last executing test programs: 1m9.347099292s ago: executing program 1 (id=196): r0 = socket(0x40000000015, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@private2}, [@mark={0xc}]}, 0x4c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, 0x0, 0x0) 1m8.291280188s ago: executing program 1 (id=284): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000336, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1m7.82966164s ago: executing program 1 (id=286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) readv(r1, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/171, 0xab}], 0x1) tkill(0x0, 0xb) r2 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x604400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x0, 0x8}, 0x10) fanotify_init(0x0, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendmsg$inet6(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000080)="10", 0x1}], 0x1}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35}, {0x6c}, {0x6}]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000840)={0x0, "61a00ae403914b689a55898d7664b8a0"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000001c40)={0x7a5a649e42b1b702, 0x4, {0x9, @struct={0x7fffffff, 0x80000000}, 0x0, 0x3, 0x0, 0x2, 0x7, 0x5, 0xc, @usage=0x9, 0x3, 0x1000, [0x200, 0x1, 0x2, 0x401, 0x3, 0x30b8]}, {0x9, @struct={0xffffffff}, r7, 0x2, 0x81, 0x8001, 0x200, 0x0, 0x3, @struct={0xfa, 0x2}, 0xb09, 0x67757e11, [0x2, 0x0, 0x1f, 0x4, 0x4]}, {0x0, @usage=0x3, r8, 0x0, 0x46b, 0x3, 0x4, 0x5, 0x10, @usage=0x5, 0xffffffff, 0x60000000, [0x0, 0x509ea932, 0x1f, 0x5d32, 0x800, 0x10000]}, {0x7ff}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r2}, {@val={r8}, @max}}) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10001}}, 0x0, 0x0, 0xe0, 0x0, 0x200002}, &(0x7f0000000480)=0x98) 1m5.841218631s ago: executing program 1 (id=288): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000336, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000080)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlateno}, {@shortname_lower}]}, 0x1, 0x28d, &(0x7f0000000840)="$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") 25.729395436s ago: executing program 4 (id=356): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) read$char_usb(0xffffffffffffffff, &(0x7f00000006c0)=""/94, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 23.333303284s ago: executing program 4 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=""/57}}], 0x400026f, 0x40000002, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$can_bcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x2, 0x0, 0x0, 0x4000000}, 0x1) syz_open_dev$video(0x0, 0x7fffffffffffffff, 0x81c80) ppoll(&(0x7f0000000380), 0x1, 0x0, 0x0, 0xfffffd9e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8929, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 20.209121368s ago: executing program 4 (id=363): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000002980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x325b44e96ee917b9) 17.878320801s ago: executing program 3 (id=369): getgid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21404e, &(0x7f0000000280), 0x1, 0x507, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) request_key(0x0, 0x0, &(0x7f0000000580)=')\x00o\xfe\xa6cG\xdc\xe5\xa5\b\xb5\x03\xb5X\xf5\xfc\x96\xd7>\x94\xe4Sg\xf9 \xaaQ\xa8\x16\xc3\x12?\a\xb8\xef\xad\xeb\xb4=\xa4\xae\x8b\x94\x89\xce\xca\xf8C5\xa1x\xd2\x7fu\x9c\xf6\xab\x1f\x1cA\x8bSq\xf4\x9el\x95\x8c\xb1\x99\xfc\x8e\xb1\xf5AP\xc5\x8dJ|\xe68\xac]\xf3\b\xac?O\xef\xf0H\xda\x01.\r\x15L\x84*G3]nZ07\f{\xe9\x91\xcc\xa1\xab\x86 jpO\xaf\x8cdX\xe1\x169b\xa3\x95\xb4\xcf|\xd1I\"!\xd8Ns0+\xa1\xbaKWr\a\x1d\x9e\xd1\xd8x\xe6\x06`_O8N\x87\xc1\xd5SNC/\xfa\xbbj\a\x80\xed E\x8a', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x11, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_emit_vhci(0x0, 0x3e) 17.78180052s ago: executing program 4 (id=370): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) read$char_usb(0xffffffffffffffff, &(0x7f00000006c0)=""/94, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 12.245608654s ago: executing program 4 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x3, &(0x7f0000000100)={0x0, 0x1c, 0x2, @thr={0x0, &(0x7f00000000c0)}}, &(0x7f0000000180)) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) connect$inet(r4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe, 0x0) 11.225324657s ago: executing program 0 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) 11.062650572s ago: executing program 4 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)=""/57}}], 0x400026f, 0x40000002, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$can_bcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x2, 0x0, 0x0, 0x4000000}, 0x1) syz_open_dev$video(0x0, 0x7fffffffffffffff, 0x81c80) ppoll(&(0x7f0000000380), 0x1, 0x0, 0x0, 0xfffffd9e) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8929, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r7, 0x5402) write$sequencer(r7, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 10.42078643s ago: executing program 0 (id=377): userfaultfd(0x80001) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 10.347946967s ago: executing program 3 (id=378): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write(r1, &(0x7f0000000580)="09000000010001", 0x7) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 10.031519366s ago: executing program 2 (id=379): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000002980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r4, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x325b44e96ee917b9) 9.091824661s ago: executing program 3 (id=380): r0 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000336, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) io_uring_enter(r4, 0x6afc, 0x24ec, 0x15, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000080)={[{@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlateno}, {@shortname_lower}]}, 0x1, 0x28d, &(0x7f0000000840)="$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") unshare(0x2a020400) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r7, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.780595962s ago: executing program 0 (id=381): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r1, 0x0, r1, &(0x7f0000000640)='./bus\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) getitimer(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_clone(0x53800080, 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 5.529387606s ago: executing program 0 (id=382): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) read$char_usb(0xffffffffffffffff, &(0x7f00000006c0)=""/94, 0x5e) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 5.48713646s ago: executing program 2 (id=383): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010013bd70100400000005000000080009000200000008000c00a80a0000060001000700000008000b"], 0x34}}, 0x20) 5.478176561s ago: executing program 3 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x3, &(0x7f0000000100)={0x0, 0x1c, 0x2, @thr={0x0, &(0x7f00000000c0)}}, &(0x7f0000000180)) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) connect$inet(r4, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0xfffffffffffffffe, 0x0) 4.550697525s ago: executing program 2 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv4_delrule={0x24, 0x21, 0x501, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5}, [@FRA_FLOW={0x8}]}, 0x24}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e3") r4 = getuid() setresuid(0x0, r4, 0x0) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004a80)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000940)={0x6, 0x10001, {0xffffffffffffffff}, {0xee01}, 0x3, 0x9}) getresgid(&(0x7f0000000980), &(0x7f0000006b80), &(0x7f0000006bc0)) 4.087407697s ago: executing program 3 (id=386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc67d0794e26f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r0, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) 3.599475122s ago: executing program 2 (id=387): getgid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21404e, &(0x7f0000000280), 0x1, 0x507, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) request_key(0x0, 0x0, &(0x7f0000000580)=')\x00o\xfe\xa6cG\xdc\xe5\xa5\b\xb5\x03\xb5X\xf5\xfc\x96\xd7>\x94\xe4Sg\xf9 \xaaQ\xa8\x16\xc3\x12?\a\xb8\xef\xad\xeb\xb4=\xa4\xae\x8b\x94\x89\xce\xca\xf8C5\xa1x\xd2\x7fu\x9c\xf6\xab\x1f\x1cA\x8bSq\xf4\x9el\x95\x8c\xb1\x99\xfc\x8e\xb1\xf5AP\xc5\x8dJ|\xe68\xac]\xf3\b\xac?O\xef\xf0H\xda\x01.\r\x15L\x84*G3]nZ07\f{\xe9\x91\xcc\xa1\xab\x86 jpO\xaf\x8cdX\xe1\x169b\xa3\x95\xb4\xcf|\xd1I\"!\xd8Ns0+\xa1\xbaKWr\a\x1d\x9e\xd1\xd8x\xe6\x06`_O8N\x87\xc1\xd5SNC/\xfa\xbbj\a\x80\xed E\x8a', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x11, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_emit_vhci(0x0, 0x3e) 3.154686932s ago: executing program 0 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x3, &(0x7f0000000100)={0x0, 0x1c, 0x2, @thr={0x0, &(0x7f00000000c0)}}, &(0x7f0000000180)) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r5) 3.102903287s ago: executing program 3 (id=389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(0x0, 0x0) r2 = open(0x0, 0x143042, 0x0) ftruncate(r2, 0x2008002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 2.098195929s ago: executing program 0 (id=390): userfaultfd(0x80001) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 2.097543059s ago: executing program 2 (id=391): r0 = socket(0x40000000015, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003100)=@getae={0x4c, 0x1f, 0x1, 0x0, 0x0, {{@in=@dev}, @in6=@private2}, [@mark={0xc}]}, 0x4c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1.228158328s ago: executing program 1 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x1b}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) 1.029279696s ago: executing program 2 (id=392): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000002980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r3, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000340)}], 0x2, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) shutdown(r0, 0x1) shutdown(r0, 0x325b44e96ee917b9) 0s ago: executing program 1 (id=394): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3ff, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x46cef15b77d5ff31) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz7FNA0EQBdC/wN3tBUQkZLRCSAOUAxItUAQStIbkAi4Za+3AkguwHbwX/d2ZH0y4rrts1ata/p+Tn/HzlmQ9zGpXlamN2J8ev9bM7bxey+9yTB/1Oacn41mV9Ne8JA/Jd7LVqTGNpeQ+aXn/u9CVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDT9gEAAP//1jwUcA==") r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r8, 0x4b72, &(0x7f0000000740)={0x1, 0x0, 0x8, 0x18, 0x18c, &(0x7f0000000980)}) kernel console output (not intermixed with test programs): couldn't read orphan inode 15 (err -117) [ 112.551213][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.588568][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.787069][ T4294] loop1: detected capacity change from 0 to 32768 [ 113.042916][ T4307] EXT4-fs error (device loop0): ext4_lookup:1856: comm syz.0.91: inode #15: comm syz.0.91: iget: illegal inode # [ 114.306106][ T4008] handle_bad_sector: 8885 callbacks suppressed [ 114.306129][ T4008] attempt to access beyond end of device [ 114.306129][ T4008] loop2: rw=524288, want=88560, limit=40427 [ 114.499194][ T4008] attempt to access beyond end of device [ 114.499194][ T4008] loop2: rw=524288, want=88568, limit=40427 [ 114.539153][ T4008] attempt to access beyond end of device [ 114.539153][ T4008] loop2: rw=524288, want=88576, limit=40427 [ 114.582015][ T4008] attempt to access beyond end of device [ 114.582015][ T4008] loop2: rw=524288, want=88584, limit=40427 [ 114.595258][ T4008] attempt to access beyond end of device [ 114.595258][ T4008] loop2: rw=524288, want=88592, limit=40427 [ 114.610412][ T4008] attempt to access beyond end of device [ 114.610412][ T4008] loop2: rw=524288, want=88600, limit=40427 [ 114.622841][ T4008] attempt to access beyond end of device [ 114.622841][ T4008] loop2: rw=524288, want=88608, limit=40427 [ 114.709053][ T4008] attempt to access beyond end of device [ 114.709053][ T4008] loop2: rw=524288, want=88616, limit=40427 [ 114.819387][ T4008] attempt to access beyond end of device [ 114.819387][ T4008] loop2: rw=524288, want=88624, limit=40427 [ 114.831958][ T4008] attempt to access beyond end of device [ 114.831958][ T4008] loop2: rw=524288, want=88632, limit=40427 [ 115.596477][ T4299] loop4: detected capacity change from 0 to 32768 [ 116.059256][ T4334] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 116.748261][ T4341] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 116.876459][ T4343] loop0: detected capacity change from 0 to 512 [ 117.223390][ T4343] EXT4-fs (loop0): 1 orphan inode deleted [ 117.246664][ T4343] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 117.251275][ T4332] loop1: detected capacity change from 0 to 32768 [ 117.338022][ T4343] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 117.388994][ T4332] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.94 (4332) [ 118.068756][ T4332] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 118.099193][ T4332] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 118.132031][ T4332] BTRFS info (device loop1): use zstd compression, level 3 [ 118.170890][ T4332] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 118.199275][ T4332] BTRFS info (device loop1): use lzo compression, level 0 [ 118.249236][ T4332] BTRFS info (device loop1): using free space tree [ 118.252478][ T4362] loop0: detected capacity change from 0 to 256 [ 118.255796][ T4332] BTRFS info (device loop1): has skinny extents [ 118.526588][ T4362] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 119.240832][ T4332] BTRFS error (device loop1): open_ctree failed [ 119.309149][ T4008] handle_bad_sector: 6366 callbacks suppressed [ 119.309172][ T4008] attempt to access beyond end of device [ 119.309172][ T4008] loop2: rw=0, want=88504, limit=40427 [ 119.411723][ T4008] attempt to access beyond end of device [ 119.411723][ T4008] loop2: rw=0, want=88512, limit=40427 [ 119.476304][ T4008] attempt to access beyond end of device [ 119.476304][ T4008] loop2: rw=0, want=88520, limit=40427 [ 119.507970][ T4008] attempt to access beyond end of device [ 119.507970][ T4008] loop2: rw=0, want=88528, limit=40427 [ 119.584606][ T4008] attempt to access beyond end of device [ 119.584606][ T4008] loop2: rw=0, want=88536, limit=40427 [ 119.677184][ T4008] attempt to access beyond end of device [ 119.677184][ T4008] loop2: rw=0, want=88544, limit=40427 [ 119.745885][ T4008] attempt to access beyond end of device [ 119.745885][ T4008] loop2: rw=0, want=88552, limit=40427 [ 119.759109][ T4008] attempt to access beyond end of device [ 119.759109][ T4008] loop2: rw=0, want=88560, limit=40427 [ 119.770390][ T4008] attempt to access beyond end of device [ 119.770390][ T4008] loop2: rw=0, want=88568, limit=40427 [ 119.792349][ T4008] attempt to access beyond end of device [ 119.792349][ T4008] loop2: rw=0, want=88576, limit=40427 [ 121.036793][ T4404] loop3: detected capacity change from 0 to 512 [ 121.234024][ T4404] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 121.286551][ T4404] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 123.220809][ T4430] loop1: detected capacity change from 0 to 64 [ 123.698285][ T4430] hfs: unable to load codepage "euc-›jp" [ 123.721269][ T4430] hfs: unable to parse mount options [ 124.396725][ T4008] handle_bad_sector: 9159 callbacks suppressed [ 124.396747][ T4008] attempt to access beyond end of device [ 124.396747][ T4008] loop2: rw=524288, want=87224, limit=40427 [ 124.479055][ T4008] attempt to access beyond end of device [ 124.479055][ T4008] loop2: rw=524288, want=87232, limit=40427 [ 124.548128][ T4008] attempt to access beyond end of device [ 124.548128][ T4008] loop2: rw=524288, want=87240, limit=40427 [ 124.568153][ T4008] attempt to access beyond end of device [ 124.568153][ T4008] loop2: rw=524288, want=87248, limit=40427 [ 124.592883][ T4008] attempt to access beyond end of device [ 124.592883][ T4008] loop2: rw=524288, want=87256, limit=40427 [ 124.625357][ T4008] attempt to access beyond end of device [ 124.625357][ T4008] loop2: rw=524288, want=87264, limit=40427 [ 124.668376][ T4008] attempt to access beyond end of device [ 124.668376][ T4008] loop2: rw=524288, want=87272, limit=40427 [ 124.709103][ T4008] attempt to access beyond end of device [ 124.709103][ T4008] loop2: rw=524288, want=87280, limit=40427 [ 124.931785][ T4008] attempt to access beyond end of device [ 124.931785][ T4008] loop2: rw=524288, want=87288, limit=40427 [ 124.943918][ T4008] attempt to access beyond end of device [ 124.943918][ T4008] loop2: rw=524288, want=87296, limit=40427 [ 125.908092][ T3810] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 125.916619][ T3810] Bluetooth: hci1: Injecting HCI hardware error event [ 125.943286][ T3586] Bluetooth: hci1: hardware error 0x00 [ 126.006092][ T4459] loop3: detected capacity change from 0 to 64 [ 126.128597][ T4460] binder: 4446:4460 ioctl 4018620d 0 returned -22 [ 126.922381][ T4467] input: syz0 as /devices/virtual/input/input6 [ 126.961655][ T4467] input: failed to attach handler leds to device input6, error: -6 [ 127.447370][ T4474] loop4: detected capacity change from 0 to 8192 [ 127.667542][ T4474] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 127.718980][ T4474] FAT-fs (loop4): Filesystem has been set read-only [ 129.142815][ T4497] loop1: detected capacity change from 0 to 32768 [ 129.239610][ T4497] XFS: attr2 mount option is deprecated. [ 129.245367][ T4497] XFS: noikeep mount option is deprecated. [ 129.429520][ T4008] handle_bad_sector: 8928 callbacks suppressed [ 129.429569][ T4008] attempt to access beyond end of device [ 129.429569][ T4008] loop2: rw=524288, want=88024, limit=40427 [ 129.650675][ T4008] attempt to access beyond end of device [ 129.650675][ T4008] loop2: rw=524288, want=88032, limit=40427 [ 129.954005][ T4497] XFS (loop1): Mounting V5 Filesystem [ 129.967414][ T4008] attempt to access beyond end of device [ 129.967414][ T4008] loop2: rw=524288, want=88040, limit=40427 [ 130.039313][ T4008] attempt to access beyond end of device [ 130.039313][ T4008] loop2: rw=524288, want=88048, limit=40427 [ 130.078594][ T4008] attempt to access beyond end of device [ 130.078594][ T4008] loop2: rw=524288, want=88056, limit=40427 [ 130.096102][ T4008] attempt to access beyond end of device [ 130.096102][ T4008] loop2: rw=524288, want=88064, limit=40427 [ 130.117115][ T4513] loop4: detected capacity change from 0 to 64 [ 130.135518][ T4008] attempt to access beyond end of device [ 130.135518][ T4008] loop2: rw=524288, want=88072, limit=40427 [ 130.148210][ T4008] attempt to access beyond end of device [ 130.148210][ T4008] loop2: rw=524288, want=88080, limit=40427 [ 130.160301][ T4008] attempt to access beyond end of device [ 130.160301][ T4008] loop2: rw=524288, want=88088, limit=40427 [ 130.162327][ T4497] XFS (loop1): Ending clean mount [ 130.173429][ T4008] attempt to access beyond end of device [ 130.173429][ T4008] loop2: rw=524288, want=88096, limit=40427 [ 130.188597][ T4497] XFS (loop1): Quotacheck needed: Please wait. [ 130.275993][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 130.309276][ T4497] XFS (loop1): Quotacheck: Done. [ 130.650377][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.751914][ T3579] XFS (loop1): Unmounting Filesystem [ 130.758271][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.808989][ T4496] device bridge_slave_0 entered promiscuous mode [ 130.836232][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.844665][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.853407][ T4496] device bridge_slave_1 entered promiscuous mode [ 131.015664][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.050297][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.155786][ T4496] team0: Port device team_slave_0 added [ 131.190797][ T4496] team0: Port device team_slave_1 added [ 131.299423][ T3810] Bluetooth: hci6: command 0x0409 tx timeout [ 131.327686][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.355661][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.437152][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.499554][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.518900][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.598101][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.823619][ T4496] device hsr_slave_0 entered promiscuous mode [ 131.849652][ T4496] device hsr_slave_1 entered promiscuous mode [ 131.857058][ T4496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.879723][ T4496] Cannot create hsr debugfs directory [ 132.019119][ T3713] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 132.030729][ T3713] Bluetooth: hci5: Injecting HCI hardware error event [ 132.131431][ T3585] Bluetooth: hci5: hardware error 0x00 [ 132.811911][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.818317][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.199965][ T4496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.810517][ T3703] Bluetooth: hci6: command 0x041b tx timeout [ 133.836890][ T4555] loop1: detected capacity change from 0 to 64 [ 134.184167][ T4496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.437199][ T4557] loop4: detected capacity change from 0 to 512 [ 134.444150][ T4008] handle_bad_sector: 7733 callbacks suppressed [ 134.444168][ T4008] attempt to access beyond end of device [ 134.444168][ T4008] loop2: rw=524288, want=87120, limit=40427 [ 134.536183][ T4557] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.542518][ T4008] attempt to access beyond end of device [ 134.542518][ T4008] loop2: rw=524288, want=87128, limit=40427 [ 134.556922][ T4008] attempt to access beyond end of device [ 134.556922][ T4008] loop2: rw=524288, want=87136, limit=40427 [ 134.568625][ T4008] attempt to access beyond end of device [ 134.568625][ T4008] loop2: rw=524288, want=87144, limit=40427 [ 134.609068][ T4008] attempt to access beyond end of device [ 134.609068][ T4008] loop2: rw=524288, want=87152, limit=40427 [ 134.625474][ T4557] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 134.628849][ T4008] attempt to access beyond end of device [ 134.628849][ T4008] loop2: rw=524288, want=87160, limit=40427 [ 134.668067][ T4496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.679873][ T4008] attempt to access beyond end of device [ 134.679873][ T4008] loop2: rw=524288, want=87168, limit=40427 [ 134.715811][ T4008] attempt to access beyond end of device [ 134.715811][ T4008] loop2: rw=524288, want=87176, limit=40427 [ 134.727654][ T4008] attempt to access beyond end of device [ 134.727654][ T4008] loop2: rw=524288, want=87184, limit=40427 [ 134.741091][ T4008] attempt to access beyond end of device [ 134.741091][ T4008] loop2: rw=524288, want=87192, limit=40427 [ 134.766205][ T4557] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.144: inode #15: comm syz.4.144: iget: illegal inode # [ 134.835565][ T4557] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.144: couldn't read orphan inode 15 (err -117) [ 135.161912][ T4557] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.554867][ T4568] loop1: detected capacity change from 0 to 32768 [ 135.561872][ T4568] XFS: attr2 mount option is deprecated. [ 135.567537][ T4568] XFS: noikeep mount option is deprecated. [ 135.831476][ T4568] XFS (loop1): Mounting V5 Filesystem [ 135.848947][ T21] Bluetooth: hci6: command 0x040f tx timeout [ 135.861747][ T4496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.980457][ T4577] EXT4-fs error (device loop4): ext4_lookup:1856: comm syz.4.144: inode #15: comm syz.4.144: iget: illegal inode # [ 136.604390][ T4568] XFS (loop1): Ending clean mount [ 136.616278][ T4568] XFS (loop1): Quotacheck needed: Please wait. [ 136.817234][ T4568] XFS (loop1): Quotacheck: Done. [ 137.285816][ T3579] XFS (loop1): Unmounting Filesystem [ 137.460581][ T4496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.488327][ T4496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.519963][ T4496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.548721][ T4496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.827330][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.862903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.900025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.919324][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.949007][ T3618] Bluetooth: hci6: command 0x0419 tx timeout [ 137.974137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.990791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.053734][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.060951][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.127750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.199237][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.246110][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.690166][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.697405][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.876466][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.969210][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.981627][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.000228][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.044154][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.064364][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.100294][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.142005][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.192962][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.249686][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.290444][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.331477][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.453548][ T4619] loop3: detected capacity change from 0 to 1024 [ 139.469791][ T4008] handle_bad_sector: 8691 callbacks suppressed [ 139.469820][ T4008] attempt to access beyond end of device [ 139.469820][ T4008] loop2: rw=524288, want=86024, limit=40427 [ 139.576057][ T4008] attempt to access beyond end of device [ 139.576057][ T4008] loop2: rw=524288, want=86032, limit=40427 [ 139.651949][ T4008] attempt to access beyond end of device [ 139.651949][ T4008] loop2: rw=524288, want=86040, limit=40427 [ 139.774815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.889108][ T4008] attempt to access beyond end of device [ 139.889108][ T4008] loop2: rw=524288, want=86048, limit=40427 [ 139.909098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.923165][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.196717][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.209243][ T4008] attempt to access beyond end of device [ 141.209243][ T4008] loop2: rw=524288, want=86056, limit=40427 [ 141.237863][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.299210][ T4008] attempt to access beyond end of device [ 141.299210][ T4008] loop2: rw=524288, want=86064, limit=40427 [ 141.338316][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.374296][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.382601][ T4008] attempt to access beyond end of device [ 141.382601][ T4008] loop2: rw=524288, want=86072, limit=40427 [ 141.414675][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.432038][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.463216][ T4496] device veth0_vlan entered promiscuous mode [ 141.501215][ T4008] attempt to access beyond end of device [ 141.501215][ T4008] loop2: rw=524288, want=86080, limit=40427 [ 141.521276][ T4496] device veth1_vlan entered promiscuous mode [ 141.619376][ T4008] attempt to access beyond end of device [ 141.619376][ T4008] loop2: rw=524288, want=86088, limit=40427 [ 141.654133][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.666376][ T4008] attempt to access beyond end of device [ 141.666376][ T4008] loop2: rw=524288, want=86096, limit=40427 [ 141.671280][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.747324][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.789461][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.841267][ T4496] device veth0_macvtap entered promiscuous mode [ 141.883010][ T4496] device veth1_macvtap entered promiscuous mode [ 141.903297][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.242269][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.337394][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.557648][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.753514][ T3713] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 142.761889][ T3713] Bluetooth: hci4: Injecting HCI hardware error event [ 142.779565][ T3585] Bluetooth: hci4: hardware error 0x00 [ 142.905430][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.084912][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.140323][ T4008] handle_bad_sector: 2348 callbacks suppressed [ 145.140343][ T4008] attempt to access beyond end of device [ 145.140343][ T4008] loop2: rw=524288, want=89176, limit=40427 [ 145.187406][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.198272][ T4008] attempt to access beyond end of device [ 145.198272][ T4008] loop2: rw=524288, want=89184, limit=40427 [ 145.210445][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.221344][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.234912][ T4008] attempt to access beyond end of device [ 145.234912][ T4008] loop2: rw=524288, want=89192, limit=40427 [ 145.246920][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.257229][ T4008] attempt to access beyond end of device [ 145.257229][ T4008] loop2: rw=524288, want=89200, limit=40427 [ 145.269082][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.288228][ T4008] attempt to access beyond end of device [ 145.288228][ T4008] loop2: rw=524288, want=89208, limit=40427 [ 145.307989][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.318628][ T4008] attempt to access beyond end of device [ 145.318628][ T4008] loop2: rw=524288, want=89216, limit=40427 [ 145.430216][ T4008] attempt to access beyond end of device [ 145.430216][ T4008] loop2: rw=524288, want=89224, limit=40427 [ 145.443399][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.499185][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.507363][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.514987][ T4008] attempt to access beyond end of device [ 145.514987][ T4008] loop2: rw=524288, want=89232, limit=40427 [ 145.533467][ T4008] attempt to access beyond end of device [ 145.533467][ T4008] loop2: rw=524288, want=89240, limit=40427 [ 145.546436][ T4008] attempt to access beyond end of device [ 145.546436][ T4008] loop2: rw=524288, want=89248, limit=40427 [ 145.597986][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.688329][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.764078][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.784113][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.794278][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.805615][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.815718][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.826242][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.836170][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.910840][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.920957][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.931779][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.943386][ T4496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.954151][ T4496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.970116][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.004655][ T4496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.015618][ T4496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.026717][ T4496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.035774][ T4496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.603601][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.619713][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.642007][ T4669] loop1: detected capacity change from 0 to 32768 [ 146.731048][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.760460][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.929624][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.980418][ T4669] JBD2: Ignoring recovery information on journal [ 146.996548][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.040684][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.120374][ T4669] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 148.152120][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.300834][ T3579] ocfs2: Unmounting device (7,1) on (node local) [ 150.928119][ T4008] handle_bad_sector: 8434 callbacks suppressed [ 150.928138][ T4008] attempt to access beyond end of device [ 150.928138][ T4008] loop2: rw=524288, want=86024, limit=40427 [ 150.966249][ T4008] attempt to access beyond end of device [ 150.966249][ T4008] loop2: rw=524288, want=86032, limit=40427 [ 151.103374][ T4008] attempt to access beyond end of device [ 151.103374][ T4008] loop2: rw=524288, want=86040, limit=40427 [ 151.231116][ T4008] attempt to access beyond end of device [ 151.231116][ T4008] loop2: rw=524288, want=86048, limit=40427 [ 151.308351][ T4008] attempt to access beyond end of device [ 151.308351][ T4008] loop2: rw=524288, want=86056, limit=40427 [ 151.330918][ T3586] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 151.401693][ T4008] attempt to access beyond end of device [ 151.401693][ T4008] loop2: rw=524288, want=86064, limit=40427 [ 152.189842][ T4008] attempt to access beyond end of device [ 152.189842][ T4008] loop2: rw=524288, want=86072, limit=40427 [ 152.213659][ T4008] attempt to access beyond end of device [ 152.213659][ T4008] loop2: rw=524288, want=86080, limit=40427 [ 153.640528][ T4008] attempt to access beyond end of device [ 153.640528][ T4008] loop2: rw=524288, want=86088, limit=40427 [ 153.710482][ T4008] attempt to access beyond end of device [ 153.710482][ T4008] loop2: rw=524288, want=86096, limit=40427 [ 153.783756][ T4737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.019351][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 154.333259][ T4747] process 'syz.3.185' launched './file1' with NULL argv: empty string added [ 154.541313][ T4751] loop4: detected capacity change from 0 to 1024 [ 155.429944][ T4742] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 155.989677][ T4008] handle_bad_sector: 2813 callbacks suppressed [ 155.989701][ T4008] attempt to access beyond end of device [ 155.989701][ T4008] loop2: rw=0, want=88968, limit=40427 [ 156.887384][ T4008] attempt to access beyond end of device [ 156.887384][ T4008] loop2: rw=0, want=88976, limit=40427 [ 156.950659][ T4008] attempt to access beyond end of device [ 156.950659][ T4008] loop2: rw=0, want=88984, limit=40427 [ 156.992278][ T4008] attempt to access beyond end of device [ 156.992278][ T4008] loop2: rw=0, want=88992, limit=40427 [ 157.004342][ T4008] attempt to access beyond end of device [ 157.004342][ T4008] loop2: rw=0, want=89000, limit=40427 [ 157.021716][ T4008] attempt to access beyond end of device [ 157.021716][ T4008] loop2: rw=0, want=89008, limit=40427 [ 157.269637][ T4008] attempt to access beyond end of device [ 157.269637][ T4008] loop2: rw=0, want=89016, limit=40427 [ 157.396172][ T4008] attempt to access beyond end of device [ 157.396172][ T4008] loop2: rw=0, want=89024, limit=40427 [ 157.458361][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 157.504689][ T4770] device bridge_slave_1 left promiscuous mode [ 157.547688][ T4008] attempt to access beyond end of device [ 157.547688][ T4008] loop2: rw=0, want=89032, limit=40427 [ 157.627436][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.926096][ T4008] attempt to access beyond end of device [ 157.926096][ T4008] loop2: rw=0, want=89040, limit=40427 [ 157.964353][ T4770] device bridge_slave_0 left promiscuous mode [ 158.010874][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.363937][ T4775] netlink: 132 bytes leftover after parsing attributes in process `syz.4.191'. [ 159.275988][ T4787] netlink: 'syz.3.198': attribute type 27 has an invalid length. [ 161.017678][ T4008] handle_bad_sector: 7177 callbacks suppressed [ 161.017700][ T4008] attempt to access beyond end of device [ 161.017700][ T4008] loop2: rw=524288, want=87544, limit=40427 [ 161.097036][ T4008] attempt to access beyond end of device [ 161.097036][ T4008] loop2: rw=524288, want=87552, limit=40427 [ 161.146195][ T4008] attempt to access beyond end of device [ 161.146195][ T4008] loop2: rw=524288, want=87560, limit=40427 [ 161.209359][ T4008] attempt to access beyond end of device [ 161.209359][ T4008] loop2: rw=524288, want=87568, limit=40427 [ 161.256588][ T4008] attempt to access beyond end of device [ 161.256588][ T4008] loop2: rw=524288, want=87576, limit=40427 [ 161.324379][ T4008] attempt to access beyond end of device [ 161.324379][ T4008] loop2: rw=524288, want=87584, limit=40427 [ 161.373864][ T4008] attempt to access beyond end of device [ 161.373864][ T4008] loop2: rw=524288, want=87592, limit=40427 [ 161.407413][ T4008] attempt to access beyond end of device [ 161.407413][ T4008] loop2: rw=524288, want=87600, limit=40427 [ 161.419768][ T4008] attempt to access beyond end of device [ 161.419768][ T4008] loop2: rw=524288, want=87608, limit=40427 [ 161.433805][ T4008] attempt to access beyond end of device [ 161.433805][ T4008] loop2: rw=524288, want=87616, limit=40427 [ 161.898250][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.906432][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.033400][ T7] Bluetooth: hci7: command 0x0409 tx timeout [ 166.753345][ T3702] Bluetooth: hci7: command 0x041b tx timeout [ 166.759838][ T4008] handle_bad_sector: 8820 callbacks suppressed [ 166.759862][ T4008] attempt to access beyond end of device [ 166.759862][ T4008] loop2: rw=524288, want=87480, limit=40427 [ 166.783754][ T4008] attempt to access beyond end of device [ 166.783754][ T4008] loop2: rw=524288, want=87488, limit=40427 [ 167.074849][ T4008] attempt to access beyond end of device [ 167.074849][ T4008] loop2: rw=524288, want=87496, limit=40427 [ 167.115193][ T4008] attempt to access beyond end of device [ 167.115193][ T4008] loop2: rw=524288, want=87504, limit=40427 [ 167.127517][ T4008] attempt to access beyond end of device [ 167.127517][ T4008] loop2: rw=524288, want=87512, limit=40427 [ 167.141185][ T4008] attempt to access beyond end of device [ 167.141185][ T4008] loop2: rw=524288, want=87520, limit=40427 [ 167.155814][ T4008] attempt to access beyond end of device [ 167.155814][ T4008] loop2: rw=524288, want=87528, limit=40427 [ 167.269639][ T4008] attempt to access beyond end of device [ 167.269639][ T4008] loop2: rw=524288, want=87536, limit=40427 [ 167.313286][ T4008] attempt to access beyond end of device [ 167.313286][ T4008] loop2: rw=524288, want=87544, limit=40427 [ 167.330020][ T4008] attempt to access beyond end of device [ 167.330020][ T4008] loop2: rw=524288, want=87552, limit=40427 [ 168.076447][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.202880][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.809508][ T3703] Bluetooth: hci7: command 0x040f tx timeout [ 170.087800][ T4787] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.144807][ T4787] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.173730][ T4787] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.203209][ T4787] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.771257][ T4788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.809832][ T4788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.882445][ T4788] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.890460][ T3702] Bluetooth: hci7: command 0x0419 tx timeout [ 170.933908][ T4788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.182451][ T4838] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 171.248557][ T4838] team0: Port device netdevsim0 added [ 171.311414][ T4856] loop4: detected capacity change from 0 to 512 [ 171.445124][ T4856] EXT4-fs (loop4): 1 orphan inode deleted [ 171.462214][ T4856] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 171.517469][ T4856] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038 (0x7fffffff) [ 172.379527][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 172.398339][ T4008] handle_bad_sector: 20130 callbacks suppressed [ 172.398361][ T4008] attempt to access beyond end of device [ 172.398361][ T4008] loop2: rw=0, want=87552, limit=40427 [ 172.417655][ T4008] attempt to access beyond end of device [ 172.417655][ T4008] loop2: rw=0, want=87560, limit=40427 [ 172.429015][ T4008] attempt to access beyond end of device [ 172.429015][ T4008] loop2: rw=0, want=87568, limit=40427 [ 172.440552][ T4008] attempt to access beyond end of device [ 172.440552][ T4008] loop2: rw=0, want=87576, limit=40427 [ 172.454884][ T4008] attempt to access beyond end of device [ 172.454884][ T4008] loop2: rw=0, want=87584, limit=40427 [ 172.557082][ T1177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.094966][ T4008] attempt to access beyond end of device [ 173.094966][ T4008] loop2: rw=0, want=87592, limit=40427 [ 173.173628][ T4008] attempt to access beyond end of device [ 173.173628][ T4008] loop2: rw=0, want=87600, limit=40427 [ 173.599675][ T4008] attempt to access beyond end of device [ 173.599675][ T4008] loop2: rw=0, want=87608, limit=40427 [ 173.618988][ T4008] attempt to access beyond end of device [ 173.618988][ T4008] loop2: rw=0, want=87616, limit=40427 [ 173.620914][ T4869] syz.2.219 uses old SIOCAX25GETINFO [ 173.686138][ T1177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.749198][ T4008] attempt to access beyond end of device [ 173.749198][ T4008] loop2: rw=0, want=87624, limit=40427 [ 173.963231][ T1177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.072709][ T1177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.348190][ T4790] chnl_net:caif_netlink_parms(): no params data found [ 174.409067][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 174.447807][ T4844] chnl_net:caif_netlink_parms(): no params data found [ 175.023761][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.031232][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.040871][ T4790] device bridge_slave_0 entered promiscuous mode [ 175.299061][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.306466][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.350004][ T4790] device bridge_slave_1 entered promiscuous mode [ 175.563828][ T4790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.603823][ T4844] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.615964][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.646332][ T4844] device bridge_slave_0 entered promiscuous mode [ 175.686184][ T4790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.740504][ T4844] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.755098][ T4844] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.773965][ T4844] device bridge_slave_1 entered promiscuous mode [ 175.928521][ T4844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.966689][ T4790] team0: Port device team_slave_0 added [ 176.126215][ T4844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.152664][ T4790] team0: Port device team_slave_1 added [ 176.309272][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.333579][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.397840][ T4790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.462393][ T4844] team0: Port device team_slave_0 added [ 176.470209][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.477951][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.488927][ T3572] Bluetooth: hci4: command 0x040f tx timeout [ 176.505865][ T4790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.235687][ T4844] team0: Port device team_slave_1 added [ 177.471497][ T4008] handle_bad_sector: 9668 callbacks suppressed [ 177.471520][ T4008] attempt to access beyond end of device [ 177.471520][ T4008] loop2: rw=0, want=86416, limit=40427 [ 178.760307][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 178.775235][ T4008] attempt to access beyond end of device [ 178.775235][ T4008] loop2: rw=0, want=86424, limit=40427 [ 178.787522][ T4008] attempt to access beyond end of device [ 178.787522][ T4008] loop2: rw=0, want=86432, limit=40427 [ 178.800514][ T4008] attempt to access beyond end of device [ 178.800514][ T4008] loop2: rw=0, want=86440, limit=40427 [ 178.814367][ T4008] attempt to access beyond end of device [ 178.814367][ T4008] loop2: rw=0, want=86448, limit=40427 [ 178.829391][ T4008] attempt to access beyond end of device [ 178.829391][ T4008] loop2: rw=0, want=86456, limit=40427 [ 178.958982][ T4008] attempt to access beyond end of device [ 178.958982][ T4008] loop2: rw=0, want=86464, limit=40427 [ 178.971273][ T4008] attempt to access beyond end of device [ 178.971273][ T4008] loop2: rw=0, want=86472, limit=40427 [ 178.983153][ T4008] attempt to access beyond end of device [ 178.983153][ T4008] loop2: rw=0, want=86480, limit=40427 [ 178.995045][ T4008] attempt to access beyond end of device [ 178.995045][ T4008] loop2: rw=0, want=86488, limit=40427 [ 179.116613][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.149270][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.277507][ T4844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.552617][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.568260][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.316562][ T4844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.253944][ T4790] device hsr_slave_0 entered promiscuous mode [ 181.330020][ T4790] device hsr_slave_1 entered promiscuous mode [ 181.357573][ T4790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.408400][ T4790] Cannot create hsr debugfs directory [ 181.635182][ T4844] device hsr_slave_0 entered promiscuous mode [ 181.650957][ T4844] device hsr_slave_1 entered promiscuous mode [ 181.665265][ T4844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.682858][ T4844] Cannot create hsr debugfs directory [ 181.914800][ T4965] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.949447][ T4970] hub 9-0:1.0: USB hub found [ 181.959175][ T4970] hub 9-0:1.0: 8 ports detected [ 182.213876][ T4965] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 182.480077][ T4008] handle_bad_sector: 7838 callbacks suppressed [ 182.480098][ T4008] attempt to access beyond end of device [ 182.480098][ T4008] loop2: rw=0, want=86352, limit=40427 [ 182.523533][ T4008] attempt to access beyond end of device [ 182.523533][ T4008] loop2: rw=0, want=86360, limit=40427 [ 182.682849][ T4008] attempt to access beyond end of device [ 182.682849][ T4008] loop2: rw=0, want=86368, limit=40427 [ 182.970877][ T4984] loop4: detected capacity change from 0 to 8192 [ 183.021890][ T4008] attempt to access beyond end of device [ 183.021890][ T4008] loop2: rw=0, want=86376, limit=40427 [ 184.330932][ T4008] attempt to access beyond end of device [ 184.330932][ T4008] loop2: rw=0, want=86384, limit=40427 [ 184.559930][ T4008] attempt to access beyond end of device [ 184.559930][ T4008] loop2: rw=0, want=86392, limit=40427 [ 184.598958][ T4008] attempt to access beyond end of device [ 184.598958][ T4008] loop2: rw=0, want=86400, limit=40427 [ 184.617671][ T1177] device hsr_slave_0 left promiscuous mode [ 184.657661][ T4008] attempt to access beyond end of device [ 184.657661][ T4008] loop2: rw=0, want=86408, limit=40427 [ 184.673921][ T4008] attempt to access beyond end of device [ 184.673921][ T4008] loop2: rw=0, want=86416, limit=40427 [ 184.698550][ T1177] device hsr_slave_1 left promiscuous mode [ 184.702452][ T4008] attempt to access beyond end of device [ 184.702452][ T4008] loop2: rw=0, want=86424, limit=40427 [ 184.717394][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.738998][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.930752][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.939357][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.985351][ T1177] device veth1_macvtap left promiscuous mode [ 185.061393][ T1177] device veth0_macvtap left promiscuous mode [ 185.067901][ T1177] device veth1_vlan left promiscuous mode [ 185.074142][ T1177] device veth0_vlan left promiscuous mode [ 185.946070][ T3805] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.389217][ T3805] usb 5-1: Using ep0 maxpacket: 16 [ 186.529577][ T3805] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 186.575435][ T3805] usb 5-1: config 0 has no interface number 0 [ 186.689231][ T3805] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 186.783976][ T3805] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.056877][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 187.079535][ T3805] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 187.090156][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 187.099432][ T3805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.116520][ T3805] usb 5-1: Product: syz [ 187.121818][ T3805] usb 5-1: Manufacturer: syz [ 187.126458][ T3805] usb 5-1: SerialNumber: syz [ 187.136170][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.150764][ T3805] usb 5-1: config 0 descriptor?? [ 187.172991][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.184326][ T5004] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.199041][ T5004] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 187.326775][ T1177] bond0 (unregistering): Released all slaves [ 187.480606][ T3805] asix: probe of 5-1:0.251 failed with error -71 [ 187.504725][ T3805] usb 5-1: USB disconnect, device number 2 [ 187.520101][ T4008] handle_bad_sector: 11806 callbacks suppressed [ 187.520120][ T4008] attempt to access beyond end of device [ 187.520120][ T4008] loop2: rw=0, want=86608, limit=40427 [ 187.542885][ T4008] attempt to access beyond end of device [ 187.542885][ T4008] loop2: rw=0, want=86616, limit=40427 [ 187.558293][ T4008] attempt to access beyond end of device [ 187.558293][ T4008] loop2: rw=0, want=86624, limit=40427 [ 187.591596][ T4008] attempt to access beyond end of device [ 187.591596][ T4008] loop2: rw=0, want=86632, limit=40427 [ 187.649841][ T4008] attempt to access beyond end of device [ 187.649841][ T4008] loop2: rw=0, want=86640, limit=40427 [ 187.685502][ T4008] attempt to access beyond end of device [ 187.685502][ T4008] loop2: rw=0, want=86648, limit=40427 [ 187.697086][ T3714] Bluetooth: hci3: command 0x0409 tx timeout [ 187.725719][ T4008] attempt to access beyond end of device [ 187.725719][ T4008] loop2: rw=0, want=86656, limit=40427 [ 187.756350][ T4008] attempt to access beyond end of device [ 187.756350][ T4008] loop2: rw=0, want=86664, limit=40427 [ 187.807530][ T4008] attempt to access beyond end of device [ 187.807530][ T4008] loop2: rw=0, want=86672, limit=40427 [ 187.848209][ T4008] attempt to access beyond end of device [ 187.848209][ T4008] loop2: rw=0, want=86680, limit=40427 [ 187.901752][ T5014] fuse: Bad value for 'fd' [ 187.933399][ T5014] Process accounting resumed [ 188.014766][ T5001] chnl_net:caif_netlink_parms(): no params data found [ 188.219696][ T5025] mmap: syz.4.246 (5025) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 188.463564][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.538700][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.590610][ T5001] device bridge_slave_0 entered promiscuous mode [ 188.624132][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.671326][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.289873][ T5001] device bridge_slave_1 entered promiscuous mode [ 189.419083][ T5001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.465500][ T5001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.513557][ T5001] team0: Port device team_slave_0 added [ 189.549459][ T5001] team0: Port device team_slave_1 added [ 189.709897][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.249'. [ 189.740243][ T5050] device bridge_slave_1 left promiscuous mode [ 189.759912][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.779258][ T3714] Bluetooth: hci3: command 0x041b tx timeout [ 189.810869][ T5050] device bridge_slave_0 left promiscuous mode [ 189.835733][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.079855][ T5001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.088927][ T5001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.155974][ T5001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.211992][ T5001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.247439][ T5001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.378839][ T5001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.417923][ T5062] fuse: Bad value for 'fd' [ 190.427233][ T4844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.434560][ T5062] Process accounting resumed [ 190.452204][ T4844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.642675][ T4844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.753688][ T5001] device hsr_slave_0 entered promiscuous mode [ 190.784435][ T5001] device hsr_slave_1 entered promiscuous mode [ 190.819957][ T5001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.827891][ T5001] Cannot create hsr debugfs directory [ 190.854621][ T4844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.147004][ T4790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.270103][ T4790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.259866][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 192.392765][ T5089] loop4: detected capacity change from 0 to 512 [ 192.401265][ T5001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.432748][ T4790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.529112][ T4008] handle_bad_sector: 10433 callbacks suppressed [ 192.529134][ T4008] attempt to access beyond end of device [ 192.529134][ T4008] loop2: rw=524288, want=87664, limit=40427 [ 192.563576][ T5089] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.605546][ T5089] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 192.631207][ T4790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.647735][ T4008] attempt to access beyond end of device [ 192.647735][ T4008] loop2: rw=524288, want=87672, limit=40427 [ 192.670701][ T4008] attempt to access beyond end of device [ 192.670701][ T4008] loop2: rw=524288, want=87680, limit=40427 [ 192.709153][ T4008] attempt to access beyond end of device [ 192.709153][ T4008] loop2: rw=524288, want=87688, limit=40427 [ 192.739103][ T5089] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.256: inode #15: comm syz.4.256: iget: illegal inode # [ 192.857299][ T5101] hub 9-0:1.0: USB hub found [ 192.863209][ T5101] hub 9-0:1.0: 8 ports detected [ 193.057618][ T4008] attempt to access beyond end of device [ 193.057618][ T4008] loop2: rw=524288, want=87696, limit=40427 [ 193.072155][ T4008] attempt to access beyond end of device [ 193.072155][ T4008] loop2: rw=524288, want=87704, limit=40427 [ 193.091045][ T4008] attempt to access beyond end of device [ 193.091045][ T4008] loop2: rw=524288, want=87712, limit=40427 [ 193.103724][ T4008] attempt to access beyond end of device [ 193.103724][ T4008] loop2: rw=524288, want=87720, limit=40427 [ 193.116639][ T4008] attempt to access beyond end of device [ 193.116639][ T4008] loop2: rw=524288, want=87728, limit=40427 [ 193.129409][ T4008] attempt to access beyond end of device [ 193.129409][ T4008] loop2: rw=524288, want=87736, limit=40427 [ 193.509918][ T5089] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.256: couldn't read orphan inode 15 (err -117) [ 193.574019][ T5089] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.692362][ T5001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.893223][ T5108] EXT4-fs error (device loop4): ext4_lookup:1856: comm syz.4.256: inode #15: comm syz.4.256: iget: illegal inode # [ 194.011268][ T5099] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 19: invalid block bitmap [ 194.265192][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271618][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339021][ T3713] Bluetooth: hci3: command 0x0419 tx timeout [ 194.415019][ T5001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.447123][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.550447][ T4844] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.557530][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.565933][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.701639][ T5001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.764438][ T5113] loop4: detected capacity change from 0 to 4096 [ 194.777086][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.798158][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.808595][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.850392][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.857539][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.888335][ T5113] NILFS (loop4): invalid segment: Checksum error in segment payload [ 194.898709][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.917934][ T5113] NILFS (loop4): trying rollback from an earlier position [ 194.918724][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.964421][ T5113] NILFS (loop4): recovery complete [ 194.964509][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.976759][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.023605][ T5123] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.037860][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.047557][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.081958][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.135972][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.151647][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.180188][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.199767][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.230404][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.259694][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.279401][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.318492][ T4790] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.359787][ T5129] fuse: Bad value for 'fd' [ 195.363808][ T4844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.380548][ T5129] Process accounting resumed [ 195.397033][ T4844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.429165][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.444823][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.476501][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.515978][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.544195][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.561270][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.586461][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.593646][ T3903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.707796][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.726074][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.781386][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.808140][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.815372][ T3903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.900008][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.919990][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.957003][ T5001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.993472][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 196.019383][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.052338][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.099561][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.175306][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.202292][ T5001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.254995][ T4844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.346438][ T4790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.398951][ T4790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.425888][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.435193][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.450664][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.458519][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.474454][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 196.484588][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 196.648820][ T5152] hub 9-0:1.0: USB hub found [ 196.654811][ T5152] hub 9-0:1.0: 8 ports detected [ 197.352629][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 197.361381][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 197.370356][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 197.410384][ T5001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 197.571981][ T4008] handle_bad_sector: 6064 callbacks suppressed [ 197.572001][ T4008] attempt to access beyond end of device [ 197.572001][ T4008] loop2: rw=524288, want=89120, limit=40427 [ 197.589871][ T4008] attempt to access beyond end of device [ 197.589871][ T4008] loop2: rw=524288, want=89128, limit=40427 [ 197.602062][ T4008] attempt to access beyond end of device [ 197.602062][ T4008] loop2: rw=524288, want=89136, limit=40427 [ 197.614851][ T4008] attempt to access beyond end of device [ 197.614851][ T4008] loop2: rw=524288, want=89144, limit=40427 [ 197.639001][ T4008] attempt to access beyond end of device [ 197.639001][ T4008] loop2: rw=524288, want=89152, limit=40427 [ 198.526904][ T4008] attempt to access beyond end of device [ 198.526904][ T4008] loop2: rw=524288, want=89160, limit=40427 [ 198.540100][ T4008] attempt to access beyond end of device [ 198.540100][ T4008] loop2: rw=524288, want=89168, limit=40427 [ 198.562780][ T4008] attempt to access beyond end of device [ 198.562780][ T4008] loop2: rw=524288, want=89176, limit=40427 [ 198.596653][ T4008] attempt to access beyond end of device [ 198.596653][ T4008] loop2: rw=524288, want=89184, limit=40427 [ 198.608704][ T4008] attempt to access beyond end of device [ 198.608704][ T4008] loop2: rw=524288, want=89192, limit=40427 [ 198.624731][ T5001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.723256][ T4844] device veth0_vlan entered promiscuous mode [ 198.774429][ T4844] device veth1_vlan entered promiscuous mode [ 198.800752][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 198.841378][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 198.876993][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 198.935569][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 198.950692][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 198.973344][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 199.025913][ T4844] device veth0_macvtap entered promiscuous mode [ 199.040147][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 199.059028][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.089062][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.110601][ T5163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.129343][ T5163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.186492][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.195113][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.203757][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 199.242344][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.262523][ T4844] device veth1_macvtap entered promiscuous mode [ 199.301418][ T4790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.308614][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 199.318659][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 199.357716][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.386505][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.407937][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.428546][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.448306][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.469009][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.488465][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.511362][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.534745][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.561837][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.578172][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.598262][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.617838][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.628258][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.648629][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.668870][ T4844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.698959][ T4844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.720405][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.749733][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 199.759744][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.783357][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 199.806327][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.979761][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.999346][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.011517][ T4844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.029087][ T4844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.048824][ T4844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.057600][ T4844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.105272][ T4790] device veth0_vlan entered promiscuous mode [ 200.221870][ T5001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.231136][ T5168] fuse: Bad value for 'fd' [ 200.235835][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.251559][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.264773][ T5168] Process accounting resumed [ 200.281292][ T4790] device veth1_vlan entered promiscuous mode [ 200.378144][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.387251][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.399909][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 200.408138][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 200.460652][ T5001] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.522420][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.539855][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.572027][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.593068][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.655411][ T4790] device veth0_macvtap entered promiscuous mode [ 200.689127][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 200.698078][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.719334][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.728462][ T3844] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.735632][ T3844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.745493][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.754759][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.763843][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.771004][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.780812][ T5173] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:0 [ 200.784130][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.807378][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.871058][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.020894][ T4790] device veth1_macvtap entered promiscuous mode [ 201.080268][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.092267][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.118639][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.140411][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.150898][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.171058][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.237860][ T5001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.289163][ T5001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.316210][ T3805] Bluetooth: hci1: command 0x0409 tx timeout [ 201.356730][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.369210][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.377923][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.392350][ T5185] fuse: Bad value for 'fd' [ 201.419779][ T5185] Process accounting resumed [ 201.427218][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.431803][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.456138][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.457593][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.478721][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.491279][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.502227][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.514017][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.525165][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.544941][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.560876][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.578798][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.601828][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.644738][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 201.662016][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.702763][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.723129][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.749373][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.764109][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.776560][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.792365][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.810465][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.827388][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.846391][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.865820][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.883549][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.895599][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.920308][ T5165] chnl_net:caif_netlink_parms(): no params data found [ 201.941971][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.959818][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 201.982833][ T4790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.002337][ T4790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.017959][ T4790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.031138][ T4790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.075645][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.093449][ T5001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.100687][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.136150][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 202.147209][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.170640][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.271596][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.291611][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.377892][ T1177] device hsr_slave_0 left promiscuous mode [ 202.406734][ T1177] device hsr_slave_1 left promiscuous mode [ 202.449209][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.469058][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.507396][ T1177] device bridge_slave_1 left promiscuous mode [ 202.525740][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.555065][ T1177] device bridge_slave_0 left promiscuous mode [ 202.579234][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.580292][ T4008] handle_bad_sector: 23897 callbacks suppressed [ 202.580312][ T4008] attempt to access beyond end of device [ 202.580312][ T4008] loop2: rw=0, want=87904, limit=40427 [ 202.604557][ T4008] attempt to access beyond end of device [ 202.604557][ T4008] loop2: rw=0, want=87912, limit=40427 [ 202.617086][ T4008] attempt to access beyond end of device [ 202.617086][ T4008] loop2: rw=0, want=87920, limit=40427 [ 202.640571][ T4008] attempt to access beyond end of device [ 202.640571][ T4008] loop2: rw=0, want=87928, limit=40427 [ 202.668942][ T4008] attempt to access beyond end of device [ 202.668942][ T4008] loop2: rw=0, want=87936, limit=40427 [ 202.719143][ T4008] attempt to access beyond end of device [ 202.719143][ T4008] loop2: rw=0, want=87944, limit=40427 [ 202.788619][ T4008] attempt to access beyond end of device [ 202.788619][ T4008] loop2: rw=0, want=87952, limit=40427 [ 202.832329][ T4008] attempt to access beyond end of device [ 202.832329][ T4008] loop2: rw=0, want=87960, limit=40427 [ 202.861687][ T4008] attempt to access beyond end of device [ 202.861687][ T4008] loop2: rw=0, want=87968, limit=40427 [ 202.909949][ T4008] attempt to access beyond end of device [ 202.909949][ T4008] loop2: rw=0, want=87976, limit=40427 [ 203.357216][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 203.369139][ T3713] Bluetooth: hci1: command 0x041b tx timeout [ 203.420320][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 203.491872][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.558925][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.569762][ T26] audit: type=1326 audit(1726811472.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5198 comm="syz.2.277" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f909ea73ef9 code=0x0 [ 203.826276][ T1177] bond0 (unregistering): Released all slaves [ 203.922875][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.948063][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.980033][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.998568][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.153449][ T5001] device veth0_vlan entered promiscuous mode [ 204.225295][ T5202] loop3: detected capacity change from 0 to 32768 [ 204.256548][ T5001] device veth1_vlan entered promiscuous mode [ 204.374109][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.388941][ T5202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.278 (5202) [ 204.425739][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.435108][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.466267][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.517498][ T5165] device bridge_slave_0 entered promiscuous mode [ 204.529028][ T5202] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 204.548344][ T5202] BTRFS info (device loop3): using free space tree [ 204.553254][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.562278][ T5202] BTRFS info (device loop3): has skinny extents [ 204.589773][ T5165] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.611217][ T5165] device bridge_slave_1 entered promiscuous mode [ 204.718429][ T5001] device veth0_macvtap entered promiscuous mode [ 204.761737][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.779783][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.794582][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.457323][ T5202] BTRFS info (device loop3): enabling ssd optimizations [ 205.465059][ T3714] Bluetooth: hci1: command 0x040f tx timeout [ 205.498316][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.510231][ T5001] device veth1_macvtap entered promiscuous mode [ 205.519817][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.600020][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.648305][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.699461][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.731104][ T5165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.773459][ T5165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.579064][ T3713] Bluetooth: hci2: command 0x0406 tx timeout [ 206.607297][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.658177][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.661938][ T5250] fuse: Bad value for 'fd' [ 206.695935][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.708092][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.838456][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.859049][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.860473][ T5250] Process accounting resumed [ 206.871815][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.885017][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.914131][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.018411][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.668971][ T4008] handle_bad_sector: 16324 callbacks suppressed [ 207.668993][ T4008] attempt to access beyond end of device [ 207.668993][ T4008] loop2: rw=524288, want=88952, limit=40427 [ 207.691143][ T3714] Bluetooth: hci1: command 0x0419 tx timeout [ 207.721932][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.815240][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.837623][ T5001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.894358][ T4008] attempt to access beyond end of device [ 207.894358][ T4008] loop2: rw=524288, want=88960, limit=40427 [ 208.078995][ T4008] attempt to access beyond end of device [ 208.078995][ T4008] loop2: rw=524288, want=88968, limit=40427 [ 208.161990][ T4008] attempt to access beyond end of device [ 208.161990][ T4008] loop2: rw=524288, want=88976, limit=40427 [ 208.322989][ T5165] team0: Port device team_slave_0 added [ 208.362135][ T4008] attempt to access beyond end of device [ 208.362135][ T4008] loop2: rw=524288, want=88984, limit=40427 [ 208.377743][ T26] audit: type=1326 audit(1726811476.850:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.1.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f352667eef9 code=0x0 [ 208.407684][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.429207][ T4008] attempt to access beyond end of device [ 208.429207][ T4008] loop2: rw=524288, want=88992, limit=40427 [ 208.464221][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.500981][ T5165] team0: Port device team_slave_1 added [ 208.521025][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.532037][ T4008] attempt to access beyond end of device [ 208.532037][ T4008] loop2: rw=524288, want=89000, limit=40427 [ 208.548253][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.594905][ T4008] attempt to access beyond end of device [ 208.594905][ T4008] loop2: rw=524288, want=89008, limit=40427 [ 208.595256][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.607258][ T4008] attempt to access beyond end of device [ 208.607258][ T4008] loop2: rw=524288, want=89016, limit=40427 [ 208.634626][ T4008] attempt to access beyond end of device [ 208.634626][ T4008] loop2: rw=524288, want=89024, limit=40427 [ 210.115189][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.412786][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.494355][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.508818][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.519966][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.539114][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.561961][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.574022][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.659056][ T3702] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 210.772656][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.802170][ T5001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.933679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.965230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.061290][ T5277] loop1: detected capacity change from 0 to 256 [ 211.074963][ T5001] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.094114][ T5001] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.811657][ T3702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.894748][ T3702] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 211.904023][ T3702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.920878][ T3702] usb 3-1: config 0 descriptor?? [ 211.921131][ T5001] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.939038][ T3702] usb 3-1: can't set config #0, error -71 [ 211.949283][ T3702] usb 3-1: USB disconnect, device number 2 [ 211.963378][ T5001] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.994563][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.017021][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.209359][ T5165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.431901][ T5165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.636573][ T5165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.682888][ T4008] handle_bad_sector: 2958 callbacks suppressed [ 212.683207][ T4008] attempt to access beyond end of device [ 212.683207][ T4008] loop2: rw=524288, want=89128, limit=40427 [ 213.010394][ T5165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.075452][ T4008] attempt to access beyond end of device [ 213.075452][ T4008] loop2: rw=524288, want=89136, limit=40427 [ 213.087088][ T4008] attempt to access beyond end of device [ 213.087088][ T4008] loop2: rw=524288, want=89144, limit=40427 [ 213.120107][ T4008] attempt to access beyond end of device [ 213.120107][ T4008] loop2: rw=524288, want=89152, limit=40427 [ 213.146834][ T5287] fuse: Invalid rootmode [ 213.159053][ T4008] attempt to access beyond end of device [ 213.159053][ T4008] loop2: rw=524288, want=89160, limit=40427 [ 213.209066][ T4008] attempt to access beyond end of device [ 213.209066][ T4008] loop2: rw=524288, want=89168, limit=40427 [ 213.229149][ T5287] Process accounting resumed [ 213.321427][ T5165] device hsr_slave_0 entered promiscuous mode [ 213.333883][ T4008] attempt to access beyond end of device [ 213.333883][ T4008] loop2: rw=524288, want=89176, limit=40427 [ 213.359199][ T5165] device hsr_slave_1 entered promiscuous mode [ 213.366112][ T5165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.388916][ T5165] Cannot create hsr debugfs directory [ 213.438367][ T4008] attempt to access beyond end of device [ 213.438367][ T4008] loop2: rw=524288, want=89184, limit=40427 [ 213.508184][ T4008] attempt to access beyond end of device [ 213.508184][ T4008] loop2: rw=524288, want=89192, limit=40427 [ 213.592341][ T4008] attempt to access beyond end of device [ 213.592341][ T4008] loop2: rw=524288, want=89200, limit=40427 [ 213.836688][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.896545][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.127376][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.172567][ T4955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.207467][ T4955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.909916][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.045366][ T5165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.551292][ T26] audit: type=1326 audit(1726811484.030:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.3.296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc56e85fef9 code=0x0 [ 215.712955][ T5165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.882054][ T5165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.101277][ T5165] team0: Port device netdevsim0 removed [ 217.135308][ T5165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.649173][ T5165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.689802][ T4008] handle_bad_sector: 4206 callbacks suppressed [ 217.689823][ T4008] attempt to access beyond end of device [ 217.689823][ T4008] loop2: rw=0, want=87504, limit=40427 [ 217.719799][ T5165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.799361][ T4008] attempt to access beyond end of device [ 217.799361][ T4008] loop2: rw=0, want=87512, limit=40427 [ 217.882009][ T5165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.913262][ T4008] attempt to access beyond end of device [ 217.913262][ T4008] loop2: rw=0, want=87520, limit=40427 [ 217.924629][ T4008] attempt to access beyond end of device [ 217.924629][ T4008] loop2: rw=0, want=87528, limit=40427 [ 217.937698][ T4008] attempt to access beyond end of device [ 217.937698][ T4008] loop2: rw=0, want=87536, limit=40427 [ 217.957700][ T5320] hub 9-0:1.0: USB hub found [ 218.239366][ T4008] attempt to access beyond end of device [ 218.239366][ T4008] loop2: rw=0, want=87544, limit=40427 [ 218.267128][ T5165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.275991][ T5324] fuse: Invalid rootmode [ 218.290426][ T5324] Process accounting resumed [ 218.331329][ T5320] hub 9-0:1.0: 8 ports detected [ 218.375092][ T4008] attempt to access beyond end of device [ 218.375092][ T4008] loop2: rw=0, want=87552, limit=40427 [ 218.595082][ T4008] attempt to access beyond end of device [ 218.595082][ T4008] loop2: rw=0, want=87560, limit=40427 [ 218.816127][ T4008] attempt to access beyond end of device [ 218.816127][ T4008] loop2: rw=0, want=87568, limit=40427 [ 218.872321][ T5165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.896387][ T5328] loop3: detected capacity change from 0 to 4096 [ 218.944922][ T4008] attempt to access beyond end of device [ 218.944922][ T4008] loop2: rw=0, want=87576, limit=40427 [ 218.981146][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.990062][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.334314][ T5165] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.370584][ T5328] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 219.640271][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.651912][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.698595][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.705886][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.796232][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.811224][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.840729][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.865825][ T5328] overlayfs: failed to resolve './file0': -2 [ 219.869980][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.879560][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.911580][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.977717][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.020647][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.052511][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.122126][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.151601][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.185077][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.205178][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.272631][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.304330][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.333924][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.362729][ T5165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.733534][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.756715][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.789335][ T5165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.158983][ T4008] handle_bad_sector: 2603 callbacks suppressed [ 224.159006][ T4008] attempt to access beyond end of device [ 224.159006][ T4008] loop2: rw=524288, want=88768, limit=40427 [ 224.418980][ T4008] attempt to access beyond end of device [ 224.418980][ T4008] loop2: rw=524288, want=88776, limit=40427 [ 224.464799][ T4008] attempt to access beyond end of device [ 224.464799][ T4008] loop2: rw=524288, want=88784, limit=40427 [ 224.572850][ T4008] attempt to access beyond end of device [ 224.572850][ T4008] loop2: rw=524288, want=88792, limit=40427 [ 224.587150][ T4008] attempt to access beyond end of device [ 224.587150][ T4008] loop2: rw=524288, want=88800, limit=40427 [ 224.600318][ T4008] attempt to access beyond end of device [ 224.600318][ T4008] loop2: rw=524288, want=88808, limit=40427 [ 224.613981][ T4008] attempt to access beyond end of device [ 224.613981][ T4008] loop2: rw=524288, want=88816, limit=40427 [ 224.628310][ T4008] attempt to access beyond end of device [ 224.628310][ T4008] loop2: rw=524288, want=88824, limit=40427 [ 224.641332][ T4008] attempt to access beyond end of device [ 224.641332][ T4008] loop2: rw=524288, want=88832, limit=40427 [ 224.654249][ T4008] attempt to access beyond end of device [ 224.654249][ T4008] loop2: rw=524288, want=88840, limit=40427 [ 224.796804][ T5350] chnl_net:caif_netlink_parms(): no params data found [ 224.822579][ T5371] fuse: Invalid rootmode [ 224.856611][ T5371] Process accounting resumed [ 225.089110][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.109996][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.344944][ T5165] device veth0_vlan entered promiscuous mode [ 225.450206][ T5350] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.468287][ T5350] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.490338][ T5350] device bridge_slave_0 entered promiscuous mode [ 225.519654][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.529771][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.565419][ T5165] device veth1_vlan entered promiscuous mode [ 225.959142][ T5350] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.966258][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.975411][ T5350] device bridge_slave_1 entered promiscuous mode [ 225.990580][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.011504][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.041318][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.134601][ T5350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.167627][ T5350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.168970][ T5246] Bluetooth: hci8: command 0x0409 tx timeout [ 226.233329][ T3584] Bluetooth: Wrong link type (-22) [ 226.239592][ T3584] Bluetooth: Wrong link type (-22) [ 226.299435][ T5381] hub 9-0:1.0: USB hub found [ 226.689446][ T5381] hub 9-0:1.0: 8 ports detected [ 227.343011][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 227.568803][ T5165] device veth0_macvtap entered promiscuous mode [ 227.588671][ T5165] device veth1_macvtap entered promiscuous mode [ 227.690036][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.720400][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.792197][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.830232][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.879126][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.103702][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.117019][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.138533][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.298999][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.121168][ T1073] Bluetooth: hci8: command 0x041b tx timeout [ 229.150655][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.168824][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.168935][ T4008] handle_bad_sector: 10063 callbacks suppressed [ 229.168953][ T4008] attempt to access beyond end of device [ 229.168953][ T4008] loop2: rw=0, want=86864, limit=40427 [ 229.180140][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.208515][ T4008] attempt to access beyond end of device [ 229.208515][ T4008] loop2: rw=0, want=86872, limit=40427 [ 229.220272][ T4008] attempt to access beyond end of device [ 229.220272][ T4008] loop2: rw=0, want=86880, limit=40427 [ 229.234078][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.245147][ T4008] attempt to access beyond end of device [ 229.245147][ T4008] loop2: rw=0, want=86888, limit=40427 [ 229.256831][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.267431][ T4008] attempt to access beyond end of device [ 229.267431][ T4008] loop2: rw=0, want=86896, limit=40427 [ 229.288991][ T4008] attempt to access beyond end of device [ 229.288991][ T4008] loop2: rw=0, want=86904, limit=40427 [ 229.291379][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.314920][ T5350] team0: Port device team_slave_0 added [ 229.375842][ T4008] attempt to access beyond end of device [ 229.375842][ T4008] loop2: rw=0, want=86912, limit=40427 [ 229.409015][ T4008] attempt to access beyond end of device [ 229.409015][ T4008] loop2: rw=0, want=86920, limit=40427 [ 229.459191][ T4008] attempt to access beyond end of device [ 229.459191][ T4008] loop2: rw=0, want=86928, limit=40427 [ 229.489010][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 229.500380][ T4008] attempt to access beyond end of device [ 229.500380][ T4008] loop2: rw=0, want=86936, limit=40427 [ 229.519511][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.540293][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 229.559453][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 229.589004][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.609702][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 229.642576][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.658891][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.689920][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.738971][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.761078][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.806977][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.819715][ T5398] fuse: Bad value for 'group_id' [ 229.856926][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.888594][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.912332][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.931696][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.949065][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.970961][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.998814][ T5165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.058820][ T5165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.118134][ T5165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.153037][ T5396] loop3: detected capacity change from 0 to 32768 [ 230.210744][ T5350] team0: Port device team_slave_1 added [ 230.465113][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.492115][ T3888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.604706][ T5165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.633305][ T5165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.653344][ T5405] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 230.668878][ T5165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.687875][ T5165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.047818][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.101769][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.190631][ T3617] Bluetooth: hci8: command 0x040f tx timeout [ 231.197128][ T5350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.248872][ T5350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.459963][ T5350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.081291][ T26] audit: type=1326 audit(1726811501.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56e85fef9 code=0x7fc00000 [ 233.539499][ T3810] Bluetooth: hci8: command 0x0419 tx timeout [ 233.558675][ T26] audit: type=1326 audit(1726811501.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc56e85fef9 code=0x7fc00000 [ 233.579085][ T5350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.596134][ T26] audit: type=1326 audit(1726811501.980:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5412 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc56e85fef9 code=0x7fc00000 [ 234.245877][ T4008] handle_bad_sector: 4849 callbacks suppressed [ 234.246085][ T4008] attempt to access beyond end of device [ 234.246085][ T4008] loop2: rw=0, want=86456, limit=40427 [ 234.483599][ T5350] device hsr_slave_0 entered promiscuous mode [ 234.508026][ T5350] device hsr_slave_1 entered promiscuous mode [ 234.528237][ T4008] attempt to access beyond end of device [ 234.528237][ T4008] loop2: rw=0, want=86464, limit=40427 [ 234.577881][ T5350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.611208][ T5350] Cannot create hsr debugfs directory [ 234.648100][ T4008] attempt to access beyond end of device [ 234.648100][ T4008] loop2: rw=0, want=86472, limit=40427 [ 234.849172][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.857377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.411632][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.420957][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.968965][ T4008] attempt to access beyond end of device [ 235.968965][ T4008] loop2: rw=0, want=86480, limit=40427 [ 237.004152][ T4008] attempt to access beyond end of device [ 237.004152][ T4008] loop2: rw=0, want=86488, limit=40427 [ 237.015509][ T4008] attempt to access beyond end of device [ 237.015509][ T4008] loop2: rw=0, want=86496, limit=40427 [ 237.027632][ T4008] attempt to access beyond end of device [ 237.027632][ T4008] loop2: rw=0, want=86504, limit=40427 [ 237.038945][ T4008] attempt to access beyond end of device [ 237.038945][ T4008] loop2: rw=0, want=86512, limit=40427 [ 237.050417][ T4008] attempt to access beyond end of device [ 237.050417][ T4008] loop2: rw=0, want=86520, limit=40427 [ 237.061261][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.065359][ T4008] attempt to access beyond end of device [ 237.065359][ T4008] loop2: rw=0, want=86528, limit=40427 [ 237.099380][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.141518][ T5438] fuse: Bad value for 'group_id' [ 238.795684][ T1177] device hsr_slave_0 left promiscuous mode [ 238.862936][ T1177] device hsr_slave_1 left promiscuous mode [ 239.100254][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.979099][ T4008] handle_bad_sector: 6763 callbacks suppressed [ 239.979123][ T4008] attempt to access beyond end of device [ 239.979123][ T4008] loop2: rw=524288, want=89576, limit=40427 [ 240.012503][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.083483][ T4008] attempt to access beyond end of device [ 240.083483][ T4008] loop2: rw=524288, want=89584, limit=40427 [ 240.097678][ T4008] attempt to access beyond end of device [ 240.097678][ T4008] loop2: rw=524288, want=89592, limit=40427 [ 240.129438][ T4008] attempt to access beyond end of device [ 240.129438][ T4008] loop2: rw=524288, want=89600, limit=40427 [ 240.149082][ T1073] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 240.166299][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.179057][ T4008] attempt to access beyond end of device [ 240.179057][ T4008] loop2: rw=524288, want=89608, limit=40427 [ 240.185030][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.270060][ T4008] attempt to access beyond end of device [ 240.270060][ T4008] loop2: rw=524288, want=89616, limit=40427 [ 240.297612][ T1177] device veth1_macvtap left promiscuous mode [ 240.338564][ T1177] device veth0_macvtap left promiscuous mode [ 240.368996][ T1177] device veth1_vlan left promiscuous mode [ 240.374874][ T1177] device veth0_vlan left promiscuous mode [ 240.386169][ T4008] attempt to access beyond end of device [ 240.386169][ T4008] loop2: rw=524288, want=89624, limit=40427 [ 240.424748][ T4008] attempt to access beyond end of device [ 240.424748][ T4008] loop2: rw=524288, want=89632, limit=40427 [ 240.812482][ T4008] attempt to access beyond end of device [ 240.812482][ T4008] loop2: rw=524288, want=89640, limit=40427 [ 241.147709][ T4008] attempt to access beyond end of device [ 241.147709][ T4008] loop2: rw=524288, want=89648, limit=40427 [ 242.877580][ T1073] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 242.888553][ T1073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.899727][ T1073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.909546][ T1073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 242.932104][ T5483] fuse: Bad value for 'group_id' [ 243.108959][ T1073] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 243.435481][ T1073] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 243.462436][ T1073] usb 4-1: Manufacturer: syz [ 244.988892][ T4008] handle_bad_sector: 2357 callbacks suppressed [ 244.988961][ T4008] attempt to access beyond end of device [ 244.988961][ T4008] loop2: rw=0, want=88872, limit=40427 [ 245.009047][ T4008] attempt to access beyond end of device [ 245.009047][ T4008] loop2: rw=0, want=88880, limit=40427 [ 245.020856][ T4008] attempt to access beyond end of device [ 245.020856][ T4008] loop2: rw=0, want=88888, limit=40427 [ 245.033264][ T4008] attempt to access beyond end of device [ 245.033264][ T4008] loop2: rw=0, want=88896, limit=40427 [ 245.045686][ T4008] attempt to access beyond end of device [ 245.045686][ T4008] loop2: rw=0, want=88904, limit=40427 [ 245.060682][ T4008] attempt to access beyond end of device [ 245.060682][ T4008] loop2: rw=0, want=88912, limit=40427 [ 245.126118][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 245.162291][ T1073] usb 4-1: config 0 descriptor?? [ 245.188616][ T4008] attempt to access beyond end of device [ 245.188616][ T4008] loop2: rw=0, want=88920, limit=40427 [ 245.202670][ T1073] usb 4-1: can't set config #0, error -71 [ 245.424067][ T4008] attempt to access beyond end of device [ 245.424067][ T4008] loop2: rw=0, want=88928, limit=40427 [ 245.455034][ T5494] loop4: detected capacity change from 0 to 32768 [ 245.469388][ T1073] usb 4-1: USB disconnect, device number 2 [ 245.488955][ T4008] attempt to access beyond end of device [ 245.488955][ T4008] loop2: rw=0, want=88936, limit=40427 [ 245.500639][ T4008] attempt to access beyond end of device [ 245.500639][ T4008] loop2: rw=0, want=88944, limit=40427 [ 245.513067][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 245.522140][ T5494] XFS: attr2 mount option is deprecated. [ 245.527913][ T5494] XFS: noikeep mount option is deprecated. [ 245.739699][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.805592][ T5503] loop3: detected capacity change from 0 to 32768 [ 245.824502][ T5494] XFS (loop4): Mounting V5 Filesystem [ 245.839545][ T5503] XFS: attr2 mount option is deprecated. [ 245.845358][ T5503] XFS: noikeep mount option is deprecated. [ 245.879819][ T5494] XFS (loop4): Ending clean mount [ 245.889497][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.914994][ T5494] XFS (loop4): Quotacheck needed: Please wait. [ 246.064578][ T5503] XFS (loop3): Mounting V5 Filesystem [ 246.107618][ T5494] XFS (loop4): Quotacheck: Done. [ 246.335260][ T5503] XFS (loop3): Ending clean mount [ 246.342929][ T5503] XFS (loop3): Quotacheck needed: Please wait. [ 246.403258][ T5165] XFS (loop4): Unmounting Filesystem [ 246.456664][ T5503] XFS (loop3): Quotacheck: Done. [ 246.549881][ T1177] bond0 (unregistering): Released all slaves [ 246.662756][ T5350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.793619][ T5350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.987119][ T5350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.123682][ T5350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.186288][ T4844] XFS (loop3): Unmounting Filesystem [ 247.512128][ T5350] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.579403][ T5350] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.605553][ T5350] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.693500][ T5350] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.031998][ T5350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.124703][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.145751][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.196734][ T5350] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.231945][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.253635][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.277118][ T5492] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.284424][ T5492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.377791][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.392181][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.449478][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.458124][ T5492] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.465313][ T5492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.549504][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.610018][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.685564][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.794365][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.004608][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.227354][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.474933][ T5350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.892025][ T5350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.186809][ T4008] handle_bad_sector: 7981 callbacks suppressed [ 250.186833][ T4008] attempt to access beyond end of device [ 250.186833][ T4008] loop2: rw=524288, want=86024, limit=40427 [ 250.469161][ T4008] attempt to access beyond end of device [ 250.469161][ T4008] loop2: rw=524288, want=86032, limit=40427 [ 250.583122][ T5549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 250.609604][ T4008] attempt to access beyond end of device [ 250.609604][ T4008] loop2: rw=524288, want=86040, limit=40427 [ 250.730662][ T5549] device bridge_slave_1 left promiscuous mode [ 250.737409][ T4008] attempt to access beyond end of device [ 250.737409][ T4008] loop2: rw=524288, want=86048, limit=40427 [ 250.774196][ T5530] loop3: detected capacity change from 0 to 32768 [ 250.810430][ T5549] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.862691][ T4008] attempt to access beyond end of device [ 250.862691][ T4008] loop2: rw=524288, want=86056, limit=40427 [ 250.919476][ T5549] device bridge_slave_0 left promiscuous mode [ 250.962264][ T4008] attempt to access beyond end of device [ 250.962264][ T4008] loop2: rw=524288, want=86064, limit=40427 [ 250.994686][ T5549] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.055446][ T4008] attempt to access beyond end of device [ 251.055446][ T4008] loop2: rw=524288, want=86072, limit=40427 [ 251.155156][ T4008] attempt to access beyond end of device [ 251.155156][ T4008] loop2: rw=524288, want=86080, limit=40427 [ 251.290100][ T4008] attempt to access beyond end of device [ 251.290100][ T4008] loop2: rw=524288, want=86088, limit=40427 [ 251.374154][ T4008] attempt to access beyond end of device [ 251.374154][ T4008] loop2: rw=524288, want=86096, limit=40427 [ 251.471436][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.500130][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.578320][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.620052][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.421321][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.430013][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.453765][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.540846][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.555273][ T5350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.778907][ T5556] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 255.390372][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.428948][ T4008] handle_bad_sector: 3943 callbacks suppressed [ 255.428969][ T4008] attempt to access beyond end of device [ 255.428969][ T4008] loop2: rw=524288, want=86224, limit=40427 [ 255.469229][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.575228][ T4008] attempt to access beyond end of device [ 255.575228][ T4008] loop2: rw=524288, want=86232, limit=40427 [ 255.625557][ T5350] device veth0_vlan entered promiscuous mode [ 255.706513][ T5350] device veth1_vlan entered promiscuous mode [ 255.714196][ T4008] attempt to access beyond end of device [ 255.714196][ T4008] loop2: rw=524288, want=86240, limit=40427 [ 255.785324][ T5578] loop4: detected capacity change from 0 to 512 [ 255.929391][ T1391] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.935721][ T1391] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.993847][ T4008] attempt to access beyond end of device [ 255.993847][ T4008] loop2: rw=524288, want=86248, limit=40427 [ 256.005836][ T4008] attempt to access beyond end of device [ 256.005836][ T4008] loop2: rw=524288, want=86256, limit=40427 [ 256.023583][ T4008] attempt to access beyond end of device [ 256.023583][ T4008] loop2: rw=524288, want=86264, limit=40427 [ 256.385104][ T4008] attempt to access beyond end of device [ 256.385104][ T4008] loop2: rw=524288, want=86272, limit=40427 [ 256.410039][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.483923][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.610083][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.672392][ T4008] attempt to access beyond end of device [ 256.672392][ T4008] loop2: rw=524288, want=86280, limit=40427 [ 256.705373][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 256.733424][ T5578] EXT4-fs (loop4): 1 orphan inode deleted [ 256.768845][ T5578] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 256.795476][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.809277][ T5578] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 256.810592][ T4008] attempt to access beyond end of device [ 256.810592][ T4008] loop2: rw=524288, want=86288, limit=40427 [ 256.869174][ T4008] attempt to access beyond end of device [ 256.869174][ T4008] loop2: rw=524288, want=86296, limit=40427 [ 257.059887][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.281089][ T5597] loop3: detected capacity change from 0 to 512 [ 258.940563][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.106289][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.139043][ T5597] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.183004][ T5350] device veth0_macvtap entered promiscuous mode [ 259.246706][ T5350] device veth1_macvtap entered promiscuous mode [ 259.260070][ T5597] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 263.563032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.610181][ T5597] EXT4-fs: error -4 creating inode table initialization thread [ 263.670034][ T5597] EXT4-fs (loop3): mount failed [ 263.670685][ T4008] handle_bad_sector: 2623 callbacks suppressed [ 263.670702][ T4008] attempt to access beyond end of device [ 263.670702][ T4008] loop2: rw=0, want=87648, limit=40427 [ 263.710813][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.751178][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.981697][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.992611][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.003842][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.929992][ T4008] attempt to access beyond end of device [ 264.929992][ T4008] loop2: rw=0, want=87656, limit=40427 [ 264.958401][ T4008] attempt to access beyond end of device [ 264.958401][ T4008] loop2: rw=0, want=87664, limit=40427 [ 264.968797][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.276427][ T4008] attempt to access beyond end of device [ 265.276427][ T4008] loop2: rw=0, want=87672, limit=40427 [ 265.315448][ T4008] attempt to access beyond end of device [ 265.315448][ T4008] loop2: rw=0, want=87680, limit=40427 [ 265.328639][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.353823][ T4008] attempt to access beyond end of device [ 265.353823][ T4008] loop2: rw=0, want=87688, limit=40427 [ 265.435472][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.446704][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.457446][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.469972][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.480927][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.491158][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.502071][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.579795][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.591324][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.597815][ T4008] attempt to access beyond end of device [ 265.597815][ T4008] loop2: rw=0, want=87696, limit=40427 [ 265.609848][ T5256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.659211][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.738875][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.739394][ T4008] attempt to access beyond end of device [ 265.739394][ T4008] loop2: rw=0, want=87704, limit=40427 [ 265.797897][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.848429][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.884653][ T4008] attempt to access beyond end of device [ 265.884653][ T4008] loop2: rw=0, want=87712, limit=40427 [ 265.908934][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.962094][ T4008] attempt to access beyond end of device [ 265.962094][ T4008] loop2: rw=0, want=87720, limit=40427 [ 265.981618][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.119848][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.288468][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.513596][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.630450][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.858809][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.061683][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.134979][ T5350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.222738][ T5645] loop3: detected capacity change from 0 to 256 [ 267.253628][ T5350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.309454][ T5350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.370817][ T5350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.411328][ T5350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.451847][ T5350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.559375][ T5350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.678925][ T4008] handle_bad_sector: 3049 callbacks suppressed [ 268.678949][ T4008] attempt to access beyond end of device [ 268.678949][ T4008] loop2: rw=0, want=88552, limit=40427 [ 268.829325][ T4008] attempt to access beyond end of device [ 268.829325][ T4008] loop2: rw=0, want=88560, limit=40427 [ 268.891356][ T4008] attempt to access beyond end of device [ 268.891356][ T4008] loop2: rw=0, want=88568, limit=40427 [ 268.948947][ T4008] attempt to access beyond end of device [ 268.948947][ T4008] loop2: rw=0, want=88576, limit=40427 [ 269.012020][ T4008] attempt to access beyond end of device [ 269.012020][ T4008] loop2: rw=0, want=88584, limit=40427 [ 269.068952][ T4008] attempt to access beyond end of device [ 269.068952][ T4008] loop2: rw=0, want=88592, limit=40427 [ 269.129753][ T4008] attempt to access beyond end of device [ 269.129753][ T4008] loop2: rw=0, want=88600, limit=40427 [ 269.204408][ T4008] attempt to access beyond end of device [ 269.204408][ T4008] loop2: rw=0, want=88608, limit=40427 [ 269.283565][ T4008] attempt to access beyond end of device [ 269.283565][ T4008] loop2: rw=0, want=88616, limit=40427 [ 269.440950][ T4008] attempt to access beyond end of device [ 269.440950][ T4008] loop2: rw=0, want=88624, limit=40427 [ 270.429919][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.502673][ T3902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.428791][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 271.457328][ T5654] device bridge_slave_1 left promiscuous mode [ 271.464538][ T5654] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.353945][ T5654] device bridge_slave_0 left promiscuous mode [ 272.415825][ T5654] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.879686][ T3903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.906500][ T3903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.065121][ T5492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.879941][ T4008] handle_bad_sector: 5108 callbacks suppressed [ 273.879965][ T4008] attempt to access beyond end of device [ 273.879965][ T4008] loop2: rw=524288, want=86288, limit=40427 [ 273.917580][ T5474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.952746][ T5474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.119023][ T4008] attempt to access beyond end of device [ 274.119023][ T4008] loop2: rw=524288, want=86296, limit=40427 [ 274.459608][ T4008] attempt to access beyond end of device [ 274.459608][ T4008] loop2: rw=524288, want=86304, limit=40427 [ 274.478945][ T4008] attempt to access beyond end of device [ 274.478945][ T4008] loop2: rw=524288, want=86312, limit=40427 [ 274.501804][ T3903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.535680][ T4008] attempt to access beyond end of device [ 274.535680][ T4008] loop2: rw=524288, want=86320, limit=40427 [ 274.603941][ T4008] attempt to access beyond end of device [ 274.603941][ T4008] loop2: rw=524288, want=86328, limit=40427 [ 274.649186][ T4008] attempt to access beyond end of device [ 274.649186][ T4008] loop2: rw=524288, want=86336, limit=40427 [ 274.666655][ T4008] attempt to access beyond end of device [ 274.666655][ T4008] loop2: rw=524288, want=86344, limit=40427 [ 274.680015][ T4008] attempt to access beyond end of device [ 274.680015][ T4008] loop2: rw=524288, want=86352, limit=40427 [ 274.694841][ T4008] attempt to access beyond end of device [ 274.694841][ T4008] loop2: rw=524288, want=86360, limit=40427 [ 277.802598][ T5700] loop1: detected capacity change from 0 to 8192 [ 277.821303][ T27] INFO: task kworker/u4:7:3704 blocked for more than 144 seconds. [ 277.821949][ T27] Not tainted 5.15.167-syzkaller #0 [ 277.821964][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.821974][ T27] task:kworker/u4:7 state:D stack:21144 pid: 3704 ppid: 2 flags:0x00004000 [ 277.822015][ T27] Workqueue: writeback wb_workfn (flush-7:2) [ 277.822078][ T27] Call Trace: [ 277.822086][ T27] [ 277.822100][ T27] __schedule+0x12c4/0x45b0 [ 277.822156][ T27] ? release_firmware_map_entry+0x190/0x190 [ 277.822180][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.822208][ T27] ? print_irqtrace_events+0x210/0x210 [ 277.822231][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 277.822261][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 277.822289][ T27] schedule+0x11b/0x1f0 [ 277.822314][ T27] rwsem_down_write_slowpath+0xf0c/0x16a0 [ 277.822366][ T27] ? rwsem_write_trylock+0x210/0x210 [ 277.822395][ T27] ? read_lock_is_recursive+0x10/0x10 [ 277.822424][ T27] ? rwsem_write_trylock+0x166/0x210 [ 277.822453][ T27] ? clear_nonspinnable+0x60/0x60 [ 277.822475][ T27] ? from_kgid+0x1a3/0x730 [ 277.822506][ T27] ? has_not_enough_free_secs+0x3e3/0x920 [ 277.822541][ T27] f2fs_balance_fs+0x4d4/0x6a0 [ 277.822569][ T27] ? f2fs_commit_inmem_pages+0xc00/0xc00 [ 277.822595][ T27] ? __get_node_page+0x42c/0x820 [ 277.822622][ T27] ? unlock_page+0x188/0x200 [ 277.822650][ T27] ? f2fs_put_page+0x1f0/0x380 [ 277.822676][ T27] f2fs_write_inode+0x4c3/0x540 [ 277.822701][ T27] __writeback_single_inode+0x644/0xe30 [ 277.822736][ T27] writeback_sb_inodes+0xbce/0x1a40 [ 277.822779][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 277.822816][ T27] ? queue_io+0x560/0x560 [ 277.822858][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 277.822893][ T27] __writeback_inodes_wb+0x114/0x400 [ 277.822931][ T27] wb_writeback+0x465/0xc50 [ 277.822972][ T27] ? rcu_lock_release+0x20/0x20 [ 277.822999][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.823033][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 277.823057][ T27] ? cpumask_next+0xc3/0xf0 [ 277.823091][ T27] wb_workfn+0xc55/0x1130 [ 277.823114][ T27] ? mark_lock+0x98/0x340 [ 277.823157][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 277.823196][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.823223][ T27] ? print_irqtrace_events+0x210/0x210 [ 277.823245][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 277.823275][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 277.823308][ T27] process_one_work+0x8a1/0x10c0 [ 277.823351][ T27] ? worker_detach_from_pool+0x260/0x260 [ 277.823381][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 277.823407][ T27] ? kthread_data+0x4e/0xc0 [ 277.823431][ T27] ? wq_worker_running+0x97/0x170 [ 277.823457][ T27] worker_thread+0xaca/0x1280 [ 277.823515][ T27] kthread+0x3f6/0x4f0 [ 277.823538][ T27] ? rcu_lock_release+0x20/0x20 [ 277.823563][ T27] ? kthread_blkcg+0xd0/0xd0 [ 277.823588][ T27] ret_from_fork+0x1f/0x30 [ 277.823628][ T27] [ 277.823655][ T27] INFO: task syz.0.102:4389 blocked for more than 144 seconds. [ 277.823671][ T27] Not tainted 5.15.167-syzkaller #0 [ 277.823683][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.823693][ T27] task:syz.0.102 state:D stack:27904 pid: 4389 ppid: 3976 flags:0x00004004 [ 277.823734][ T27] Call Trace: [ 277.823742][ T27] [ 277.823755][ T27] __schedule+0x12c4/0x45b0 [ 277.823782][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 277.823810][ T27] ? print_irqtrace_events+0x210/0x210 [ 277.823838][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 277.823864][ T27] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 277.823895][ T27] ? release_firmware_map_entry+0x190/0x190 [ 277.823921][ T27] ? __might_sleep+0xc0/0xc0 [ 277.823951][ T27] ? prepare_to_wait_event+0x3aa/0x3e0 [ 277.823982][ T27] schedule+0x11b/0x1f0 [ 277.824006][ T27] wb_wait_for_completion+0x164/0x290 [ 277.824034][ T27] ? __bpf_trace_writeback_inode_template+0x20/0x20 [ 277.824062][ T27] ? init_wait_entry+0xd0/0xd0 [ 277.824102][ T27] sync_inodes_sb+0x293/0xab0 [ 277.824127][ T27] ? read_lock_is_recursive+0x10/0x10 [ 277.824158][ T27] ? try_to_writeback_inodes_sb+0xb0/0xb0 [ 277.824185][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 277.824206][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 277.824242][ T27] ? down_read+0x1b3/0x2e0 [ 277.824269][ T27] iterate_supers+0x127/0x1e0 [ 277.824290][ T27] ? ksys_sync+0x1c0/0x1c0 [ 277.824318][ T27] ksys_sync+0xb9/0x1c0 [ 277.824344][ T27] ? sync_filesystem+0x220/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.824372][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 277.824406][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 277.824436][ T27] __do_sys_sync+0xa/0x10 [ 277.824461][ T27] do_syscall_64+0x3b/0xb0 [ 277.824489][ T27] ? clear_bhb_loop+0x15/0x70 [ 277.824512][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.824538][ T27] RIP: 0033:0x7f443097bef9 [ 277.824557][ T27] RSP: 002b:00007f442edd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 277.824581][ T27] RAX: ffffffffffffffda RBX: 00007f4430b34058 RCX: 00007f443097bef9 [ 277.824599][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.824614][ T27] RBP: 00007f44309eeb76 R08: 0000000000000000 R09: 0000000000000000 [ 277.824629][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.824645][ T27] R13: 0000000000000001 R14: 00007f4430b34058 R15: 00007ffce3d3d308 [ 277.824678][ T27] [ 277.824711][ T27] [ 277.824711][ T27] Showing all locks held in the system: [ 277.824726][ T27] 1 lock held by khungtaskd/27: [ 277.824740][ T27] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 277.824819][ T27] 3 locks held by kworker/u4:3/1177: [ 277.824832][ T27] #0: ffff8880171d5938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 277.824896][ T27] #1: ffffc90004bcfd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 277.824959][ T27] #2: ffffffff8da261d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 277.825042][ T27] 2 locks held by getty/3333: [ 277.825056][ T27] #0: ffff88814b8a3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 277.825119][ T27] #1: ffffc9000209b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 277.825185][ T27] 3 locks held by kworker/0:7/3702: [ 277.825199][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 277.825263][ T27] #1: ffffc90003177d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 277.825328][ T27] #2: ffffffff8c924228 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 277.825393][ T27] 4 locks held by kworker/u4:7/3704: [ 277.825406][ T27] #0: ffff8881447b4938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 277.825470][ T27] #1: ffffc90003127d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 277.825541][ T27] #2: ffff888061b9e0e0 (&type->s_umount_key#55){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 277.825614][ T27] #3: ffff88805b215108 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4d4/0x6a0 [ 277.825678][ T27] 3 locks held by kworker/u4:8/3844: [ 277.825693][ T27] 6 locks held by syz.2.55/4008: [ 277.825709][ T27] 2 locks held by syz.0.102/4389: [ 277.825722][ T27] #0: ffff888061b9e0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 277.825789][ T27] #1: ffff888020a6a7d8 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x274/0xab0 [ 277.825854][ T27] 2 locks held by syz.0.221/4877: [ 277.825867][ T27] #0: ffff888061b9e0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 277.825933][ T27] #1: ffff888020a6a7d8 (&bdi->wb_switch_rwsem){+.+.}-{3:3}, at: sync_inodes_sb+0x274/0xab0 [ 277.826002][ T27] 2 locks held by syz.0.390/5701: [ 277.826015][ T27] 2 locks held by syz-executor/5694: [ 277.826029][ T27] 3 locks held by syz.1.394/5698: [ 277.826042][ T27] #0: ffffffff8cfe0cc8 (tty_mutex){+.+.}-{3:3}, at: tty_open+0x237/0xde0 [ 277.826102][ T27] #1: ffff8880232e41c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_init_dev+0x6a/0x4b0 [ 277.826168][ T27] #2: ffffffff8c7fc520 (console_lock){+.+.}-{0:0}, at: con_install+0x95/0x7f0 [ 277.826228][ T27] 1 lock held by syz.1.394/5700: [ 277.826241][ T27] #0: ffff8881475e0468 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_status+0x7c/0x8e0 [ 277.826304][ T27] [ 277.826310][ T27] ============================================= [ 277.826310][ T27] [ 277.826329][ T27] NMI backtrace for cpu 0 [ 277.826339][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 277.826361][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 277.826374][ T27] Call Trace: [ 277.826380][ T27] [ 277.826388][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 277.826410][ T27] ? console_trylock_spinning+0x259/0x3f0 [ 277.826437][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 277.826461][ T27] ? panic+0x860/0x860 [ 277.826504][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 277.826532][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 277.826554][ T27] ? __wake_up_klogd+0xd5/0x100 [ 277.826581][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 277.826605][ T27] ? _printk+0xd1/0x120 [ 277.826628][ T27] ? panic+0x860/0x860 [ 277.826652][ T27] ? __wake_up_klogd+0xcc/0x100 [ 277.826675][ T27] ? panic+0x860/0x860 [ 277.826700][ T27] ? wq_watchdog_touch+0xeb/0x170 [ 277.826726][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 277.826751][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 277.826779][ T27] watchdog+0xe72/0xeb0 [ 277.826815][ T27] kthread+0x3f6/0x4f0 [ 277.826835][ T27] ? hungtask_pm_notify+0x50/0x50 [ 277.826858][ T27] ? kthread_blkcg+0xd0/0xd0 [ 277.826881][ T27] ret_from_fork+0x1f/0x30 [ 277.826917][ T27] [ 277.826925][ T27] Sending NMI from CPU 0 to CPUs 1: [ 277.826957][ C1] NMI backtrace for cpu 1 [ 277.826968][ C1] CPU: 1 PID: 5701 Comm: syz.0.390 Not tainted 5.15.167-syzkaller #0 [ 277.826985][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 277.826994][ C1] RIP: 0010:lock_acquire+0xc7/0x4f0 [ 277.827012][ C1] Code: 2c 17 f3 0f 1f 44 00 00 65 8b 1d 5c 67 9f 7e 83 fb 08 0f 83 e2 02 00 00 89 d8 c1 e8 06 48 8d 3c c5 a8 60 e9 8d be 08 00 00 00 04 78 67 00 89 d8 48 0f a3 05 82 b2 86 0c 73 0d e8 03 6b 08 00 [ 277.827026][ C1] RSP: 0018:ffffc900031571c0 EFLAGS: 00000046 [ 277.827040][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 277.827051][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8de960a8 [ 277.827062][ C1] RBP: ffffc90003157308 R08: 0000000000000000 R09: 0000000000000000 [ 277.827073][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200062ae40 [ 277.827085][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000ffffffff [ 277.827097][ C1] FS: 00007f026f2e26c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 277.827112][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.827124][ C1] CR2: 00007f026f2e1f98 CR3: 000000005407a000 CR4: 00000000003506e0 [ 277.827140][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.827150][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.827161][ C1] Call Trace: [ 277.827165][ C1] [ 277.827171][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 277.827189][ C1] ? read_lock_is_recursive+0x10/0x10 [ 277.827207][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 277.827226][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 277.827250][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 277.827266][ C1] ? nmi_handle+0xf7/0x370 [ 277.827284][ C1] ? lock_acquire+0xc7/0x4f0 [ 277.827299][ C1] ? default_do_nmi+0x62/0x150 [ 277.827317][ C1] ? exc_nmi+0xa8/0x100 [ 277.827333][ C1] ? end_repeat_nmi+0x16/0x31 [ 277.827353][ C1] ? lock_acquire+0xc7/0x4f0 [ 277.827368][ C1] ? lock_acquire+0xc7/0x4f0 [ 277.827384][ C1] ? lock_acquire+0xc7/0x4f0 [ 277.827399][ C1] [ 277.827403][ C1] [ 277.827411][ C1] ? read_lock_is_recursive+0x10/0x10 [ 277.827430][ C1] ? rcu_lock_acquire+0x30/0x30 [ 277.827450][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 277.827469][ C1] rcu_lock_acquire+0x20/0x30 [ 277.827487][ C1] ? __page_memcg+0x160/0x160 [ 277.827504][ C1] __mod_lruvec_page_state+0xa3/0x340 [ 277.827523][ C1] unaccount_page_cache_page+0x45e/0x8b0 [ 277.827541][ C1] ? rcu_is_watching+0x11/0xa0 [ 277.827559][ C1] __delete_from_page_cache+0xd1/0x860 [ 277.827578][ C1] ? __rwlock_init+0x140/0x140 [ 277.827597][ C1] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 277.827618][ C1] ? _raw_spin_lock_irq+0xdb/0x110 [ 277.827635][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 277.827655][ C1] ? page_mapping+0x312/0x440 [ 277.827674][ C1] delete_from_page_cache+0x126/0x190 [ 277.827693][ C1] truncate_inode_page+0x8d/0xb0 [ 277.827712][ C1] shmem_undo_range+0x535/0x1b50 [ 277.827741][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 277.827771][ C1] ? shmem_getpage+0xa0/0xa0 [ 277.827786][ C1] ? page_mapping+0x312/0x440 [ 277.827805][ C1] ? unlock_page+0x188/0x200 [ 277.827823][ C1] shmem_fallocate+0xe9e/0xfb0 [ 277.827849][ C1] ? shmem_mmap+0x270/0x270 [ 277.827870][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 277.827889][ C1] ? rcu_read_lock_bh_held+0x110/0x110 [ 277.827907][ C1] ? end_current_label_crit_section+0x147/0x170 [ 277.827932][ C1] vfs_fallocate+0x54a/0x6b0 [ 277.827951][ C1] do_vfs_ioctl+0x2317/0x2b70 [ 277.827972][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 277.827990][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 277.828005][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 277.828026][ C1] ? tomoyo_path_number_perm+0x648/0x810 [ 277.828046][ C1] ? kfree+0xf1/0x270 [ 277.828064][ C1] ? tomoyo_path_number_perm+0x6ab/0x810 [ 277.828087][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 277.828125][ C1] ? __fget_files+0x413/0x480 [ 277.828148][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 277.828167][ C1] ? security_file_ioctl+0x7d/0xa0 [ 277.828188][ C1] __se_sys_ioctl+0x81/0x160 [ 277.828206][ C1] do_syscall_64+0x3b/0xb0 [ 277.828221][ C1] ? clear_bhb_loop+0x15/0x70 [ 277.828236][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.828255][ C1] RIP: 0033:0x7f0270eabef9 [ 277.828270][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.828284][ C1] RSP: 002b:00007f026f2e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.828299][ C1] RAX: ffffffffffffffda RBX: 00007f0271064130 RCX: 00007f0270eabef9 [ 277.828312][ C1] RDX: 0000000020000040 RSI: 0000000040305828 RDI: 0000000000000004 [ 277.828322][ C1] RBP: 00007f0270f1eb76 R08: 0000000000000000 R09: 0000000000000000 [ 277.828332][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.828341][ C1] R13: 0000000000000000 R14: 00007f0271064130 R15: 00007fff479bfd88 [ 277.828360][ C1] [ 278.038698][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 278.279134][ T3618] Bluetooth: hci6: command 0x0406 tx timeout [ 278.280959][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.167-syzkaller #0 [ 279.335824][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.346001][ T27] Call Trace: [ 279.349279][ T27] [ 279.352209][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 279.356883][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 279.362706][ T27] ? panic+0x860/0x860 [ 279.366799][ T27] panic+0x318/0x860 [ 279.370692][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 279.376325][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 279.382510][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 279.387715][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 279.393785][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 279.399933][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 279.406249][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 279.412427][ T27] watchdog+0xeb0/0xeb0 [ 279.416874][ T27] kthread+0x3f6/0x4f0 [ 279.420945][ T27] ? hungtask_pm_notify+0x50/0x50 [ 279.426047][ T27] ? kthread_blkcg+0xd0/0xd0 [ 279.430678][ T27] ret_from_fork+0x1f/0x30 [ 279.435116][ T27] [ 279.438494][ T27] Kernel Offset: disabled [ 279.443028][ T27] Rebooting in 86400 seconds..