331958][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.343700][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.360545][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.371289][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.382567][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.394628][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.412550][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.423235][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.436388][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.447003][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.456969][ T8262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.467449][ T8262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.480887][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.491229][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.501872][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.512543][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.522322][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.531894][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.542631][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.558268][ T8262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.570382][ T8262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.589099][ T8262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.601154][ T8262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.850777][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.875471][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.005550][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.064145][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.065073][ T3644] Bluetooth: hci1: command tx timeout [ 434.105013][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.132888][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.184951][ T3644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.204286][ T3644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.213774][ T3644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.233931][ T3644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.241927][ T3644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 435.250890][ T3644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.268852][ T3644] Bluetooth: hci2: command tx timeout [ 438.153841][ T8399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.181501][ T8399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.256464][ T8399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.285363][ T8399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.502748][ T8538] chnl_net:caif_netlink_parms(): no params data found [ 438.721741][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.785537][ T8538] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.792760][ T8538] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.816438][ T8538] device bridge_slave_0 entered promiscuous mode [ 438.891513][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 438.905031][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 438.919123][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.931916][ T8538] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.944520][ T8538] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.963566][ T8538] device bridge_slave_1 entered promiscuous mode [ 438.985939][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.011727][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.023526][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.030707][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.039535][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.048903][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.058149][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.065296][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.073026][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 439.176752][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 439.185750][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 439.204213][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 439.226343][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 439.247949][ T8538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.295792][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 439.315437][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 439.333575][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 439.344852][ T3644] Bluetooth: hci2: command tx timeout [ 439.354262][ T56] device hsr_slave_0 left promiscuous mode [ 439.364003][ T56] device hsr_slave_1 left promiscuous mode [ 439.381939][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.395989][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.403674][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.412185][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.421524][ T56] device bridge_slave_1 left promiscuous mode [ 439.428170][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.437435][ T56] device bridge_slave_0 left promiscuous mode [ 439.443621][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.456593][ T56] device hsr_slave_0 left promiscuous mode [ 439.462852][ T56] device hsr_slave_1 left promiscuous mode [ 439.469292][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.476902][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.484511][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.492878][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.500709][ T56] device bridge_slave_1 left promiscuous mode [ 439.507239][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.517259][ T56] device bridge_slave_0 left promiscuous mode [ 439.523798][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.567285][ T56] device veth1_macvtap left promiscuous mode [ 439.573303][ T56] device veth0_macvtap left promiscuous mode [ 439.579433][ T56] device veth1_vlan left promiscuous mode [ 439.585476][ T56] device veth0_vlan left promiscuous mode [ 439.593070][ T56] device veth1_macvtap left promiscuous mode [ 439.600463][ T56] device veth0_macvtap left promiscuous mode [ 439.606618][ T56] device veth1_vlan left promiscuous mode [ 439.612489][ T56] device veth0_vlan left promiscuous mode [ 439.909718][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.916098][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.579477][ T56] team0 (unregistering): Port device team_slave_1 removed [ 440.638496][ T56] team0 (unregistering): Port device team_slave_0 removed [ 440.695993][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.768253][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.383412][ T56] bond0 (unregistering): Released all slaves [ 441.424985][ T3644] Bluetooth: hci2: command tx timeout [ 441.962722][ T56] team0 (unregistering): Port device team_slave_1 removed [ 442.031828][ T56] team0 (unregistering): Port device team_slave_0 removed [ 442.090832][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.152485][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.823458][ T56] bond0 (unregistering): Released all slaves [ 442.913744][ T8538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.935764][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.944043][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.952868][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.965771][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.018699][ T8538] team0: Port device team_slave_0 added [ 443.041768][ T8399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 443.067087][ T8538] team0: Port device team_slave_1 added [ 443.116880][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.123844][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.155372][ T8538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.167926][ T8538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.175529][ T8538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.201618][ T8538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.283252][ T8538] device hsr_slave_0 entered promiscuous mode [ 443.305539][ T8538] device hsr_slave_1 entered promiscuous mode [ 443.509546][ T3644] Bluetooth: hci2: command tx timeout [ 443.581272][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.623911][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.636151][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.815473][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.833623][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.868163][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.884263][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.981712][ T8399] device veth0_vlan entered promiscuous mode [ 444.003057][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.020361][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.097573][ T8399] device veth1_vlan entered promiscuous mode [ 444.156191][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.165274][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.240977][ T8399] device veth0_macvtap entered promiscuous mode [ 444.260261][ T8399] device veth1_macvtap entered promiscuous mode [ 444.320142][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.344701][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.354538][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.365667][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.375714][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.390273][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.400249][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.411534][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.423255][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.440018][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.452080][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.460445][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.475751][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.484904][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.499038][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.509237][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.523561][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.533838][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.545010][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.556105][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.566747][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.577872][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.610198][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.619515][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.630986][ T8399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.642042][ T8399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.651119][ T8399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.659863][ T8399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.725846][ T8538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.745925][ T8538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.762194][ T8538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.788551][ T8538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.847058][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.878808][ T5492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.896190][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.903634][ T5492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.930079][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 444.942317][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 445.077080][ T8538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.154929][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.177316][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.220306][ T8538] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.259855][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.283103][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.315284][ T8611] loop0: detected capacity change from 0 to 4096 [ 445.344885][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.352031][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.392158][ T8611] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 445.432311][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.474062][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.524782][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.544487][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.551660][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.645211][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.913757][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 446.108350][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 446.136225][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 446.158695][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 446.191469][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 446.205800][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 446.222225][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.247258][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.269463][ T8538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 446.289870][ T8538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.318896][ T8399] EXT4-fs (loop0): unmounting filesystem. [ 446.333285][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.362347][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.524453][ T8632] loop1: detected capacity change from 0 to 164 [ 446.639954][ T8632] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 446.873474][ T8605] loop4: detected capacity change from 0 to 32768 [ 446.944504][ T8605] XFS: attr2 mount option is deprecated. [ 447.000666][ T8605] XFS: ikeep mount option is deprecated. [ 447.044537][ T8605] XFS: noikeep mount option is deprecated. [ 448.189759][ T8640] loop1: detected capacity change from 0 to 256 [ 448.452404][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.467257][ T3782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.488756][ T8538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.561862][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.576094][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.606338][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.629791][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.651882][ T8538] device veth0_vlan entered promiscuous mode [ 448.663677][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.675958][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.689586][ T8538] device veth1_vlan entered promiscuous mode [ 448.736162][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.754080][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 448.763231][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 448.779220][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.795466][ T8538] device veth0_macvtap entered promiscuous mode [ 448.815900][ T8538] device veth1_macvtap entered promiscuous mode [ 448.849310][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.880624][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.908226][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.939565][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.982998][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.004300][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.031394][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.062828][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.094756][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.126688][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.158800][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.178400][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.215098][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.244218][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.266776][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.307911][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.333488][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.363859][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.381814][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.392132][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.409806][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.421479][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.450637][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.474329][ T8538] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.491964][ T8538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.504845][ T8538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.578141][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.615376][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.831067][ T8575] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.855365][ T8538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.874774][ T8538] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.883511][ T8538] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.906909][ T8538] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.311936][ T8667] loop4: detected capacity change from 0 to 256 [ 450.339356][ T8667] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 450.485484][ T5494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.527091][ T5494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.598524][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 450.805081][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.861511][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.013173][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.659613][ T8678] loop4: detected capacity change from 256 to 0 [ 451.763867][ T8262] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 451.824769][ T8262] exFAT-fs (loop4): Filesystem has been set read-only [ 451.833491][ T8687] binder: BINDER_SET_CONTEXT_MGR already set [ 451.919175][ T8687] binder: 8685:8687 ioctl 4018620d 20000100 returned -16 [ 451.969192][ T8262] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 452.007519][ T8687] binder: BINDER_SET_CONTEXT_MGR already set [ 452.029070][ T8687] binder: 8685:8687 ioctl 4018620d 20000040 returned -16 [ 452.061202][ T8689] loop1: detected capacity change from 0 to 4096 [ 454.093862][ T8689] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 454.275283][ T8712] batman_adv: batadv0: Adding interface: wlan1 [ 454.281499][ T8712] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.373492][ T8712] batman_adv: batadv0: Interface activated: wlan1 [ 454.421506][ T8716] batman_adv: batadv0: Interface deactivated: wlan1 [ 455.356556][ T8716] batman_adv: batadv0: Removing interface: wlan1 [ 455.412698][ T8726] device team_slave_0 entered promiscuous mode [ 455.419685][ T8726] device team_slave_1 entered promiscuous mode [ 455.451364][ T8726] device vlan2 entered promiscuous mode [ 455.467318][ T8726] device team0 entered promiscuous mode [ 455.476611][ T8726] team0: Device vlan2 is already an upper device of the team interface [ 455.497292][ T8726] device team0 left promiscuous mode [ 455.545732][ T8726] device team_slave_0 left promiscuous mode [ 455.551747][ T8726] device team_slave_1 left promiscuous mode [ 457.371928][ T8737] loop4: detected capacity change from 0 to 32768 [ 457.465412][ T8757] loop0: detected capacity change from 0 to 256 [ 457.512605][ T8757] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 457.560238][ T26] audit: type=1326 audit(1725067016.992:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.3.879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c38b79eb9 code=0x0 [ 457.669287][ T8737] XFS (loop4): Mounting V5 Filesystem [ 458.054106][ T8760] loop3: detected capacity change from 0 to 2048 [ 458.309912][ T8737] XFS (loop4): Ending clean mount [ 458.351060][ T8737] XFS (loop4): Quotacheck needed: Please wait. [ 458.389097][ T3091] Alternate GPT is invalid, using primary GPT. [ 458.402751][ T3091] loop3: p1 p2 p3 [ 458.485808][ T8575] udevd[8575]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 458.536126][ T8737] XFS (loop4): Quotacheck: Done. [ 458.568614][ T8575] udevd[8575]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 458.592771][ T8576] udevd[8576]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 458.655800][ T8757] loop0: detected capacity change from 256 to 0 [ 458.673999][ T8768] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 458.745082][ T8768] exFAT-fs (loop0): Filesystem has been set read-only [ 458.849988][ T8399] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 458.903478][ T8262] XFS (loop4): Unmounting Filesystem [ 458.913786][ T8399] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005) [ 459.249629][ T8796] netlink: 44 bytes leftover after parsing attributes in process `syz.0.883'. [ 460.579344][ T8829] loop1: detected capacity change from 0 to 512 [ 460.641272][ T8829] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 460.651069][ T8829] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 460.724845][ T8838] device team_slave_0 entered promiscuous mode [ 460.731054][ T8838] device team_slave_1 entered promiscuous mode [ 460.770977][ T8829] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #2: comm syz.1.891: corrupted inode contents [ 460.789541][ T8829] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #2: comm syz.1.891: mark_inode_dirty error [ 460.802659][ T8829] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #2: comm syz.1.891: corrupted inode contents [ 460.817508][ T8838] device macvtap1 entered promiscuous mode [ 460.829449][ T8838] device team0 entered promiscuous mode [ 460.848855][ T8842] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.891: Directory hole found for htree leaf block 0 [ 460.848965][ T8838] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 460.896643][ T8838] team0: Device macvtap1 is already an upper device of the team interface [ 460.911492][ T8838] device team0 left promiscuous mode [ 460.918468][ T8838] device team_slave_0 left promiscuous mode [ 460.924484][ T8838] device team_slave_1 left promiscuous mode [ 461.071959][ T8849] loop3: detected capacity change from 0 to 256 [ 461.132732][ T8849] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 461.426207][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 461.449484][ T8849] loop3: detected capacity change from 256 to 0 [ 461.477460][ T8864] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 461.489395][ T8865] loop4: detected capacity change from 0 to 256 [ 461.517076][ T8864] exFAT-fs (loop3): Filesystem has been set read-only [ 461.524616][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 461.525603][ T8865] exfat: Unknown parameter 'me' [ 461.557147][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 461.611232][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 461.626019][ T8538] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 461.671561][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 461.695890][ T8538] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005) [ 461.725123][ T7942] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /27/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 461.774341][ T8862] loop4: detected capacity change from 0 to 512 [ 463.228480][ T8888] loop0: detected capacity change from 0 to 1024 [ 463.280663][ T8888] EXT4-fs: Ignoring removed orlov option [ 463.468331][ T8888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 465.215021][ T8399] EXT4-fs (loop0): unmounting filesystem. [ 465.285753][ T3634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.305530][ T3634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.316174][ T3634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.327522][ T3634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.335148][ T3634] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 465.342522][ T3634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.529647][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 465.646429][ T8917] loop0: detected capacity change from 0 to 512 [ 465.652568][ T3783] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.714414][ T26] audit: type=1326 audit(1725067025.172:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 465.742868][ T8917] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.910: couldn't read orphan inode 26 (err -116) [ 465.784780][ T8917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 465.794883][ T8917] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff) [ 465.864714][ T26] audit: type=1326 audit(1725067025.202:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 465.917284][ T26] audit: type=1326 audit(1725067025.202:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 465.979327][ T3783] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.029671][ T26] audit: type=1326 audit(1725067025.202:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 466.055993][ T8399] EXT4-fs (loop0): unmounting filesystem. [ 466.063453][ T26] audit: type=1326 audit(1725067025.202:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 466.142143][ T26] audit: type=1326 audit(1725067025.202:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 466.166552][ T26] audit: type=1326 audit(1725067025.202:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 466.210471][ T26] audit: type=1326 audit(1725067025.202:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8918 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd66179eb9 code=0x7ffc0000 [ 466.444913][ T4053] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 466.605702][ T3783] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.714802][ T4053] usb 4-1: Using ep0 maxpacket: 16 [ 466.854900][ T4053] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 466.881909][ T4053] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.901768][ T8931] fuse: Bad value for 'fd' [ 466.906984][ T4053] usb 4-1: config 0 descriptor?? [ 466.953883][ T4053] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 466.980107][ T8914] chnl_net:caif_netlink_parms(): no params data found [ 467.050072][ T3783] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.096621][ T8935] device syzkaller0 entered promiscuous mode [ 467.406543][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.413669][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.427801][ T3644] Bluetooth: hci3: command tx timeout [ 467.447427][ T8914] device bridge_slave_0 entered promiscuous mode [ 467.494408][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.522347][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.563243][ T8914] device bridge_slave_1 entered promiscuous mode [ 467.604046][ T8949] loop0: detected capacity change from 0 to 2048 [ 467.637869][ T8949] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 467.718323][ T8914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.849242][ T8914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.888136][ T8949] loop0: detected capacity change from 0 to 164 [ 467.978482][ T8575] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 468.120364][ T8914] team0: Port device team_slave_0 added [ 468.243747][ T8914] team0: Port device team_slave_1 added [ 468.291936][ T8966] device team0 entered promiscuous mode [ 468.299712][ T8970] loop0: detected capacity change from 0 to 256 [ 468.314818][ T8966] device team_slave_0 entered promiscuous mode [ 468.325303][ T8966] device team_slave_1 entered promiscuous mode [ 468.357792][ T8966] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 468.391587][ T8970] FAT-fs (loop0): Directory bread(block 64) failed [ 468.395678][ T8966] device team0 left promiscuous mode [ 468.404181][ T8966] device team_slave_0 left promiscuous mode [ 468.420210][ T8970] FAT-fs (loop0): Directory bread(block 65) failed [ 468.420850][ T8966] device team_slave_1 left promiscuous mode [ 468.442626][ T8970] FAT-fs (loop0): Directory bread(block 66) failed [ 468.468208][ T8970] FAT-fs (loop0): Directory bread(block 67) failed [ 468.490098][ T8970] FAT-fs (loop0): Directory bread(block 68) failed [ 468.514481][ T8970] FAT-fs (loop0): Directory bread(block 69) failed [ 468.525741][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.532663][ T8970] FAT-fs (loop0): Directory bread(block 70) failed [ 468.540909][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.541810][ T8970] FAT-fs (loop0): Directory bread(block 71) failed [ 468.607921][ T8914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.626684][ T8970] FAT-fs (loop0): Directory bread(block 72) failed [ 468.649210][ T8970] FAT-fs (loop0): Directory bread(block 73) failed [ 468.669425][ T8914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.678725][ T8914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.745455][ T8914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.830101][ T8914] device hsr_slave_0 entered promiscuous mode [ 468.845529][ T8914] device hsr_slave_1 entered promiscuous mode [ 468.855720][ T8914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.912425][ T8914] Cannot create hsr debugfs directory [ 469.505455][ T3644] Bluetooth: hci3: command tx timeout [ 470.731595][ T4053] gspca_sonixj: reg_w err -71 [ 470.737935][ T4053] sonixj: probe of 4-1:0.0 failed with error -71 [ 470.745799][ T4053] usb 4-1: USB disconnect, device number 13 [ 471.230174][ T4053] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 471.399076][ T4307] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 471.484889][ T4053] usb 5-1: Using ep0 maxpacket: 16 [ 471.509209][ T3783] device hsr_slave_0 left promiscuous mode [ 471.524902][ T3783] device hsr_slave_1 left promiscuous mode [ 471.544922][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.552385][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.575545][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.582996][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.584893][ T3644] Bluetooth: hci3: command tx timeout [ 471.604994][ T4053] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.616854][ T3783] device bridge_slave_1 left promiscuous mode [ 471.623176][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.630534][ T4053] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.644762][ T4307] usb 4-1: Using ep0 maxpacket: 16 [ 471.650267][ T4053] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.663338][ T4053] usb 5-1: config 0 interface 0 has no altsetting 0 [ 471.670227][ T4053] usb 5-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 471.682330][ T4053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.691677][ T3783] device bridge_slave_0 left promiscuous mode [ 471.710852][ T4053] usb 5-1: config 0 descriptor?? [ 471.726784][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.764966][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.795330][ T3783] device veth1_macvtap left promiscuous mode [ 471.801157][ T4307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.811868][ T3783] device veth0_macvtap left promiscuous mode [ 471.822055][ T3783] device veth1_vlan left promiscuous mode [ 471.831896][ T4307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.835177][ T3783] device veth0_vlan left promiscuous mode [ 471.856479][ T4307] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.872874][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.897629][ T4307] usb 4-1: config 0 descriptor?? [ 472.087576][ T3634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 472.098914][ T3634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 472.117768][ T3634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 472.128322][ T3634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 472.227504][ T3634] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 472.237016][ T3634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 472.255324][ T4053] usbhid 5-1:0.0: can't add hid device: -71 [ 472.306315][ T4053] usbhid: probe of 5-1:0.0 failed with error -71 [ 472.322133][ T4053] usb 5-1: USB disconnect, device number 11 [ 472.540635][ T4307] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 472.708797][ T4307] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 472.829820][ T4307] microsoft 0003:045E:07DA.0006: no inputs found [ 472.889472][ T4307] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 473.162775][ T3675] usb 4-1: USB disconnect, device number 14 [ 473.667363][ T3646] Bluetooth: hci3: command tx timeout [ 473.710232][ T9022] loop0: detected capacity change from 0 to 40427 [ 473.734787][ T9022] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 473.742578][ T9022] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 473.846584][ T9022] F2FS-fs (loop0): Found nat_bits in checkpoint [ 474.055147][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 474.090116][ T9022] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 474.114788][ T9022] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 474.356669][ T3646] Bluetooth: hci4: command tx timeout [ 474.721055][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 474.843980][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.935177][ T9022] F2FS-fs (loop0): Inconsistent error blkaddr:5663, sit bitmap:0 [ 474.957061][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.957505][ T9022] CPU: 1 PID: 9022 Comm: syz.0.930 Not tainted 6.1.107-syzkaller #0 [ 474.973575][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 474.983628][ T9022] Call Trace: [ 474.986918][ T9022] [ 474.989858][ T9022] dump_stack_lvl+0x1e3/0x2cb [ 474.994572][ T9022] ? nf_tcp_handle_invalid+0x642/0x642 [ 475.000060][ T9022] ? f2fs_dirty_node_folio+0x513/0xa60 [ 475.005548][ T9022] f2fs_is_valid_blkaddr+0xc61/0x1270 [ 475.010945][ T9022] f2fs_truncate_data_blocks_range+0x5d4/0xe50 [ 475.017225][ T9022] f2fs_do_truncate_blocks+0x546/0xd50 [ 475.022718][ T9022] ? addrs_per_block+0x110/0x110 [ 475.027691][ T9022] f2fs_truncate_blocks+0x109/0x2f0 [ 475.032909][ T9022] do_convert_inline_dir+0xded/0x1c90 [ 475.038312][ T9022] ? f2fs_try_convert_inline_dir+0x4c0/0x4c0 [ 475.044328][ T9022] ? pagecache_get_page+0x120/0x250 [ 475.049642][ T9022] ? f2fs_grab_cache_page+0x38/0x3c0 [ 475.054946][ T9022] ? _find_next_zero_bit+0x101/0x140 [ 475.060248][ T9022] ? _find_next_bit+0xe9/0x120 [ 475.065030][ T9022] ? f2fs_room_for_filename+0x90/0xb0 [ 475.070425][ T9022] f2fs_add_inline_entry+0x503/0x8d0 [ 475.075744][ T9022] ? do_convert_inline_dir+0x1c90/0x1c90 [ 475.081405][ T9022] ? f2fs_init_casefolded_name+0x6c0/0x6c0 [ 475.087240][ T9022] f2fs_add_dentry+0xb6/0x1e0 [ 475.091944][ T9022] f2fs_do_add_link+0x21a/0x340 [ 475.096815][ T9022] ? f2fs_add_dentry+0x1e0/0x1e0 [ 475.101775][ T9022] ? up_read+0x20/0x20 [ 475.105862][ T9022] ? f2fs_dquot_initialize+0xd6/0x2e0 [ 475.111254][ T9022] f2fs_create+0x749/0xa10 [ 475.115695][ T9022] ? f2fs_lookup+0xae0/0xae0 [ 475.120296][ T9022] path_openat+0x12f1/0x2e60 [ 475.124936][ T9022] ? do_filp_open+0x480/0x480 [ 475.129652][ T9022] do_filp_open+0x230/0x480 [ 475.134172][ T9022] ? vfs_tmpfile+0x4a0/0x4a0 [ 475.138805][ T9022] ? _raw_spin_unlock+0x24/0x40 [ 475.143669][ T9022] ? alloc_fd+0x5a0/0x640 [ 475.148020][ T9022] do_sys_openat2+0x13b/0x4f0 [ 475.152721][ T9022] ? do_sys_open+0x220/0x220 [ 475.157333][ T9022] ? do_mknodat+0x562/0x5a0 [ 475.161862][ T9022] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 475.167870][ T9022] __x64_sys_creat+0x11f/0x160 [ 475.172745][ T9022] ? __x64_compat_sys_openat+0x290/0x290 [ 475.178401][ T9022] ? syscall_enter_from_user_mode+0x2e/0x230 [ 475.184402][ T9022] ? lockdep_hardirqs_on+0x94/0x130 [ 475.189623][ T9022] ? syscall_enter_from_user_mode+0x2e/0x230 [ 475.195632][ T9022] do_syscall_64+0x3b/0xb0 [ 475.200059][ T9022] ? clear_bhb_loop+0x45/0xa0 [ 475.204756][ T9022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.210674][ T9022] RIP: 0033:0x7febe3d79eb9 [ 475.215110][ T9022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.234731][ T9022] RSP: 002b:00007febe4bc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 475.243161][ T9022] RAX: ffffffffffffffda RBX: 00007febe3f15f80 RCX: 00007febe3d79eb9 [ 475.251145][ T9022] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 475.259132][ T9022] RBP: 00007febe3de793e R08: 0000000000000000 R09: 0000000000000000 [ 475.267118][ T9022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.275103][ T9022] R13: 0000000000000000 R14: 00007febe3f15f80 R15: 00007ffc16ed72c8 [ 475.283101][ T9022] [ 475.360140][ T9044] loop3: detected capacity change from 0 to 40427 [ 475.365040][ T26] audit: type=1800 audit(1725067034.822:501): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.930" name="bus" dev="loop0" ino=46 res=0 errno=0 [ 475.416253][ T9044] F2FS-fs (loop3): invalid crc value [ 475.447550][ T9044] F2FS-fs (loop3): Found nat_bits in checkpoint [ 475.551694][ T9044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 475.907062][ T8538] syz-executor: attempt to access beyond end of device [ 475.907062][ T8538] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 475.927882][ T8538] syz-executor: attempt to access beyond end of device [ 475.927882][ T8538] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 476.205436][ T11] kworker/u4:1: attempt to access beyond end of device [ 476.205436][ T11] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 476.394781][ T3646] Bluetooth: hci4: command tx timeout [ 476.936700][ T9056] loop0: detected capacity change from 0 to 2048 [ 476.961834][ T9056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 477.039275][ T3783] bond0 (unregistering): Released all slaves [ 477.225693][ T8914] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 478.090326][ T8914] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 478.152412][ T8914] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 478.171575][ T8914] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 478.202537][ T8846] EXT4-fs error: 11 callbacks suppressed [ 478.202553][ T8846] EXT4-fs error (device loop1): ext4_do_update_inode:5221: inode #2: comm syz.1.891: corrupted inode contents [ 478.282492][ T8846] EXT4-fs error (device loop1): ext4_dirty_inode:6083: inode #2: comm syz.1.891: mark_inode_dirty error [ 478.351485][ T8846] EXT4-fs (loop1): unmounting filesystem. [ 478.415683][ T9063] loop4: detected capacity change from 0 to 8192 [ 478.474765][ T3634] Bluetooth: hci4: command tx timeout [ 478.668825][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.756191][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.773838][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.802993][ T8914] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.821691][ T9010] chnl_net:caif_netlink_parms(): no params data found [ 478.869784][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.903046][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.952520][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.959852][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.039255][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.065674][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.093596][ T9073] loop0: detected capacity change from 0 to 164 [ 479.122451][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.129595][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.159212][ T9073] syz.0.939: attempt to access beyond end of device [ 479.159212][ T9073] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 479.194571][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.202649][ T9073] syz.0.939: attempt to access beyond end of device [ 479.202649][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.246352][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 479.295983][ T26] audit: type=1800 audit(1725067038.762:502): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.939" name="file0" dev="loop0" ino=1862 res=0 errno=0 [ 479.330621][ T9073] syz.0.939: attempt to access beyond end of device [ 479.330621][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.423334][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 479.513606][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 479.572330][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 479.616008][ T9073] syz.0.939: attempt to access beyond end of device [ 479.616008][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.645772][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.667058][ T9073] syz.0.939: attempt to access beyond end of device [ 479.667058][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.717278][ T9073] syz.0.939: attempt to access beyond end of device [ 479.717278][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.772797][ T9073] syz.0.939: attempt to access beyond end of device [ 479.772797][ T9073] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 479.922778][ T3783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.098968][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.114608][ T3646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.124140][ T3646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.132532][ T3646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 480.156976][ T3646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 480.161060][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.182724][ T3646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 480.191377][ T3646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.272532][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.304471][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.385221][ T9010] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.400028][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.410831][ T9010] device bridge_slave_0 entered promiscuous mode [ 480.440774][ T9010] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.468176][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.486069][ T9010] device bridge_slave_1 entered promiscuous mode [ 480.552250][ T3634] Bluetooth: hci4: command tx timeout [ 480.616496][ T8914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.462849][ T3783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.565040][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.594148][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.666538][ T9010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.416602][ T3646] Bluetooth: hci2: command tx timeout [ 482.488467][ T3783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.614519][ T9010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.629571][ T9122] xt_ipcomp: unknown flags B [ 482.777672][ T3783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.841711][ T9128] loop0: detected capacity change from 0 to 1024 [ 482.864185][ T9010] team0: Port device team_slave_0 added [ 482.932254][ T9010] team0: Port device team_slave_1 added [ 483.033694][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.085240][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.109071][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.136709][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.142359][ T9128] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 483.164528][ T9010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.204772][ T9010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.212282][ T9010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.238739][ T9010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.422161][ T8914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.503506][ T9010] device hsr_slave_0 entered promiscuous mode [ 483.532326][ T9010] device hsr_slave_1 entered promiscuous mode [ 483.551560][ T9010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.577639][ T9010] Cannot create hsr debugfs directory [ 483.586965][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 483.662165][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 483.693582][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.786186][ T9151] loop4: detected capacity change from 0 to 512 [ 483.853668][ T3783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.869248][ T9151] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 483.880114][ T9151] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 483.904966][ T9151] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.952: Failed to acquire dquot type 0 [ 483.921879][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 483.953735][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.958606][ T9151] EXT4-fs (loop4): Remounting filesystem read-only [ 483.977003][ T9151] EXT4-fs (loop4): 1 orphan inode deleted [ 483.982902][ T9151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.992189][ T9151] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038 (0x7fffffff) [ 484.004133][ T8914] device veth0_vlan entered promiscuous mode [ 484.192703][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.205785][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.314892][ T3783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.329378][ T9166] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 484.355662][ T9166] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 484.433378][ T9166] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.952: Failed to acquire dquot type 0 [ 484.459219][ T9166] EXT4-fs (loop4): Remounting filesystem read-only [ 484.465960][ T3634] Bluetooth: hci2: command tx timeout [ 484.571793][ T3783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.620475][ T8914] device veth1_vlan entered promiscuous mode [ 484.655522][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.665008][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.695857][ T9088] device bridge_slave_0 entered promiscuous mode [ 484.766383][ T3783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.829921][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.854808][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.863022][ T9088] device bridge_slave_1 entered promiscuous mode [ 484.940878][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.979784][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.028304][ T9176] loop0: detected capacity change from 0 to 8192 [ 485.135436][ T9088] team0: Port device team_slave_0 added [ 485.144001][ T9088] team0: Port device team_slave_1 added [ 485.239344][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 485.277296][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 485.392672][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.402538][ T8262] EXT4-fs (loop4): unmounting filesystem. [ 485.414799][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.497551][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.514516][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.521576][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.554498][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.875007][ T8914] device veth0_macvtap entered promiscuous mode [ 485.993475][ T8914] device veth1_macvtap entered promiscuous mode [ 486.204976][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.237804][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.248360][ T3799] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 486.278034][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.311637][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.342221][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.374896][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.411370][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.442096][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.468910][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.512815][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.536236][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.555105][ T3634] Bluetooth: hci2: command tx timeout [ 486.569448][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 486.615816][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 486.633184][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 486.663613][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.677900][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.690218][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.700364][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.704921][ T3799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.712183][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.733471][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.742442][ T3799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.744361][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.772244][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.783024][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.783839][ T3799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.793791][ T8914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.819966][ T8914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.827250][ T3799] usb 5-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 486.836104][ T8914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.847892][ T3799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.918446][ T3799] usb 5-1: config 0 descriptor?? [ 486.948536][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 486.958195][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.970150][ T8914] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.982601][ T8914] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.993029][ T8914] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.002174][ T8914] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.085136][ T9088] device hsr_slave_0 entered promiscuous mode [ 487.092000][ T9088] device hsr_slave_1 entered promiscuous mode [ 487.103976][ T9088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.112178][ T9088] Cannot create hsr debugfs directory [ 487.294871][ T3799] usbhid 5-1:0.0: can't add hid device: -71 [ 487.300983][ T3799] usbhid: probe of 5-1:0.0 failed with error -71 [ 487.325363][ T3799] usb 5-1: USB disconnect, device number 12 [ 488.635028][ T3634] Bluetooth: hci2: command tx timeout [ 488.835091][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.871483][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.918242][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 488.966625][ T9234] Cannot find add_set index 0 as target [ 489.042051][ T5281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.046725][ T9010] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 489.058484][ T5281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.060632][ T9010] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 489.154387][ T9010] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 489.174234][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 489.375034][ T9010] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.147496][ T9010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.295270][ T9010] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.449496][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.460770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.501550][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.511789][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.541365][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.548532][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.572152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.581374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 490.592405][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.599632][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.608042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 490.773792][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 490.775756][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 490.790020][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 490.792704][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 490.793461][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 490.802612][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 490.813053][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 490.818158][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 490.818828][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 490.828699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 490.829314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 490.876437][ T3783] device hsr_slave_0 left promiscuous mode [ 490.877032][ T3783] device hsr_slave_1 left promiscuous mode [ 490.877604][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.877645][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.878332][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.878359][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.878941][ T3783] device bridge_slave_1 left promiscuous mode [ 490.879069][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.880969][ T3783] device bridge_slave_0 left promiscuous mode [ 490.881100][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.887799][ T3783] device hsr_slave_0 left promiscuous mode [ 490.888464][ T3783] device hsr_slave_1 left promiscuous mode [ 490.889019][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.889062][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.889770][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.889795][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.890437][ T3783] device bridge_slave_1 left promiscuous mode [ 490.890556][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.892187][ T3783] device bridge_slave_0 left promiscuous mode [ 490.892292][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.972205][ T3783] device veth1_macvtap left promiscuous mode [ 490.972267][ T3783] device veth0_macvtap left promiscuous mode [ 490.972382][ T3783] device veth1_vlan left promiscuous mode [ 490.972472][ T3783] device veth0_vlan left promiscuous mode [ 490.974569][ T3783] device veth1_macvtap left promiscuous mode [ 490.974625][ T3783] device veth0_macvtap left promiscuous mode [ 490.975716][ T3783] device veth1_vlan left promiscuous mode [ 490.975811][ T3783] device veth0_vlan left promiscuous mode [ 491.218902][ T9269] loop0: detected capacity change from 0 to 512 [ 491.219429][ T9269] EXT4-fs: Ignoring removed orlov option [ 491.243818][ T9269] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 491.262674][ T9269] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.971: corrupted in-inode xattr [ 491.263093][ T9269] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.971: couldn't read orphan inode 15 (err -117) [ 491.263389][ T9269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 491.487269][ T8399] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /37/bus: bad entry in directory: rec_len is smaller than minimal - offset=268, inode=0, rec_len=0, size=1024 fake=0 [ 491.545455][ T8399] EXT4-fs (loop0): unmounting filesystem. [ 492.139383][ T26] audit: type=1326 audit(1725067051.602:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9279 comm="syz.2.973" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f41779eb9 code=0x0 [ 493.031179][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 493.165466][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 493.290941][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.429369][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.776061][ T9313] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 498.884200][ T3783] bond0 (unregistering): Released all slaves [ 499.430075][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 499.487629][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 499.550925][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.607093][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.204467][ T3783] bond0 (unregistering): Released all slaves [ 500.299697][ T9010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.450389][ T9088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.532002][ T9088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 500.709462][ T28] INFO: task syz.2.714:7601 blocked for more than 143 seconds. [ 500.790540][ T9088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.883983][ T28] Not tainted 6.1.107-syzkaller #0 [ 500.983600][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.102247][ T28] task:syz.2.714 state:D stack:23176 pid:7601 ppid:5951 flags:0x00004004 [ 501.124000][ T28] Call Trace: [ 501.132365][ T28] [ 501.142208][ T28] __schedule+0x143f/0x4570 [ 501.149355][ T28] ? xlog_grant_head_wait+0x1ee/0xa00 [ 501.165195][ T28] ? release_firmware_map_entry+0x186/0x186 [ 501.171864][ T28] ? xlog_space_left+0xa9/0x2b0 [ 501.181791][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 501.193007][ T28] schedule+0xbf/0x180 [ 501.208185][ T28] xlog_grant_head_wait+0x3b6/0xa00 [ 501.213725][ T28] xlog_grant_head_check+0x295/0x480 [ 501.224877][ T28] ? xlog_grant_push_ail+0xd0/0xd0 [ 501.230358][ T28] xfs_log_reserve+0x3e1/0xc30 [ 501.242891][ T28] ? xlog_grant_head_check+0x480/0x480 [ 501.251211][ T28] ? xfs_mod_freecounter+0x1e2/0x490 [ 501.263911][ T28] xfs_trans_reserve+0x239/0x6a0 [ 501.269540][ T28] xfs_trans_alloc+0x41e/0x890 [ 501.274969][ T28] xfs_trans_alloc_inode+0x129/0x450 [ 501.280603][ T28] ? xfs_trans_dup+0x6a0/0x6a0 [ 501.286115][ T28] ? xfs_iunlock+0x1e7/0x3a0 [ 501.291127][ T28] ? xfs_da_hashname+0x1cc/0x370 [ 501.296540][ T28] ? xfs_attr_leaf_newentsize+0xd5/0x1d0 [ 501.302549][ T28] xfs_attr_set+0xa4e/0x1660 [ 501.307818][ T28] ? xfs_attr_leaf_shrink+0x410/0x410 [ 501.321530][ T28] ? look_up_lock_class+0x77/0x140 [ 501.327073][ T28] ? register_lock_class+0x100/0x990 [ 501.332808][ T28] ? handle_mm_fault+0x3715/0x5340 [ 501.345013][ T28] ? is_dynamic_key+0x260/0x260 [ 501.350297][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.357792][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.380370][ T28] xfs_xattr_set+0x227/0x3a0 [ 501.394813][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 501.404197][ T28] ? evm_protect_xattr+0x8b1/0xb10 [ 501.414967][ T28] ? xfs_xattr_get+0x2f0/0x2f0 [ 501.419858][ T28] __vfs_setxattr+0x3e7/0x420 [ 501.425017][ T28] __vfs_setxattr_noperm+0x12a/0x5e0 [ 501.431085][ T28] vfs_setxattr+0x21d/0x420 [ 501.438417][ T28] ? xattr_permission+0x4f0/0x4f0 [ 501.443550][ T28] ? _copy_from_user+0x41/0x170 [ 501.448828][ T28] ? copy_user_enhanced_fast_string+0xa/0x40 [ 501.457295][ T28] ? _copy_from_user+0x109/0x170 [ 501.466227][ T28] setxattr+0x250/0x2b0 [ 501.470500][ T28] ? path_setxattr+0x2a0/0x2a0 [ 501.481329][ T28] ? __mnt_want_write+0x222/0x2a0 [ 501.487744][ T28] path_setxattr+0x1bc/0x2a0 [ 501.492441][ T28] ? simple_xattr_list_add+0xf0/0xf0 [ 501.498204][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 501.504303][ T28] __x64_sys_setxattr+0xb7/0xd0 [ 501.509825][ T28] do_syscall_64+0x3b/0xb0 [ 501.514390][ T28] ? clear_bhb_loop+0x45/0xa0 [ 501.519642][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.525918][ T28] RIP: 0033:0x7f3005779eb9 [ 501.530440][ T28] RSP: 002b:00007f30055ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 501.539646][ T28] RAX: ffffffffffffffda RBX: 00007f3005915f80 RCX: 00007f3005779eb9 [ 501.551374][ T28] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000020000100 [ 501.567483][ T28] RBP: 00007f30057e793e R08: 0000000000000000 R09: 0000000000000000 [ 501.581876][ T28] R10: 000000000000e00f R11: 0000000000000246 R12: 0000000000000000 [ 501.601140][ T28] R13: 0000000000000000 R14: 00007f3005915f80 R15: 00007ffc9277b448 [ 501.611049][ T28] [ 501.614422][ T28] [ 501.614422][ T28] Showing all locks held in the system: [ 501.645211][ T9088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.696887][ T28] 1 lock held by rcu_tasks_kthre/12: [ 501.702218][ T28] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 501.761727][ T28] 1 lock held by rcu_tasks_trace/13: [ 501.778550][ T28] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 501.817834][ T28] 3 locks held by kworker/1:0/22: [ 501.822904][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.891285][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.891310][ T28] #1: ffffc900001c7d20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 501.941490][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.975119][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.979176][ T28] #2: ffff8880749c1240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 502.001189][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.029905][ T28] 1 lock held by khungtaskd/28: [ 502.042744][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.050527][ T28] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 502.056366][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.071028][ T28] 2 locks held by getty/3395: [ 502.093911][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.099418][ T28] #0: ffff88802e203098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 502.101057][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.126808][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 502.155506][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 502.164747][ T28] 3 locks held by kworker/1:3/3640: [ 502.170888][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 502.178239][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.197876][ T9010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.207202][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.215178][ T28] #1: ffff8880b8f27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x43d/0x770 [ 502.223861][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.242542][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 502.253548][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.265953][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.273071][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.277904][ T28] 3 locks held by kworker/1:5/3677: [ 502.286403][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.295994][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.305323][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.310533][ T28] #0: [ 502.323492][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.328088][ T28] ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.363052][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.379885][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.387947][ T28] #1: ffffc9000442fd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.411285][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.424852][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 502.431871][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.448769][ T28] 3 locks held by kworker/1:6/3681: [ 502.458171][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.459589][ T28] #0: [ 502.466904][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.471566][ T28] ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.492309][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.505737][ T28] #1: ffffc9000446fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.531150][ T9088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.539897][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.548488][ T28] #2: ffff888062923240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 502.550241][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.586756][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.603974][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 502.612083][ T28] 5 locks held by kworker/u4:9/3783: [ 502.626110][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.647677][ T9010] device veth0_vlan entered promiscuous mode [ 502.655693][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 502.671254][ T28] #1: ffffc90004847d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.688552][ T4589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 502.705690][ T9010] device veth1_vlan entered promiscuous mode [ 502.711819][ T28] #2: ffffffff8e4eca90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 502.737863][ T28] #3: ffff8880596713e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x10c/0x2f0 [ 502.762657][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 502.770783][ T28] #4: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 502.782909][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 502.791640][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 502.800355][ T28] 3 locks held by kworker/1:8/3799: [ 502.808572][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.820351][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 502.828454][ T28] #1: ffffc90004937d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.844106][ T9010] device veth0_macvtap entered promiscuous mode [ 502.862710][ T9010] device veth1_macvtap entered promiscuous mode [ 502.870801][ T28] #2: ffffffff8d3305b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 502.902384][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.922642][ T28] 3 locks held by kworker/0:11/4057: [ 502.929003][ T28] #0: ffff88802d831938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.949010][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.963450][ T28] #1: ffffc90003637d20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 502.984346][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.003410][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 503.013831][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.024450][ T28] 2 locks held by kworker/0:15/4304: [ 503.030527][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.041352][ T28] #0: ffff88802ac59d38 ((wq_completion)xfs-sync/loop2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.052551][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.062535][ T28] #1: ffffc900044afd20 ((work_completion)(&(&log->l_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.074848][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.085380][ T28] 2 locks held by kworker/u4:12/4589: [ 503.090751][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.101995][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.114480][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.121785][ T28] #1: ffffc900033afd20 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.128819][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.146137][ T28] 3 locks held by kworker/u4:21/5282: [ 503.151589][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.154572][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.163855][ T28] #1: ffffc900044bfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.180855][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.183642][ T28] #2: ffffffff8e4f8de8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 503.203820][ T28] 3 locks held by syz.2.714/7601: [ 503.209226][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.209449][ T28] #0: ffff888061ab2460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 503.229732][ T28] #1: ffff8880743a6038 (&sb->s_type->i_mutex_key#23){++++}-{3:3} [ 503.229788][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.229790][ T28] , at: vfs_setxattr+0x1dd/0x420 [ 503.229811][ T28] #2: ffff888061ab2650 (sb_internal#2){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450 [ 503.266781][ T28] 2 locks held by kworker/1:1/8623: [ 503.272111][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.274688][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.282862][ T28] #1: ffffc900038cfd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 503.301110][ T9010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.304943][ T28] 6 locks held by syz-executor/9010: [ 503.321499][ T28] 1 lock held by syz-executor/9088: [ 503.322620][ T9010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.327138][ T28] #0: ffffffff8e4f8de8 ( [ 503.338431][ T9010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.344366][ T28] rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 503.358768][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.367230][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.372904][ T28] 3 locks held by kvm-nx-lpage-re/9326: [ 503.375671][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.388794][ T28] #0: ffffffff8d3536e8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x23/0xe0 [ 503.398830][ T28] #1: ffffffff8d1c83b0 ( [ 503.398949][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.398959][ T28] cpu_hotplug_lock){++++}-{0:0} [ 503.404074][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.411453][ T28] , at: cgroup_attach_lock+0xd/0x30 [ 503.411481][ T28] #2: ffffffff8d3538d0 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2d/0xe0 [ 503.411597][ T28] [ 503.411604][ T28] ============================================= [ 503.411604][ T28] [ 503.411613][ T28] NMI backtrace for cpu 0 [ 503.411622][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 503.411638][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.411648][ T28] Call Trace: [ 503.411655][ T28] [ 503.427307][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.429612][ T28] dump_stack_lvl+0x1e3/0x2cb [ 503.429649][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 503.451520][ T9010] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.455470][ T28] ? panic+0x764/0x764 [ 503.455493][ T28] ? vprintk_emit+0x622/0x740 [ 503.455519][ T28] ? printk_sprint+0x490/0x490 [ 503.455541][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 503.455569][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 503.455599][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 503.455623][ T28] ? _printk+0xd1/0x111 [ 503.455640][ T28] ? panic+0x764/0x764 [ 503.455657][ T28] ? __wake_up_klogd+0xcc/0x100 [ 503.455674][ T28] ? panic+0x764/0x764 [ 503.455693][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 503.455720][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 503.455745][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 503.455774][ T28] watchdog+0xf88/0xfd0 [ 503.455800][ T28] ? watchdog+0x1f8/0xfd0 [ 503.455826][ T28] kthread+0x28d/0x320 [ 503.455842][ T28] ? hungtask_pm_notify+0x50/0x50 [ 503.455862][ T28] ? kthread_blkcg+0xd0/0xd0 [ 503.455886][ T28] ret_from_fork+0x1f/0x30 [ 503.455921][ T28] [ 503.456496][ T28] Sending NMI from CPU 0 to CPUs 1: [ 503.472893][ T9010] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.474106][ C1] NMI backtrace for cpu 1 [ 503.474117][ C1] CPU: 1 PID: 9010 Comm: syz-executor Not tainted 6.1.107-syzkaller #0 [ 503.474132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.474140][ C1] RIP: 0010:io_serial_in+0x72/0xb0 [ 503.474160][ C1] Code: 04 e4 d7 fc 89 e9 41 d3 e6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 35 63 2f fd 44 03 33 44 89 f2 ec <0f> b6 c0 5b 41 5e 41 5f 5d c3 89 e9 80 e1 07 38 c1 7c ad 48 89 ef [ 503.474172][ C1] RSP: 0018:ffffc900034add98 EFLAGS: 00000002 [ 503.474184][ C1] RAX: 1ffffffff2ed7100 RBX: ffffffff976b8e20 RCX: 0000000000000000 [ 503.474195][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 503.474204][ C1] RBP: 0000000000000000 R08: ffffffff84b2ca62 R09: ffffed1004970047 [ 503.474213][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff97374e30 [ 503.474224][ C1] R13: 00000000000026fb R14: 00000000000003fd R15: dffffc0000000000 [ 503.474234][ C1] FS: 000055557d266500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 503.474246][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.474257][ C1] CR2: 00007f25e6afb440 CR3: 000000004763d000 CR4: 00000000003526e0 [ 503.474270][ C1] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.474278][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.474287][ C1] Call Trace: [ 503.474292][ C1] [ 503.474298][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 503.474318][ C1] ? read_lock_is_recursive+0x10/0x10 [ 503.474339][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 503.474358][ C1] ? nmi_handle+0x25/0x440 [ 503.474384][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 503.474402][ C1] ? nmi_handle+0x12e/0x440 [ 503.474420][ C1] ? nmi_handle+0x25/0x440 [ 503.474438][ C1] ? io_serial_in+0x72/0xb0 [ 503.474451][ C1] ? default_do_nmi+0x62/0x150 [ 503.474465][ C1] ? exc_nmi+0xa8/0x100 [ 503.474477][ C1] ? end_repeat_nmi+0x16/0x31 [ 503.474498][ C1] ? io_serial_in+0x42/0xb0 [ 503.474512][ C1] ? io_serial_in+0x72/0xb0 [ 503.474524][ C1] ? io_serial_in+0x72/0xb0 [ 503.474538][ C1] ? io_serial_in+0x72/0xb0 [ 503.474551][ C1] [ 503.474555][ C1] [ 503.474561][ C1] serial8250_console_write+0x1057/0x1750 [ 503.474583][ C1] ? serial8250_set_defaults+0x5f0/0x5f0 [ 503.474597][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 503.474613][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 503.474639][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 503.474657][ C1] console_emit_next_record+0xbb4/0x1000 [ 503.474674][ C1] ? console_emit_next_record+0xa9c/0x1000 [ 503.474692][ C1] ? info_print_prefix+0x300/0x300 [ 503.474708][ C1] ? mark_lock+0x9a/0x340 [ 503.474726][ C1] ? __lock_acquire+0x125b/0x1f80 [ 503.474757][ C1] console_unlock+0x278/0x7c0 [ 503.474779][ C1] ? vprintk_emit+0x740/0x740 [ 503.474795][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 503.474811][ C1] ? vprintk_emit+0x340/0x740 [ 503.474828][ C1] vprintk_emit+0x523/0x740 [ 503.474847][ C1] ? printk_sprint+0x490/0x490 [ 503.474864][ C1] ? vscnprintf+0x80/0x80 [ 503.474881][ C1] ? read_word_at_a_time+0xe/0x20 [ 503.474895][ C1] ? strscpy+0x89/0x220 [ 503.474910][ C1] dev_vprintk_emit+0x2aa/0x323 [ 503.474929][ C1] ? _dev_info+0x165/0x165 [ 503.474948][ C1] ? release_sock+0x2c/0x1c0 [ 503.474966][ C1] dev_printk_emit+0xd9/0x118 [ 503.474984][ C1] ? print_unlock_imbalance_bug+0x2c0/0x2c0 [ 503.475004][ C1] ? dev_vprintk_emit+0x323/0x323 [ 503.475023][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 503.475043][ C1] __netdev_printk+0x335/0x410 [ 503.475065][ C1] netdev_info+0x11e/0x165 [ 503.475082][ C1] ? __inet_bind+0x3e4/0xb80 [ 503.475101][ C1] ? vringh_bad+0x144/0x144 [ 503.475120][ C1] ? __inet_bind+0x3e4/0xb80 [ 503.475139][ C1] nsim_udp_tunnel_set_port+0x2a7/0x450 [ 503.475162][ C1] __udp_tunnel_nic_device_sync+0xa7e/0x13b0 [ 503.475187][ C1] ? udp_tunnel_nic_try_existing+0x790/0x790 [ 503.475206][ C1] __udp_tunnel_nic_add_port+0xc6f/0xf20 [ 503.475226][ C1] udp_tunnel_notify_add_rx_port+0x300/0x4c0 [ 503.475241][ C1] ? udp_tunnel_notify_add_rx_port+0x18c/0x4c0 [ 503.475256][ C1] ? udp_tunnel_drop_rx_port+0x290/0x290 [ 503.475269][ C1] ? __kmalloc_large_node+0x13f/0x1d0 [ 503.475285][ C1] ? rcu_is_watching+0x11/0xb0 [ 503.475300][ C1] geneve_sock_add+0x643/0xbc0 [ 503.475316][ C1] ? geneve_fill_metadata_dst+0x820/0x820 [ 503.475330][ C1] ? rxe_notify+0xe8/0x470 [ 503.475349][ C1] ? vxlan_netdevice_event+0x4c5/0x530 [ 503.475369][ C1] ? udp_tunnel_nic_netdevice_event+0x194/0x1350 [ 503.475385][ C1] ? ip6_route_dev_notify+0x8d/0x5f0 [ 503.475406][ C1] geneve_open+0xdf/0x150 [ 503.475419][ C1] __dev_open+0x377/0x510 [ 503.475433][ C1] ? dev_open+0x260/0x260 [ 503.475446][ C1] ? dev_set_rx_mode+0xba/0x2e0 [ 503.475464][ C1] __dev_change_flags+0x1db/0x6e0 [ 503.475483][ C1] ? dev_get_flags+0x1c0/0x1c0 [ 503.475498][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 503.475514][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 503.475531][ C1] dev_change_flags+0x87/0x190 [ 503.475550][ C1] do_setlink+0xcf4/0x3de0 [ 503.475575][ C1] ? stack_trace_save+0x113/0x1c0 [ 503.475600][ C1] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 503.475621][ C1] ? __stack_depot_save+0x36/0x470 [ 503.475644][ C1] ? __nla_validate_parse+0x2132/0x2b70 [ 503.475661][ C1] ? kasan_set_track+0x4b/0x70 [ 503.475679][ C1] ? __kasan_kmalloc+0x97/0xb0 [ 503.475690][ C1] ? rtnl_newlink+0xe6/0x2050 [ 503.475715][ C1] ? __nla_validate+0x50/0x50 [ 503.475742][ C1] ? validate_linkmsg+0x3db/0x4c0 [ 503.475761][ C1] rtnl_newlink+0x172c/0x2050 [ 503.475783][ C1] ? rtnl_newlink+0x491/0x2050 [ 503.475805][ C1] ? rtnl_setlink+0x560/0x560 [ 503.475821][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 503.475840][ C1] ? rcu_is_watching+0x11/0xb0 [ 503.475852][ C1] ? trace_contention_end+0x61/0x170 [ 503.475868][ C1] ? __mutex_lock+0x2f7/0xd80 [ 503.475894][ C1] ? rtnl_setlink+0x560/0x560 [ 503.475910][ C1] rtnetlink_rcv_msg+0x818/0xff0 [ 503.475932][ C1] ? rtnetlink_bind+0x80/0x80 [ 503.475950][ C1] ? __local_bh_enable_ip+0x164/0x1f0 [ 503.475970][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 503.475984][ C1] ? _local_bh_enable+0xa0/0xa0 [ 503.476004][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 503.476019][ C1] ? __dev_queue_xmit+0x1790/0x3cf0 [ 503.476039][ C1] ? __dev_queue_xmit+0x2d6/0x3cf0 [ 503.476055][ C1] ? netdev_core_pick_tx+0x320/0x320 [ 503.476071][ C1] ? ref_tracker_free+0x638/0x7d0 [ 503.476086][ C1] ? memcpy+0x3c/0x60 [ 503.476099][ C1] ? refcount_inc+0x80/0x80 [ 503.476112][ C1] ? __copy_skb_header+0x47b/0x600 [ 503.476136][ C1] netlink_rcv_skb+0x1cd/0x410 [ 503.476154][ C1] ? rtnetlink_bind+0x80/0x80 [ 503.476172][ C1] ? netlink_ack+0x1290/0x1290 [ 503.476188][ C1] ? __netlink_deliver_tap+0x73e/0x770 [ 503.476210][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.476229][ C1] netlink_unicast+0x7d8/0x970 [ 503.476249][ C1] ? netlink_detachskb+0x90/0x90 [ 503.476265][ C1] ? __virt_addr_valid+0x45b/0x530 [ 503.476281][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 503.476297][ C1] ? __check_object_size+0x4dd/0xa30 [ 503.476312][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 503.476330][ C1] netlink_sendmsg+0xa26/0xd60 [ 503.476353][ C1] ? netlink_getsockopt+0x580/0x580 [ 503.476369][ C1] ? __might_fault+0xa1/0x110 [ 503.476385][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 503.476403][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 503.476419][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 503.476436][ C1] ? netlink_getsockopt+0x580/0x580 [ 503.476453][ C1] __sys_sendto+0x480/0x600 [ 503.476473][ C1] ? __ia32_sys_getpeername+0x80/0x80 [ 503.476508][ C1] ? print_irqtrace_events+0x210/0x210 [ 503.476529][ C1] __x64_sys_sendto+0xda/0xf0 [ 503.476548][ C1] do_syscall_64+0x3b/0xb0 [ 503.476565][ C1] ? clear_bhb_loop+0x45/0xa0 [ 503.476582][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.476599][ C1] RIP: 0033:0x7fd923d7bd4c [ 503.476611][ C1] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 503.476622][ C1] RSP: 002b:00007fff76a29eb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 503.476641][ C1] RAX: ffffffffffffffda RBX: 00007fd924a44620 RCX: 00007fd923d7bd4c [ 503.476651][ C1] RDX: 000000000000002c RSI: 00007fd924a44670 RDI: 0000000000000003 [ 503.476660][ C1] RBP: 0000000000000000 R08: 00007fff76a29f04 R09: 000000000000000c [ 503.476669][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 503.476677][ C1] R13: 0000000000000000 R14: 00007fd924a44670 R15: 0000000000000000 [ 503.476693][ C1] [ 503.606556][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 503.606571][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 503.606590][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 503.606599][ T28] Call Trace: [ 503.606606][ T28] [ 503.606613][ T28] dump_stack_lvl+0x1e3/0x2cb [ 503.606644][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 503.606667][ T28] ? panic+0x764/0x764 [ 503.606684][ T28] ? llist_add_batch+0x160/0x1d0 [ 503.606709][ T28] ? vscnprintf+0x59/0x80 [ 503.606729][ T28] panic+0x318/0x764 [ 503.606748][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 503.606772][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 503.606794][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 503.606816][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 503.606841][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 503.606872][ T28] watchdog+0xfc7/0xfd0 [ 503.606897][ T28] ? watchdog+0x1f8/0xfd0 [ 503.606920][ T28] kthread+0x28d/0x320 [ 503.606935][ T28] ? hungtask_pm_notify+0x50/0x50 [ 503.606953][ T28] ? kthread_blkcg+0xd0/0xd0 [ 503.606970][ T28] ret_from_fork+0x1f/0x30 [ 503.607002][ T28] [ 503.609109][ T28] Kernel Offset: disabled [ 504.584672][ T28] Rebooting in 86400 seconds..