last executing test programs: 2m5.733518709s ago: executing program 4 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x0, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x77}}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@null) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) 2m1.856219597s ago: executing program 4 (id=779): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0xfffffffffffffcba) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x5, 0x101040) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000280)=""/65) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="041817aaaaaaaaaa10c8"], 0x1a) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r1], 0x6ab) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000180)={0x1, 0x9, 0x34, &(0x7f0000000100)=""/52}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) sendfile(r6, r2, &(0x7f0000002080)=0x3a, 0x23b) 1m21.083067248s ago: executing program 0 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x240000, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0) mmap$fb(&(0x7f000098d000/0x4000)=nil, 0x4000, 0x1000008, 0x8010, 0xffffffffffffffff, 0x1a000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000340)={0x1, @sliced={0x8, [0x0, 0x1000, 0xed9a, 0xc507, 0x40, 0x81, 0x10, 0xc, 0xeb39, 0x100, 0x9, 0x6, 0x5, 0x0, 0xbeaa, 0x8, 0x0, 0x8, 0x9, 0x0, 0x8, 0xffff, 0x3, 0x9, 0x0, 0x3ff, 0x400, 0x9, 0x0, 0x0, 0x1ff, 0xd5, 0x81, 0x4, 0x6, 0x43f, 0x274a, 0x1d, 0x2, 0x0, 0xf004, 0x40, 0xfeff, 0x0, 0x3, 0x2, 0x401, 0x5], 0x6}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000040)={0x7f, 0x0, {r0}, {0xffffffffffffffff}, 0x2, 0x7}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x0, 0x0) 1m18.262415418s ago: executing program 0 (id=842): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4}) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r5, 0x0, 0x0) 1m16.061685511s ago: executing program 0 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0xa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x100, 0x1}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) close(r0) 1m13.68936892s ago: executing program 0 (id=847): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'geneve1\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x14, 0x1c, 0x4, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r4, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x208e24b) clock_gettime(0x0, &(0x7f0000001b40)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="fd57eefc11929498d3a4a6abb05c089cffc20cd43f688db2e02d074f8e15c4c5a8732e9b0f113b56363464ef2b451e041650b60b0a80f7c37fa753e82c7f2578117c38b453a3f07c76cc7f209ec09a051a5e9624b66dd68e8426672b9cd43ea08a99185fa5e3b3daf70d116d4b7085b1f04b3df760d7f8bd6848f05010d3ff0571e1b3903db2df59e426bdc5fd8fe16c363ed1b2c1171a5715511462f0ae21073088e0e4ba59ceeb000b6e4398417fa48605b4b7856042", 0xb7, 0x0) 1m12.222341575s ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7065326d70726f66696c50efa174dab622fd65202f70726f632f74f3b98f84876872722f63757272656e74000389764f9fda6f"], 0x46) 1m10.377732455s ago: executing program 0 (id=853): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500"}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a40)=[@in={0x2, 0x0, @multicast2}], 0x10) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/202, 0xff4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @private1}], 0x1c) pipe2$9p(0x0, 0x10000) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x200000000001, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, 0x0, 0x0) 56.953488505s ago: executing program 4 (id=793): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x3, 0xc}}], 0x30}], 0x1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@nobarrier}, {@discard}, {@discard}, {@nobarrier}, {@nobarrier}, {@nobarrier}]}, 0x1, 0xa88, &(0x7f0000001540)="$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") 52.55446079s ago: executing program 4 (id=876): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000140)='./bus\x00', 0x14000, &(0x7f0000000000)=ANY=[], 0xc, 0x299, &(0x7f0000000e80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f000000c1c0)={0x2020}, 0x2020) 51.262531779s ago: executing program 4 (id=878): socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) read(r3, &(0x7f0000001a00)=""/177, 0xb1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24, 0x0, @remote, 0xc}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8}, 0x1c) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, 0x0, &(0x7f0000000080)) 48.705578075s ago: executing program 4 (id=881): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x880a, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x0, 0x5e7, &(0x7f0000001a00)="$eJzs3U9rHOcdB/DvrGTZcsFREjtJS0uFfWiJqa3VJo4OBbulFB1CCfSSSw7CXsfCayVIm6KEUuT+vfYdJD3I5556KD0Y0nPfgqCHHAq96+Yys7OrjSXLK8fRrprPB559ntln5vnz88yjnVnMBvjGWn43px6myPLltzfL7Z3tVmdnu3WvX05yOkkjme5lKdaS4vPkRnop3y7frJsrntTPe5++tfRF88H93tZ0nar9G4cdN5qtOmU+yVSdH9H0k9q7+WztDSkGMywDdqkfOBi3R/tsHeXwr3jdApOg6P3d3GcuOZvkTP05IPXq0Dje0T1/R1rlAAAA4IR6YTe72cy5cY8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATpL69/+LOjX65fkU/d//n6nfS10+0R6OewAAAAAAAAAA8Bx8v9jazWbO9bcfFdV3/herjfPV67fyUTbSznquZDMr6aab9TSTzA01NLO50u2uN0c4cvHAIxePZ74AAAAAAAAA8H/qt1ne+/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmQZFM9bIqne+X59KYTnImyUy531byj375JHs47gEAAADAMXhhN7vZzLn+9qOiuud/pbrvP5OPspZuVtNNJ+3cqp4F9O76Gzvbrc7Odutemfa3+5P/HmkYVYvpPXs4uOeFao9icMRyfp5f5nLm807Ws5pfZSXdtDOfn1WllRSZq59ezPXHefB4b3xp652njfW1aiSzuZ3VamxXcjMfpJNbaVRzqPY5vMf7ZXSKqVyvjBijW3VezujPdT4Z5qqInBpEZKGOfRmNFw+PxBHPk8d7aqYxeAZ1fpSYX79+pJifrfMy1n+c6JgvDp19rxweieTiv7/3tzudtbt3bm9cnpwpPaPHI9EaisSr36hIzNTR6K2ijVwY1Dx9tbxYHXsuq/lFPsittPNmlvJmFvNG3shClnJtKK4XRrjWGke71i79sC7MJvlTnU+GMq4vDsV1eKWbq+qG39mL0kvPf0Wa/k5dKPv4XZ1Phscj0RyKxMuHR+Ivj8rXjc7a3fU7Kx+O2N8P6ry8bP8wUWtzeb68VP5jVVtfPjvKupcPrGtWdecHdY19dRcGdU+7Umfqz3D7W1qs6l49sK5V1b02VHfQpxwAJt7Z18/OzP5n9l+zn83+fvbO7Ntnfnp66fR3Z3Lqn9N/n/pr40Hjx8Xr+Sy/2bv/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnt3Gx5/cXel02usKCgoKg8K4Vybg63a1e+/Dqxsff/Kj1Xsr77ffb6+1Ws1ri0vXlhavXb292mkv9F7HPUzga7D3R3/cIwEAAAAAAAAAAABGdRz/nWDccwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtuV3c+phijQXriykSLLd6uxstzplXT/vmU7SSFL8Oik+T26klzI31FzxpH7e+/StpS+aD+7vtTXd379x2HGj2apT5pNM1fnzau/mV26vGMywDNilfuBg3P4XAAD//9JPDIE=") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffd}]}) uname(0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r6, @ANYRES8=r1], 0x94}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x8f8, 0x0) 30.56361366s ago: executing program 1 (id=908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) close(0x3) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 29.25844551s ago: executing program 1 (id=910): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) writev(r1, &(0x7f0000000080), 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgid(0x0) r3 = fsopen(&(0x7f0000000280)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0xfffffffffffffff9) 28.287846489s ago: executing program 1 (id=913): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xc}, {0x3c, 0x0, 0x0, 0x200}, {0x6, 0x8}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r2, 0x4068aea3, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$read(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r3, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) 26.089911652s ago: executing program 1 (id=917): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r0, &(0x7f00000000c0)=0x58, 0x5) 24.9246657s ago: executing program 1 (id=921): r0 = socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_out(r3, 0x0, &(0x7f0000000000)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}}, 0x0) socket(0x80000000000000a, 0x2, 0x0) ptrace$peeksig(0x4209, r1, 0x0, 0x0) 23.003210477s ago: executing program 1 (id=924): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000336, 0x2, 0x0) r4 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1ab, &(0x7f0000000440)="$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") r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r6, 0x0, 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) sendmsg$SOCK_DESTROY(r4, 0x0, 0x4000800) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x46a8, 0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) 14.791282375s ago: executing program 2 (id=933): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3ff, 0x5) prctl$PR_GET_TSC(0x19, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffd, 0x106, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000440)="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", 0x0, 0x0, 0x0, 0x0, 0x0}) 12.512746125s ago: executing program 2 (id=937): r0 = socket$inet(0x2, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xd5b3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) getsockname$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000e2000014000000b7030000000000000000000055090100000000009500000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 7.1532983s ago: executing program 3 (id=940): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2000, 0x20) read$FUSE(r0, 0x0, 0xfeb6) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000180)=""/164) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000340)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = timerfd_create(0x9, 0x0) readv(r2, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002980)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000c58c0)={0x1d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x47, "2222669865e158"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001540)={{r3, 0x3ff, 0xffff, 0x0, 0x8000000000000000, 0x9, 0x9, 0x1ff, 0x9, 0x9863, 0x2, 0x0, 0x8, 0x10000, 0x1}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r5}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.549680647s ago: executing program 3 (id=941): socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x316c0, 0x0) syz_io_uring_setup(0x5437, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8002, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x0, 0x1000, 0xffffffff}}) 5.548950728s ago: executing program 2 (id=948): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) close(r1) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = gettid() tkill(r2, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') keyctl$assume_authority(0x10, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) 4.615470824s ago: executing program 3 (id=942): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fallocate(r0, 0x0, 0x0, 0x10fff9) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 3.432419963s ago: executing program 3 (id=943): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000002600)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xf6, &(0x7f0000000180)=0x40000000010001) r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x6, @remote}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="01", 0x1) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x200000c1}], 0x1}, 0x0) read$alg(r4, &(0x7f00000021c0)=""/4096, 0x34000) 3.418634094s ago: executing program 2 (id=951): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x8000000000000001}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(r3, &(0x7f0000005440)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.212165338s ago: executing program 2 (id=944): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x81, "76ddb84605ae35ce587d7ec6593b83a1c5bef9a982725338fb217b4155f3405d89"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4811}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat2(r4, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x517002, 0x0, 0xc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40101286, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x8, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x10}]}}, &(0x7f0000000340)=""/142, 0x42, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) 1.091010639s ago: executing program 3 (id=945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x0, 0x0, 0x0, {0x1e}, [@generic]}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x24044040) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 2.683749ms ago: executing program 3 (id=946): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x45) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000080)={'veth0_to_batadv\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_open_dev$usbfs(&(0x7f0000000200), 0x5785, 0x803) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000080)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x541b, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup\x00', 0x0, &(0x7f0000000380)='source') write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=955): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000480)=ANY=[], 0x700, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@discard}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@dioread_nolock}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$UHID_INPUT(r2, &(0x7f0000001880)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x4, 0x2f2, &(0x7f0000000200)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) setxattr$trusted_overlay_upper(&(0x7f00000004c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[@ANYRES64=r1, @ANYRES8=r7, @ANYRESHEX=r1, @ANYRESHEX=r7, @ANYRES8=r0], 0x841, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): E): veth0_to_hsr: link becomes ready [ 480.353986][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.378438][ T6647] device hsr_slave_0 left promiscuous mode [ 480.386773][ T6647] device hsr_slave_1 left promiscuous mode [ 480.393183][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.401171][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.409449][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.417450][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.426953][ T6647] device bridge_slave_1 left promiscuous mode [ 480.433169][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.442955][ T6647] device bridge_slave_0 left promiscuous mode [ 480.458942][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.502518][ T6647] device veth1_macvtap left promiscuous mode [ 480.514249][ T6647] device veth0_macvtap left promiscuous mode [ 480.521836][ T6647] device veth1_vlan left promiscuous mode [ 480.533336][ T6647] device veth0_vlan left promiscuous mode [ 480.855455][ T4069] vhci_hcd: vhci_device speed not set [ 481.138802][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 481.197395][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 481.237966][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.285410][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.729693][ T6647] bond0 (unregistering): Released all slaves [ 481.803127][ T7051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.815253][ T7051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.823202][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.831840][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.019388][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.028242][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.041283][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.082367][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.092505][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.113443][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.124543][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.133715][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.149437][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.175354][ T7051] device veth0_vlan entered promiscuous mode [ 482.189912][ T7051] device veth1_vlan entered promiscuous mode [ 482.224678][ T7051] device veth0_macvtap entered promiscuous mode [ 482.233027][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.241740][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.251005][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.260323][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.269672][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.284598][ T7051] device veth1_macvtap entered promiscuous mode [ 482.312839][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.323528][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.339955][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.351433][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.365763][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.382655][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.400252][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.410918][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.427948][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.447317][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.457664][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.477517][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.493576][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.504386][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.514549][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.526001][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.536116][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.546572][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.556491][ T7051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.567020][ T7051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.578491][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.588365][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.597373][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.608865][ T7051] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.618150][ T7051] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.626924][ T7051] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.635807][ T7051] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.717250][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.739736][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.754512][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.766558][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.775123][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.788783][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.870124][ T7308] netlink: 'syz.1.664': attribute type 3 has an invalid length. [ 482.874577][ T7311] loop4: detected capacity change from 0 to 1024 [ 482.887763][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 482.927228][ T7311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 483.032887][ T7308] netlink: 'syz.1.664': attribute type 4 has an invalid length. [ 483.767821][ T7311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 483.778468][ T7308] infiniband syz0: set down [ 483.780431][ T4211] lo speed is unknown, defaulting to 1000 [ 483.848610][ T7322] netlink: 'syz.1.664': attribute type 4 has an invalid length. [ 485.339517][ T7322] infiniband syz0: set active [ 485.358218][ T3682] lo speed is unknown, defaulting to 1000 [ 485.364346][ T4056] lo speed is unknown, defaulting to 1000 [ 485.371192][ T4056] lo speed is unknown, defaulting to 1000 [ 485.653755][ T7331] loop0: detected capacity change from 0 to 2048 [ 485.755516][ T7331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 485.935553][ T4403] EXT4-fs (loop4): unmounting filesystem. [ 486.760832][ T7339] loop3: detected capacity change from 0 to 4096 [ 486.835776][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 486.963119][ T7344] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.983544][ T7347] ptrace attach of "./syz-executor exec"[7051] was attempted by "./syz-executor exec"[7347] [ 487.878282][ T26] audit: type=1800 audit(1727276010.457:194): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.658" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 487.991903][ T26] audit: type=1800 audit(1727276010.497:195): pid=7339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.658" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 488.023979][ T7351] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 488.030539][ T7351] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 488.192187][ T7351] vhci_hcd vhci_hcd.0: Device attached [ 488.214821][ T7357] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 488.221486][ T7357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.244159][ T7354] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 488.250824][ T7354] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 488.323374][ T7357] vhci_hcd vhci_hcd.0: Device attached [ 488.350625][ T7351] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 488.357298][ T7351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 488.396698][ T6647] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.399736][ T3679] vhci_hcd: vhci_device speed not set [ 488.453863][ T7354] vhci_hcd vhci_hcd.0: Device attached [ 488.481210][ T7351] vhci_hcd vhci_hcd.0: Device attached [ 488.508777][ T3679] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 488.602244][ T7358] vhci_hcd: connection closed [ 488.611050][ T7352] vhci_hcd: connection reset by peer [ 488.621333][ T7360] vhci_hcd: connection closed [ 488.622341][ T7364] vhci_hcd: connection closed [ 488.627789][ T33] vhci_hcd: stop threads [ 488.646555][ T33] vhci_hcd: release socket [ 488.656701][ T33] vhci_hcd: disconnect device [ 488.672195][ T33] vhci_hcd: stop threads [ 488.696012][ T33] vhci_hcd: release socket [ 488.723111][ T33] vhci_hcd: disconnect device [ 488.729922][ T6647] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.746668][ T33] vhci_hcd: stop threads [ 488.750939][ T33] vhci_hcd: release socket [ 488.875467][ T33] vhci_hcd: disconnect device [ 488.982170][ T33] vhci_hcd: stop threads [ 489.109692][ T33] vhci_hcd: release socket [ 489.197645][ T33] vhci_hcd: disconnect device [ 489.433224][ T6647] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.563912][ T7376] loop2: detected capacity change from 0 to 512 [ 489.704071][ T6647] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.730023][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.892723][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.910271][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.929091][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.942257][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 489.953457][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 490.316679][ T7376] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 490.343619][ T7376] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 491.587904][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 492.056181][ T3643] Bluetooth: hci0: command tx timeout [ 493.414521][ T7404] loop0: detected capacity change from 0 to 4096 [ 493.532055][ T7404] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 493.642985][ T7379] lo speed is unknown, defaulting to 1000 [ 493.666172][ T3679] vhci_hcd: vhci_device speed not set [ 493.735029][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 494.159925][ T3643] Bluetooth: hci0: command tx timeout [ 494.630620][ T7425] loop1: detected capacity change from 0 to 128 [ 495.442264][ T7425] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 496.213348][ T7379] chnl_net:caif_netlink_parms(): no params data found [ 496.221112][ T3643] Bluetooth: hci0: command tx timeout [ 496.488619][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.498726][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.521057][ T7379] device bridge_slave_0 entered promiscuous mode [ 496.530131][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.544852][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.560027][ T7379] device bridge_slave_1 entered promiscuous mode [ 496.728296][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.744040][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.836003][ T7379] team0: Port device team_slave_0 added [ 496.843670][ T7379] team0: Port device team_slave_1 added [ 497.016933][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.031176][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.079668][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.093600][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.113123][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.163657][ T7455] loop3: detected capacity change from 0 to 1024 [ 497.262637][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.332204][ T6647] device hsr_slave_0 left promiscuous mode [ 497.360814][ T6647] device hsr_slave_1 left promiscuous mode [ 497.371924][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.402052][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.437401][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.462865][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.463430][ T7465] loop0: detected capacity change from 0 to 4096 [ 497.598383][ T6647] device bridge_slave_1 left promiscuous mode [ 497.611291][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.637288][ T6647] device bridge_slave_0 left promiscuous mode [ 498.492640][ T3643] Bluetooth: hci0: command tx timeout [ 498.524959][ T7471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.530293][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.574084][ T7455] EXT4-fs: Ignoring removed orlov option [ 498.582794][ T7455] EXT4-fs (loop3): Test dummy encryption mode enabled [ 498.583773][ T26] audit: type=1800 audit(1727276021.157:196): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.681" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 500.497770][ T7455] EXT4-fs: error -4 creating inode table initialization thread [ 500.507229][ T26] audit: type=1800 audit(1727276021.247:197): pid=7465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.681" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 500.555284][ T7455] EXT4-fs (loop3): mount failed [ 500.610738][ T6647] device veth1_macvtap left promiscuous mode [ 500.625094][ T26] audit: type=1804 audit(1727276021.317:198): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.686" name="/newroot/80/bus/bus" dev="overlay" ino=463 res=1 errno=0 [ 500.650114][ T6647] device veth0_macvtap left promiscuous mode [ 500.672760][ T6647] device veth1_vlan left promiscuous mode [ 500.732142][ T6647] device veth0_vlan left promiscuous mode [ 501.102599][ T6645] smc: removing ib device syz1 [ 501.366313][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.373175][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.002688][ T7505] loop0: detected capacity change from 0 to 1024 [ 504.022056][ T7505] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 504.039702][ T7505] EXT4-fs (loop0): orphan cleanup on readonly fs [ 504.047396][ T7505] EXT4-fs error (device loop0): ext4_free_blocks:6212: comm syz.0.693: Freeing blocks not in datazone - block = 0, count = 4096 [ 504.064124][ T7505] EXT4-fs (loop0): 1 orphan inode deleted [ 504.069954][ T7505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 504.136637][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 504.211305][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 504.264181][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 504.326191][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.377676][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.851211][ T6647] bond0 (unregistering): Released all slaves [ 505.054027][ T7379] device hsr_slave_0 entered promiscuous mode [ 505.110119][ T7379] device hsr_slave_1 entered promiscuous mode [ 505.132488][ T7379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.172373][ T7519] loop3: detected capacity change from 0 to 128 [ 505.174363][ T7379] Cannot create hsr debugfs directory [ 506.400472][ T7519] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 163) [ 506.434990][ T7519] FAT-fs (loop3): Filesystem has been set read-only [ 506.523887][ T7530] loop2: detected capacity change from 0 to 1024 [ 506.545806][ T7530] hfsplus: unable to parse mount options [ 506.847838][ T7532] loop1: detected capacity change from 0 to 40427 [ 506.867054][ T7532] F2FS-fs (loop1): invalid crc value [ 506.926762][ T7532] F2FS-fs (loop1): Found nat_bits in checkpoint [ 506.995412][ T7532] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 507.187869][ T7551] MTD: Couldn't look up './file0': -15 [ 507.641977][ T7552] syz.1.700: attempt to access beyond end of device [ 507.641977][ T7552] loop1: rw=2049, sector=53248, nr_sectors = 1544 limit=40427 [ 508.477290][ T26] audit: type=1800 audit(1727276030.167:199): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.700" name="file2" dev="overlay" ino=28 res=0 errno=0 [ 509.644837][ T26] audit: type=1804 audit(1727276030.257:200): pid=7553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.700" name="/newroot/83/file0/bus/file2" dev="overlay" ino=28 res=1 errno=0 [ 509.692541][ T7555] loop0: detected capacity change from 0 to 2048 [ 509.865656][ T7555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 510.202308][ T5367] syz-executor: attempt to access beyond end of device [ 510.202308][ T5367] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 511.068625][ T5367] syz-executor: attempt to access beyond end of device [ 511.068625][ T5367] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 511.210469][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 512.429743][ T3750] kworker/u4:7: attempt to access beyond end of device [ 512.429743][ T3750] loop1: rw=2049, sector=40960, nr_sectors = 136 limit=40427 [ 514.105577][ T7595] loop2: detected capacity change from 0 to 512 [ 514.140571][ T7595] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 514.160197][ T7595] EXT4-fs (loop2): orphan cleanup on readonly fs [ 514.179768][ T7595] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 514.202860][ T7595] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 514.237812][ T7595] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 514.255315][ T7595] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.713: casefold flag without casefold feature [ 514.549959][ T7595] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.713: couldn't read orphan inode 16 (err -117) [ 514.875288][ T7595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 514.918996][ T6647] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.197844][ T7601] loop0: detected capacity change from 0 to 1024 [ 516.201660][ T6647] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.214513][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 516.244808][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 516.254121][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 516.262209][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 516.270522][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 516.279508][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.451357][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 516.452987][ T6647] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.569842][ T7605] lo speed is unknown, defaulting to 1000 [ 516.593333][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.715'. [ 516.659950][ T7623] loop2: detected capacity change from 0 to 1024 [ 516.667155][ T7623] hfsplus: unable to parse mount options [ 516.698160][ T5103] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 516.933747][ T7625] sd 0:0:1:0: device reset [ 517.013319][ T6647] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.529460][ T7379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.576457][ T7379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.604661][ T7379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.730498][ T7379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.771637][ T7630] loop2: detected capacity change from 0 to 2048 [ 517.926050][ T7630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 517.986215][ T7605] chnl_net:caif_netlink_parms(): no params data found [ 519.078780][ T7648] loop0: detected capacity change from 0 to 512 [ 519.165032][ T3651] Bluetooth: hci1: command tx timeout [ 519.256463][ T7648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 519.265889][ T7648] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 519.549199][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 519.970254][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.095713][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.102824][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.149732][ T7605] device bridge_slave_0 entered promiscuous mode [ 520.195249][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.210746][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.249577][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.265008][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.293877][ T7605] device bridge_slave_1 entered promiscuous mode [ 520.340750][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.481803][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.638784][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.680042][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.726539][ T7663] loop2: detected capacity change from 0 to 512 [ 520.733470][ T6650] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.740622][ T6650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.784133][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.793004][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.801536][ T6650] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.808666][ T6650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.815335][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 520.821783][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 520.831717][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.879190][ T7663] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 520.973706][ T7663] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.719: invalid indirect mapped block 2683928664 (level 1) [ 520.992028][ T3643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.997069][ T7663] EXT4-fs (loop2): Remounting filesystem read-only [ 521.006112][ T3643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.015059][ T3643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.022757][ T7663] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 521.037578][ T3643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.055591][ T7677] loop0: detected capacity change from 0 to 1024 [ 521.068360][ T3643] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 521.076447][ T3643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.090597][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.112200][ T7677] hfsplus: extend alloc file! (8192,65536,366) [ 521.174852][ T3643] Bluetooth: hci1: command tx timeout [ 521.205306][ T7663] EXT4-fs (loop2): 1 truncate cleaned up [ 521.205582][ T7675] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 521.210966][ T7663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 521.308765][ T7605] team0: Port device team_slave_0 added [ 521.384642][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 521.416810][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.432522][ T7605] team0: Port device team_slave_1 added [ 521.468843][ T7670] lo speed is unknown, defaulting to 1000 [ 521.688642][ T7689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.724'. [ 521.958932][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.972109][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.981828][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.028168][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.385705][ T7605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.447357][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.454329][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.499524][ T7695] loop2: detected capacity change from 0 to 16 [ 522.505779][ T7605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.522894][ T7695] erofs: (device loop2): mounted with root inode @ nid 36. [ 522.594823][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.615990][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.686907][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.710197][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.734526][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.810073][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.840205][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.584813][ T3651] Bluetooth: hci2: command tx timeout [ 523.585943][ T3643] Bluetooth: hci1: command tx timeout [ 523.937116][ T7605] device hsr_slave_0 entered promiscuous mode [ 523.958507][ T7605] device hsr_slave_1 entered promiscuous mode [ 523.985527][ T7605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.993270][ T7605] Cannot create hsr debugfs directory [ 526.838314][ T3643] Bluetooth: hci2: command tx timeout [ 526.843778][ T3643] Bluetooth: hci1: command tx timeout [ 526.933758][ T7717] loop0: detected capacity change from 0 to 2048 [ 526.943312][ T7717] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 526.980119][ T7723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 526.980300][ T7717] syz.0.727: attempt to access beyond end of device [ 526.980300][ T7717] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 528.145164][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.152644][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.182246][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.199511][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 528.209937][ T26] audit: type=1326 audit(1727276050.787:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7fc00000 [ 528.268139][ T26] audit: type=1326 audit(1727276050.807:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x0 [ 528.401641][ T26] audit: type=1326 audit(1727276050.977:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f542197def9 code=0x7fc00000 [ 528.705830][ T7670] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.712963][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.760752][ T7670] device bridge_slave_0 entered promiscuous mode [ 528.793008][ T7670] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.828434][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.852842][ T7670] device bridge_slave_1 entered promiscuous mode [ 528.859713][ T3651] Bluetooth: hci2: command tx timeout [ 528.895415][ T6647] device hsr_slave_0 left promiscuous mode [ 528.909175][ T6647] device hsr_slave_1 left promiscuous mode [ 528.939844][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.959318][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.990464][ T6647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.022351][ T6647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.046918][ T26] audit: type=1326 audit(1727276051.617:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.2.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7fc00000 [ 529.101741][ T6647] device bridge_slave_1 left promiscuous mode [ 529.128337][ T6647] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.793605][ T6647] device bridge_slave_0 left promiscuous mode [ 529.803237][ T6647] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.833805][ T6647] device veth1_macvtap left promiscuous mode [ 529.840011][ T6647] device veth0_macvtap left promiscuous mode [ 529.846232][ T6647] device veth1_vlan left promiscuous mode [ 529.852089][ T6647] device veth0_vlan left promiscuous mode [ 530.292823][ T6647] team0 (unregistering): Port device team_slave_1 removed [ 530.345507][ T6647] team0 (unregistering): Port device team_slave_0 removed [ 530.390598][ T6647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.432353][ T6647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.891950][ T6647] bond0 (unregistering): Released all slaves [ 530.944873][ T3643] Bluetooth: hci2: command tx timeout [ 531.039722][ T7379] device veth0_vlan entered promiscuous mode [ 531.120830][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.155487][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.171172][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.205856][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.219211][ T7379] device veth1_vlan entered promiscuous mode [ 531.287603][ T7670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.375090][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.384003][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.407680][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.426485][ T7670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.452945][ T7605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.502133][ T7605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.593542][ T7605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.671826][ T7605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 532.212902][ T7670] team0: Port device team_slave_0 added [ 532.236896][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 532.289988][ T7670] team0: Port device team_slave_1 added [ 532.426944][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.441358][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.715580][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.781234][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.988020][ T7670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.192155][ T7670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.215019][ T7670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.261844][ T7670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.986683][ T7379] device veth0_macvtap entered promiscuous mode [ 534.062284][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.092929][ T7379] device veth1_macvtap entered promiscuous mode [ 534.166926][ T7802] loop2: detected capacity change from 0 to 128 [ 534.175633][ T7802] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 534.194093][ T7670] device hsr_slave_0 entered promiscuous mode [ 534.330112][ T7670] device hsr_slave_1 entered promiscuous mode [ 534.330753][ T7724] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 534.356963][ T7670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.364639][ T7670] Cannot create hsr debugfs directory [ 534.388355][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.116961][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.128412][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.139171][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.149871][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.159770][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.170311][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.189478][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.209283][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.268383][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.363779][ T7605] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.372162][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.382914][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.392865][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.403371][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.515165][ T7379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.531856][ T7379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.549764][ T7379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.234181][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 536.247677][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 536.262811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.272169][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.482672][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.572808][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.591877][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.599077][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.625116][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.640242][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.650380][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.657528][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.742730][ T7379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.754407][ T7379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.763511][ T7379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.772314][ T7379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.805116][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 537.814290][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 537.844016][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 537.926222][ T7822] loop0: detected capacity change from 0 to 2048 [ 537.982825][ T7605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 538.045716][ T7605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.169049][ T7822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 538.185666][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.207924][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.854530][ T7829] loop2: detected capacity change from 0 to 2048 [ 539.057508][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 539.077218][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 539.088431][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 539.100725][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 539.119307][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 539.139545][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 539.197539][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 539.239009][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 539.582366][ T7829] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 539.593338][ T3643] Bluetooth: hci5: command 0x0406 tx timeout [ 539.665594][ T7829] syz.2.745: attempt to access beyond end of device [ 539.665594][ T7829] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 539.684828][ T7835] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.718707][ T7670] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.749145][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 539.764485][ T6635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.774578][ T6635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.967816][ T7670] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.030882][ T7838] loop0: detected capacity change from 0 to 512 [ 540.039235][ T7838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 540.039549][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 540.086479][ T7838] EXT4-fs (loop0): 1 orphan inode deleted [ 540.094921][ T7838] EXT4-fs (loop0): 1 truncate cleaned up [ 540.112200][ T7838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 540.136196][ T7842] loop2: detected capacity change from 0 to 512 [ 540.158166][ T7842] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 540.211907][ T7670] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.213954][ T7842] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 540.233805][ T7842] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 540.251254][ T7842] EXT4-fs (loop2): mount failed [ 540.344294][ T7670] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.365225][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.390640][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.419880][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 540.455060][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 540.491934][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 540.503624][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.644655][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 540.657000][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.790467][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 540.841555][ T7605] device veth0_vlan entered promiscuous mode [ 541.581862][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 541.708474][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 541.724098][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 543.658967][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.292068][ T7866] loop0: detected capacity change from 0 to 128 [ 544.312693][ T7605] device veth1_vlan entered promiscuous mode [ 544.392097][ T7866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 544.426024][ T7866] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 544.496365][ T7605] device veth0_macvtap entered promiscuous mode [ 544.525974][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.538698][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.553239][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.157140][ T7876] binder: 7871:7876 ioctl 4018620d 0 returned -22 [ 545.166316][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.752'. [ 545.175508][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.4.752'. [ 546.017519][ T26] audit: type=1326 audit(1727276068.527:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.057149][ T7866] syz.0.751 (pid 7866) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 546.093619][ T26] audit: type=1326 audit(1727276068.527:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.143452][ T7670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.153491][ T26] audit: type=1326 audit(1727276068.527:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.219049][ T7605] device veth1_macvtap entered promiscuous mode [ 546.262001][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.279904][ T26] audit: type=1326 audit(1727276068.527:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.310386][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.322620][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.341034][ T26] audit: type=1326 audit(1727276068.527:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.370552][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.383244][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.394826][ T26] audit: type=1326 audit(1727276068.527:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.401239][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.416930][ T26] audit: type=1326 audit(1727276068.527:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.416971][ T26] audit: type=1326 audit(1727276068.527:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.417002][ T26] audit: type=1326 audit(1727276068.537:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.417031][ T26] audit: type=1326 audit(1727276068.537:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.2.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542197def9 code=0x7ffc0000 [ 546.516796][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.527280][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.540604][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.542511][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 546.558099][ T7670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.675485][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 546.684209][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 546.713454][ T7670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.777592][ T7893] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 547.955226][ T7670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.973563][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.049557][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.120275][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.191377][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.303648][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.415495][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.467348][ T7889] usb usb8: usbfs: process 7889 (syz.4.757) did not claim interface 0 before use [ 548.495748][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.508156][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.524385][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.541537][ T7605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.551704][ T7605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.561153][ T7605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.575341][ T7605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.592949][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.623226][ T3853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.725469][ T7908] loop2: detected capacity change from 0 to 256 [ 549.683341][ T7914] loop0: detected capacity change from 0 to 512 [ 549.726498][ T7670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.746851][ T7914] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 549.777957][ T3750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.795021][ T3750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.809241][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.831805][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.846356][ T7919] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 549.860063][ T7914] EXT4-fs (loop0): invalid journal inode [ 549.873728][ T7914] EXT4-fs (loop0): can't get journal size [ 549.881126][ T6635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.910980][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.927029][ T7914] EXT4-fs (loop0): 1 truncate cleaned up [ 549.947036][ T7914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 549.958622][ T6650] device hsr_slave_0 left promiscuous mode [ 549.966157][ T6650] device hsr_slave_1 left promiscuous mode [ 549.977700][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.986434][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.995401][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.003023][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.022340][ T6650] device bridge_slave_1 left promiscuous mode [ 550.032049][ T6650] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.049395][ T6650] device bridge_slave_0 left promiscuous mode [ 550.057130][ T6650] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.090600][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 550.102128][ T6650] device veth1_macvtap left promiscuous mode [ 550.121899][ T6650] device veth0_macvtap left promiscuous mode [ 550.128348][ T6650] device veth1_vlan left promiscuous mode [ 550.134121][ T6650] device veth0_vlan left promiscuous mode [ 550.353292][ T6650] infiniband syz0: set down [ 551.264962][ T7931] loop0: detected capacity change from 0 to 512 [ 551.384897][ T7931] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 551.394227][ T7931] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 552.041803][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 552.177326][ T6650] team0 (unregistering): Port device team_slave_1 removed [ 552.256739][ T6650] team0 (unregistering): Port device team_slave_0 removed [ 552.260282][ T7936] loop0: detected capacity change from 0 to 8192 [ 552.282701][ T7936] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.333954][ T6650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.346776][ T3643] Bluetooth: hci3: Malformed LE Event: 0x0d [ 552.386928][ T6650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.867513][ T6650] bond0 (unregistering): Released all slaves [ 552.948939][ T3750] smc: removing ib device syz0 [ 552.954935][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.964855][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.976946][ T6643] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.984049][ T6643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.993113][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.082496][ T155] lo speed is unknown, defaulting to 1000 [ 553.126012][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.134528][ T6643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.189109][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.197401][ T6643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.232595][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.239784][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.315504][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.324382][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.335376][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.370280][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.380423][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.700310][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.975491][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.007065][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.031586][ T7944] loop3: detected capacity change from 0 to 128 [ 554.473294][ T7946] hub 9-0:1.0: USB hub found [ 554.479838][ T7946] hub 9-0:1.0: 8 ports detected [ 554.693123][ T7944] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 554.919821][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.946710][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.950841][ T7944] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 555.005384][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.239241][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.130659][ T7972] loop2: detected capacity change from 0 to 2048 [ 558.386407][ T7605] EXT4-fs (loop3): unmounting filesystem. [ 561.101201][ T3651] Bluetooth: hci1: command tx timeout [ 561.770745][ T7989] netlink: 'syz.4.779': attribute type 10 has an invalid length. [ 561.828035][ T7989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.509809][ T7989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.853949][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.878303][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.342832][ T7989] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 564.175905][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.183429][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.228900][ T8013] loop2: detected capacity change from 0 to 4096 [ 564.243711][ T8013] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 564.261217][ T7670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.066525][ T8025] loop0: detected capacity change from 0 to 128 [ 565.117473][ T8013] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 565.179193][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 565.210553][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.317856][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.453119][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.463891][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.987105][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 565.987122][ T26] audit: type=1800 audit(1727276088.567:237): pid=8028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.783" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 566.094913][ T6799] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 566.125792][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.159305][ T7670] device veth0_vlan entered promiscuous mode [ 566.191927][ T7670] device veth1_vlan entered promiscuous mode [ 566.262941][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 566.280989][ T26] audit: type=1800 audit(1727276088.567:238): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.783" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 566.488690][ T7670] device veth0_macvtap entered promiscuous mode [ 566.730771][ T7670] device veth1_macvtap entered promiscuous mode [ 567.110303][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 567.228289][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 567.260050][ T8041] loop2: detected capacity change from 0 to 764 [ 567.291144][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 567.308293][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 568.166853][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.184834][ T155] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 568.184883][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.206649][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.225446][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.235884][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.255393][ T8041] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 568.264651][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.456713][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.576979][ T8052] loop0: detected capacity change from 0 to 64 [ 568.610122][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 568.777144][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 568.804537][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.124956][ T155] usb 4-1: No LPM exit latency info found, disabling LPM. [ 569.140638][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.150987][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.161727][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.205300][ T8039] Cannot find set identified by id 0 to match [ 569.223031][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.274460][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.284958][ T155] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 569.304877][ T155] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 569.317864][ T7670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.344788][ T155] usb 4-1: config 1 interface 0 has no altsetting 0 [ 569.351493][ T7670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.395788][ T7670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.415490][ T3643] Bluetooth: hci0: command 0x0406 tx timeout [ 569.427751][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 569.506079][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 569.515149][ T155] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 569.524420][ T155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.532977][ T155] usb 4-1: Product: ߬ [ 569.537398][ T155] usb 4-1: Manufacturer: Э [ 569.541930][ T155] usb 4-1: SerialNumber: አ[ 569.577371][ T7670] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.604888][ T7670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.615075][ T8047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.622260][ T8047] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.644795][ T7670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.661726][ T7670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.437183][ T155] usb 4-1: USB disconnect, device number 4 [ 575.279046][ T8067] loop2: detected capacity change from 0 to 1024 [ 575.305156][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.330772][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.359187][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 575.381134][ T8067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 575.401364][ T6650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.429961][ T8067] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 575.494857][ T6650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.512709][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 575.524216][ T8067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 576.274808][ T26] audit: type=1326 audit(1727276098.847:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8070 comm="syz.0.798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b2b77def9 code=0x0 [ 576.470681][ T8081] device syzkaller0 entered promiscuous mode [ 576.517993][ T8084] loop1: detected capacity change from 0 to 512 [ 576.549233][ T8082] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 576.557534][ T8082] syzkaller0: Linktype set failed because interface is up [ 576.558596][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 576.565917][ T4211] syzkaller0: tun_net_xmit 48 [ 576.606315][ T3651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 576.617832][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 576.631617][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 576.641603][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 576.650436][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 576.735117][ T8084] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 576.832967][ T3651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 577.665061][ T8084] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.721: casefold flag without casefold feature [ 577.712361][ T8084] EXT4-fs (loop1): get root inode failed [ 577.824844][ T8084] EXT4-fs (loop1): mount failed [ 578.947671][ T3643] Bluetooth: hci4: command tx timeout [ 579.578857][ T7997] syz.4.779 (7997): drop_caches: 1 [ 580.856729][ T3643] Bluetooth: hci3: command 0x0406 tx timeout [ 581.019023][ T3651] Bluetooth: hci4: command tx timeout [ 581.123753][ T6661] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 582.944976][ T8124] delete_channel: no stack [ 583.460482][ T3651] Bluetooth: hci4: command tx timeout [ 583.469035][ T3651] Bluetooth: hci5: command 0x0406 tx timeout [ 583.631967][ T4211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 583.773679][ T8169] Zero length message leads to an empty skb [ 584.795083][ T4211] usb 3-1: device descriptor read/all, error -71 [ 585.517470][ T3643] Bluetooth: hci4: command tx timeout [ 585.568610][ T8184] loop2: detected capacity change from 0 to 256 [ 585.723128][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 585.779560][ T8003] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 585.790450][ T8184] syz.2.810[8184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.869161][ T8182] 9pnet: Could not find request transport: f [ 585.891397][ T8190] loop1: detected capacity change from 0 to 256 [ 586.607643][ T8184] loop2: detected capacity change from 0 to 2048 [ 586.665382][ T8184] loop2: p2 < > p3 p4 < > [ 586.682884][ T8184] loop2: partition table partially beyond EOD, truncated [ 586.703840][ T8184] loop2: p2 start 4294902784 is beyond EOD, truncated [ 586.769600][ T8184] loop2: p3 start 4278191616 is beyond EOD, truncated [ 587.121566][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.121607][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.122302][ T8085] device bridge_slave_0 entered promiscuous mode [ 587.123707][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.123766][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.124379][ T8085] device bridge_slave_1 entered promiscuous mode [ 587.364604][ T8204] netlink: 'syz.0.814': attribute type 5 has an invalid length. [ 587.378497][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.381948][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.450430][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.815'. [ 587.548695][ T8085] team0: Port device team_slave_0 added [ 587.548957][ T8003] udevd[8003]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 587.601449][ T8205] netlink: 272 bytes leftover after parsing attributes in process `syz.2.815'. [ 587.682789][ T4630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.720758][ T8085] team0: Port device team_slave_1 added [ 587.962191][ T4630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.974447][ T8211] loop0: detected capacity change from 0 to 128 [ 588.129282][ T8211] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 588.214028][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.225911][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.886913][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.942819][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.956893][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.667439][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.696912][ T8229] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 590.783700][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.800385][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.809572][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.819061][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.827294][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.834639][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.908385][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.928507][ T8229] bond0: (slave team0): Enslaving as an active interface with an up link [ 591.381387][ T6656] Bluetooth: Error in BCSP hdr checksum [ 591.513509][ T4630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.625750][ T8085] device hsr_slave_0 entered promiscuous mode [ 591.642853][ T8085] device hsr_slave_1 entered promiscuous mode [ 591.649984][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.658415][ T8085] Cannot create hsr debugfs directory [ 591.843213][ T4630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.975109][ T8232] infiniband syz1: set active [ 592.070314][ T8232] infiniband syz1: added bond0 [ 592.136295][ T8232] rdma_rxe: unable to create cq [ 592.264130][ T8232] infiniband syz1: Couldn't create ib_mad CQ [ 592.344655][ T8232] infiniband syz1: Couldn't open port 1 [ 592.371433][ T8232] RDS/IB: syz1: added [ 592.375806][ T8232] smc: adding ib device syz1 with port count 1 [ 592.381986][ T8232] smc: ib device syz1 port 1 has pnetid [ 592.576738][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 592.818117][ T8250] loop0: detected capacity change from 0 to 64 [ 592.896696][ T3651] Bluetooth: hci0: command tx timeout [ 593.022797][ T8085] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.094975][ T3649] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 593.299344][ T8085] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.518656][ T8085] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.531047][ T8253] loop2: detected capacity change from 0 to 8192 [ 593.562647][ T8253] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 593.585217][ T8253] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 593.595150][ T8253] REISERFS (device loop2): using ordered data mode [ 593.601661][ T8253] reiserfs: using flush barriers [ 593.647984][ T8253] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 593.733255][ T8253] REISERFS (device loop2): checking transaction log (loop2) [ 593.757818][ T8253] REISERFS (device loop2): Using rupasov hash to sort names [ 593.776996][ T8253] REISERFS (device loop2): using 3.5.x disk format [ 593.797440][ T8253] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 593.828988][ T8253] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 593.844532][ T8085] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.866212][ T8253] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 593.867652][ T8264] loop0: detected capacity change from 0 to 8192 [ 593.895154][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.902290][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.930424][ T8253] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 593.948181][ T8264] loop0: p2 p3 p4 [ 593.953506][ T8233] device bridge_slave_0 entered promiscuous mode [ 593.965205][ T8264] loop0: p2 start 452985600 is beyond EOD, truncated [ 593.971918][ T8264] loop0: p3 start 4177527808 is beyond EOD, truncated [ 594.025211][ T8264] loop0: p4 size 3599499392 extends beyond EOD, truncated [ 594.048425][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.082119][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.189234][ T8233] device bridge_slave_1 entered promiscuous mode [ 594.378417][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.390651][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.433510][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.445696][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.456855][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.492045][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.503126][ T8277] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 594.848445][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.860678][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.934930][ T3649] Bluetooth: hci0: command tx timeout [ 594.976528][ T8233] team0: Port device team_slave_0 added [ 595.056819][ T8233] team0: Port device team_slave_1 added [ 595.180707][ T8085] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 595.235045][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.246169][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.278815][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.295180][ T8085] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 595.325996][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.333971][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.362413][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.374493][ T8085] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 595.423906][ T8085] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 595.497090][ T8233] device hsr_slave_0 entered promiscuous mode [ 595.509995][ T8233] device hsr_slave_1 entered promiscuous mode [ 595.527493][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.536258][ T8233] Cannot create hsr debugfs directory [ 596.056397][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.099214][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 596.115907][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 596.138093][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.151077][ T4630] device hsr_slave_0 left promiscuous mode [ 596.168093][ T4630] device hsr_slave_1 left promiscuous mode [ 596.188027][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.209164][ T8293] loop3: detected capacity change from 0 to 40427 [ 596.210325][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.227360][ T8293] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 596.233716][ T8293] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 596.323724][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.353081][ T8293] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 596.384373][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.411304][ T4630] device bridge_slave_1 left promiscuous mode [ 596.418052][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.443223][ T4630] device bridge_slave_0 left promiscuous mode [ 596.449682][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.478500][ T8293] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 596.485952][ T8293] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 596.706418][ T8309] loop2: detected capacity change from 0 to 736 [ 596.726494][ T4630] device veth1_macvtap left promiscuous mode [ 596.733451][ T4630] device veth0_macvtap left promiscuous mode [ 596.744078][ T4630] device veth1_vlan left promiscuous mode [ 596.752275][ T4630] device veth0_vlan left promiscuous mode [ 597.042500][ T8312] syz.3.829: attempt to access beyond end of device [ 597.042500][ T8312] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 597.056485][ T8312] syz.3.829: attempt to access beyond end of device [ 597.056485][ T8312] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 597.314398][ T3649] Bluetooth: hci0: command tx timeout [ 598.042217][ T7605] syz-executor: attempt to access beyond end of device [ 598.042217][ T7605] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 599.335074][ T3649] Bluetooth: hci0: command tx timeout [ 599.491798][ T8331] loop0: detected capacity change from 0 to 256 [ 604.012666][ T8361] loop3: detected capacity change from 0 to 256 [ 604.471957][ T8360] ufs: You didn't specify the type of your ufs filesystem [ 604.471957][ T8360] [ 604.471957][ T8360] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 604.471957][ T8360] [ 604.471957][ T8360] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 604.503263][ T8360] ufs: ufstype=old is supported read-only [ 604.518002][ T8360] ufs: ufs_fill_super(): bad magic number [ 607.081306][ T8371] loop3: detected capacity change from 0 to 2048 [ 607.223235][ T8371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.469236][ T4630] team0 (unregistering): Port device team_slave_1 removed [ 607.533479][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 607.613209][ T4630] team0 (unregistering): Port device team_slave_0 removed [ 607.834432][ T8377] netlink: 232 bytes leftover after parsing attributes in process `syz.2.844'. [ 608.214494][ T4630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.390729][ T4630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.086119][ T4630] bond0 (unregistering): Released all slaves [ 609.258718][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.274160][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.282922][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.290046][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.313874][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.584340][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.602534][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.612644][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.619777][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.637142][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.646253][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 609.655303][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 609.675367][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 609.684022][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.716999][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.733264][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 609.913346][ T8085] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.925982][ T8085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.953122][ T8388] loop0: detected capacity change from 0 to 2048 [ 610.347563][ T8388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 610.692995][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.716168][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.735562][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.772254][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.948429][ T8404] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 610.976234][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.985780][ T8404] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm syz.0.847: mark_inode_dirty error [ 611.026485][ T8404] EXT4-fs error (device loop0): ext4_map_blocks:744: inode #18: block 114: comm syz.0.847: lblock 2 mapped to illegal pblock 114 (length 1) [ 611.376768][ T7051] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 611.433492][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.458178][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 611.469861][ T7051] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 611.489152][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 611.499080][ T7051] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #18: comm syz-executor: mark_inode_dirty error [ 611.537903][ T8233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 611.568621][ T7051] EXT4-fs (loop0): unmounting filesystem. [ 611.588955][ T8233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 611.641721][ T8233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 611.689006][ T8233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.191016][ T8233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.233669][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 614.256709][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.289185][ T8233] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.308374][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 614.359900][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.379091][ T3785] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.386269][ T3785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.393186][ T8443] loop2: detected capacity change from 0 to 2048 [ 614.415168][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.562990][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.653677][ T8448] binder_alloc: 8444: binder_alloc_buf size 16408 failed, no address space [ 614.663016][ T8448] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 615.315073][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.364624][ T8443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 615.384171][ T3785] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.391326][ T3785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.498028][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.551071][ T8233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.573250][ T8233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.643553][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.657755][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.704759][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.769987][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.987830][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.155711][ T8458] xt_CT: No such helper "pptp" [ 616.218519][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 616.252233][ T3649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.267520][ T3649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.276125][ T3649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.285310][ T3649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.292913][ T3649] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 616.301097][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.335295][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.344002][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 616.361169][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 616.385847][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 616.471426][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.495696][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 616.527337][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.562909][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.689925][ T8085] device veth0_vlan entered promiscuous mode [ 616.709019][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.727920][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.851535][ T3649] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 617.861579][ T3649] Bluetooth: hci1: Injecting HCI hardware error event [ 617.875327][ T3643] Bluetooth: hci1: hardware error 0x00 [ 618.108281][ T8085] device veth1_vlan entered promiscuous mode [ 618.175544][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 618.184630][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 618.253057][ T8480] loop3: detected capacity change from 0 to 128 [ 618.312016][ T8480] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 618.366425][ T8480] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.376046][ T3649] Bluetooth: hci2: command tx timeout [ 618.534345][ T4630] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.580715][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.595301][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.340553][ T8085] device veth0_macvtap entered promiscuous mode [ 619.409578][ T8233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.501752][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.516473][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.572586][ T4630] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.622277][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.646330][ T8085] device veth1_macvtap entered promiscuous mode [ 619.691926][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 619.712538][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.876851][ T4630] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.924133][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.375915][ T3643] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 620.541237][ T3643] Bluetooth: hci2: command tx timeout [ 620.593061][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.611947][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.624394][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.641852][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.652836][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.765097][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.855584][ T4630] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.855662][ T3643] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 620.877893][ T3643] Bluetooth: hci5: Injecting HCI hardware error event [ 620.887653][ T3643] Bluetooth: hci5: hardware error 0x00 [ 620.907663][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.933962][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 621.024169][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 621.043121][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 621.058471][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 621.075478][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 621.097914][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.124126][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.140674][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.160171][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.170808][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.188217][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.200510][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.219094][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.237865][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.258171][ T8233] device veth0_vlan entered promiscuous mode [ 621.300614][ T8233] device veth1_vlan entered promiscuous mode [ 621.340402][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 621.348916][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 621.358350][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 621.369837][ T8085] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.382915][ T8085] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.393872][ T8085] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.498563][ T8085] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.144168][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 622.182541][ T8233] device veth0_macvtap entered promiscuous mode [ 622.614865][ T3649] Bluetooth: hci2: command tx timeout [ 623.022491][ T3643] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 624.063165][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.075938][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.216235][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.222573][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.233750][ T8233] device veth1_macvtap entered promiscuous mode [ 624.253575][ T8460] chnl_net:caif_netlink_parms(): no params data found [ 624.270538][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 624.349151][ T8544] loop2: detected capacity change from 0 to 4096 [ 624.424614][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.450082][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.473489][ T8544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 624.485074][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.694895][ T3643] Bluetooth: hci2: command tx timeout [ 624.740942][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.959119][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.263234][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.314828][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.314923][ T8551] Bluetooth: MGMT ver 1.22 [ 625.338888][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.354391][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.388189][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.404241][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.413927][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.440013][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.483205][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 625.540037][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 625.569591][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.580482][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.591626][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.612122][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.650570][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.756398][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.766327][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.776982][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.786890][ T8233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.797616][ T8233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.891425][ T8233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.924364][ T8233] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.936254][ T8233] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.947519][ T8233] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.957604][ T8233] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.410638][ T6660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.464817][ T6660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.494852][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 626.503699][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 626.601988][ T6637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 628.485162][ T8576] loop4: detected capacity change from 0 to 2048 [ 628.516341][ T8576] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 629.481952][ T8576] syz.4.793: attempt to access beyond end of device [ 629.481952][ T8576] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 629.517742][ T8579] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 629.561999][ T8460] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.582311][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.395462][ T8460] device bridge_slave_0 entered promiscuous mode [ 631.301822][ T8593] loop2: detected capacity change from 0 to 32768 [ 631.337543][ T8597] loop4: detected capacity change from 0 to 64 [ 631.372495][ T8597] hfs: unable to locate alternate MDB [ 631.380670][ T8597] hfs: continuing without an alternate MDB [ 631.541938][ T8460] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.569717][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.623192][ T8460] device bridge_slave_1 entered promiscuous mode [ 631.651175][ T8593] XFS (loop2): Mounting V5 Filesystem [ 631.703068][ T8460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.848545][ T8460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.334624][ T8593] XFS (loop2): Ending clean mount [ 632.342596][ T8593] XFS (loop2): Quotacheck needed: Please wait. [ 632.450795][ T8593] XFS (loop2): Quotacheck: Done. [ 634.150804][ T8460] team0: Port device team_slave_0 added [ 634.265507][ T8460] team0: Port device team_slave_1 added [ 634.310029][ T6799] XFS (loop2): Unmounting Filesystem [ 634.792541][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.811978][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.002322][ T8460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.117684][ T8460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.178251][ T8460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.359190][ T8460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.663006][ T8460] device hsr_slave_0 entered promiscuous mode [ 635.741433][ T8460] device hsr_slave_1 entered promiscuous mode [ 635.758519][ T8460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.804838][ T8460] Cannot create hsr debugfs directory [ 635.863291][ T8637] loop2: detected capacity change from 0 to 164 [ 635.883449][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.944968][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.020565][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 636.037771][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 636.048307][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 636.054093][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 636.067812][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 636.076725][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 636.084184][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.218993][ T6660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.219049][ T6660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.438481][ T6650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.658345][ T3679] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 636.658920][ T3679] hid-generic: probe of 0000:0000:0000.0003 failed with error -22 [ 638.300447][ T3651] Bluetooth: hci3: command tx timeout [ 639.474601][ T8675] loop2: detected capacity change from 0 to 128 [ 639.531507][ T4630] device hsr_slave_0 left promiscuous mode [ 639.545535][ T4630] device hsr_slave_1 left promiscuous mode [ 639.637993][ T8680] loop1: detected capacity change from 0 to 1024 [ 640.175554][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.589265][ T8671] loop3: detected capacity change from 0 to 2048 [ 640.606242][ T8671] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 640.621930][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.635441][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.635471][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.656810][ T4630] device bridge_slave_1 left promiscuous mode [ 640.656945][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.659435][ T4630] device bridge_slave_0 left promiscuous mode [ 640.659565][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.676014][ T8671] syz.3.885: attempt to access beyond end of device [ 640.676014][ T8671] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 640.676435][ T8682] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.793378][ T4630] device veth1_macvtap left promiscuous mode [ 640.793633][ T4630] device veth0_macvtap left promiscuous mode [ 640.794200][ T4630] device veth1_vlan left promiscuous mode [ 640.797344][ T4630] device veth0_vlan left promiscuous mode [ 640.930246][ T3643] Bluetooth: hci3: command tx timeout [ 640.999563][ T8684] loop1: detected capacity change from 0 to 256 [ 641.019622][ T8684] exfat: Unknown parameter 'ÿÿÿÿ18446744073709551615ÿ01777777777777777777777' [ 641.235638][ T8003] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 641.251243][ T8675] loop2: detected capacity change from 0 to 256 [ 641.266599][ T8003] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 641.281741][ T8003] Buffer I/O error on dev loop2, logical block 0, async page read [ 642.935277][ T3651] Bluetooth: hci3: command tx timeout [ 643.044858][ T41] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 643.056011][ T8692] loop1: detected capacity change from 0 to 1024 [ 643.064087][ T8692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 643.114038][ T8692] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 643.245149][ T8233] EXT4-fs (loop1): unmounting filesystem. [ 643.315131][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 643.360886][ T41] usb 4-1: no configurations [ 643.365878][ T41] usb 4-1: can't read configurations, error -22 [ 643.960055][ T4630] team0 (unregistering): Port device team_slave_1 removed [ 644.132788][ T4630] team0 (unregistering): Port device team_slave_0 removed [ 644.165005][ T41] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 644.221596][ T4630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.267583][ T4630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.484809][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 644.645302][ T41] usb 4-1: device descriptor read/all, error -71 [ 644.652205][ T41] usb usb4-port1: attempt power cycle [ 645.015824][ T3651] Bluetooth: hci3: command tx timeout [ 645.075418][ T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 645.305745][ T41] usb 4-1: config 0 has an invalid interface descriptor of length 3, skipping [ 645.340528][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.495521][ T41] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 645.509690][ T41] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 645.519669][ T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.545167][ T41] usb 4-1: config 0 descriptor?? [ 646.389734][ T8713] loop3: detected capacity change from 0 to 512 [ 646.428609][ T8713] EXT4-fs (loop3): orphan cleanup on readonly fs [ 646.456184][ T8713] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 646.492933][ T8713] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 646.503003][ T8713] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.893: Failed to acquire dquot type 0 [ 646.526808][ T8713] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 646.536638][ T8713] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 646.547093][ T8713] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.893: Failed to acquire dquot type 0 [ 646.561974][ T8713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.893: bg 0: block 64: padding at end of block bitmap is not set [ 646.594835][ T8713] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 646.605495][ T8713] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 646.614593][ T8713] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 646.625520][ T8713] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.893: Failed to acquire dquot type 0 [ 646.663056][ T8713] EXT4-fs (loop3): 1 orphan inode deleted [ 646.669378][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 646.679529][ T8713] EXT4-fs (loop3): unmounting filesystem. [ 646.796093][ T3678] usb 4-1: USB disconnect, device number 7 [ 646.821757][ T4630] bond0 (unregistering): Released all slaves [ 646.950041][ T8716] IPVS: Error joining to the multicast group [ 647.094232][ T8721] netlink: 'syz.2.896': attribute type 9 has an invalid length. [ 647.117049][ T8721] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 647.155202][ T8721] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 647.179602][ T8725] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 647.201385][ T8721] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 647.223000][ T8639] chnl_net:caif_netlink_parms(): no params data found [ 647.615585][ T8733] loop1: detected capacity change from 0 to 1024 [ 648.149274][ T8460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 648.242198][ T8738] loop3: detected capacity change from 0 to 512 [ 648.405048][ T8460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 648.451840][ T8738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 648.469434][ T8460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 648.578088][ T8752] loop2: detected capacity change from 0 to 1024 [ 648.592969][ T8738] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038 (0x7fffffff) [ 648.791840][ T8639] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.849043][ T8639] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.058004][ T8639] device bridge_slave_0 entered promiscuous mode [ 649.089812][ T8639] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.213941][ T8639] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.262482][ T8639] device bridge_slave_1 entered promiscuous mode [ 649.277911][ T8756] loop2: detected capacity change from 0 to 2048 [ 649.281635][ T8460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.294272][ T8756] ext4: Unknown parameter 'fsname' [ 649.402805][ T8639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.415723][ T4063] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 649.477261][ T8639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.603326][ T8759] xt_policy: too many policy elements [ 649.845598][ T4063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.928255][ T4063] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.112645][ T4063] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.338118][ T4063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.362394][ T4063] usb 4-1: config 0 descriptor?? [ 652.140068][ T4063] usb 4-1: can't set config #0, error -71 [ 652.154865][ T4630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.167202][ T4063] usb 4-1: USB disconnect, device number 8 [ 652.210434][ T8639] team0: Port device team_slave_0 added [ 652.358986][ T8639] team0: Port device team_slave_1 added [ 652.855815][ T8774] loop2: detected capacity change from 0 to 512 [ 652.965008][ T8774] ext4: Unknown parameter 'noacl' [ 653.029545][ T7605] EXT4-fs (loop3): unmounting filesystem. [ 654.036547][ T4630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.086653][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.174803][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.289254][ T8639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.354214][ T8639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.362347][ T8639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.390046][ T8639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.407073][ T26] audit: type=1326 audit(1727276176.987:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.1.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11b5b7def9 code=0x0 [ 654.481388][ T4630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.556045][ T8460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.602965][ T8795] loop2: detected capacity change from 0 to 2048 [ 654.652449][ T4630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.675043][ T8639] device hsr_slave_0 entered promiscuous mode [ 654.682133][ T8639] device hsr_slave_1 entered promiscuous mode [ 654.689028][ T8795] loop2: p1 < > p2 p3 < p5 > p4 [ 654.694004][ T8795] loop2: partition table partially beyond EOD, truncated [ 654.702805][ T8639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.703652][ T8795] loop2: p1 start 4278190080 is beyond EOD, truncated [ 654.719197][ T8795] loop2: p2 start 16908800 is beyond EOD, truncated [ 654.727327][ T8639] Cannot create hsr debugfs directory [ 654.746808][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.755899][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.762603][ T8795] loop2: p4 start 11326 is beyond EOD, truncated [ 654.770150][ T8795] loop2: p5 start 16908800 is beyond EOD, truncated [ 654.817295][ T8460] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.968089][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.979622][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.992435][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.999556][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.013250][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.042869][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.051853][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.065420][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.072500][ T3750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.137355][ T8794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.154263][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.326812][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.452483][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.159379][ T26] audit: type=1326 audit(1727276178.737:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.1.913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b5b7def9 code=0x0 [ 656.163304][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.531413][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.543167][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.647887][ T8823] loop2: detected capacity change from 0 to 512 [ 656.919544][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 657.268488][ T8824] loop3: detected capacity change from 0 to 1024 [ 657.310390][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 657.375672][ T8824] hfsplus: unable to parse mount options [ 657.382663][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 657.422004][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 657.448788][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.478340][ T8460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 657.646543][ T8836] loop3: detected capacity change from 0 to 512 [ 657.738614][ T3785] wlan1: Trigger new scan to find an IBSS to join [ 657.762028][ T8830] loop2: detected capacity change from 0 to 8192 [ 657.794127][ T8836] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 657.837322][ T8836] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 658.019077][ T8836] bridge0: port 3(vlan2) entered blocking state [ 658.049417][ T8836] bridge0: port 3(vlan2) entered disabled state [ 658.321275][ T26] audit: type=1804 audit(1727276180.887:242): pid=8849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.916" name="/newroot/92/bus/file0" dev="loop2" ino=1048698 res=1 errno=0 [ 658.353114][ T7605] EXT4-fs (loop3): unmounting filesystem. [ 658.471660][ T8852] loop3: detected capacity change from 0 to 512 [ 658.578652][ T8852] loop3: detected capacity change from 0 to 128 [ 658.651624][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.673272][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.065634][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.921'. [ 660.357583][ T8460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.480699][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.617154][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.490655][ T8879] loop1: detected capacity change from 0 to 8 [ 661.824963][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.999145][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.672850][ T8639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.751906][ T8639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.774884][ T6661] wlan1: Trigger new scan to find an IBSS to join [ 662.803727][ T8460] device veth0_vlan entered promiscuous mode [ 662.845676][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.863501][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.901906][ T8639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.939647][ T8639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 663.211924][ T8460] device veth1_vlan entered promiscuous mode [ 663.341575][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 663.359034][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 663.412487][ T8460] device veth0_macvtap entered promiscuous mode [ 663.453227][ T8460] device veth1_macvtap entered promiscuous mode [ 663.559062][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.621065][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.662372][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.694544][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.713258][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.758339][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.789189][ T8460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 663.822821][ T8460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.860916][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.869428][ T8460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.901822][ T4630] device hsr_slave_0 left promiscuous mode [ 663.959080][ T4630] device hsr_slave_1 left promiscuous mode [ 663.976610][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.984042][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.022802][ T4630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.060710][ T4630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.098775][ T4630] device bridge_slave_1 left promiscuous mode [ 664.132194][ T4630] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.160732][ T4630] device bridge_slave_0 left promiscuous mode [ 664.188701][ T4630] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.324931][ T4630] device veth1_macvtap left promiscuous mode [ 664.335122][ T4630] device veth0_macvtap left promiscuous mode [ 664.364067][ T4630] device veth1_vlan left promiscuous mode [ 664.378359][ T4630] device veth0_vlan left promiscuous mode [ 665.500187][ T8923] loop2: detected capacity change from 0 to 512 [ 665.690263][ T8923] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 665.703848][ T8923] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 665.741682][ T8923] System zones: 0-2, 18-18, 34-35 [ 665.755897][ T8923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 666.662209][ T8923] EXT4-fs (loop2): shut down requested (0) [ 668.688961][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 673.146177][ T3643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.158059][ T3643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.166117][ T3643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.174838][ T3643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.182496][ T3643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 673.190908][ T3643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.224025][ T8968] loop3: detected capacity change from 0 to 512 [ 673.248594][ T8968] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 673.258158][ T8968] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 674.492635][ T8968] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 674.642607][ T8968] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 674.651003][ T8968] System zones: 0-2, 18-18, 34-34 [ 676.017206][ T8968] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 676.038535][ T3643] Bluetooth: hci4: command tx timeout [ 676.056541][ T4630] team0 (unregistering): Port device team_slave_1 removed [ 676.094952][ T8968] EXT4-fs (loop3): 1 truncate cleaned up [ 676.146079][ T8968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 676.267776][ T4630] team0 (unregistering): Port device team_slave_0 removed [ 676.313083][ T3651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 676.338603][ T3651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 676.354882][ T3651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 676.364997][ T3651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 676.372511][ T3651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 676.381075][ T3651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 676.469114][ T7605] EXT4-fs (loop3): unmounting filesystem. [ 676.497358][ T4630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.570510][ T4630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.204097][ T4630] bond0 (unregistering): Released all slaves [ 677.300356][ T8639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.308345][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 677.318389][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 677.329141][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 677.340309][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 677.356279][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 677.593240][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.617298][ T3750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.634708][ T8639] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.671022][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.695443][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.714441][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.721784][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.785188][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.819814][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.835526][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.855370][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.862523][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.045296][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 678.054942][ T3651] Bluetooth: hci4: command tx timeout [ 678.221898][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 678.884919][ T3651] Bluetooth: hci6: command tx timeout [ 678.894405][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 678.973289][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 679.001796][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 679.021401][ T8987] loop3: detected capacity change from 0 to 128 [ 679.026754][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 679.059437][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 679.078069][ T8987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 679.120852][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 679.135139][ T8987] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 679.178847][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 679.187744][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 679.197511][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 679.257465][ T8639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 680.157377][ T3651] Bluetooth: hci4: command tx timeout [ 680.160099][ T7605] EXT4-fs (loop3): unmounting filesystem. [ 680.200925][ T8998] loop2: detected capacity change from 0 to 1024 [ 680.231924][ T8964] chnl_net:caif_netlink_parms(): no params data found [ 680.256221][ T8998] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 680.272350][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.293235][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 680.433797][ T9002] loop3: detected capacity change from 0 to 1024 [ 680.523264][ T8639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.946596][ T3651] Bluetooth: hci6: command tx timeout [ 681.255359][ T9007] "syz.3.943" (9007) uses obsolete ecb(arc4) skcipher [ 682.369144][ T3651] Bluetooth: hci4: command tx timeout [ 682.383050][ T6799] EXT4-fs (loop2): unmounting filesystem. [ 682.513317][ T9012] i2c i2c-0: Invalid block write size 129 [ 682.663951][ T8964] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.672542][ T8964] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.691105][ T8964] device bridge_slave_0 entered promiscuous mode [ 682.703782][ T8964] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.718230][ T8964] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.754031][ T8964] device bridge_slave_1 entered promiscuous mode [ 683.195715][ T3651] Bluetooth: hci6: command tx timeout [ 683.270876][ T8972] chnl_net:caif_netlink_parms(): no params data found [ 683.527747][ T8964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.558140][ T8964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.659685][ T9025] loop2: detected capacity change from 0 to 1024 [ 683.684971][ T9024] Non-string source [ 683.710545][ T8964] team0: Port device team_slave_0 added [ 683.802296][ T8964] team0: Port device team_slave_1 added [ 683.830575][ T8552] ------------[ cut here ]------------ [ 683.836720][ T8552] WARNING: CPU: 0 PID: 8552 at net/wireless/core.h:231 disconnect_work+0x246/0x340 [ 683.846124][ T8552] Modules linked in: [ 683.850048][ T8552] CPU: 0 PID: 8552 Comm: kworker/0:2 Not tainted 6.1.111-syzkaller #0 [ 683.858255][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 683.868427][ T8552] Workqueue: events disconnect_work [ 683.873760][ T8552] RIP: 0010:disconnect_work+0x246/0x340 [ 683.879656][ T8552] Code: e8 9f 31 d0 f7 48 8b 1b 4c 39 fb 0f 84 8f 00 00 00 e8 4e af 78 f7 e9 67 fe ff ff e8 44 af 78 f7 e9 5a ff ff ff e8 3a af 78 f7 <0f> 0b e9 c1 fe ff ff e8 2e af 78 f7 0f 0b eb ad 48 c7 c1 24 1a 9a [ 683.899339][ T8552] RSP: 0018:ffffc900033c7c10 EFLAGS: 00010293 [ 683.905643][ T8552] RAX: ffffffff8a120006 RBX: ffff888072748ca0 RCX: ffff888027ac1dc0 [ 683.913632][ T8552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.921662][ T8552] RBP: 0000000000000000 R08: ffffffff8a11feba R09: fffffbfff1c9f2ea [ 683.929689][ T8552] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888072748c90 [ 683.937714][ T8552] R13: 1ffff110039545e3 R14: dffffc0000000000 R15: ffff8880650b8dd0 [ 683.945741][ T8552] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 683.954691][ T8552] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.961330][ T8552] CR2: 00007f5417836000 CR3: 0000000073f8e000 CR4: 00000000003506f0 [ 683.969361][ T8552] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.977377][ T8552] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.985414][ T8552] Call Trace: [ 683.988702][ T8552] [ 683.991628][ T8552] ? __warn+0x15a/0x520 [ 683.995836][ T8552] ? disconnect_work+0x246/0x340 [ 684.000789][ T8552] ? report_bug+0x2af/0x500 [ 684.005431][ T8552] ? disconnect_work+0x246/0x340 [ 684.010396][ T8552] ? handle_bug+0x3d/0x70 [ 684.014781][ T8552] ? exc_invalid_op+0x16/0x40 [ 684.019477][ T8552] ? asm_exc_invalid_op+0x16/0x20 [ 684.024516][ T8552] ? disconnect_work+0xfa/0x340 [ 684.029411][ T8552] ? disconnect_work+0x246/0x340 [ 684.034367][ T8552] ? disconnect_work+0x246/0x340 [ 684.039364][ T8552] ? process_one_work+0x7a9/0x11d0 [ 684.044483][ T8552] process_one_work+0x8a9/0x11d0 [ 684.049493][ T8552] ? worker_detach_from_pool+0x260/0x260 [ 684.055200][ T8552] ? _raw_spin_lock_irqsave+0x120/0x120 [ 684.060755][ T8552] ? kthread_data+0x4e/0xc0 [ 684.065322][ T8552] ? wq_worker_running+0x97/0x190 [ 684.070357][ T8552] worker_thread+0xa47/0x1200 [ 684.075077][ T8552] ? _raw_spin_unlock+0x40/0x40 [ 684.079939][ T8552] ? release_firmware_map_entry+0x186/0x186 [ 684.085890][ T8552] ? _raw_spin_unlock+0x40/0x40 [ 684.090751][ T8552] kthread+0x28d/0x320 [ 684.094861][ T8552] ? worker_clr_flags+0x190/0x190 [ 684.099903][ T8552] ? kthread_blkcg+0xd0/0xd0 [ 684.104486][ T8552] ret_from_fork+0x1f/0x30 [ 684.108994][ T8552] [ 684.112068][ T8552] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 684.119346][ T8552] CPU: 0 PID: 8552 Comm: kworker/0:2 Not tainted 6.1.111-syzkaller #0 [ 684.127485][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 684.137534][ T8552] Workqueue: events disconnect_work [ 684.142721][ T8552] Call Trace: [ 684.145982][ T8552] [ 684.148981][ T8552] dump_stack_lvl+0x1e3/0x2cb [ 684.153645][ T8552] ? nf_tcp_handle_invalid+0x642/0x642 [ 684.159091][ T8552] ? panic+0x764/0x764 [ 684.163147][ T8552] ? vscnprintf+0x59/0x80 [ 684.167471][ T8552] panic+0x318/0x764 [ 684.171388][ T8552] ? __warn+0x169/0x520 [ 684.175549][ T8552] ? memcpy_page_flushcache+0xfc/0xfc [ 684.180908][ T8552] ? ret_from_fork+0x1f/0x30 [ 684.185486][ T8552] __warn+0x348/0x520 [ 684.189462][ T8552] ? disconnect_work+0x246/0x340 [ 684.194481][ T8552] report_bug+0x2af/0x500 [ 684.198791][ T8552] ? disconnect_work+0x246/0x340 [ 684.203715][ T8552] handle_bug+0x3d/0x70 [ 684.207857][ T8552] exc_invalid_op+0x16/0x40 [ 684.212344][ T8552] asm_exc_invalid_op+0x16/0x20 [ 684.217194][ T8552] RIP: 0010:disconnect_work+0x246/0x340 [ 684.222752][ T8552] Code: e8 9f 31 d0 f7 48 8b 1b 4c 39 fb 0f 84 8f 00 00 00 e8 4e af 78 f7 e9 67 fe ff ff e8 44 af 78 f7 e9 5a ff ff ff e8 3a af 78 f7 <0f> 0b e9 c1 fe ff ff e8 2e af 78 f7 0f 0b eb ad 48 c7 c1 24 1a 9a [ 684.242352][ T8552] RSP: 0018:ffffc900033c7c10 EFLAGS: 00010293 [ 684.248404][ T8552] RAX: ffffffff8a120006 RBX: ffff888072748ca0 RCX: ffff888027ac1dc0 [ 684.256358][ T8552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.264311][ T8552] RBP: 0000000000000000 R08: ffffffff8a11feba R09: fffffbfff1c9f2ea [ 684.272277][ T8552] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888072748c90 [ 684.280246][ T8552] R13: 1ffff110039545e3 R14: dffffc0000000000 R15: ffff8880650b8dd0 [ 684.288294][ T8552] ? disconnect_work+0xfa/0x340 [ 684.293130][ T8552] ? disconnect_work+0x246/0x340 [ 684.298062][ T8552] ? process_one_work+0x7a9/0x11d0 [ 684.303168][ T8552] process_one_work+0x8a9/0x11d0 [ 684.308108][ T8552] ? worker_detach_from_pool+0x260/0x260 [ 684.313739][ T8552] ? _raw_spin_lock_irqsave+0x120/0x120 [ 684.316260][ T3625] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 684.326745][ T8552] ? kthread_data+0x4e/0xc0 [ 684.331272][ T8552] ? wq_worker_running+0x97/0x190 [ 684.336296][ T8552] worker_thread+0xa47/0x1200 [ 684.340975][ T8552] ? _raw_spin_unlock+0x40/0x40 [ 684.345837][ T8552] ? release_firmware_map_entry+0x186/0x186 [ 684.351723][ T8552] ? _raw_spin_unlock+0x40/0x40 [ 684.356566][ T8552] kthread+0x28d/0x320 [ 684.360619][ T8552] ? worker_clr_flags+0x190/0x190 [ 684.365632][ T8552] ? kthread_blkcg+0xd0/0xd0 [ 684.370231][ T8552] ret_from_fork+0x1f/0x30 [ 684.374662][ T8552] [ 684.377905][ T8552] Kernel Offset: disabled [ 684.382315][ T8552] Rebooting in 86400 seconds..