last executing test programs: 2m29.498573543s ago: executing program 4 (id=134): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 2m25.983248041s ago: executing program 4 (id=138): socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000002c0)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)) 2m23.234302699s ago: executing program 4 (id=144): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x30000009}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 2m19.129545485s ago: executing program 4 (id=149): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100008000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 2m17.053320874s ago: executing program 4 (id=155): setrlimit(0xb, &(0x7f0000000180)={0xffffffffffffffff, 0x1}) syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x1000100, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$eJzs29trHOUfx/HPd7K72Wz7+3XbpmmVgquCSsWaQ4/Gix5iqNCkOTQiRYWYbOLSnMimkhTR4o233ngjIgoKUkULIt54pb3zD1AQBL3wQgT3wgMIgszszM5ks2nS7iHd9v2CdifPfGfmOewzz7M7zwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEinnjrZ2WVbnQsAANBIg6Mjnd2M/wAA3FXO8/kfAADgbmJy9L1MfSMFG/D+Lkqezc1dWh7r6698WJt5R7Z48e6/ZFd3z6HDR44eC15vfHyt3aNzo+dPZk7Pzy4sZvP57GRmbC43MT+Z3fQZqj2+3AGvAjKzFy9NTk3lM90He1btXk7/0rqtI917tOOEE8SO9fX3j0ZiYvFbvvoa683wE3K0T6bfHvrUBiU5qr4uNnjv1FubV4gDXiHG+vq9gszkxueW3J1DQUU4fll9iaCOGtAWVWmX3HxZojaf2eJydEKmjp8Ldk5SS1APj3pfDK9/YKwml79lbj6fl/SAmqDNbmOtcvSjTLM7khra+mZFg8XkaFmmP3oLNuzdD9z+5N42zz6TeXpuaj4SO2R+j2r28aGRbvN7U1KOBr07fsFGtjozaDh3svSWTHs+ftmbV8ibl+7oPfrEcE90hrF3g/O4sQf9+eNmxuS4HztkQ2ZO7csFAAAAAAAAQGo1R9/JVPgqEyamTU7kkXFSxQdDma3JIoB6MUdvyzQ8UvC+ho+uS2mJrO8pafZnf/XNf1vy9PzCymJu+qWlivtTyZMv5pcWxycq71abe59tiaZstI6lSnFzlJDpuT8/stJ1i/d/fylAmJsPnwzXzCTLr++9b/5fXM8UPEM6fmFvdLtilm/i+ah7TTNHSzKd2rXPX6uS0po6UzHuc5l+f2+/H+ck3MwHp00XzziVm8l2urFfy/T+v0GstyxK2/zY3WFslxtrMr05sDp2ux/bHsZ2u7H9Ml1/oXLsnjC2x419XaaFXzNBbMqNvc+P7QhjD07Mz0xWqkrgZrn9/yeZ3m3PWNA3YsX339r+/0o4FlwpP9E6fb7a/p+OpF3x+/UFt///tc/ry17/dyr3/zdk+uSL/X5cse8l/P07vf/D/v+sTNPfro5N+bG7wtiuTVdsk3Dbf79MZ/ZcK9WN3/5+C4StFm3/e8vfHXVq/52RtLR/3dbaFB2S8iuXL47PzGQX2WCDDTZKG1t9Z0IjuOP/Z+4s6ssfSvMdf/z3P6aEM6u/Xw3H/97yE9Vp/N8VSev1ZyPxmJRcml2I75WS+ZXLj+Vmx6ez09m5Q51HOg8fOt51/Fg8EUzuwq2q6+pO5Lb/NzL9s+1q6fPu6vlf5fl/qvxEdWr/3ZG01Kr5StVFh9/+V2W6//q10vcSN5r/B9//PPJg8bXUP+vU/u2RtLR/3f/VpugAAAAAAAAAAAAAAAAA0NTi5ugDmc48HrPgt2abWf+35gdodVr/1RFJm2zQ7xWqrlQAaAKOHL0j08Mq2GtuwnZpIPqKO9p/AQAA//9HASOO") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x62042, 0x0) pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000340)=0xf) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='caif0\x00'}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket(0x1d, 0x2, 0x6) socket$packet(0x11, 0x3, 0x300) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, 0x0, 0x2}, 0x18) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) r7 = dup(r5) sendfile(r7, r2, 0x0, 0x89ffc) 2m11.368845081s ago: executing program 4 (id=161): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x82) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r4 = syz_open_dev$vcsn(0x0, 0x1, 0x64000) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) 2m3.44085189s ago: executing program 0 (id=168): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040085}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100008000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) 1m57.60741505s ago: executing program 0 (id=175): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{0x0}], 0x1) r7 = epoll_create(0x6) r8 = dup3(r4, r7, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 1m54.522222362s ago: executing program 32 (id=161): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x82) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) r4 = syz_open_dev$vcsn(0x0, 0x1, 0x64000) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) 1m54.420902394s ago: executing program 0 (id=179): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = dup3(r4, 0xffffffffffffffff, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 1m42.681151604s ago: executing program 0 (id=195): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) readv(r6, &(0x7f0000000c40)=[{0x0}], 0x1) r8 = epoll_create(0x6) r9 = dup3(r4, r8, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 1m39.796154824s ago: executing program 0 (id=198): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x18e64680a4f2fbed, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r1 = msgget(0x2, 0x301) msgrcv(r1, 0x0, 0x0, 0x2, 0x1000) msgctl$IPC_RMID(r1, 0x0) gettid() sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x110}}, 0x4008004) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}}) write$P9_RSTATu(r3, &(0x7f0000000080)={0x50e, 0x7d, 0x0, {{0x500, 0x1f8, 0x0, 0x440, {0x0, 0x0, 0x2}, 0x4840000, 0x0, 0xd, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15D#:\xf0v\xbe\x13\xd5Rw\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82', 0x2b, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x56, '\xf8\xf6i\xfbqk\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x15\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00C'}, 0x301, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00'/769, 0xffffffffffffffff, 0xee01}}, 0x50e) 1m37.056906171s ago: executing program 0 (id=202): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x23, 0x80009, 0x88, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m21.322889437s ago: executing program 33 (id=202): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x23, 0x80009, 0x88, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 16.293695097s ago: executing program 1 (id=301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@notreelog}, {@nossd_spread}, {@discard}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@user_subvol_rm}, {@nossd_spread}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074499000000000000000018000000", @ANYRES32, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 12.197972183s ago: executing program 1 (id=304): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$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") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) shutdown(r3, 0x1) 12.029816566s ago: executing program 3 (id=306): syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3c1182, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 9.299311883s ago: executing program 3 (id=309): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r6, &(0x7f0000000c40)=[{0x0}], 0x1) r8 = dup3(r4, 0xffffffffffffffff, 0x0) read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x2020) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 8.096251589s ago: executing program 1 (id=311): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) write$cgroup_freezer_state(r0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x1004491, &(0x7f0000000380)=ANY=[], 0x2, 0x826, &(0x7f00000012c0)="$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") getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000640)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1000000000000035) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000002580)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) 7.402472349s ago: executing program 2 (id=312): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000540)={[{@data_err_abort}, {@data_err_abort}, {@dax}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xf6, 0x47a, &(0x7f0000000680)="$eJzs3M1vFOUfAPDvzLbl7cevFfEFBKmikfjS0vIiBy8aTThoYqIHjKfaFlJZqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzszpSy7ZVu2Xeh+Psl0n2fn6T7Pd2ae2Wfm2d0AetZw9ieJ+F9E/B4Rg3n21gLD+cONaxcn/752cTKJWu2tv5J6uevXLk6WRcv/25ZnarUiv6lJvZfejZioVqfPFfnR+TMfjM6dv/DCzJmJU9Onps+OHzt2+NDegaPjRzoSZxbX9d0fz+7Zdfydy29Mnrj83k9JX+RxR0McnTKcb92mnu50ZV22fUm6vmEX7fvlZrrZkUA3VSIi21399f4/GJXYsrhuMF77rKuNA9ZUrVarLXNWXqgBG1gS3W4B0B3lG312/Vsu6zT0uCdcfTm/AMrivlEs+Zq+SPPEvv6G69tOGo6IEwv/fJUtsUb3IQAAlvouG/8832z8l8bDeWIg+/P/Yg5lKCIeiIgdEfFgROyMiIci6mUfiYhHV1h/4wzJ7eOf9Mqqg2tDNv57qZjbunX8l5ZFhipFbns9/v5YOr1xIPo3nZxJpseWqeP7V3/7otW6peO/bMnqL8eCRTuu9DXcoJuamJ9YTazNXP00Yndfs/iTxTiTiNgVEbtXWcfMs30t1905/mW0ftm21b6OeCbf/wvREH8paTk/Ofbi0fEjo5ujOn1w9ORMdfpg0zp+/vXSm63qX3X8HZpKy/b/1qbH/2L8Q8nmiLnzF07X52vnVl7HpT8+b3lNs8Lj//j24vgfSN6un48GihUfTczPnxuLGEher+dveX785quV+bJ8Fv+B/c37/464uSUei4g9EbE3Ih7PLgqLtj8REU9GxP5l4v/xlafeX3n86zNXmsU/daf9H0v3/8oTldM/fNtQbeX2+DdHRKv9f7ieOlA80875r90G3u32AwAAgPtBWv8MfJKOLKbTdGQk/wz/ztiaVmfn5p87Ofvh2an8s/JD0Z+Wd7ry+8H9SZYfK+4Nl/nxhvyh4r7xl5Ut9fzI5Gx1qtvBQ4/b1qL/Z/6sdLt1wJrrwDwacJ/S/6F36f/QmxL9H3qa/g+9q1n//6Rl6ZFv1rQxwLry/g+9q43+v5A/tB4VAPcn7//Qu/R/6Ektvxuf3tVX/tc98W/xe4b3Sns2fiLSe6IZGz/R1/aPWZy/cLrs13cqXBvMy2XPbGpaposnJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA76LwAA///J9uCF") r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0xfff, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) shutdown(r3, 0x1) 6.289267354s ago: executing program 3 (id=313): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{0x0}], 0x1) epoll_create(0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 5.616114203s ago: executing program 1 (id=314): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.015892791s ago: executing program 2 (id=315): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{0x0}], 0x1) epoll_create(0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 4.871391983s ago: executing program 3 (id=316): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r7, 0x4122, 0x0) readv(r6, &(0x7f0000000c40)=[{0x0}], 0x1) r8 = epoll_create(0x6) r9 = dup3(r4, r8, 0x0) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 3.741831729s ago: executing program 1 (id=317): syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3c1182, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 3.621993781s ago: executing program 3 (id=318): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file1\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1c8, &(0x7f0000000280)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x464, &(0x7f00000004c0)="$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") write$eventfd(0xffffffffffffffff, &(0x7f0000000480)=0xfffffffffffffff7, 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x24000840) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x9, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)="9c9e143e", &(0x7f00000001c0), 0xa7c, r6}, 0x38) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) 3.602712691s ago: executing program 2 (id=326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.407486657s ago: executing program 1 (id=319): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x82) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) write$binfmt_misc(r0, 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x1, 0x64000) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) 2.406624097s ago: executing program 2 (id=328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.458041331s ago: executing program 3 (id=320): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x101182) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1e, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) 1.456790991s ago: executing program 2 (id=330): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000880)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22040085}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100008000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x3, 0x2}, {0x0, [0x2e]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)}, {&(0x7f0000001600)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x2}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000700)="3dbe33faf3597dcad38c7f07509139be4aa82b139060", 0x16}, {&(0x7f0000000d40)="13fe0d0ebaa8f8e6945eda37626722a991bb043a3f0055b3077bbb48090fc9ec5ce2b21e4a08fe7ade767d68a0429b24ae1af46fd6bc808750074e324dfb9a870aa3ff152df224c74bf6d1141d7a13b29b4a73fcd81b23", 0x57}, {&(0x7f0000000dc0)="e17bfe9237363ae57066d5a4de6375e1f265c2111c04735b06a042b9e2da67139b00f3796bc91dc512b02f85c9eaf50143c80de360b7164b4f5b0a80424213098a1afc1c7f03d6d9813244a7a1e2ca2c", 0x50}, {&(0x7f0000000f00)="066e681f2ee7dcf707f860c23a27c2514c988ed127d3881aa3b5bad1e16068a95142f1b6cfb4f6b326aa7f5fc466358debdf24638d5d109ba2006e0881aa9517f96937b7e5fc5da0938563c576cd955bf390e6167d2abe8b0c2b0206ad3f4f06629e7b54d8a663e7c36704cdc9c66e9f682d361bf9a74826048ea7e0e5b6bc6444d97d2ef6d0b1294387576d59ace09741cebb30c411ce9f3dd19c022fdc6a6b84427bf5417ee7", 0xa7}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): ented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.546396][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.562305][ T4262] team0: Port device team_slave_1 added [ 95.569042][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.578358][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.610855][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.624299][ T4253] team0: Port device team_slave_1 added [ 95.639113][ T4252] team0: Port device team_slave_0 added [ 95.647860][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.679914][ T4252] team0: Port device team_slave_1 added [ 95.739136][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.746620][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.774341][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.787220][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.794795][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.822209][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.854343][ T4256] team0: Port device team_slave_0 added [ 95.861650][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.869297][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.897309][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.915424][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.924695][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.953275][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.962257][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 95.965566][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 95.973468][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 95.980509][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 95.988450][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 96.008250][ T4255] device hsr_slave_0 entered promiscuous mode [ 96.016643][ T4255] device hsr_slave_1 entered promiscuous mode [ 96.025081][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.032616][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.060560][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.074041][ T4256] team0: Port device team_slave_1 added [ 96.081229][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.088280][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.115109][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.207923][ T4262] device hsr_slave_0 entered promiscuous mode [ 96.215951][ T4262] device hsr_slave_1 entered promiscuous mode [ 96.223692][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.233209][ T4262] Cannot create hsr debugfs directory [ 96.255601][ T4253] device hsr_slave_0 entered promiscuous mode [ 96.263009][ T4253] device hsr_slave_1 entered promiscuous mode [ 96.270359][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.278848][ T4253] Cannot create hsr debugfs directory [ 96.295240][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.303605][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.333728][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.386661][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.394085][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.422289][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.494347][ T4252] device hsr_slave_0 entered promiscuous mode [ 96.501565][ T4252] device hsr_slave_1 entered promiscuous mode [ 96.509468][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.517854][ T4252] Cannot create hsr debugfs directory [ 96.673464][ T4256] device hsr_slave_0 entered promiscuous mode [ 96.680555][ T4256] device hsr_slave_1 entered promiscuous mode [ 96.694920][ T4256] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.703182][ T4256] Cannot create hsr debugfs directory [ 96.935870][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.951893][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.963455][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.988904][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.042895][ T4255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.055315][ T4255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.082568][ T4255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.096468][ T4255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.150022][ T4262] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.163811][ T4262] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.185606][ T4262] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.197077][ T4262] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.298087][ T4252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.336331][ T4252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.353595][ T4252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.380876][ T4252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.459951][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.489781][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.527212][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.546461][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.557256][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.573350][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.585730][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.596742][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.625245][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.633986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.645256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.673600][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.716853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.733055][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.745396][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.753870][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.763809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.775855][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.785028][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.792854][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.803679][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.813339][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.841093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.852785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.863955][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.873297][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.883044][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.900308][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.910408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.921799][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.930364][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.947850][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.966372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.002856][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.014665][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.026283][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.039653][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.048538][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 98.050023][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.055196][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 98.064724][ T4272] Bluetooth: hci2: command 0x041b tx timeout [ 98.071415][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 98.078033][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 98.094070][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.103849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.113241][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.123704][ T1200] cfg80211: failed to load regulatory.db [ 98.133128][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.163827][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.174687][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.183669][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.193172][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.202509][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.211913][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.243706][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.256284][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.268496][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.278197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.289169][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.307916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.318818][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.329429][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.339686][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.354622][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.377445][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.393584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.407541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.425665][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.433087][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.443177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.452660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.462103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.471942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.482419][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.490050][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.498847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.513375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.543816][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.559199][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.575966][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.588236][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.596651][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.608393][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.620147][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.630099][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.639800][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.647458][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.708092][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.719742][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.731659][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.743921][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.753611][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.775563][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.785819][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.801839][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.812425][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.821894][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.861933][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.892164][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.902329][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.912906][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.930083][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.949004][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.982525][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.994182][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.008418][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.028927][ T4252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.045823][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.090342][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.112559][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.133268][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.147692][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.160535][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.177235][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.186556][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.202905][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.253278][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.265800][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.299826][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.337736][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.357733][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.398059][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.406724][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.442445][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.488849][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.517270][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.555756][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.565826][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.606896][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.671646][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.682047][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.702293][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.732315][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.774276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.814367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.890547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.900519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.910446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.926473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.939711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.954975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.975239][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.019095][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.055320][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.080336][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.121307][ T4271] Bluetooth: hci4: command 0x040f tx timeout [ 100.127923][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 100.134876][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 100.141271][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 100.142001][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 100.157338][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.210347][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.247036][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.333737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.350999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.375102][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.396458][ T4262] device veth0_vlan entered promiscuous mode [ 100.409238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.428006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.448601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.458745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.499188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.509392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.524877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.536036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.554521][ T4262] device veth1_vlan entered promiscuous mode [ 100.577232][ T4255] device veth0_vlan entered promiscuous mode [ 100.590502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.601566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.613103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.624335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.635100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.676491][ T4255] device veth1_vlan entered promiscuous mode [ 100.701521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.713353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.728256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.741592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.760111][ T4253] device veth0_vlan entered promiscuous mode [ 100.803701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.815923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.826513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.844625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.862958][ T4252] device veth0_vlan entered promiscuous mode [ 100.888355][ T4253] device veth1_vlan entered promiscuous mode [ 100.904661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.915385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.927192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.939038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.950109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.961873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.973810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.989293][ T4262] device veth0_macvtap entered promiscuous mode [ 101.008335][ T4252] device veth1_vlan entered promiscuous mode [ 101.046886][ T4262] device veth1_macvtap entered promiscuous mode [ 101.065544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.075590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.088421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.101570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.111592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.122656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.131668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.139967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.149545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.180158][ T4255] device veth0_macvtap entered promiscuous mode [ 101.206225][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.222196][ T4255] device veth1_macvtap entered promiscuous mode [ 101.280382][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.290455][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.300514][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.309856][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.329155][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.340408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.353081][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.366595][ T4252] device veth0_macvtap entered promiscuous mode [ 101.378899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.388884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.400523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.417489][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.446459][ T4253] device veth0_macvtap entered promiscuous mode [ 101.465471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.477249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.489396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.503078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.512676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.525606][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.542553][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.556623][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.585116][ T4252] device veth1_macvtap entered promiscuous mode [ 101.595943][ T4262] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.609560][ T4262] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.621579][ T4262] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.632102][ T4262] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.646701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.657113][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.667866][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.682183][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.694654][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.708156][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.726219][ T4253] device veth1_macvtap entered promiscuous mode [ 101.743507][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.753254][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.766065][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.776037][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.786273][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.795294][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.805603][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.823704][ T4256] device veth0_vlan entered promiscuous mode [ 101.839037][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.849732][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.862474][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.873692][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.894419][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.906731][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.919659][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.931923][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.948945][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.989894][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.007582][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.025566][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.042672][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.056898][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.071886][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.087203][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.096432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.108712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.119758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.129438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.153768][ T4256] device veth1_vlan entered promiscuous mode [ 102.171445][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.185023][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.198843][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.204928][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 102.213585][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 102.218669][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 102.225603][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 102.232673][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 102.247479][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.262193][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.303016][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.315647][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.329144][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.341634][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.352680][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.366036][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.378627][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.387658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.398397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.411004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.420523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.433460][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.445635][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.457689][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.468641][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.516674][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.531497][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.542456][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.553088][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.615459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.628726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.655717][ T4256] device veth0_macvtap entered promiscuous mode [ 102.766075][ T4256] device veth1_macvtap entered promiscuous mode [ 102.788442][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.798249][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.810456][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.826571][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.836804][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.865549][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.875577][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.913433][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.938856][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.954657][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.966726][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.978231][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.989093][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.002302][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.021072][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.036360][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.051141][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.089184][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.100000][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.111725][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.112969][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.123662][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.141011][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.142737][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.165597][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.176251][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.187477][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.198843][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.213244][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.227070][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.251959][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.263053][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.272957][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.288404][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.297850][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.308584][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.318485][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.334010][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.354172][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.392325][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.483794][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.487433][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.501020][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.522410][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.566999][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.587782][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.613591][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.647510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.690680][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.699371][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.706921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.723471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.945811][ T4345] loop3: detected capacity change from 0 to 32768 [ 104.023620][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.041338][ T4345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4345) [ 104.050800][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.074690][ T4345] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.085687][ T4345] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 104.094642][ T4345] BTRFS info (device loop3): setting nodatacow, compression disabled [ 104.103069][ T4345] BTRFS info (device loop3): disabling tree log [ 104.109666][ T4345] BTRFS info (device loop3): turning on sync discard [ 104.117255][ T4345] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.129151][ T4345] BTRFS info (device loop3): force zstd compression, level 3 [ 104.137450][ T4345] BTRFS info (device loop3): using free space tree [ 104.154364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.213146][ T4349] loop0: detected capacity change from 0 to 512 [ 104.258742][ T4349] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.268501][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.298023][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.314954][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.410818][ T4349] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.420278][ T4349] EXT4-fs (loop0): DAX unsupported by block device. [ 104.547965][ T4345] BTRFS info (device loop3): enabling ssd optimizations [ 104.774504][ T4373] Zero length message leads to an empty skb [ 104.798362][ T4373] loop1: detected capacity change from 0 to 8 [ 105.469415][ T27] audit: type=1800 audit(1747121099.653:2): pid=4345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 105.830889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.844332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.036497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 106.047089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.056253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 106.065882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 106.074631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 106.219794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.274652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.286382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 106.556116][ T4390] loop0: detected capacity change from 0 to 8 [ 106.699123][ T4391] SQUASHFS error: xz decompression failed, data probably corrupt [ 106.710049][ T4391] SQUASHFS error: Failed to read block 0xa8: -5 [ 106.768432][ T4391] SQUASHFS error: xz decompression failed, data probably corrupt [ 106.777204][ T4391] SQUASHFS error: Failed to read block 0xa8: -5 [ 106.785371][ T27] audit: type=1800 audit(1747121100.973:3): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 107.137092][ T4262] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.336971][ T4396] SQUASHFS error: xz decompression failed, data probably corrupt [ 107.346076][ T4396] SQUASHFS error: Failed to read block 0xa8: -5 [ 107.398780][ T4396] SQUASHFS error: xz decompression failed, data probably corrupt [ 107.409577][ T4396] SQUASHFS error: Failed to read block 0xa8: -5 [ 107.417272][ T27] audit: type=1800 audit(1747121101.603:4): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 111.625914][ T4372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4372) [ 117.973635][ T4435] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 119.569932][ T4442] loop4: detected capacity change from 0 to 40427 [ 119.653300][ T4442] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 119.661839][ T4442] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.677370][ T4442] F2FS-fs (loop4): invalid crc value [ 120.453973][ T4442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.592001][ T4442] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 120.592277][ T4442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.945574][ T4473] loop2: detected capacity change from 0 to 512 [ 123.983454][ T4473] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.045455][ T4473] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 124.080790][ T4473] EXT4-fs (loop2): DAX unsupported by block device. [ 126.095270][ T4485] loop4: detected capacity change from 0 to 8 [ 128.008761][ T4495] ufs: You didn't specify the type of your ufs filesystem [ 128.008761][ T4495] [ 128.008761][ T4495] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 128.008761][ T4495] [ 128.008761][ T4495] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 128.056412][ T1125] block nbd4: Attempted send on invalid socket [ 128.064705][ T1125] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 128.081241][ T4494] SQUASHFS error: xz decompression failed, data probably corrupt [ 128.089882][ T4494] SQUASHFS error: Failed to read block 0xa8: -5 [ 128.141919][ T4494] SQUASHFS error: xz decompression failed, data probably corrupt [ 128.150346][ T4494] SQUASHFS error: Failed to read block 0xa8: -5 [ 128.159874][ T27] audit: type=1800 audit(2000000006.140:5): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.29" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 130.852976][ T27] audit: type=1400 audit(2000000008.830:6): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=1AE97E142D901405 pid=4502 comm="syz.2.34" [ 133.855535][ T4519] loop2: detected capacity change from 0 to 8 [ 134.134139][ T4525] ufs: You didn't specify the type of your ufs filesystem [ 134.134139][ T4525] [ 134.134139][ T4525] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 134.134139][ T4525] [ 134.134139][ T4525] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 134.171388][ T1125] block nbd2: Attempted send on invalid socket [ 134.179152][ T1125] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.236292][ T4524] SQUASHFS error: xz decompression failed, data probably corrupt [ 134.245135][ T4524] SQUASHFS error: Failed to read block 0xa8: -5 [ 134.306470][ T4524] SQUASHFS error: xz decompression failed, data probably corrupt [ 134.314958][ T4524] SQUASHFS error: Failed to read block 0xa8: -5 [ 134.322562][ T27] audit: type=1800 audit(2000000001.180:7): pid=4524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.36" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 137.558370][ T27] audit: type=1400 audit(2000000004.400:8): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=1AE97E142D901405 pid=4532 comm="syz.1.43" [ 139.086278][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.147402][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.585997][ T4540] loop3: detected capacity change from 0 to 256 [ 139.693403][ T27] audit: type=1400 audit(2000000006.540:9): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=1AE97E142D901405 pid=4539 comm="syz.2.41" [ 142.197478][ T4549] loop0: detected capacity change from 0 to 8 [ 142.433558][ T4551] loop2: detected capacity change from 0 to 32768 [ 142.442616][ T4551] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 143.853474][ T4554] SQUASHFS error: xz decompression failed, data probably corrupt [ 143.894265][ T4554] SQUASHFS error: Failed to read block 0xa8: -5 [ 144.258536][ T27] audit: type=1400 audit(2000000000.760:10): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=1AE97E142D901405 pid=4557 comm="syz.1.48" [ 144.731189][ T4554] SQUASHFS error: xz decompression failed, data probably corrupt [ 144.850857][ T4554] SQUASHFS error: Failed to read block 0xa8: -5 [ 144.894433][ T4566] loop4: detected capacity change from 0 to 8 [ 144.915565][ T27] audit: type=1800 audit(2000000001.410:11): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.45" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 145.806397][ T4571] ufs: You didn't specify the type of your ufs filesystem [ 145.806397][ T4571] [ 145.806397][ T4571] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 145.806397][ T4571] [ 145.806397][ T4571] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 145.839892][ T4555] block nbd4: Attempted send on invalid socket [ 145.846326][ T4555] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.411951][ T4579] loop0: detected capacity change from 0 to 40427 [ 148.419879][ T4579] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 148.427892][ T4579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.444036][ T4579] F2FS-fs (loop0): invalid crc value [ 148.516159][ T4579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.590349][ T4579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 148.597765][ T4579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 149.744396][ T4601] loop1: detected capacity change from 0 to 8 [ 149.816172][ T4595] loop3: detected capacity change from 0 to 40427 [ 149.832449][ T4595] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 149.840337][ T4595] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 149.886383][ T4595] F2FS-fs (loop3): invalid crc value [ 150.901209][ T4611] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 151.183593][ T4609] sctp: failed to load transform for md5: -2 [ 151.194172][ T4603] sctp: failed to load transform for md5: -2 [ 151.284897][ T4595] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.288890][ T4623] loop2: detected capacity change from 0 to 8 [ 151.337646][ T27] audit: type=1800 audit(2000000007.810:12): pid=4601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.59" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 151.382292][ T4595] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 151.389495][ T4595] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.879210][ T4631] SQUASHFS error: xz decompression failed, data probably corrupt [ 151.887549][ T4631] SQUASHFS error: Failed to read block 0xa8: -5 [ 151.907341][ T4631] SQUASHFS error: xz decompression failed, data probably corrupt [ 151.915648][ T4631] SQUASHFS error: Failed to read block 0xa8: -5 [ 152.166017][ T27] audit: type=1800 audit(2000000008.430:13): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.63" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 152.403877][ T4633] loop2: detected capacity change from 0 to 1024 [ 152.411367][ T4633] ======================================================= [ 152.411367][ T4633] WARNING: The mand mount option has been deprecated and [ 152.411367][ T4633] and is ignored by this kernel. Remove the mand [ 152.411367][ T4633] option from the mount to silence this warning. [ 152.411367][ T4633] ======================================================= [ 152.423504][ T4635] loop1: detected capacity change from 0 to 8 [ 152.549316][ T4635] SQUASHFS error: zlib decompression failed, data probably corrupt [ 152.601520][ T4372] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.900732][ T4635] SQUASHFS error: Failed to read block 0x9b: -5 [ 152.907637][ T4635] SQUASHFS error: Unable to read metadata cache entry [99] [ 153.669150][ T4635] SQUASHFS error: Unable to read inode 0x127 [ 153.986691][ T4643] loop2: detected capacity change from 0 to 32768 [ 153.995032][ T4643] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 155.670570][ C0] sched: RT throttling activated [ 156.030992][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 157.367974][ T4656] loop2: detected capacity change from 0 to 8 [ 158.668947][ T4657] SQUASHFS error: xz decompression failed, data probably corrupt [ 158.669222][ T4658] ufs: You didn't specify the type of your ufs filesystem [ 158.669222][ T4658] [ 158.669222][ T4658] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 158.669222][ T4658] [ 158.669222][ T4658] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 158.713850][ T4657] SQUASHFS error: Failed to read block 0xa8: -5 [ 158.714338][ T4555] block nbd2: Attempted send on invalid socket [ 158.727104][ T4555] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 158.760368][ T4657] SQUASHFS error: xz decompression failed, data probably corrupt [ 158.769321][ T4657] SQUASHFS error: Failed to read block 0xa8: -5 [ 158.776949][ T27] audit: type=1800 audit(2000000015.280:14): pid=4657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.72" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 159.634821][ T4666] loop2: detected capacity change from 0 to 512 [ 159.642115][ T4666] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.678226][ T4666] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 159.686863][ T4666] EXT4-fs (loop2): DAX unsupported by block device. [ 159.996012][ T4669] loop0: detected capacity change from 0 to 512 [ 160.003841][ T4669] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.630058][ T4669] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 160.660704][ T4669] EXT4-fs (loop0): DAX unsupported by block device. [ 160.825889][ T4681] loop1: detected capacity change from 0 to 8 [ 161.721672][ T4691] SQUASHFS error: xz decompression failed, data probably corrupt [ 161.743906][ T4691] SQUASHFS error: Failed to read block 0xa8: -5 [ 162.215464][ T4694] loop2: detected capacity change from 0 to 32768 [ 162.225003][ T4694] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.75 (4694) [ 162.316932][ T4694] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 162.329941][ T4694] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 162.370191][ T4694] BTRFS info (device loop2): using free space tree [ 162.378135][ T4691] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.386463][ T4691] SQUASHFS error: Failed to read block 0xa8: -5 [ 162.393774][ T27] audit: type=1800 audit(2000000018.900:15): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 162.710859][ T4694] BTRFS info (device loop2): enabling ssd optimizations [ 163.856654][ T4721] loop3: detected capacity change from 0 to 512 [ 163.859252][ T4723] loop1: detected capacity change from 0 to 40427 [ 163.898546][ T4723] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 163.906672][ T4723] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 163.938947][ T4723] F2FS-fs (loop1): invalid crc value [ 164.010017][ T4721] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.032669][ T4256] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 164.066826][ T4723] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.132677][ T4705] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 164.159333][ T4731] loop4: detected capacity change from 0 to 32768 [ 164.181790][ T4731] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 164.215019][ T4723] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.222454][ T4723] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.380334][ T4721] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 164.536500][ T4721] EXT4-fs (loop3): DAX unsupported by block device. [ 165.965305][ T4372] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop2 scanned by udevd (4372) [ 166.477720][ T4400] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 169.695555][ T4753] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 169.812600][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 171.211869][ T4768] loop4: detected capacity change from 0 to 8 [ 171.394579][ T4776] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 171.604350][ T4779] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.612951][ T4779] SQUASHFS error: Failed to read block 0xa8: -5 [ 171.657081][ T4779] SQUASHFS error: xz decompression failed, data probably corrupt [ 171.665584][ T4779] SQUASHFS error: Failed to read block 0xa8: -5 [ 171.674103][ T27] audit: type=1800 audit(2000000028.180:16): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 172.061467][ T4770] sctp: failed to load transform for md5: -4 [ 172.069993][ T4774] sctp: failed to load transform for md5: -2 [ 172.598245][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 173.265325][ T4792] loop2: detected capacity change from 0 to 1024 [ 173.616117][ T4799] loop3: detected capacity change from 0 to 8 [ 173.702821][ T4799] SQUASHFS error: zlib decompression failed, data probably corrupt [ 173.778032][ T4799] SQUASHFS error: Failed to read block 0x9b: -5 [ 173.817688][ T4799] SQUASHFS error: Unable to read metadata cache entry [99] [ 173.846578][ T4788] loop4: detected capacity change from 0 to 32768 [ 173.870922][ T4799] SQUASHFS error: Unable to read inode 0x127 [ 173.890781][ T4788] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 174.585521][ T4790] loop0: detected capacity change from 0 to 32768 [ 174.660959][ T4799] loop3: detected capacity change from 0 to 512 [ 174.699784][ T4790] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 174.732002][ T4799] EXT4-fs error (device loop3): ext4_get_journal_inode:5723: comm syz.3.96: inode #196608: comm syz.3.96: iget: illegal inode # [ 175.345504][ T4799] EXT4-fs (loop3): Remounting filesystem read-only [ 175.396096][ T4799] EXT4-fs (loop3): no journal found [ 175.401687][ T4799] EXT4-fs (loop3): can't get journal size [ 175.622284][ T4799] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 177.442950][ T4823] loop2: detected capacity change from 0 to 8 [ 177.485958][ T4799] EXT4-fs (loop3): failed to initialize system zone (-22) [ 177.558661][ T4826] SQUASHFS error: xz decompression failed, data probably corrupt [ 177.567587][ T4826] SQUASHFS error: Failed to read block 0xa8: -5 [ 177.604639][ T4826] SQUASHFS error: xz decompression failed, data probably corrupt [ 177.613088][ T4826] SQUASHFS error: Failed to read block 0xa8: -5 [ 177.620992][ T27] audit: type=1800 audit(2000000034.130:17): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.104" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 178.323269][ T4799] EXT4-fs (loop3): mount failed [ 178.527620][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 180.129525][ T4841] loop3: detected capacity change from 0 to 512 [ 180.145872][ T4843] loop2: detected capacity change from 0 to 8 [ 180.178657][ T4843] SQUASHFS error: xz decompression failed, data probably corrupt [ 180.186600][ T4843] SQUASHFS error: Failed to read block 0xa8: -5 [ 180.199098][ T4843] SQUASHFS error: xz decompression failed, data probably corrupt [ 180.207030][ T4843] SQUASHFS error: Failed to read block 0xa8: -5 [ 180.213634][ T27] audit: type=1800 audit(2000000036.720:18): pid=4843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.110" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 180.214782][ T4841] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.416733][ T4841] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 180.536956][ T4848] loop2: detected capacity change from 0 to 8 [ 180.570809][ T4841] EXT4-fs (loop3): DAX unsupported by block device. [ 181.824094][ T4844] 9pnet_fd: Insufficient options for proto=fd [ 181.891860][ T4851] ufs: You didn't specify the type of your ufs filesystem [ 181.891860][ T4851] [ 181.891860][ T4851] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 181.891860][ T4851] [ 181.891860][ T4851] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 181.926332][ T4555] block nbd2: Attempted send on invalid socket [ 181.933240][ T4555] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 182.123637][ T4341] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 182.193801][ T4372] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 182.623507][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 183.881320][ T4863] loop2: detected capacity change from 0 to 512 [ 183.888598][ T4863] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.896919][ T4863] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 183.905284][ T4863] EXT4-fs (loop2): DAX unsupported by block device. [ 185.867183][ T4880] 9pnet_fd: Insufficient options for proto=fd [ 189.396231][ T4904] loop2: detected capacity change from 0 to 32768 [ 189.410229][ T4904] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.418971][ T4904] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 189.447523][ T4904] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 189.460272][ T126] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 189.478269][ T126] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 189.605803][ T126] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 189.625399][ T126] gfs2: fsid=syz:syz.0: jid=0: Done [ 189.693132][ T4904] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 191.837466][ T4904] gfs2: fsid=syz:syz.0: found 1 quota changes [ 192.091968][ T4914] loop3: detected capacity change from 0 to 32768 [ 192.111776][ T4914] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 192.119437][ T4914] CPU: 0 PID: 4914 Comm: syz.3.125 Not tainted 6.1.138-syzkaller #0 [ 192.128097][ T4914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.138298][ T4914] Call Trace: [ 192.141649][ T4914] [ 192.144602][ T4914] dump_stack_lvl+0x168/0x22e [ 192.149363][ T4914] ? show_regs_print_info+0x12/0x12 [ 192.154681][ T4914] ? load_image+0x3b0/0x3b0 [ 192.159225][ T4914] sysfs_create_dir_ns+0x252/0x280 [ 192.164595][ T4914] ? sysfs_warn_dup+0xa0/0xa0 [ 192.169473][ T4914] ? kobject_set_name_vargs+0x5d/0x110 [ 192.175229][ T4914] ? do_raw_spin_unlock+0x11d/0x230 [ 192.180461][ T4914] kobject_add_internal+0x6b8/0xc80 [ 192.185707][ T4914] kobject_init_and_add+0x122/0x190 [ 192.190937][ T4914] ? lockdep_softirqs_off+0x420/0x420 [ 192.196360][ T4914] ? kobject_add+0x210/0x210 [ 192.201024][ T4914] ? __init_swait_queue_head+0xa5/0x150 [ 192.206709][ T4914] gfs2_sys_fs_add+0x234/0x480 [ 192.211633][ T4914] ? gfs2_recover_set+0x240/0x240 [ 192.216757][ T4914] ? snprintf+0xd7/0x120 [ 192.221019][ T4914] ? vscnprintf+0x80/0x80 [ 192.225478][ T4914] gfs2_fill_super+0x126f/0x1f80 [ 192.230555][ T4914] ? gfs2_reconfigure+0xcd0/0xcd0 [ 192.235679][ T4914] ? sb_set_blocksize+0xa5/0xe0 [ 192.240730][ T4914] get_tree_bdev+0x3f1/0x610 [ 192.245383][ T4914] ? gfs2_reconfigure+0xcd0/0xcd0 [ 192.250463][ T4914] gfs2_get_tree+0x4d/0x1e0 [ 192.255013][ T4914] vfs_get_tree+0x88/0x270 [ 192.259457][ T4914] do_new_mount+0x24a/0xa40 [ 192.263996][ T4914] __se_sys_mount+0x2d6/0x3c0 [ 192.268721][ T4914] ? __x64_sys_mount+0xc0/0xc0 [ 192.273717][ T4914] ? syscall_user_dispatch+0x45/0x90 [ 192.279171][ T4914] ? __x64_sys_mount+0x1c/0xc0 [ 192.284161][ T4914] do_syscall_64+0x4c/0xa0 [ 192.288729][ T4914] ? clear_bhb_loop+0x45/0xa0 [ 192.293420][ T4914] ? clear_bhb_loop+0x45/0xa0 [ 192.298661][ T4914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.304716][ T4914] RIP: 0033:0x7fcbe159010a [ 192.309196][ T4914] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.329028][ T4914] RSP: 002b:00007fcbe2425e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.337763][ T4914] RAX: ffffffffffffffda RBX: 00007fcbe2425ef0 RCX: 00007fcbe159010a [ 192.345803][ T4914] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fcbe2425eb0 [ 192.354427][ T4914] RBP: 00002000000124c0 R08: 00007fcbe2425ef0 R09: 0000000000000000 [ 192.362426][ T4914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 192.370502][ T4914] R13: 00007fcbe2425eb0 R14: 00000000000124d4 R15: 0000200000000000 [ 192.378551][ T4914] [ 192.382726][ T4914] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 192.396414][ T4914] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 192.406806][ T4256] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 192.406806][ T4256] inode = 11 2339 [ 192.406806][ T4256] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 192.429728][ T4256] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 192.430777][ T4913] loop0: detected capacity change from 0 to 2048 [ 192.439983][ T4256] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4256 [syz-executor] gfs2_quota_sync+0x32c/0x6f0 [ 192.457697][ T4256] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 192.468300][ T4256] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 192.486678][ T4256] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 192.496195][ T4256] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 192.506509][ T4256] gfs2: fsid=syz:syz.0: File system withdrawn [ 192.515793][ T4256] CPU: 1 PID: 4256 Comm: syz-executor Not tainted 6.1.138-syzkaller #0 [ 192.524210][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.534607][ T4256] Call Trace: [ 192.538008][ T4256] [ 192.540986][ T4256] dump_stack_lvl+0x168/0x22e [ 192.545730][ T4256] ? kobject_uevent_env+0x35f/0x8a0 [ 192.550978][ T4256] ? show_regs_print_info+0x12/0x12 [ 192.556237][ T4256] ? load_image+0x3b0/0x3b0 [ 192.560805][ T4256] ? kobject_uevent_env+0x35f/0x8a0 [ 192.566066][ T4256] gfs2_withdraw+0x143f/0x1780 [ 192.570918][ T4256] ? gfs2_lm+0x220/0x220 [ 192.575216][ T4256] ? gfs2_consist_inode_i+0xf1/0x110 [ 192.580602][ T4256] gfs2_inode_refresh+0xb5e/0xfc0 [ 192.585677][ T4256] ? gfs2_inode_metasync+0xf0/0xf0 [ 192.590814][ T4256] ? gfs2_glock_nq+0xcf0/0x14e0 [ 192.595682][ T4256] gfs2_instantiate+0x15e/0x210 [ 192.600562][ T4256] gfs2_glock_wait+0x1d0/0x2a0 [ 192.605456][ T4256] do_sync+0x49a/0xc00 [ 192.609588][ T4256] ? gfs2_quota_sync+0x32c/0x6f0 [ 192.614638][ T4256] ? slot_put+0x1e0/0x1e0 [ 192.619050][ T4256] ? gfs2_quota_sync+0x32c/0x6f0 [ 192.624043][ T4256] ? do_raw_spin_unlock+0x11d/0x230 [ 192.629366][ T4256] gfs2_quota_sync+0x32c/0x6f0 [ 192.634166][ T4256] gfs2_sync_fs+0x48/0xb0 [ 192.638535][ T4256] sync_filesystem+0xe6/0x220 [ 192.643487][ T4256] generic_shutdown_super+0x6b/0x340 [ 192.648808][ T4256] kill_block_super+0x7c/0xe0 [ 192.653508][ T4256] deactivate_locked_super+0x93/0xf0 [ 192.658900][ T4256] cleanup_mnt+0x463/0x4f0 [ 192.663895][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 192.669242][ T4256] task_work_run+0x1ca/0x250 [ 192.674237][ T4256] ? task_work_cancel+0x230/0x230 [ 192.679296][ T4256] ? exit_to_user_mode_loop+0x3b/0x110 [ 192.684780][ T4256] exit_to_user_mode_loop+0xe6/0x110 [ 192.690106][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 192.695859][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 192.701357][ T4256] do_syscall_64+0x58/0xa0 [ 192.705892][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 192.710613][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 192.715325][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.721262][ T4256] RIP: 0033:0x7fee5f98fc97 [ 192.725784][ T4256] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 192.745518][ T4256] RSP: 002b:00007ffe0db97828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.753974][ T4256] RAX: 0000000000000000 RBX: 00007fee5fa1089d RCX: 00007fee5f98fc97 [ 192.762074][ T4256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0db978e0 [ 192.770356][ T4256] RBP: 00007ffe0db978e0 R08: 0000000000000000 R09: 0000000000000000 [ 192.778462][ T4256] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0db98970 [ 192.786545][ T4256] R13: 00007fee5fa1089d R14: 000000000002ed87 R15: 00007ffe0db989b0 [ 192.794637][ T4256] [ 192.807862][ T4372] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.808181][ T4256] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 192.834466][ T4256] CPU: 1 PID: 4256 Comm: syz-executor Not tainted 6.1.138-syzkaller #0 [ 192.842767][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 192.852865][ T4256] Call Trace: [ 192.856178][ T4256] [ 192.859132][ T4256] dump_stack_lvl+0x168/0x22e [ 192.863853][ T4256] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 192.869094][ T4256] ? show_regs_print_info+0x12/0x12 [ 192.874557][ T4256] ? load_image+0x3b0/0x3b0 [ 192.879187][ T4256] ? do_raw_spin_unlock+0x11d/0x230 [ 192.884434][ T4256] gfs2_assert_warn_i+0x18f/0x2c0 [ 192.889682][ T4256] gfs2_quota_cleanup+0x4b4/0x6a0 [ 192.894757][ T4256] gfs2_put_super+0x22f/0x8c0 [ 192.899503][ T4256] ? gfs2_evict_inode+0x1170/0x1170 [ 192.905022][ T4256] generic_shutdown_super+0x130/0x340 [ 192.910442][ T4256] kill_block_super+0x7c/0xe0 [ 192.915248][ T4256] deactivate_locked_super+0x93/0xf0 [ 192.920581][ T4256] cleanup_mnt+0x463/0x4f0 [ 192.925205][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 192.930565][ T4256] task_work_run+0x1ca/0x250 [ 192.935208][ T4256] ? task_work_cancel+0x230/0x230 [ 192.940309][ T4256] ? exit_to_user_mode_loop+0x3b/0x110 [ 192.945827][ T4256] exit_to_user_mode_loop+0xe6/0x110 [ 192.951167][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 192.956779][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 192.962459][ T4256] do_syscall_64+0x58/0xa0 [ 192.967021][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 192.971833][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 192.976658][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.982841][ T4256] RIP: 0033:0x7fee5f98fc97 [ 192.987341][ T4256] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 193.007083][ T4256] RSP: 002b:00007ffe0db97828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.015231][ T4913] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.015602][ T4256] RAX: 0000000000000000 RBX: 00007fee5fa1089d RCX: 00007fee5f98fc97 [ 193.015622][ T4256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0db978e0 [ 193.015636][ T4256] RBP: 00007ffe0db978e0 R08: 0000000000000000 R09: 0000000000000000 [ 193.049217][ T4256] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0db98970 [ 193.057249][ T4256] R13: 00007fee5fa1089d R14: 000000000002ed87 R15: 00007ffe0db989b0 [ 193.065277][ T4256] [ 193.364093][ T4913] overlayfs: unrecognized mount option "/" or missing value [ 193.506489][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 195.192003][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 195.527069][ T4933] loop3: detected capacity change from 0 to 764 [ 195.905395][ T4943] loop2: detected capacity change from 0 to 764 [ 197.116887][ T4942] loop1: detected capacity change from 0 to 1024 [ 197.173245][ T4950] loop2: detected capacity change from 0 to 512 [ 197.181037][ T4950] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.188827][ T4950] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 197.197487][ T4950] EXT4-fs (loop2): DAX unsupported by block device. [ 197.455814][ T4946] loop0: detected capacity change from 0 to 32768 [ 197.466059][ T4946] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 197.474997][ T4946] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 197.984498][ T4946] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 3ms [ 198.403234][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 198.420724][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 198.517537][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms [ 199.423804][ T4959] loop1: detected capacity change from 0 to 32768 [ 199.433373][ T4960] loop3: detected capacity change from 0 to 32768 [ 199.460144][ T4960] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 199.460160][ T4959] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 199.467892][ T4960] CPU: 0 PID: 4960 Comm: syz.3.137 Not tainted 6.1.138-syzkaller #0 [ 199.467927][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 199.467941][ T4960] Call Trace: [ 199.467952][ T4960] [ 199.467961][ T4960] dump_stack_lvl+0x168/0x22e [ 199.468004][ T4960] ? show_regs_print_info+0x12/0x12 [ 199.468041][ T4960] ? load_image+0x3b0/0x3b0 [ 199.515288][ T4960] sysfs_create_dir_ns+0x252/0x280 [ 199.520716][ T4960] ? sysfs_warn_dup+0xa0/0xa0 [ 199.526070][ T4960] ? kobject_set_name_vargs+0x5d/0x110 [ 199.531584][ T4960] ? do_raw_spin_unlock+0x11d/0x230 [ 199.537179][ T4960] kobject_add_internal+0x6b8/0xc80 [ 199.542445][ T4960] kobject_init_and_add+0x122/0x190 [ 199.547719][ T4960] ? lockdep_softirqs_off+0x420/0x420 [ 199.553139][ T4960] ? kobject_add+0x210/0x210 [ 199.557770][ T4960] ? __init_swait_queue_head+0xa5/0x150 [ 199.563738][ T4960] gfs2_sys_fs_add+0x234/0x480 [ 199.568991][ T4960] ? gfs2_recover_set+0x240/0x240 [ 199.574051][ T4960] ? snprintf+0xd7/0x120 [ 199.578405][ T4960] ? vscnprintf+0x80/0x80 [ 199.582772][ T4960] gfs2_fill_super+0x126f/0x1f80 [ 199.587746][ T4960] ? gfs2_reconfigure+0xcd0/0xcd0 [ 199.592794][ T4960] ? sb_set_blocksize+0xa5/0xe0 [ 199.597701][ T4960] get_tree_bdev+0x3f1/0x610 [ 199.602343][ T4960] ? gfs2_reconfigure+0xcd0/0xcd0 [ 199.607765][ T4960] gfs2_get_tree+0x4d/0x1e0 [ 199.612313][ T4960] vfs_get_tree+0x88/0x270 [ 199.616762][ T4960] do_new_mount+0x24a/0xa40 [ 199.621322][ T4960] __se_sys_mount+0x2d6/0x3c0 [ 199.626044][ T4960] ? __x64_sys_mount+0xc0/0xc0 [ 199.630924][ T4960] ? lockdep_hardirqs_on+0x94/0x140 [ 199.636355][ T4960] ? __x64_sys_mount+0x1c/0xc0 [ 199.641267][ T4960] do_syscall_64+0x4c/0xa0 [ 199.645728][ T4960] ? clear_bhb_loop+0x45/0xa0 [ 199.650428][ T4960] ? clear_bhb_loop+0x45/0xa0 [ 199.655142][ T4960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.661357][ T4960] RIP: 0033:0x7fcbe159010a [ 199.666162][ T4960] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.686159][ T4960] RSP: 002b:00007fcbe2425e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.694635][ T4960] RAX: ffffffffffffffda RBX: 00007fcbe2425ef0 RCX: 00007fcbe159010a [ 199.702920][ T4960] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007fcbe2425eb0 [ 199.712215][ T4960] RBP: 00002000000124c0 R08: 00007fcbe2425ef0 R09: 0000000000000000 [ 199.720430][ T4960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 199.728521][ T4960] R13: 00007fcbe2425eb0 R14: 00000000000124d4 R15: 0000200000000000 [ 199.736565][ T4960] [ 199.739678][ T4959] CPU: 1 PID: 4959 Comm: syz.1.136 Not tainted 6.1.138-syzkaller #0 [ 199.739821][ T4960] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 199.748076][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 199.748097][ T4959] Call Trace: [ 199.748108][ T4959] [ 199.748119][ T4959] dump_stack_lvl+0x168/0x22e [ 199.748158][ T4959] ? show_regs_print_info+0x12/0x12 [ 199.762596][ T4960] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 199.772997][ T4959] ? load_image+0x3b0/0x3b0 [ 199.773074][ T4959] sysfs_create_dir_ns+0x252/0x280 [ 199.805601][ T4959] ? sysfs_warn_dup+0xa0/0xa0 [ 199.810370][ T4959] ? kobject_set_name_vargs+0x5d/0x110 [ 199.814336][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 199.815883][ T4959] ? do_raw_spin_unlock+0x11d/0x230 [ 199.815934][ T4959] kobject_add_internal+0x6b8/0xc80 [ 199.821339][ T4946] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 199.826340][ T4959] kobject_init_and_add+0x122/0x190 [ 199.826384][ T4959] ? lockdep_softirqs_off+0x420/0x420 [ 199.838781][ T4959] ? kobject_add+0x210/0x210 [ 199.838833][ T4959] ? __init_swait_queue_head+0xa5/0x150 [ 199.860125][ T4959] gfs2_sys_fs_add+0x234/0x480 [ 199.865055][ T4959] ? gfs2_recover_set+0x240/0x240 [ 199.869165][ T4946] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 199.870128][ T4959] ? snprintf+0xd7/0x120 [ 199.870161][ T4959] ? vscnprintf+0x80/0x80 [ 199.886355][ T4959] gfs2_fill_super+0x126f/0x1f80 [ 199.891723][ T4959] ? gfs2_reconfigure+0xcd0/0xcd0 [ 199.896912][ T4959] ? sb_set_blocksize+0xa5/0xe0 [ 199.902017][ T4959] get_tree_bdev+0x3f1/0x610 [ 199.906686][ T4959] ? gfs2_reconfigure+0xcd0/0xcd0 [ 199.912119][ T4959] gfs2_get_tree+0x4d/0x1e0 [ 199.916784][ T4959] vfs_get_tree+0x88/0x270 [ 199.921353][ T4959] do_new_mount+0x24a/0xa40 [ 199.925923][ T4959] __se_sys_mount+0x2d6/0x3c0 [ 199.930748][ T4959] ? __x64_sys_mount+0xc0/0xc0 [ 199.935660][ T4959] ? syscall_user_dispatch+0x45/0x90 [ 199.941192][ T4959] ? __x64_sys_mount+0x1c/0xc0 [ 199.946112][ T4959] do_syscall_64+0x4c/0xa0 [ 199.950686][ T4959] ? clear_bhb_loop+0x45/0xa0 [ 199.955415][ T4959] ? clear_bhb_loop+0x45/0xa0 [ 199.960236][ T4959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.966451][ T4959] RIP: 0033:0x7f583399010a [ 199.970903][ T4959] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.991327][ T4959] RSP: 002b:00007f5834732e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.000316][ T4959] RAX: ffffffffffffffda RBX: 00007f5834732ef0 RCX: 00007f583399010a [ 200.008698][ T4959] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f5834732eb0 [ 200.016730][ T4959] RBP: 00002000000124c0 R08: 00007f5834732ef0 R09: 0000000000000000 [ 200.024767][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 200.033438][ T4959] R13: 00007f5834732eb0 R14: 00000000000124d4 R15: 0000200000000000 [ 200.041554][ T4959] [ 200.045805][ T4959] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 200.060321][ T4959] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 200.171216][ T4341] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.667480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.674105][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.211658][ T4969] 9pnet_fd: Insufficient options for proto=fd [ 203.005710][ T4984] loop1: detected capacity change from 0 to 128 [ 203.051472][ T4984] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 204.028583][ T4984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.115077][ T4989] loop2: detected capacity change from 0 to 32768 [ 204.137287][ T4989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 204.146130][ T4989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.221940][ T4989] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 204.231358][ T4302] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 204.242980][ T4302] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 204.296676][ T4991] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 205.728530][ T4999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 206.094701][ T5001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 206.194243][ T4302] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1951ms [ 206.312202][ T4302] gfs2: fsid=syz:syz.0: jid=0: Done [ 206.318025][ T4989] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 206.330163][ T4989] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 206.564584][ T5006] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.167781][ T5011] 9pnet_fd: Insufficient options for proto=fd [ 209.333042][ T5027] loop4: detected capacity change from 0 to 128 [ 210.105161][ T5027] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 210.158573][ T5027] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.341845][ T5032] loop0: detected capacity change from 0 to 64 [ 213.842913][ T5043] loop3: detected capacity change from 0 to 32768 [ 213.850654][ T5045] loop1: detected capacity change from 0 to 64 [ 214.046761][ T5043] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 214.055242][ T5043] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 214.094447][ T5043] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 217.429242][ T5052] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 217.600719][ T4408] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 217.654381][ T4408] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 218.001267][ T4408] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 346ms [ 218.009574][ T4408] gfs2: fsid=syz:syz.0: jid=0: Done [ 218.032720][ T5043] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 218.051972][ T5043] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 219.080731][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 219.080783][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 219.082221][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 219.082761][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 219.083194][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 219.255302][ T4372] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.314175][ T5063] loop1: detected capacity change from 0 to 128 [ 219.720097][ T5063] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 219.769381][ T5063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.291727][ T5074] loop2: detected capacity change from 0 to 32768 [ 220.394030][ T5074] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 220.394072][ T5074] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 220.421844][ T5074] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 220.423140][ T4739] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 220.423159][ T4739] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 220.674281][ T5075] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 220.976999][ T4739] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 553ms [ 220.977185][ T4739] gfs2: fsid=syz:syz.0: jid=0: Done [ 220.977236][ T5074] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 221.277088][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 222.096248][ T5074] gfs2: fsid=syz:syz.0: found 1 quota changes [ 222.405652][ T4256] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 222.405652][ T4256] inode = 11 2339 [ 222.405652][ T4256] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 222.405800][ T4256] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 222.405834][ T4256] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4256 [syz-executor] gfs2_quota_sync+0x32c/0x6f0 [ 222.405881][ T4256] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 222.405906][ T4256] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 222.415810][ T4256] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 222.415833][ T4256] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 222.416056][ T4256] gfs2: fsid=syz:syz.0: File system withdrawn [ 222.416070][ T4256] CPU: 1 PID: 4256 Comm: syz-executor Not tainted 6.1.138-syzkaller #0 [ 222.416092][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.416105][ T4256] Call Trace: [ 222.416113][ T4256] [ 222.416122][ T4256] dump_stack_lvl+0x168/0x22e [ 222.416158][ T4256] ? kobject_uevent_env+0x35f/0x8a0 [ 222.416182][ T4256] ? show_regs_print_info+0x12/0x12 [ 222.416222][ T4256] ? load_image+0x3b0/0x3b0 [ 222.416245][ T4256] ? kobject_uevent_env+0x35f/0x8a0 [ 222.416278][ T4256] gfs2_withdraw+0x143f/0x1780 [ 222.416318][ T4256] ? gfs2_lm+0x220/0x220 [ 222.416351][ T4256] ? gfs2_consist_inode_i+0xf1/0x110 [ 222.416378][ T4256] gfs2_inode_refresh+0xb5e/0xfc0 [ 222.416413][ T4256] ? gfs2_inode_metasync+0xf0/0xf0 [ 222.416445][ T4256] ? gfs2_glock_nq+0xcf0/0x14e0 [ 222.416475][ T4256] gfs2_instantiate+0x15e/0x210 [ 222.416501][ T4256] gfs2_glock_wait+0x1d0/0x2a0 [ 222.416527][ T4256] do_sync+0x49a/0xc00 [ 222.416554][ T4256] ? gfs2_quota_sync+0x32c/0x6f0 [ 222.416588][ T4256] ? slot_put+0x1e0/0x1e0 [ 222.416625][ T4256] ? gfs2_quota_sync+0x32c/0x6f0 [ 222.416657][ T4256] ? do_raw_spin_unlock+0x11d/0x230 [ 222.416697][ T4256] gfs2_quota_sync+0x32c/0x6f0 [ 222.416737][ T4256] gfs2_sync_fs+0x48/0xb0 [ 222.416770][ T4256] sync_filesystem+0xe6/0x220 [ 222.416795][ T4256] generic_shutdown_super+0x6b/0x340 [ 222.416825][ T4256] kill_block_super+0x7c/0xe0 [ 222.416854][ T4256] deactivate_locked_super+0x93/0xf0 [ 222.416881][ T4256] cleanup_mnt+0x463/0x4f0 [ 222.416910][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 222.416948][ T4256] task_work_run+0x1ca/0x250 [ 222.416979][ T4256] ? task_work_cancel+0x230/0x230 [ 222.417013][ T4256] ? exit_to_user_mode_loop+0x3b/0x110 [ 222.417049][ T4256] exit_to_user_mode_loop+0xe6/0x110 [ 222.417081][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 222.417114][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 222.417135][ T4256] do_syscall_64+0x58/0xa0 [ 222.417162][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 222.417183][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 222.417214][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.417248][ T4256] RIP: 0033:0x7fee5f98fc97 [ 222.417268][ T4256] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 222.417286][ T4256] RSP: 002b:00007ffe0db97828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 222.417311][ T4256] RAX: 0000000000000000 RBX: 00007fee5fa1089d RCX: 00007fee5f98fc97 [ 222.417327][ T4256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0db978e0 [ 222.417340][ T4256] RBP: 00007ffe0db978e0 R08: 0000000000000000 R09: 0000000000000000 [ 222.417354][ T4256] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0db98970 [ 222.417369][ T4256] R13: 00007fee5fa1089d R14: 00000000000363e7 R15: 00007ffe0db989b0 [ 222.417399][ T4256] [ 222.419178][ T4256] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 222.419212][ T4256] CPU: 1 PID: 4256 Comm: syz-executor Not tainted 6.1.138-syzkaller #0 [ 222.419233][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 222.419246][ T4256] Call Trace: [ 222.419253][ T4256] [ 222.419262][ T4256] dump_stack_lvl+0x168/0x22e [ 222.419293][ T4256] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 222.419318][ T4256] ? show_regs_print_info+0x12/0x12 [ 222.419347][ T4256] ? load_image+0x3b0/0x3b0 [ 222.419376][ T4256] ? do_raw_spin_unlock+0x11d/0x230 [ 222.419414][ T4256] gfs2_assert_warn_i+0x18f/0x2c0 [ 222.419445][ T4256] gfs2_quota_cleanup+0x4b4/0x6a0 [ 222.419482][ T4256] gfs2_put_super+0x22f/0x8c0 [ 222.419521][ T4256] ? gfs2_evict_inode+0x1170/0x1170 [ 222.419553][ T4256] generic_shutdown_super+0x130/0x340 [ 222.419583][ T4256] kill_block_super+0x7c/0xe0 [ 222.419612][ T4256] deactivate_locked_super+0x93/0xf0 [ 222.419638][ T4256] cleanup_mnt+0x463/0x4f0 [ 222.419666][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 222.419703][ T4256] task_work_run+0x1ca/0x250 [ 222.419733][ T4256] ? task_work_cancel+0x230/0x230 [ 222.419766][ T4256] ? exit_to_user_mode_loop+0x3b/0x110 [ 222.419801][ T4256] exit_to_user_mode_loop+0xe6/0x110 [ 222.419833][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 222.419865][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 222.419886][ T4256] do_syscall_64+0x58/0xa0 [ 222.419912][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 222.419933][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 222.419956][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.419990][ T4256] RIP: 0033:0x7fee5f98fc97 [ 222.420009][ T4256] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 222.420027][ T4256] RSP: 002b:00007ffe0db97828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 222.420051][ T4256] RAX: 0000000000000000 RBX: 00007fee5fa1089d RCX: 00007fee5f98fc97 [ 222.420066][ T4256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0db978e0 [ 222.420080][ T4256] RBP: 00007ffe0db978e0 R08: 0000000000000000 R09: 0000000000000000 [ 222.420094][ T4256] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0db98970 [ 222.420109][ T4256] R13: 00007fee5fa1089d R14: 00000000000363e7 R15: 00007ffe0db989b0 [ 222.420141][ T4256] [ 222.528576][ T5087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 223.425071][ T5090] loop2: detected capacity change from 0 to 512 [ 223.441703][ T5090] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.716225][ T5090] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 223.716279][ T5090] EXT4-fs (loop2): DAX unsupported by block device. [ 225.237140][ T5097] 9pnet_fd: Insufficient options for proto=fd [ 229.387618][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.175'. [ 231.318195][ T5131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 232.279838][ T5136] loop2: detected capacity change from 0 to 512 [ 232.281159][ T5136] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.372567][ T5136] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 232.372594][ T5136] EXT4-fs (loop2): DAX unsupported by block device. [ 232.451792][ T5137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.179'. [ 234.673007][ T5145] 9pnet_fd: Insufficient options for proto=fd [ 235.804439][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 236.535163][ T5155] loop2: detected capacity change from 0 to 764 [ 237.506542][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 237.509353][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 237.510035][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 237.512423][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 237.513107][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 237.513395][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.600825][ T5160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 237.682566][ T5162] loop3: detected capacity change from 0 to 512 [ 237.683595][ T5162] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.698460][ T5162] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 237.698489][ T5162] EXT4-fs (loop3): DAX unsupported by block device. [ 237.972200][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 238.781106][ T5170] loop2: detected capacity change from 0 to 512 [ 239.110106][ T5058] tty tty29: ldisc open failed (-12), clearing slot 28 [ 239.118317][ T5170] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.151558][ T5170] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 239.159809][ T5170] EXT4-fs (loop2): DAX unsupported by block device. [ 239.934577][ T4258] Bluetooth: hci5: command 0x0409 tx timeout [ 240.363691][ T5183] 9pnet_fd: Insufficient options for proto=fd [ 242.002362][ T4258] Bluetooth: hci5: command 0x041b tx timeout [ 244.040743][ T4272] Bluetooth: hci5: command 0x040f tx timeout [ 244.488517][ T5201] loop2: detected capacity change from 0 to 8 [ 244.498775][ T5201] SQUASHFS error: zlib decompression failed, data probably corrupt [ 244.507590][ T5201] SQUASHFS error: Failed to read block 0x9b: -5 [ 244.514010][ T5201] SQUASHFS error: Unable to read metadata cache entry [99] [ 244.521622][ T5201] SQUASHFS error: Unable to read inode 0x127 [ 244.585312][ T5201] loop2: detected capacity change from 0 to 512 [ 244.594072][ T5201] EXT4-fs error (device loop2): ext4_get_journal_inode:5723: comm syz.2.197: inode #196608: comm syz.2.197: iget: illegal inode # [ 244.608791][ T5201] EXT4-fs (loop2): Remounting filesystem read-only [ 244.615420][ T5201] EXT4-fs (loop2): no journal found [ 244.621688][ T5201] EXT4-fs (loop2): can't get journal size [ 244.629912][ T5201] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 244.650716][ T5201] EXT4-fs (loop2): failed to initialize system zone (-22) [ 244.658066][ T5201] EXT4-fs (loop2): mount failed [ 244.888320][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 244.906970][ T5207] loop1: detected capacity change from 0 to 512 [ 244.987064][ T5208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 245.490153][ T5207] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.580583][ T5157] chnl_net:caif_netlink_parms(): no params data found [ 245.650940][ T5207] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 245.659201][ T5207] EXT4-fs (loop1): DAX unsupported by block device. [ 246.151269][ T4272] Bluetooth: hci5: command 0x0419 tx timeout [ 246.852957][ T5227] loop2: detected capacity change from 0 to 512 [ 246.863559][ T5227] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.872697][ T5227] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 246.878600][ T5224] 9pnet_fd: Insufficient options for proto=fd [ 246.881148][ T5227] EXT4-fs (loop2): DAX unsupported by block device. [ 247.225152][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.332283][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.512383][ T5157] device bridge_slave_0 entered promiscuous mode [ 247.951020][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.958804][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.056176][ T5157] device bridge_slave_1 entered promiscuous mode [ 248.443306][ T5241] loop2: detected capacity change from 0 to 512 [ 248.451106][ T5241] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.458450][ T5241] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 248.467090][ T5241] EXT4-fs (loop2): DAX unsupported by block device. [ 248.524551][ T4372] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.540597][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 249.367981][ T4394] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.683449][ T5253] loop3: detected capacity change from 0 to 764 [ 250.835718][ T5257] loop2: detected capacity change from 0 to 8 [ 250.853960][ T5257] SQUASHFS error: zlib decompression failed, data probably corrupt [ 250.862130][ T5257] SQUASHFS error: Failed to read block 0x9b: -5 [ 250.868576][ T5257] SQUASHFS error: Unable to read metadata cache entry [99] [ 250.875990][ T5257] SQUASHFS error: Unable to read inode 0x127 [ 250.974663][ T5258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 251.059803][ T4394] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.115598][ T5157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.473685][ T5264] loop3: detected capacity change from 0 to 512 [ 251.488320][ T5264] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.290392][ T4394] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.330903][ T5264] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 252.685000][ T5272] loop2: detected capacity change from 0 to 512 [ 252.693064][ T5272] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.713556][ T5264] EXT4-fs (loop3): DAX unsupported by block device. [ 252.715170][ T5272] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 252.729561][ T5272] EXT4-fs (loop2): DAX unsupported by block device. [ 252.754303][ T5157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.603029][ T5298] loop2: detected capacity change from 0 to 512 [ 254.614576][ T5298] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.622489][ T5298] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 254.630946][ T5298] EXT4-fs (loop2): DAX unsupported by block device. [ 254.825984][ T4394] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.734681][ T5307] loop3: detected capacity change from 0 to 512 [ 255.749990][ T5157] team0: Port device team_slave_0 added [ 255.825930][ T5157] team0: Port device team_slave_1 added [ 255.873843][ T5307] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.021199][ T5309] loop2: detected capacity change from 0 to 512 [ 256.028859][ T5309] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.036299][ T5309] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 256.045754][ T5309] EXT4-fs (loop2): DAX unsupported by block device. [ 256.077209][ T5307] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 256.331015][ T5307] EXT4-fs (loop3): DAX unsupported by block device. [ 257.224088][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.232755][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.266670][ T5157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.397742][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.405368][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.874400][ T5157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.679454][ T5322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 262.019723][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.026236][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.392154][ T5330] 9pnet_fd: Insufficient options for proto=fd [ 263.197167][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 263.893410][ T5157] device hsr_slave_0 entered promiscuous mode [ 264.041416][ T5157] device hsr_slave_1 entered promiscuous mode [ 264.048934][ T5157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.057044][ T5157] Cannot create hsr debugfs directory [ 264.432006][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 265.031440][ T5341] loop3: detected capacity change from 0 to 512 [ 265.038829][ T5341] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.372010][ T5341] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 265.380250][ T5341] EXT4-fs (loop3): DAX unsupported by block device. [ 266.731341][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 267.811143][ T5363] 9pnet_fd: Insufficient options for proto=fd [ 268.478559][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 268.687113][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 268.698908][ T4258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 268.713509][ T4258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 268.733337][ T4258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 268.743810][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 268.753015][ T4258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.293497][ T5380] loop2: detected capacity change from 0 to 32768 [ 269.336562][ T5380] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 269.347149][ T5380] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 269.357630][ T5380] BTRFS info (device loop2): using free space tree [ 269.742906][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 269.954724][ T5380] BTRFS info (device loop2): enabling ssd optimizations [ 271.664404][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 272.302521][ T4256] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 272.436133][ T5413] loop1: detected capacity change from 0 to 512 [ 272.523144][ T5413] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.633120][ T5413] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 272.680635][ T5413] EXT4-fs (loop1): DAX unsupported by block device. [ 274.121726][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 276.200975][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 278.280711][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 278.618137][ T5452] loop3: detected capacity change from 0 to 512 [ 278.619533][ T5452] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.670851][ T5452] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 278.740965][ T5452] EXT4-fs (loop3): DAX unsupported by block device. [ 278.849386][ T5157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.704000][ T5157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.739826][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 280.419827][ T5157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.009023][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 282.183216][ T5157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.131725][ T5489] loop2: detected capacity change from 0 to 8 [ 283.164681][ T5489] SQUASHFS error: zlib decompression failed, data probably corrupt [ 283.164899][ T5489] SQUASHFS error: Failed to read block 0x9b: -5 [ 283.164965][ T5489] SQUASHFS error: Unable to read metadata cache entry [99] [ 283.165023][ T5489] SQUASHFS error: Unable to read inode 0x127 [ 283.332068][ T5490] loop2: detected capacity change from 0 to 512 [ 283.335483][ T5490] EXT4-fs error (device loop2): ext4_get_journal_inode:5723: comm syz.2.244: inode #196608: comm syz.2.244: iget: illegal inode # [ 283.335800][ T5490] EXT4-fs (loop2): Remounting filesystem read-only [ 283.335812][ T5490] EXT4-fs (loop2): no journal found [ 283.335820][ T5490] EXT4-fs (loop2): can't get journal size [ 283.338179][ T4394] device hsr_slave_0 left promiscuous mode [ 283.400290][ T5490] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 283.402911][ T5490] EXT4-fs (loop2): failed to initialize system zone (-22) [ 283.402989][ T5490] EXT4-fs (loop2): mount failed [ 283.464081][ T4394] device hsr_slave_1 left promiscuous mode [ 283.476241][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.476474][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.506156][ T4394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.506890][ T4394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.538069][ T4394] device bridge_slave_1 left promiscuous mode [ 283.542054][ T4394] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.616457][ T4394] device bridge_slave_0 left promiscuous mode [ 283.618039][ T4394] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.046372][ T4394] device veth1_macvtap left promiscuous mode [ 284.049055][ T4394] device veth0_macvtap left promiscuous mode [ 284.057486][ T4394] device veth1_vlan left promiscuous mode [ 284.081564][ T4394] device veth0_vlan left promiscuous mode [ 288.253695][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 288.906021][ T4394] team0 (unregistering): Port device team_slave_1 removed [ 289.043447][ T4394] team0 (unregistering): Port device team_slave_0 removed [ 289.097815][ T4394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.130408][ T5507] 9pnet_fd: Insufficient options for proto=fd [ 289.170047][ T4394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.264943][ T5510] loop1: detected capacity change from 0 to 512 [ 289.291408][ T5510] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.312558][ T5510] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 289.321162][ T5510] EXT4-fs (loop1): DAX unsupported by block device. [ 290.544038][ T4394] bond0 (unregistering): Released all slaves [ 290.735006][ T5519] loop2: detected capacity change from 0 to 512 [ 290.743120][ T5519] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.750867][ T5519] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 290.759182][ T5519] EXT4-fs (loop2): DAX unsupported by block device. [ 291.541091][ T5532] loop1: detected capacity change from 0 to 764 [ 292.307814][ T5538] loop2: detected capacity change from 0 to 512 [ 292.318668][ T5538] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.330020][ T5538] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 292.339372][ T5538] EXT4-fs (loop2): DAX unsupported by block device. [ 292.414332][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.377502][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.447916][ T5372] device bridge_slave_0 entered promiscuous mode [ 293.587993][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.790056][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.799178][ T5372] device bridge_slave_1 entered promiscuous mode [ 294.205070][ T5551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 295.000401][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.013093][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.126554][ T4272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.136974][ T4272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.146205][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 295.156691][ T4272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.858007][ T5566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 295.884527][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.945573][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.105068][ T5568] loop2: detected capacity change from 0 to 512 [ 296.112346][ T5568] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.125792][ T5568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 296.134261][ T5568] EXT4-fs (loop2): DAX unsupported by block device. [ 297.240937][ T4258] Bluetooth: hci2: command 0x0409 tx timeout [ 297.589256][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 297.790360][ T5372] team0: Port device team_slave_0 added [ 298.551667][ T5586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 299.200151][ T5372] team0: Port device team_slave_1 added [ 299.330637][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 299.979997][ T5594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 301.410861][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 303.491685][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 303.969987][ T5604] loop1: detected capacity change from 0 to 512 [ 304.360018][ T5604] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.430441][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.712007][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 304.892077][ T5615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.267'. [ 305.026296][ T5604] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 305.046490][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.197878][ T5604] EXT4-fs (loop1): DAX unsupported by block device. [ 305.299705][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.312658][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.319669][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.355636][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.713095][ T5619] loop2: detected capacity change from 0 to 8 [ 305.725018][ T5621] loop3: detected capacity change from 0 to 512 [ 305.732483][ T5621] EXT4-fs: Ignoring removed mblk_io_submit option [ 305.751617][ T5621] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 305.760198][ T5619] SQUASHFS error: zlib decompression failed, data probably corrupt [ 305.768985][ T5619] SQUASHFS error: Failed to read block 0x9b: -5 [ 305.775418][ T5619] SQUASHFS error: Unable to read metadata cache entry [99] [ 305.782978][ T5619] SQUASHFS error: Unable to read inode 0x127 [ 305.877114][ T5621] EXT4-fs (loop3): DAX unsupported by block device. [ 306.210199][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 307.269998][ T5372] device hsr_slave_0 entered promiscuous mode [ 307.302131][ T5372] device hsr_slave_1 entered promiscuous mode [ 307.309826][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.319086][ T5372] Cannot create hsr debugfs directory [ 307.671729][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 308.702931][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 308.978530][ T5554] chnl_net:caif_netlink_parms(): no params data found [ 310.433160][ T5664] loop2: detected capacity change from 0 to 8 [ 310.444385][ T5664] SQUASHFS error: zlib decompression failed, data probably corrupt [ 310.454406][ T5664] SQUASHFS error: Failed to read block 0x9b: -5 [ 310.461185][ T5664] SQUASHFS error: Unable to read metadata cache entry [99] [ 310.468577][ T5664] SQUASHFS error: Unable to read inode 0x127 [ 310.545325][ T5664] loop2: detected capacity change from 0 to 512 [ 310.557676][ T5664] EXT4-fs error (device loop2): ext4_get_journal_inode:5723: comm syz.2.277: inode #196608: comm syz.2.277: iget: illegal inode # [ 310.574248][ T5664] EXT4-fs (loop2): Remounting filesystem read-only [ 310.581160][ T5664] EXT4-fs (loop2): no journal found [ 310.587186][ T5664] EXT4-fs (loop2): can't get journal size [ 310.613401][ T5664] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 310.628443][ T5664] EXT4-fs (loop2): failed to initialize system zone (-22) [ 310.637175][ T5664] EXT4-fs (loop2): mount failed [ 311.010470][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'. [ 311.460367][ T5372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.501761][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 312.173772][ T5372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 312.551325][ T5678] loop2: detected capacity change from 0 to 32768 [ 312.606998][ T5678] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 312.615378][ T5678] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 312.627628][ T5372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.651756][ T5678] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 312.660994][ T5415] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 312.667819][ T5415] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 312.710111][ T5415] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 42ms [ 312.717772][ T5415] gfs2: fsid=syz:syz.0: jid=0: Done [ 312.724479][ T5678] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 312.786446][ T5372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.902213][ T5678] gfs2: fsid=syz:syz.0: found 1 quota changes [ 313.006589][ T5682] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 313.006589][ T5682] inode = 11 2339 [ 313.006589][ T5682] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464 [ 313.088795][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 313.769526][ T5682] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 313.794687][ T5682] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5682 [gfs2_quotad] gfs2_quota_sync+0x32c/0x6f0 [ 313.963994][ T5682] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000201 s:0 p:0 [ 314.084858][ T5682] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 314.394172][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.421196][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.443648][ T5554] device bridge_slave_0 entered promiscuous mode [ 314.526225][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.534395][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.555220][ T5554] device bridge_slave_1 entered promiscuous mode [ 314.566584][ T5682] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 314.636643][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.660948][ T5682] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 314.833205][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.878260][ T5682] gfs2: fsid=syz:syz.0: File system withdrawn [ 314.885629][ T5682] CPU: 1 PID: 5682 Comm: gfs2_quotad Not tainted 6.1.138-syzkaller #0 [ 314.893927][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 314.904154][ T5682] Call Trace: [ 314.907500][ T5682] [ 314.910467][ T5682] dump_stack_lvl+0x168/0x22e [ 314.915204][ T5682] ? kobject_uevent_env+0x35f/0x8a0 [ 314.920520][ T5682] ? show_regs_print_info+0x12/0x12 [ 314.925775][ T5682] ? load_image+0x3b0/0x3b0 [ 314.930325][ T5682] ? kobject_uevent_env+0x35f/0x8a0 [ 314.935668][ T5682] gfs2_withdraw+0x143f/0x1780 [ 314.940568][ T5682] ? gfs2_lm+0x220/0x220 [ 314.944848][ T5682] ? gfs2_consist_inode_i+0xf1/0x110 [ 314.950153][ T5682] gfs2_inode_refresh+0xb5e/0xfc0 [ 314.955377][ T5682] ? gfs2_inode_metasync+0xf0/0xf0 [ 314.960527][ T5682] ? gfs2_glock_nq+0xcf0/0x14e0 [ 314.965404][ T5682] gfs2_instantiate+0x15e/0x210 [ 314.970485][ T5682] gfs2_glock_wait+0x1d0/0x2a0 [ 314.975651][ T5682] do_sync+0x49a/0xc00 [ 314.979835][ T5682] ? gfs2_quota_sync+0x32c/0x6f0 [ 314.984800][ T5682] ? slot_put+0x1e0/0x1e0 [ 314.989156][ T5682] ? gfs2_quota_sync+0x32c/0x6f0 [ 314.994210][ T5682] ? do_raw_spin_unlock+0x11d/0x230 [ 314.999565][ T5682] gfs2_quota_sync+0x32c/0x6f0 [ 315.004513][ T5682] gfs2_quotad+0x413/0x670 [ 315.009225][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 315.014448][ T5682] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 315.020378][ T5682] ? wake_bit_function+0x200/0x200 [ 315.025612][ T5682] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 315.031705][ T5682] ? __kthread_parkme+0x162/0x1c0 [ 315.036849][ T5682] kthread+0x29d/0x330 [ 315.040940][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 315.046093][ T5682] ? kthread_blkcg+0xd0/0xd0 [ 315.051086][ T5682] ret_from_fork+0x1f/0x30 [ 315.055633][ T5682] [ 315.132189][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 315.791587][ T4256] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 315.809019][ T4256] CPU: 0 PID: 4256 Comm: syz-executor Not tainted 6.1.138-syzkaller #0 [ 315.817304][ T4256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 315.827734][ T4256] Call Trace: [ 315.831205][ T4256] [ 315.834144][ T4256] dump_stack_lvl+0x168/0x22e [ 315.838846][ T4256] ? gfs2_assert_warn_i+0xc3/0x2c0 [ 315.843995][ T4256] ? show_regs_print_info+0x12/0x12 [ 315.849297][ T4256] ? load_image+0x3b0/0x3b0 [ 315.853950][ T4256] ? do_raw_spin_unlock+0x11d/0x230 [ 315.859519][ T4256] gfs2_assert_warn_i+0x18f/0x2c0 [ 315.864695][ T4256] gfs2_quota_cleanup+0x4b4/0x6a0 [ 315.869858][ T4256] gfs2_put_super+0x22f/0x8c0 [ 315.874600][ T4256] ? gfs2_evict_inode+0x1170/0x1170 [ 315.879836][ T4256] generic_shutdown_super+0x130/0x340 [ 315.885260][ T4256] kill_block_super+0x7c/0xe0 [ 315.890175][ T4256] deactivate_locked_super+0x93/0xf0 [ 315.895507][ T4256] cleanup_mnt+0x463/0x4f0 [ 315.899958][ T4256] ? lockdep_hardirqs_on+0x94/0x140 [ 315.905287][ T4256] task_work_run+0x1ca/0x250 [ 315.909996][ T4256] ? task_work_cancel+0x230/0x230 [ 315.915061][ T4256] ? exit_to_user_mode_loop+0x3b/0x110 [ 315.921006][ T4256] exit_to_user_mode_loop+0xe6/0x110 [ 315.926502][ T4256] exit_to_user_mode_prepare+0xb1/0x140 [ 315.932327][ T4256] syscall_exit_to_user_mode+0x16/0x40 [ 315.937978][ T4256] do_syscall_64+0x58/0xa0 [ 315.942546][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 315.947444][ T4256] ? clear_bhb_loop+0x45/0xa0 [ 315.952205][ T4256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.958132][ T4256] RIP: 0033:0x7fee5f98fc97 [ 315.962997][ T4256] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 315.983512][ T4256] RSP: 002b:00007ffe0db97828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 315.992050][ T4256] RAX: 0000000000000000 RBX: 00007fee5fa1089d RCX: 00007fee5f98fc97 [ 316.000042][ T4256] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0db978e0 [ 316.008201][ T4256] RBP: 00007ffe0db978e0 R08: 0000000000000000 R09: 0000000000000000 [ 316.017067][ T4256] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe0db98970 [ 316.025250][ T4256] R13: 00007fee5fa1089d R14: 000000000004c8c4 R15: 00007ffe0db989b0 [ 316.033367][ T4256] [ 316.054152][ T5699] loop3: detected capacity change from 0 to 512 [ 316.081823][ T5699] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.122220][ T5699] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 316.171085][ T5699] EXT4-fs (loop3): DAX unsupported by block device. [ 316.403885][ T4394] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.590110][ T5554] team0: Port device team_slave_0 added [ 318.619532][ T5721] loop1: detected capacity change from 0 to 128 [ 318.663451][ T5554] team0: Port device team_slave_1 added [ 318.751323][ T5721] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 318.921760][ T5721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.437755][ T4394] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.466765][ T5733] loop2: detected capacity change from 0 to 8 [ 321.579609][ T5734] SQUASHFS error: xz decompression failed, data probably corrupt [ 321.587883][ T5734] SQUASHFS error: Failed to read block 0xa8: -5 [ 321.624842][ T5734] SQUASHFS error: xz decompression failed, data probably corrupt [ 321.633158][ T5734] SQUASHFS error: Failed to read block 0xa8: -5 [ 321.641780][ T27] audit: type=1800 audit(2000000011.500:19): pid=5734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.288" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 322.911275][ T5721] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 322.941803][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.054513][ T5740] loop2: detected capacity change from 0 to 128 [ 323.062805][ T5740] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 323.078787][ T5740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.592698][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.599100][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.669687][ T4394] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.474038][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.521215][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.596936][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.620862][ T5741] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 324.639558][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.730768][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.843560][ T5752] 9pnet_fd: Insufficient options for proto=fd [ 325.367049][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.867411][ T5762] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 326.007272][ T5766] loop2: detected capacity change from 0 to 8 [ 326.160687][ T5767] SQUASHFS error: xz decompression failed, data probably corrupt [ 326.168888][ T5767] SQUASHFS error: Failed to read block 0xa8: -5 [ 326.222611][ T5767] SQUASHFS error: xz decompression failed, data probably corrupt [ 326.245969][ T5767] SQUASHFS error: Failed to read block 0xa8: -5 [ 326.254297][ T27] audit: type=1800 audit(2000000016.110:20): pid=5767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.296" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 326.282844][ T5768] ufs: You didn't specify the type of your ufs filesystem [ 326.282844][ T5768] [ 326.282844][ T5768] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 326.282844][ T5768] [ 326.282844][ T5768] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 326.314607][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.348961][ T52] block nbd2: Attempted send on invalid socket [ 326.355914][ T52] I/O error, dev nbd2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 326.622369][ T4394] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.250115][ T5776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'. [ 328.321528][ T5554] device hsr_slave_0 entered promiscuous mode [ 328.413175][ T4258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.492352][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 328.508562][ T5554] device hsr_slave_1 entered promiscuous mode [ 328.547190][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.556605][ T5554] Cannot create hsr debugfs directory [ 329.057041][ T4258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 329.071617][ T4258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 329.079931][ T4258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 329.088714][ T4258] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 329.100725][ T4258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 329.708279][ T5788] loop1: detected capacity change from 0 to 32768 [ 329.727948][ T5788] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 331.162343][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 333.175725][ T4351] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 333.240668][ T4258] Bluetooth: hci5: command 0x041b tx timeout [ 333.606135][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 335.056708][ T5818] 9pnet_fd: Insufficient options for proto=fd [ 335.320681][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 335.804647][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 337.400801][ T4271] Bluetooth: hci5: command 0x0419 tx timeout [ 338.048753][ T5838] loop1: detected capacity change from 0 to 764 [ 338.072128][ T5840] loop2: detected capacity change from 0 to 512 [ 338.085525][ T5840] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.093211][ T5840] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 338.102139][ T5840] EXT4-fs (loop2): DAX unsupported by block device. [ 338.345598][ T4351] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 338.607723][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 339.913690][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 340.117586][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 340.940924][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 341.165577][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 342.008460][ T5876] loop3: detected capacity change from 0 to 8 [ 342.075150][ T5876] SQUASHFS error: zlib decompression failed, data probably corrupt [ 342.098426][ T5876] SQUASHFS error: Failed to read block 0x9b: -5 [ 342.115980][ T5876] SQUASHFS error: Unable to read metadata cache entry [99] [ 342.150813][ T5876] SQUASHFS error: Unable to read inode 0x127 [ 342.335851][ T5876] loop3: detected capacity change from 0 to 512 [ 342.585999][ T5876] EXT4-fs error (device loop3): ext4_get_journal_inode:5723: comm syz.3.318: inode #196608: comm syz.3.318: iget: illegal inode # [ 342.925701][ T5876] EXT4-fs (loop3): Remounting filesystem read-only [ 342.960682][ T5876] EXT4-fs (loop3): no journal found [ 342.966007][ T5876] EXT4-fs (loop3): can't get journal size [ 343.021583][ T5876] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 343.082659][ T5876] EXT4-fs (loop3): failed to initialize system zone (-22) [ 343.089944][ T5876] EXT4-fs (loop3): mount failed [ 343.739811][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 343.843225][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.920732][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.939524][ T5782] device bridge_slave_0 entered promiscuous mode [ 345.800589][ T5682] INFO: trying to register non-static key. [ 345.806560][ T5682] The code is fine but needs lockdep annotation, or maybe [ 345.814049][ T5682] you didn't initialize this object before use? [ 345.820282][ T5682] turning off the locking correctness validator. [ 345.826621][ T5682] CPU: 1 PID: 5682 Comm: gfs2_quotad Not tainted 6.1.138-syzkaller #0 [ 345.834777][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 345.844843][ T5682] Call Trace: [ 345.848209][ T5682] [ 345.851165][ T5682] dump_stack_lvl+0x168/0x22e [ 345.855981][ T5682] ? show_regs_print_info+0x12/0x12 [ 345.861340][ T5682] ? load_image+0x3b0/0x3b0 [ 345.865976][ T5682] ? _find_next_bit+0x11e/0x130 [ 345.870907][ T5682] ? __is_module_percpu_address+0x279/0x3b0 [ 345.876825][ T5682] ? is_kernel_percpu_address+0x18f/0x1b0 [ 345.882576][ T5682] assign_lock_key+0x1f5/0x230 [ 345.887581][ T5682] ? SOFTIRQ_verbose+0x10/0x10 [ 345.892488][ T5682] ? mark_lock+0x94/0x320 [ 345.896869][ T5682] register_lock_class+0x20e/0x860 [ 345.901998][ T5682] ? is_dynamic_key+0x260/0x260 [ 345.906862][ T5682] __lock_acquire+0x160/0x7c50 [ 345.911633][ T5682] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 345.917628][ T5682] ? lock_chain_count+0x20/0x20 [ 345.922496][ T5682] ? __free_object+0x203/0x9d0 [ 345.927269][ T5682] ? lockdep_hardirqs_on+0x94/0x140 [ 345.932495][ T5682] ? verify_lock_unused+0x140/0x140 [ 345.937966][ T5682] ? alloc_object+0x650/0x650 [ 345.943160][ T5682] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 345.949193][ T5682] ? lock_chain_count+0x20/0x20 [ 345.954079][ T5682] lock_acquire+0x1b4/0x490 [ 345.958667][ T5682] ? finish_wait+0xb8/0x1d0 [ 345.963218][ T5682] ? timer_delete_sync+0x1f8/0x2a0 [ 345.968481][ T5682] ? try_to_del_timer_sync+0x1b0/0x1b0 [ 345.974137][ T5682] ? read_lock_is_recursive+0x10/0x10 [ 345.979529][ T5682] _raw_spin_lock_irqsave+0xa4/0xf0 [ 345.984842][ T5682] ? finish_wait+0xb8/0x1d0 [ 345.989544][ T5682] ? _raw_spin_lock+0x40/0x40 [ 345.994228][ T5682] ? update_process_times+0x1b0/0x1b0 [ 345.999631][ T5682] finish_wait+0xb8/0x1d0 [ 346.004087][ T5682] gfs2_quotad+0x4e6/0x670 [ 346.008543][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 346.013872][ T5682] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 346.019914][ T5682] ? wake_bit_function+0x200/0x200 [ 346.025048][ T5682] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 346.030955][ T5682] ? __kthread_parkme+0x162/0x1c0 [ 346.036112][ T5682] kthread+0x29d/0x330 [ 346.040206][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 346.045434][ T5682] ? kthread_blkcg+0xd0/0xd0 [ 346.050042][ T5682] ret_from_fork+0x1f/0x30 [ 346.054483][ T5682] [ 346.057621][ T5682] list_del corruption. prev->next should be ffffc90003497e58, but was 0000000000000000. (prev=ffff8880264ccbd8) [ 346.070285][ T5682] ------------[ cut here ]------------ [ 346.075823][ T5682] kernel BUG at lib/list_debug.c:61! [ 346.081227][ T5682] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 346.087305][ T5682] CPU: 1 PID: 5682 Comm: gfs2_quotad Not tainted 6.1.138-syzkaller #0 [ 346.095467][ T5682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 346.105529][ T5682] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 346.111931][ T5682] Code: e8 8b 47 f8 05 0f 0b 48 c7 c7 e0 11 bf 8a 48 89 de e8 7a 47 f8 05 0f 0b 48 c7 c7 40 12 bf 8a 48 89 de 4c 89 f9 e8 66 47 f8 05 <0f> 0b 48 c7 c7 c0 12 bf 8a 48 89 de 4c 89 f1 e8 52 47 f8 05 0f 0b [ 346.131641][ T5682] RSP: 0018:ffffc90003497d30 EFLAGS: 00010046 [ 346.137819][ T5682] RAX: 000000000000006d RBX: ffffc90003497e58 RCX: b0805e9a3272b200 [ 346.145960][ T5682] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 346.153938][ T5682] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 346.161914][ T5682] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: dffffc0000000000 [ 346.169906][ T5682] R13: ffff8880264ccb98 R14: ffff8880264ccbd8 R15: ffff8880264ccbd8 [ 346.177925][ T5682] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.186970][ T5682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.193560][ T5682] CR2: 0000200000005000 CR3: 000000007cb1e000 CR4: 00000000003506e0 [ 346.201726][ T5682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.209699][ T5682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.217676][ T5682] Call Trace: [ 346.220982][ T5682] [ 346.224011][ T5682] finish_wait+0xc3/0x1d0 [ 346.228427][ T5682] gfs2_quotad+0x4e6/0x670 [ 346.232954][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 346.238094][ T5682] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 346.244028][ T5682] ? wake_bit_function+0x200/0x200 [ 346.249160][ T5682] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 346.255078][ T5682] ? __kthread_parkme+0x162/0x1c0 [ 346.260391][ T5682] kthread+0x29d/0x330 [ 346.264489][ T5682] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 346.269622][ T5682] ? kthread_blkcg+0xd0/0xd0 [ 346.274244][ T5682] ret_from_fork+0x1f/0x30 [ 346.278704][ T5682] [ 346.281734][ T5682] Modules linked in: [ 346.285815][ T5682] ---[ end trace 0000000000000000 ]--- [ 346.291264][ T5682] RIP: 0010:__list_del_entry_valid+0x10a/0x120 [ 346.297426][ T5682] Code: e8 8b 47 f8 05 0f 0b 48 c7 c7 e0 11 bf 8a 48 89 de e8 7a 47 f8 05 0f 0b 48 c7 c7 40 12 bf 8a 48 89 de 4c 89 f9 e8 66 47 f8 05 <0f> 0b 48 c7 c7 c0 12 bf 8a 48 89 de 4c 89 f1 e8 52 47 f8 05 0f 0b [ 346.317296][ T5682] RSP: 0018:ffffc90003497d30 EFLAGS: 00010046 [ 346.323361][ T5682] RAX: 000000000000006d RBX: ffffc90003497e58 RCX: b0805e9a3272b200 [ 346.331442][ T5682] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 346.339415][ T5682] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 346.347386][ T5682] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: dffffc0000000000 [ 346.355359][ T5682] R13: ffff8880264ccb98 R14: ffff8880264ccbd8 R15: ffff8880264ccbd8 [ 346.363341][ T5682] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.372299][ T5682] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.378885][ T5682] CR2: 0000200000005000 CR3: 000000007cb1e000 CR4: 00000000003506e0 [ 346.386899][ T5682] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 346.395137][ T5682] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.403122][ T5682] Kernel panic - not syncing: Fatal exception [ 346.409503][ T5682] Kernel Offset: disabled [ 346.413835][ T5682] Rebooting in 86400 seconds..