last executing test programs: 6m5.080417009s ago: executing program 32 (id=147): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) 5m54.799044945s ago: executing program 33 (id=168): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff003) 5m47.688401567s ago: executing program 1 (id=183): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x141000, 0x650ce4b086bd44ca) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r3, 0x11, 0x0, r5}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r2, r3, 0x11, 0x0, r2}, 0x11) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) 5m46.826890252s ago: executing program 1 (id=186): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 5m42.78661054s ago: executing program 34 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="670f2003ba200066edf30fc7fc660f3880874e0d660fc5f7b1663e660f3a15ebe22666640fa54593f30f35ba410066b80080000066efea0000e100", 0x3b}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x2, 0x3, 0x8000000000000001, 0x3, 0x4, 0xffffffff7fffffff, 0xfff, 0x3, 0x9b9, 0xfff, 0xe, 0x3, 0x2b5f7546, 0xfffffffffffffc00, 0x400, 0xffff], 0x100000, 0x20106}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m42.709107126s ago: executing program 1 (id=192): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3, 0x2b418802, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) 5m42.275263923s ago: executing program 1 (id=194): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x167) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000b40)="8428", 0x2}], 0x1, 0x7abff, 0x0, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x0, 0x0, 0x9, 0x3}) 5m40.413275816s ago: executing program 1 (id=196): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5m36.976790828s ago: executing program 35 (id=197): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000002010101800000000000000002000001080008c1d58abc5794188940000000020800154000"], 0x58}, 0x1, 0x0, 0x0, 0x20000044}, 0x24000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101142, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x54, 0xc, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m36.85934735s ago: executing program 1 (id=199): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 5m21.429773897s ago: executing program 36 (id=199): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 5m20.37029408s ago: executing program 5 (id=150): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 5m19.10333445s ago: executing program 5 (id=201): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 5m17.892957502s ago: executing program 5 (id=202): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) getdents(r0, &(0x7f0000000100)=""/34, 0x22) 5m16.200576249s ago: executing program 5 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.753062867s ago: executing program 5 (id=204): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0xd00, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 5m11.905523397s ago: executing program 37 (id=204): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0xd00, &(0x7f0000000d00)={&(0x7f0000000d40)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) 5m10.653062212s ago: executing program 6 (id=206): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 5m10.031999269s ago: executing program 6 (id=207): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 5m7.756702038s ago: executing program 6 (id=208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x4, 0x9, 0x400, 0x81}, 0x0, 0x0, 0x4, 0x9, 0x7fff, 0x6, 0x1b, 0x7, 0x0, 0x8, {0x1000, 0x6, 0x9, 0x9, 0x8}}}}]}, 0x78}}, 0x0) 5m6.901350165s ago: executing program 6 (id=209): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) getdents(r0, &(0x7f0000000100)=""/34, 0x22) 5m5.421780171s ago: executing program 6 (id=210): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x68, 0x0, 0x0, 0x19, 0x4, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0091a7bdd8a0f3500", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff0700f1ff000000d81a8ca55a0f39c0180ec4dae4162e43ac61b7ad33", [0x2, 0xfffffffffffffffb]}}) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0109000000"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m4.297607801s ago: executing program 6 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 5m1.686616569s ago: executing program 38 (id=211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0) 4m30.044105292s ago: executing program 4 (id=261): getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@grpid}, {@sysvgroups}, {@noload}, {@mblk_io_submit}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") 4m27.917050306s ago: executing program 4 (id=266): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 4m26.233677718s ago: executing program 4 (id=274): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x37, 0x4, 0x54f8084f, 0x8, 0x1, 0x10, 0xcd, 0xb, 0x40, 0x6, 0x7, 0x9, 0x4, 0xc3, 0xdb, 0x3, [0x4, 0xff]}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x10, &(0x7f0000000080)={0x2, 0x0, 0x3}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f00000025c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=r3, 0x5, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r5, &(0x7f0000002900)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)={{r6}, {@void, @actul_num={@void, 0x0, 0x74}}}) 4m24.196740872s ago: executing program 4 (id=278): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 4m23.106082703s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m22.300787932s ago: executing program 4 (id=282): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000002c0)={0x8000000000000000, 0x8080000, 0x3, 0x0, 0xa}) 4m6.635079647s ago: executing program 39 (id=282): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000002c0)={0x8000000000000000, 0x8080000, 0x3, 0x0, 0xa}) 4m2.617573531s ago: executing program 2 (id=359): r0 = socket$netlink(0x10, 0x3, 0xe) getpeername(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) dup2(r2, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@host}) 4m1.140723806s ago: executing program 2 (id=362): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x1}, 0x8) 3m56.7989392s ago: executing program 2 (id=374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) 3m53.424950627s ago: executing program 40 (id=374): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) 1m30.707064589s ago: executing program 9 (id=998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 1m29.601680251s ago: executing program 9 (id=1004): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 1m28.933745685s ago: executing program 9 (id=1009): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000600)={0xb, 0x1, 0x9, 0x3, r3}, 0x10) 1m28.300202336s ago: executing program 9 (id=1014): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711813"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x80) 1m26.957773333s ago: executing program 9 (id=1019): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 1m26.408813959s ago: executing program 9 (id=1022): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x12, 0x10000000, 0x9, 0x3ff, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000130000000071184c000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m26.294488347s ago: executing program 0 (id=1023): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m24.297601157s ago: executing program 0 (id=1026): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 1m21.684118888s ago: executing program 0 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0x10) unshare(0x22020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="04"], 0x10) 1m19.890039858s ago: executing program 0 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1000201, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x80000004, 0x5, 0x6, 0x101, 0x4000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 1m19.081016885s ago: executing program 0 (id=1037): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, 0xffffffffffffffff, 0x0) lseek(r2, 0x100, 0x0) getdents64(r2, &(0x7f00000004c0)=""/136, 0x88) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10b) 1m17.24919353s ago: executing program 0 (id=1041): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) 1m10.707775882s ago: executing program 41 (id=1022): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x3) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x12, 0x10000000, 0x9, 0x3ff, 0x9}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000130000000071184c000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m1.548062137s ago: executing program 42 (id=1041): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) 33.242298433s ago: executing program 8 (id=1097): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x7ec, 0x2000010000, 0x2000000000002, 0x3, 0x0, 0x7ffc}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x02\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 33.216541231s ago: executing program 3 (id=1098): r0 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="645814ed", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x24008804) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x2}, 0x8) 32.486359993s ago: executing program 7 (id=1099): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d7000fbdbdf2507006800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 32.221177935s ago: executing program 3 (id=1100): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa000000000000015030000088d4e002d3501000000000095000000000000006916000000000000bf6700000000000035060500e0ff1f006706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c070000000000000095cb202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec85eeeb83ccaec388158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d0800e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb400f692f374dfab73f90000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1d913c3fd6edc9b9bfc8c6a14ff595eff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a0397c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed551c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95f9ddf30e066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18092f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25ae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc887b76767ca1279e34d20b276dff8318e0ec5ab2929e63ef6a32b1abc55859804e2ec19e5b96a2df9f488e7e25a839701e37cdd850c2f26685047f1d492571482f993bb96642a3f56a0ea24d765c6edf2352e00bc4ff4a723ee2d9307e6f25bd05f98583cc0868"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) 31.626214269s ago: executing program 7 (id=1101): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000008001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0xc000) 31.412084493s ago: executing program 8 (id=1102): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x4}], 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000540)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20000, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 31.037914711s ago: executing program 3 (id=1103): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x40000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 30.655350392s ago: executing program 7 (id=1104): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005140)={0x54, r3, 0x1, 0x70bd2a, 0x3, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 26.992882031s ago: executing program 3 (id=1105): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8534, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000044) 22.91274139s ago: executing program 3 (id=1106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) r2 = eventfd2(0x8, 0x0) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001440)={&(0x7f0000000340)={0x24, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x6084}, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/232, 0xe8, 0x0, &(0x7f0000000440)=""/4096, 0x1000}, &(0x7f0000000100)=0x40) 19.723425915s ago: executing program 8 (id=1107): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="5c00000012", 0x5}], 0x1, 0x0, 0x1f, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000001540)=""/4098, 0x1002}, {&(0x7f0000000180)=""/34, 0x22}], 0x2, 0x583, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.723217727s ago: executing program 7 (id=1108): r0 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="645814ed", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x24008804) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x2}, 0x8) 17.013224788s ago: executing program 8 (id=1109): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d7000fbdbdf2507006800", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x8004) 15.353381877s ago: executing program 8 (id=1110): r0 = socket(0x1, 0x5, 0x0) close(0x3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x80000002}) 3.063249241s ago: executing program 7 (id=1111): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) 3.060805026s ago: executing program 3 (id=1112): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec080000000008001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0xc000) 661.379593ms ago: executing program 8 (id=1113): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") open_by_handle_at(0xffffffffffffff9c, 0x0, 0x40000) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 0s ago: executing program 7 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8534, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000044) kernel console output (not intermixed with test programs): dv: batadv0: Adding interface: batadv_slave_0 [ 345.508419][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.535015][ T6466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.947927][ T6466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.955397][ T6466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.982313][ T6466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.345926][ T6552] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 346.673263][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.771244][ T6466] hsr_slave_0: entered promiscuous mode [ 346.782036][ T6466] hsr_slave_1: entered promiscuous mode [ 346.790987][ T6466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.799016][ T6466] Cannot create hsr debugfs directory [ 346.942893][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 347.515333][ T5822] Bluetooth: hci0: command tx timeout [ 347.929412][ T6578] loop0: detected capacity change from 0 to 512 [ 348.022206][ T6578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 348.137960][ T6578] EXT4-fs (loop0): 1 truncate cleaned up [ 348.148504][ T6578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.149038][ T6581] loop3: detected capacity change from 0 to 512 [ 348.344474][ T30] audit: type=1800 audit(1752734854.190:3): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.180" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 348.390192][ T6581] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 348.398796][ T6581] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 348.534424][ T6581] System zones: 0-1, 15-15, 18-18, 34-34 [ 348.572709][ T6581] EXT4-fs (loop3): orphan cleanup on readonly fs [ 348.580055][ T6581] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 348.591122][ T6581] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 348.607196][ T6581] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 348.731868][ T6581] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.181: bad orphan inode 16 [ 348.761507][ T6581] ext4_test_bit(bit=15, block=18) = 1 [ 348.769472][ T6581] is_bad_inode(inode)=0 [ 348.776756][ T6581] NEXT_ORPHAN(inode)=0 [ 348.781155][ T6581] max_ino=32 [ 348.784656][ T6581] i_nlink=2 [ 348.791542][ T6581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.900043][ T6466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.954868][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.982199][ T6466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 349.027965][ T6466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.449286][ T6466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.479222][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 349.506605][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.514180][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.522144][ T6533] bridge_slave_0: entered allmulticast mode [ 349.531860][ T6533] bridge_slave_0: entered promiscuous mode [ 349.573999][ T5813] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 349.600545][ T5822] Bluetooth: hci0: command tx timeout [ 349.655454][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.663176][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.671478][ T6533] bridge_slave_1: entered allmulticast mode [ 349.682027][ T6533] bridge_slave_1: entered promiscuous mode [ 349.733012][ T5813] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 349.989111][ T6601] loop1: detected capacity change from 0 to 512 [ 350.059023][ T6601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.100091][ T6601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 350.196137][ T6601] EXT4-fs (loop1): 1 truncate cleaned up [ 350.204283][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.383105][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.420375][ T5813] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.472548][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.608631][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.747990][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.244510][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.378154][ T6533] team0: Port device team_slave_0 added [ 351.676289][ T5822] Bluetooth: hci0: command tx timeout [ 351.848696][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.871721][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.901073][ T6533] team0: Port device team_slave_1 added [ 352.463188][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.471110][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.497990][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.549167][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.556236][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.612179][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.619793][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.646959][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.677875][ T48] bridge_slave_1: left allmulticast mode [ 352.683783][ T48] bridge_slave_1: left promiscuous mode [ 352.690704][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.723320][ T48] bridge_slave_0: left allmulticast mode [ 352.729510][ T48] bridge_slave_0: left promiscuous mode [ 352.736330][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.255672][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.275006][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.316810][ T48] bond0 (unregistering): Released all slaves [ 353.651223][ T6533] hsr_slave_0: entered promiscuous mode [ 353.661668][ T6533] hsr_slave_1: entered promiscuous mode [ 353.670667][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.678736][ T6533] Cannot create hsr debugfs directory [ 353.758716][ T6466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.267293][ T48] hsr_slave_0: left promiscuous mode [ 354.304391][ T48] hsr_slave_1: left promiscuous mode [ 354.312916][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.321091][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.436361][ T6625] loop0: detected capacity change from 0 to 512 [ 354.450634][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.460386][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.581463][ T6625] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 354.590045][ T6625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 354.610387][ T6627] loop1: detected capacity change from 0 to 512 [ 354.613227][ T48] veth1_macvtap: left promiscuous mode [ 354.626842][ T48] veth0_macvtap: left promiscuous mode [ 354.632849][ T48] veth1_vlan: left promiscuous mode [ 354.638723][ T48] veth0_vlan: left promiscuous mode [ 354.668175][ T6627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.677111][ T6625] System zones: 0-1, 15-15, 18-18, 34-34 [ 354.684239][ T6625] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.691240][ T6625] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 354.701130][ T6625] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 354.719215][ T6625] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 354.778249][ T6625] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.193: bad orphan inode 16 [ 354.870931][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.882850][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.892009][ T6625] ext4_test_bit(bit=15, block=18) = 1 [ 354.898964][ T6625] is_bad_inode(inode)=0 [ 354.904436][ T6625] NEXT_ORPHAN(inode)=0 [ 354.909824][ T6625] max_ino=32 [ 354.913235][ T6625] i_nlink=2 [ 354.920147][ T6625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 354.981702][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.995613][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.008735][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.266963][ T6627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.281202][ T6627] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.452431][ T30] audit: type=1800 audit(1752734861.320:4): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 355.473362][ T30] audit: type=1800 audit(1752734861.330:5): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 355.494327][ T30] audit: type=1800 audit(1752734861.340:6): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.194" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 355.669826][ T48] team0 (unregistering): Port device team_slave_1 removed [ 355.690453][ T5826] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 355.720750][ T48] team0 (unregistering): Port device team_slave_0 removed [ 355.777360][ T5826] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 356.081958][ T5818] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.132847][ T6466] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.307448][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.315031][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.464625][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.472315][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.629287][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.762476][ T6643] loop1: detected capacity change from 0 to 512 [ 356.957045][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.971423][ T6643] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.046642][ T5824] Bluetooth: hci1: command tx timeout [ 357.060797][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.169575][ T6643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 357.293261][ T6643] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 357.445270][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.716773][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.782205][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 357.993637][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.755790][ T6533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 358.852647][ T6533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.879468][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 358.917373][ T48] bridge_slave_1: left allmulticast mode [ 358.923311][ T48] bridge_slave_1: left promiscuous mode [ 358.931660][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.994478][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 359.056366][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 359.107215][ T48] bridge_slave_0: left allmulticast mode [ 359.113137][ T48] bridge_slave_0: left promiscuous mode [ 359.124531][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.126014][ T5824] Bluetooth: hci1: command tx timeout [ 359.706829][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.746746][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.781784][ T48] bond0 (unregistering): Released all slaves [ 359.818254][ T6533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 359.882300][ T6533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 359.952369][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 360.027059][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 360.064836][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 360.148656][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 360.246336][ T6466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.585384][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.612163][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.627286][ T5822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.656322][ T5822] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.675307][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.877689][ T48] hsr_slave_0: left promiscuous mode [ 360.907132][ T48] hsr_slave_1: left promiscuous mode [ 360.916951][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.924651][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.988007][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.995866][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.041140][ T48] veth1_macvtap: left promiscuous mode [ 361.045999][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.047370][ T48] veth0_macvtap: left promiscuous mode [ 361.074452][ T48] veth1_vlan: left promiscuous mode [ 361.082153][ T48] veth0_vlan: left promiscuous mode [ 361.087184][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 361.102998][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.200550][ T5822] Bluetooth: hci1: command tx timeout [ 361.594660][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.628871][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 361.657259][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 361.761406][ T48] team0 (unregistering): Port device team_slave_1 removed [ 361.800980][ T48] team0 (unregistering): Port device team_slave_0 removed [ 362.134838][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 362.227120][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 362.740949][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.748966][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.756916][ T6631] bridge_slave_0: entered allmulticast mode [ 362.766502][ T6631] bridge_slave_0: entered promiscuous mode [ 362.809741][ T5822] Bluetooth: hci4: command tx timeout [ 363.030523][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.040938][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.048783][ T6631] bridge_slave_1: entered allmulticast mode [ 363.058013][ T6631] bridge_slave_1: entered promiscuous mode [ 363.224119][ T5818] EXT4-fs error: 1 callbacks suppressed [ 363.224192][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 363.258352][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 363.271442][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 363.315655][ T5822] Bluetooth: hci1: command tx timeout [ 363.439969][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.498585][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.553986][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.828497][ T6631] team0: Port device team_slave_0 added [ 363.914999][ T6631] team0: Port device team_slave_1 added [ 363.940610][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.114417][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 364.159334][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 364.173635][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 364.178292][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.202459][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.229084][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.281713][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.289430][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.301870][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.309256][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.339272][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.361071][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 364.476211][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.483774][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.867764][ T6631] hsr_slave_0: entered promiscuous mode [ 364.877863][ T5822] Bluetooth: hci4: command tx timeout [ 364.881100][ T6631] hsr_slave_1: entered promiscuous mode [ 364.892281][ T6631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.900152][ T6631] Cannot create hsr debugfs directory [ 364.917536][ T6466] veth0_vlan: entered promiscuous mode [ 365.037179][ T6466] veth1_vlan: entered promiscuous mode [ 365.240803][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 365.274365][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 365.330113][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 365.877046][ T6466] veth0_macvtap: entered promiscuous mode [ 365.953042][ T6466] veth1_macvtap: entered promiscuous mode [ 366.523065][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 366.537168][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.629097][ T6466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.687336][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 366.745732][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 366.857768][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.868094][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.876105][ T6665] bridge_slave_0: entered allmulticast mode [ 366.887106][ T6665] bridge_slave_0: entered promiscuous mode [ 366.913843][ T6466] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.923021][ T6466] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.932180][ T6466] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.941489][ T6466] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.025452][ T5822] Bluetooth: hci4: command tx timeout [ 367.050286][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.058034][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.066126][ T6665] bridge_slave_1: entered allmulticast mode [ 367.076198][ T6665] bridge_slave_1: entered promiscuous mode [ 367.414892][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.443256][ T6631] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 367.505967][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.541914][ T6631] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 367.687134][ T6631] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 367.838013][ T6665] team0: Port device team_slave_0 added [ 367.846573][ T6631] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 367.882484][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.918803][ T6665] team0: Port device team_slave_1 added [ 367.944672][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 368.025519][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 368.044280][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 368.267385][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.274594][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.301337][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.536385][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.543592][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.571357][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.036115][ T5822] Bluetooth: hci4: command tx timeout [ 369.271338][ T6665] hsr_slave_0: entered promiscuous mode [ 369.283006][ T6665] hsr_slave_1: entered promiscuous mode [ 369.291959][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.301362][ T6665] Cannot create hsr debugfs directory [ 369.335670][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 369.428033][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 369.460559][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 369.536284][ T6631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.952766][ T6631] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.052901][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.060571][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.164783][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.172372][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.432596][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 370.526874][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 370.557994][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 371.222466][ T6533] veth0_vlan: entered promiscuous mode [ 371.309735][ T6533] veth1_vlan: entered promiscuous mode [ 371.422167][ T6665] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 371.537435][ T6665] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 371.701392][ T6533] veth0_macvtap: entered promiscuous mode [ 371.714286][ T6665] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 371.822210][ T6533] veth1_macvtap: entered promiscuous mode [ 371.848636][ T6665] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 371.854776][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 371.980926][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 372.065476][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.086122][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 372.169988][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.282026][ T6533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.292628][ T6533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.301893][ T6533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.311147][ T6533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.082487][ T6631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.402236][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 373.514657][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.529216][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 373.563628][ T5818] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /48/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 373.739381][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.858371][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.866086][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.971415][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.979292][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.913630][ T5818] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 375.011494][ T5818] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 375.060681][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 375.217838][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.226132][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.527588][ T4140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.535889][ T4140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.622348][ T6631] veth0_vlan: entered promiscuous mode [ 376.789346][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 376.831655][ T6631] veth1_vlan: entered promiscuous mode [ 376.843743][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 376.864282][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 376.880250][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.947785][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 376.974081][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 377.417145][ T6631] veth0_macvtap: entered promiscuous mode [ 377.526178][ T6631] veth1_macvtap: entered promiscuous mode [ 377.862040][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.998160][ T6631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.118101][ T6631] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.127413][ T6631] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.136906][ T6631] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.146200][ T6631] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.867328][ T6779] chnl_net:caif_netlink_parms(): no params data found [ 379.035639][ T5822] Bluetooth: hci5: command tx timeout [ 379.075713][ T6802] loop5: detected capacity change from 0 to 512 [ 379.226423][ T6802] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 379.234636][ T6802] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 379.296046][ T6802] System zones: 0-1, 15-15, 18-18, 34-34 [ 379.303226][ T6802] EXT4-fs (loop5): orphan cleanup on readonly fs [ 379.310363][ T6802] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 379.320302][ T6802] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 379.335513][ T6802] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 379.426322][ T6802] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.202: bad orphan inode 16 [ 379.495465][ T6802] ext4_test_bit(bit=15, block=18) = 1 [ 379.501115][ T6802] is_bad_inode(inode)=0 [ 379.507157][ T6802] NEXT_ORPHAN(inode)=0 [ 379.511539][ T6802] max_ino=32 [ 379.514980][ T6802] i_nlink=2 [ 379.521439][ T6802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.319481][ T3886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.342016][ T6466] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 380.457780][ T6466] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 380.571521][ T3886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.772411][ T3886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.060462][ T3886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.115715][ T5822] Bluetooth: hci5: command tx timeout [ 381.172351][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.180127][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.188278][ T6779] bridge_slave_0: entered allmulticast mode [ 381.200232][ T6779] bridge_slave_0: entered promiscuous mode [ 381.317662][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.325487][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.333246][ T6779] bridge_slave_1: entered allmulticast mode [ 381.345653][ T6779] bridge_slave_1: entered promiscuous mode [ 381.530081][ T6466] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.842755][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.014485][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.032766][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.041287][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.102025][ T3886] bridge_slave_1: left allmulticast mode [ 382.109161][ T3886] bridge_slave_1: left promiscuous mode [ 382.116177][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.171627][ T3886] bridge_slave_0: left allmulticast mode [ 382.177853][ T3886] bridge_slave_0: left promiscuous mode [ 382.184521][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.676733][ T3886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.716789][ T3886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.741872][ T3886] bond0 (unregistering): Released all slaves [ 382.784626][ T6665] veth0_vlan: entered promiscuous mode [ 383.002394][ T6665] veth1_vlan: entered promiscuous mode [ 383.126831][ T3796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.135216][ T3796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.165562][ T6779] team0: Port device team_slave_0 added [ 383.210212][ T5822] Bluetooth: hci5: command tx timeout [ 383.398919][ T6779] team0: Port device team_slave_1 added [ 383.575590][ T3886] hsr_slave_0: left promiscuous mode [ 383.597552][ T3886] hsr_slave_1: left promiscuous mode [ 383.605784][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.613525][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.627684][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.636192][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.670658][ T3886] veth1_macvtap: left promiscuous mode [ 383.677524][ T3886] veth0_macvtap: left promiscuous mode [ 383.683444][ T3886] veth1_vlan: left promiscuous mode [ 383.689211][ T3886] veth0_vlan: left promiscuous mode [ 384.568244][ T3886] team0 (unregistering): Port device team_slave_1 removed [ 384.688242][ T3886] team0 (unregistering): Port device team_slave_0 removed [ 385.275447][ T5822] Bluetooth: hci5: command tx timeout [ 385.283412][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.290741][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.318143][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.414196][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.422006][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.452364][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.666908][ T6665] veth0_macvtap: entered promiscuous mode [ 385.721238][ T3886] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.814211][ T6665] veth1_macvtap: entered promiscuous mode [ 385.849290][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.872774][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.882534][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.907546][ T3886] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.930683][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 385.963073][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.162413][ T3886] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.261421][ T6779] hsr_slave_0: entered promiscuous mode [ 386.272870][ T6779] hsr_slave_1: entered promiscuous mode [ 386.289898][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.340430][ T3886] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.672664][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.770134][ T6665] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.780399][ T6665] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.789715][ T6665] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.798789][ T6665] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.567645][ T3886] bridge_slave_1: left allmulticast mode [ 387.573660][ T3886] bridge_slave_1: left promiscuous mode [ 387.581282][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.657002][ T3886] bridge_slave_0: left allmulticast mode [ 387.663145][ T3886] bridge_slave_0: left promiscuous mode [ 387.670108][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.157238][ T5824] Bluetooth: hci2: command tx timeout [ 388.187135][ T3886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.213651][ T3886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.231321][ T3886] bond0 (unregistering): Released all slaves [ 389.452706][ T3886] hsr_slave_0: left promiscuous mode [ 389.474010][ T3886] hsr_slave_1: left promiscuous mode [ 389.483009][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.490984][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.533992][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.541984][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.608191][ T3886] veth1_macvtap: left promiscuous mode [ 389.614035][ T3886] veth0_macvtap: left promiscuous mode [ 389.622904][ T3886] veth1_vlan: left promiscuous mode [ 389.628852][ T3886] veth0_vlan: left promiscuous mode [ 390.147593][ T6884] loop6: detected capacity change from 0 to 512 [ 390.262943][ T5824] Bluetooth: hci2: command tx timeout [ 390.405922][ T6884] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 390.414249][ T6884] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 390.441817][ T6884] System zones: 0-1, 15-15, 18-18, 34-34 [ 390.447896][ T3886] team0 (unregistering): Port device team_slave_1 removed [ 390.478489][ T3886] team0 (unregistering): Port device team_slave_0 removed [ 390.553376][ T6884] EXT4-fs (loop6): orphan cleanup on readonly fs [ 390.561920][ T6884] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 390.572952][ T6884] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 390.589072][ T6884] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 390.623178][ T6884] EXT4-fs error (device loop6): ext4_orphan_get:1419: comm syz.6.209: bad orphan inode 16 [ 390.647238][ T6884] ext4_test_bit(bit=15, block=18) = 1 [ 390.655594][ T6884] is_bad_inode(inode)=0 [ 390.660176][ T6884] NEXT_ORPHAN(inode)=0 [ 390.664478][ T6884] max_ino=32 [ 390.668244][ T6884] i_nlink=2 [ 390.673908][ T6884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 391.089291][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.098359][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.167091][ T6533] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 391.180873][ T6779] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 391.242376][ T6533] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 391.284285][ T6841] chnl_net:caif_netlink_parms(): no params data found [ 391.322917][ T6779] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 391.368851][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.378921][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.446907][ T6779] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 391.538358][ T6779] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 392.014859][ T6533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.081795][ T3822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.304215][ T3822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.320618][ T5824] Bluetooth: hci2: command tx timeout [ 392.450399][ T3822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.590437][ T3822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.346455][ T3822] bridge_slave_1: left allmulticast mode [ 393.352371][ T3822] bridge_slave_1: left promiscuous mode [ 393.359621][ T3822] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.424264][ T3822] bridge_slave_0: left allmulticast mode [ 393.430595][ T3822] bridge_slave_0: left promiscuous mode [ 393.441658][ T3822] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.997160][ T3822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.078569][ T3822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.106403][ T3822] bond0 (unregistering): Released all slaves [ 394.315252][ T6841] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.322866][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.331834][ T6841] bridge_slave_0: entered allmulticast mode [ 394.346345][ T6841] bridge_slave_0: entered promiscuous mode [ 394.370998][ T6841] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.380016][ T6841] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.387933][ T6841] bridge_slave_1: entered allmulticast mode [ 394.397712][ T6841] bridge_slave_1: entered promiscuous mode [ 394.408825][ T5824] Bluetooth: hci2: command tx timeout [ 394.968711][ T6841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.042746][ T6841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.148094][ T3822] hsr_slave_0: left promiscuous mode [ 395.170649][ T3822] hsr_slave_1: left promiscuous mode [ 395.180057][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.188028][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.206746][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.214624][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.326809][ T3822] veth1_macvtap: left promiscuous mode [ 395.332646][ T3822] veth0_macvtap: left promiscuous mode [ 395.338870][ T3822] veth1_vlan: left promiscuous mode [ 395.344521][ T3822] veth0_vlan: left promiscuous mode [ 396.033454][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.060692][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.117919][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.196961][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.231745][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.339863][ T3822] team0 (unregistering): Port device team_slave_1 removed [ 396.371038][ T3822] team0 (unregistering): Port device team_slave_0 removed [ 397.004215][ T6841] team0: Port device team_slave_0 added [ 397.138793][ T6841] team0: Port device team_slave_1 added [ 397.338753][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.596456][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.603671][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.631625][ T6841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.739412][ T6841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.747278][ T6841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.774578][ T6841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.845372][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.7.215'. [ 397.909729][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.066096][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.074186][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.357228][ T6841] hsr_slave_0: entered promiscuous mode [ 398.367624][ T6841] hsr_slave_1: entered promiscuous mode [ 398.377358][ T6841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.385322][ T6841] Cannot create hsr debugfs directory [ 398.462000][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.469748][ T4140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.512647][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.521427][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.589431][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.597131][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.671386][ T5822] Bluetooth: hci0: command tx timeout [ 399.671519][ T6956] program syz.8.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.042911][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 400.716331][ T5822] Bluetooth: hci0: command tx timeout [ 401.506420][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.676555][ T6841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.807278][ T6841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.927308][ T6841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.008659][ T6841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.162760][ T6984] loop7: detected capacity change from 0 to 512 [ 402.219615][ T6984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.279701][ T6984] EXT4-fs (loop7): Test dummy encryption mode enabled [ 402.437575][ T6984] EXT4-fs (loop7): 1 truncate cleaned up [ 402.550119][ T6984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.681736][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.689536][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.697449][ T6926] bridge_slave_0: entered allmulticast mode [ 402.707209][ T6926] bridge_slave_0: entered promiscuous mode [ 402.755744][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.763356][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.771405][ T6926] bridge_slave_1: entered allmulticast mode [ 402.781157][ T6926] bridge_slave_1: entered promiscuous mode [ 402.819828][ T5822] Bluetooth: hci0: command tx timeout [ 403.280128][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.323004][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.699888][ T6841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.737584][ T6926] team0: Port device team_slave_0 added [ 403.784494][ T6926] team0: Port device team_slave_1 added [ 403.973667][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.107384][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.114730][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.141392][ T6926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.186353][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.193909][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.287828][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.295498][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.403392][ T6926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.411023][ T6926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.438426][ T6926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.832550][ T6779] veth0_vlan: entered promiscuous mode [ 404.875696][ T5822] Bluetooth: hci0: command tx timeout [ 405.026641][ T6779] veth1_vlan: entered promiscuous mode [ 405.159683][ T6926] hsr_slave_0: entered promiscuous mode [ 405.170094][ T6926] hsr_slave_1: entered promiscuous mode [ 405.179127][ T6926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.187064][ T6926] Cannot create hsr debugfs directory [ 405.772228][ T6989] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 406.025393][ T6779] veth0_macvtap: entered promiscuous mode [ 406.106487][ T6779] veth1_macvtap: entered promiscuous mode [ 406.466754][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.575277][ T6841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.641670][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.904764][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.185692][ T6779] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.194891][ T6779] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.204119][ T6779] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.213312][ T6779] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.303697][ T6926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.440093][ T6926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.546278][ T6926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.624432][ T6926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.864960][ T6841] veth0_vlan: entered promiscuous mode [ 410.040675][ T6841] veth1_vlan: entered promiscuous mode [ 410.186895][ T6926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.396896][ T7043] loop8: detected capacity change from 0 to 512 [ 410.401255][ T6926] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.481515][ T7043] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.513203][ T6841] veth0_macvtap: entered promiscuous mode [ 410.580175][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.587969][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.695810][ T7043] EXT4-fs (loop8): Test dummy encryption mode enabled [ 410.843288][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.851053][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.079263][ T7043] EXT4-fs (loop8): 1 truncate cleaned up [ 411.090346][ T7043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.224980][ T6841] veth1_macvtap: entered promiscuous mode [ 412.492286][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.783913][ T6841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.049093][ T6841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.060666][ T6841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.070574][ T6841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.080881][ T6841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.210502][ T7049] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 413.960499][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.967419][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.360312][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.572942][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.961522][ T6926] veth0_vlan: entered promiscuous mode [ 416.112890][ T6926] veth1_vlan: entered promiscuous mode [ 416.522654][ T6926] veth0_macvtap: entered promiscuous mode [ 416.577966][ T6926] veth1_macvtap: entered promiscuous mode [ 416.813887][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.918753][ T6926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.069426][ T6926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.081002][ T6926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.091767][ T6926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.100990][ T6926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.106034][ T3822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.114276][ T3822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.413676][ T4140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.422047][ T4140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.411804][ T7130] loop8: detected capacity change from 0 to 512 [ 419.488743][ T7130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.545710][ T1546] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 419.579576][ T7130] EXT4-fs (loop8): Test dummy encryption mode enabled [ 419.707094][ T7130] EXT4-fs (loop8): 1 truncate cleaned up [ 419.716132][ T7130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.773894][ T1546] usb 10-1: Using ep0 maxpacket: 8 [ 419.827600][ T1546] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.841658][ T1546] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 419.973417][ T1546] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.983339][ T1546] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.992118][ T1546] usb 10-1: Product: syz [ 419.996791][ T1546] usb 10-1: Manufacturer: syz [ 420.001731][ T1546] usb 10-1: SerialNumber: syz [ 420.074444][ T1546] usb 10-1: config 0 descriptor?? [ 421.457184][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.466144][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.804093][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.812725][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.780042][ T1546] usb 10-1: USB disconnect, device number 2 [ 423.040758][ T7135] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 423.379022][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.316115][ T5871] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 424.543160][ T5871] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.672803][ T5871] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 424.683339][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.692590][ T5871] usb 9-1: Product: syz [ 424.697205][ T5871] usb 9-1: Manufacturer: syz [ 424.702131][ T5871] usb 9-1: SerialNumber: syz [ 425.486933][ T1915] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 425.699565][ T1915] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 425.708320][ T1915] usb 8-1: config 0 has no interface number 0 [ 425.714715][ T1915] usb 8-1: config 0 interface 12 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.726652][ T1915] usb 8-1: config 0 interface 12 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.736942][ T1915] usb 8-1: config 0 interface 12 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 425.750508][ T1915] usb 8-1: New USB device found, idVendor=0463, idProduct=0027, bcdDevice= 0.00 [ 425.760109][ T1915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.828132][ T1915] usb 8-1: config 0 descriptor?? [ 425.885608][ T5871] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 425.892378][ T5871] cdc_ncm 9-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 425.901731][ T5871] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 426.126045][ T5871] cdc_ncm 9-1:1.0: setting tx_max = 184 [ 426.147810][ T5871] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 426.476764][ T5871] usb 9-1: USB disconnect, device number 2 [ 426.491315][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.503324][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.512722][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.520660][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.528540][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.536484][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.544186][ T1915] hid-generic 0003:0463:0027.0001: unknown main item tag 0x0 [ 426.550177][ T5871] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 426.737869][ T1915] hid-generic 0003:0463:0027.0001: hidraw0: USB HID vff.fa Device [HID 0463:0027] on usb-dummy_hcd.7-1/input12 [ 426.918812][ T1915] usb 8-1: USB disconnect, device number 2 [ 427.115975][ T7211] loop4: detected capacity change from 0 to 512 [ 427.166803][ T7211] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.174190][ T7211] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.196875][ T4140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.205395][ T4140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.345480][ T7211] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 427.472129][ T7216] loop8: detected capacity change from 0 to 512 [ 427.483688][ T4140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.492377][ T4140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.513299][ T7211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 427.590047][ T7216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 427.624840][ T7211] System zones: 1-12 [ 427.665928][ T7216] EXT4-fs (loop8): Test dummy encryption mode enabled [ 427.676593][ T7211] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.261: corrupted in-inode xattr: e_value size too large [ 427.781807][ T7216] EXT4-fs (loop8): 1 truncate cleaned up [ 427.790334][ T7216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.833090][ T7211] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.261: couldn't read orphan inode 15 (err -117) [ 427.895140][ T7211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.627976][ T6841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.225347][ T7218] fido_id[7218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 429.588251][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.186570][ T5871] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 430.406085][ T5871] usb 10-1: Using ep0 maxpacket: 16 [ 430.461228][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 430.473268][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.646216][ T5871] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.656095][ T5871] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.664483][ T5871] usb 10-1: Product: syz [ 430.669650][ T5871] usb 10-1: Manufacturer: syz [ 430.674684][ T5871] usb 10-1: SerialNumber: syz [ 430.858142][ T5871] usb 10-1: config 0 descriptor?? [ 430.922673][ T5871] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 430.932600][ T5871] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 431.208586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 431.255474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 431.335174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 431.435115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 431.445879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 431.515464][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 431.565140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 431.617968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 431.715106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 431.728133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 432.200063][ T5871] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 432.273602][ T5871] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 432.648438][ T7258] batadv_slave_1: entered promiscuous mode [ 432.693235][ T5871] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 432.700874][ T5871] em28xx 10-1:0.0: No AC97 audio processor [ 432.726145][ T7256] batadv_slave_1: left promiscuous mode [ 434.236752][ T6910] usb 10-1: USB disconnect, device number 3 [ 434.244635][ T6910] em28xx 10-1:0.0: Disconnecting em28xx [ 434.345726][ T6910] em28xx 10-1:0.0: Freeing device [ 434.702966][ T7281] loop7: detected capacity change from 0 to 512 [ 434.806188][ T7281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.866422][ T7281] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.285: iget: bad i_size value: 15393162788874 [ 435.352855][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.532375][ T7307] overlay: filesystem on ./file0 not supported [ 437.481844][ T7321] loop8: detected capacity change from 0 to 2048 [ 438.877283][ T7343] binder: 7342:7343 ioctl c0306201 0 returned -14 [ 439.646898][ T7355] loop7: detected capacity change from 0 to 512 [ 439.750800][ T7355] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 439.936169][ T7358] loop8: detected capacity change from 0 to 128 [ 440.860651][ T7369] loop2: detected capacity change from 0 to 512 [ 440.952918][ T7369] EXT4-fs: Ignoring removed mblk_io_submit option [ 440.960974][ T7369] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.078738][ T7369] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 441.211221][ T7369] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 441.307473][ T7369] System zones: 1-12 [ 441.369579][ T7369] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.313: corrupted in-inode xattr: e_value size too large [ 441.415927][ T7369] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.313: couldn't read orphan inode 15 (err -117) [ 441.497922][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.583597][ T7380] loop8: detected capacity change from 0 to 1024 [ 441.608098][ T7380] EXT4-fs: Ignoring removed nobh option [ 441.614191][ T7380] EXT4-fs: Ignoring removed bh option [ 441.793887][ T7380] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.084368][ T7388] overlayfs: conflicting lowerdir path [ 442.097695][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.549911][ T7393] binder: 7391:7393 ioctl c0306201 0 returned -14 [ 442.601923][ T7393] binder: 7391:7393 ioctl c0306201 200000000240 returned -11 [ 442.723068][ T6665] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.118660][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 443.679432][ T7404] loop8: detected capacity change from 0 to 2048 [ 443.790585][ T7404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.961789][ T7418] loop2: detected capacity change from 0 to 16 [ 445.976675][ T5871] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 446.147734][ T7435] overlayfs: failed to resolve './file0': -2 [ 446.223856][ T5871] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 446.232758][ T5871] usb 3-1: config 0 has no interface number 0 [ 446.239430][ T5871] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 446.346052][ T5871] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 446.355980][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.368947][ T5871] usb 3-1: Product: syz [ 446.373390][ T5871] usb 3-1: Manufacturer: syz [ 446.379923][ T5871] usb 3-1: SerialNumber: syz [ 446.494767][ T5871] usb 3-1: config 0 descriptor?? [ 446.514481][ T7418] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.643712][ T5871] usb-storage 3-1:0.20: USB Mass Storage device detected [ 446.697927][ T5871] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 447.289030][ T5871] scsi host1: usb-storage 3-1:0.20 [ 447.545499][ T5871] usb 3-1: USB disconnect, device number 2 [ 447.638122][ T7448] Bluetooth: MGMT ver 1.23 [ 448.085597][ T6910] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 448.309069][ T6910] usb 10-1: Using ep0 maxpacket: 32 [ 448.447918][ T6910] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 448.456830][ T6910] usb 10-1: config 0 has no interface number 0 [ 448.463750][ T6910] usb 10-1: config 0 interface 184 has no altsetting 0 [ 448.599449][ T6910] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 448.609540][ T6910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.621391][ T6910] usb 10-1: Product: syz [ 448.627139][ T6910] usb 10-1: Manufacturer: syz [ 448.632086][ T6910] usb 10-1: SerialNumber: syz [ 448.726257][ T6910] usb 10-1: config 0 descriptor?? [ 448.768268][ T6910] smsc75xx v1.0.0 [ 448.935284][ T7464] loop2: detected capacity change from 0 to 512 [ 449.073829][ T7464] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 449.445366][ T7464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.458916][ T7464] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.476746][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 449.488361][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 449.607068][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 449.618598][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 449.628962][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 449.644943][ T6910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 449.656921][ T6910] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -61 [ 449.769089][ T7471] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 450.229581][ T6926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.117781][ T6910] usb 10-1: USB disconnect, device number 4 [ 451.753726][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.791978][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.844201][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.867501][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.903200][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.587235][ T7506] binder: 7504:7506 ioctl c0306201 0 returned -14 [ 454.123945][ T7498] chnl_net:caif_netlink_parms(): no params data found [ 454.176179][ T5822] Bluetooth: hci3: command tx timeout [ 455.180728][ T7544] binder: 7542:7544 ioctl c018620b 200000000140 returned -14 [ 455.350596][ T4364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.635810][ T4364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.875928][ T4364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.114698][ T4364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.236906][ T5822] Bluetooth: hci3: command tx timeout [ 456.537597][ T48] Bluetooth: hci2: Frame reassembly failed (-84) [ 456.544368][ T48] Bluetooth: hci2: Frame reassembly failed (-84) [ 456.780727][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.788689][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.801041][ T7498] bridge_slave_0: entered allmulticast mode [ 456.816133][ T7498] bridge_slave_0: entered promiscuous mode [ 456.990977][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.999436][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.007556][ T7498] bridge_slave_1: entered allmulticast mode [ 457.022558][ T7498] bridge_slave_1: entered promiscuous mode [ 457.758311][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.893138][ T4364] bridge_slave_1: left allmulticast mode [ 457.899308][ T4364] bridge_slave_1: left promiscuous mode [ 457.906073][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.996814][ T4364] bridge_slave_0: left allmulticast mode [ 458.003057][ T4364] bridge_slave_0: left promiscuous mode [ 458.010071][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.383514][ T5824] Bluetooth: hci3: command tx timeout [ 458.556383][ T5824] Bluetooth: hci2: command 0x1003 tx timeout [ 458.562803][ T5822] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 458.938242][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.054661][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.111714][ T4364] bond0 (unregistering): Released all slaves [ 459.276715][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.864921][ T7498] team0: Port device team_slave_0 added [ 460.113414][ T7498] team0: Port device team_slave_1 added [ 460.229928][ T4364] hsr_slave_0: left promiscuous mode [ 460.278056][ T4364] hsr_slave_1: left promiscuous mode [ 460.291215][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.299198][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.368379][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.376573][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.398968][ T5822] Bluetooth: hci3: command tx timeout [ 460.453269][ T4364] veth1_macvtap: left promiscuous mode [ 460.459395][ T4364] veth0_macvtap: left promiscuous mode [ 460.465593][ T4364] veth1_vlan: left promiscuous mode [ 460.471195][ T4364] veth0_vlan: left promiscuous mode [ 461.581723][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 461.665837][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 462.377160][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.384376][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.411161][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.521455][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.529945][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.562785][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.679456][ T4364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.863381][ T4364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.036354][ T4364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.149517][ T7498] hsr_slave_0: entered promiscuous mode [ 463.164955][ T7498] hsr_slave_1: entered promiscuous mode [ 463.174239][ T7498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.182289][ T7498] Cannot create hsr debugfs directory [ 463.282786][ T4364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.331580][ T7609] fuse: Bad value for 'fd' [ 463.996706][ T7615] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 464.121847][ T4364] bridge_slave_1: left allmulticast mode [ 464.128770][ T4364] bridge_slave_1: left promiscuous mode [ 464.135693][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.144700][ T7615] xt_hashlimit: size too large, truncated to 1048576 [ 464.358860][ T4364] bridge_slave_0: left allmulticast mode [ 464.364837][ T4364] bridge_slave_0: left promiscuous mode [ 464.374251][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.022114][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.161193][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.361525][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.410780][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.420167][ T4364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.441810][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.578263][ T4364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.623329][ T4364] bond0 (unregistering): Released all slaves [ 467.087944][ T4364] hsr_slave_0: left promiscuous mode [ 467.100873][ T4364] hsr_slave_1: left promiscuous mode [ 467.109088][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.117012][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.130760][ T4364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.139738][ T4364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.278770][ T4364] veth1_macvtap: left promiscuous mode [ 467.284704][ T4364] veth0_macvtap: left promiscuous mode [ 467.291089][ T4364] veth1_vlan: left promiscuous mode [ 467.296883][ T4364] veth0_vlan: left promiscuous mode [ 467.515847][ T5824] Bluetooth: hci0: command tx timeout [ 468.353379][ T4364] team0 (unregistering): Port device team_slave_1 removed [ 468.384911][ T7655] sd 0:0:1:0: PR command failed: 1026 [ 468.390993][ T7655] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 468.399035][ T7655] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 468.468238][ T4364] team0 (unregistering): Port device team_slave_0 removed [ 469.597453][ T5824] Bluetooth: hci0: command tx timeout [ 469.645655][ T6910] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 469.876334][ T6910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.887995][ T6910] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.898228][ T6910] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 469.907711][ T6910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.048189][ T6910] usb 8-1: config 0 descriptor?? [ 470.142448][ T7498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 470.305353][ T7498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 470.427255][ T7622] chnl_net:caif_netlink_parms(): no params data found [ 470.466497][ T7498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.516045][ T6910] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 470.523447][ T6910] hid-led 0003:27B8:01ED.0002: unknown main item tag 0x0 [ 470.597362][ T7498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.697521][ T6910] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 470.786584][ T6910] usb 8-1: USB disconnect, device number 3 [ 470.786975][ T7684] binder: 7680:7684 ioctl c0306201 0 returned -14 [ 471.678353][ T5824] Bluetooth: hci0: command tx timeout [ 471.921324][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.070817][ T7498] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.273008][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.280965][ T7622] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.288985][ T7622] bridge_slave_0: entered allmulticast mode [ 472.298692][ T7622] bridge_slave_0: entered promiscuous mode [ 472.328832][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.336575][ T3886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.481794][ T3886] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.489531][ T3886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.517390][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.525606][ T7622] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.533375][ T7622] bridge_slave_1: entered allmulticast mode [ 472.543097][ T7622] bridge_slave_1: entered promiscuous mode [ 472.971955][ T7622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.120553][ T7622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.514102][ T7622] team0: Port device team_slave_0 added [ 473.609949][ T7622] team0: Port device team_slave_1 added [ 473.755396][ T5824] Bluetooth: hci0: command tx timeout [ 474.181612][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.188964][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.218605][ T7622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.393021][ T7724] loop7: detected capacity change from 0 to 1024 [ 474.453602][ T7622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.462229][ T7622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.490015][ T7622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.630737][ T7724] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.643741][ T7724] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.862418][ T7622] hsr_slave_0: entered promiscuous mode [ 474.875445][ T7622] hsr_slave_1: entered promiscuous mode [ 474.884321][ T7622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.892361][ T7622] Cannot create hsr debugfs directory [ 475.259329][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.401349][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.409618][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.725850][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.262411][ T7740] fuse: Invalid rootmode [ 476.643164][ T7498] veth0_vlan: entered promiscuous mode [ 476.862608][ T7498] veth1_vlan: entered promiscuous mode [ 477.269615][ T7498] veth0_macvtap: entered promiscuous mode [ 477.342526][ T7498] veth1_macvtap: entered promiscuous mode [ 477.419922][ T7622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.445869][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 477.497411][ T7622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.647727][ T7622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.767159][ T7622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.820013][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.927693][ T7498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.059882][ T7498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.069755][ T7498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.080514][ T7498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.090631][ T7498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.252016][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.340345][ T7774] fuse: Invalid rootmode [ 479.392405][ T7772] netlink: 'syz.9.418': attribute type 1 has an invalid length. [ 479.576681][ T7772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.696362][ T7622] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.809491][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.817359][ T4140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.879767][ T7772] vlan2: entered allmulticast mode [ 479.885479][ T7772] geneve1: entered allmulticast mode [ 479.968158][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.975884][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.352411][ T7622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.766242][ T7803] Zero length message leads to an empty skb [ 482.553444][ T7622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.215663][ T7622] veth0_vlan: entered promiscuous mode [ 484.268699][ T7622] veth1_vlan: entered promiscuous mode [ 484.876840][ T7622] veth0_macvtap: entered promiscuous mode [ 485.023157][ T7622] veth1_macvtap: entered promiscuous mode [ 485.576232][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.673016][ T7622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.768423][ T7622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.777699][ T7622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.790339][ T7622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.800698][ T7622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.276644][ T7855] netlink: 16 bytes leftover after parsing attributes in process `syz.9.434'. [ 487.677246][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 488.626729][ T3822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.634965][ T3822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.075706][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.083830][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.009339][ T7892] loop3: detected capacity change from 0 to 1024 [ 490.082576][ T7892] EXT4-fs: Ignoring removed nobh option [ 490.092619][ T7892] EXT4-fs: Ignoring removed bh option [ 490.302046][ T7892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.349543][ T7902] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.533640][ T7904] overlayfs: conflicting lowerdir path [ 491.208523][ T7498] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.799607][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.447'. [ 493.637074][ T7935] warning: `syz.9.451' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 494.792035][ T4995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.803806][ T4995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.037414][ T3886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.047807][ T3886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.017203][ T7970] veth0_to_bridge: entered promiscuous mode [ 496.180929][ T7974] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 496.580246][ T7963] veth0_to_bridge: left promiscuous mode [ 497.588972][ T7996] netlink: 488 bytes leftover after parsing attributes in process `syz.0.469'. [ 498.324062][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 498.590742][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.8.474'. [ 498.600315][ T8016] netlink: 152 bytes leftover after parsing attributes in process `syz.8.474'. [ 498.693142][ T8016] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 500.414077][ T8044] loop9: detected capacity change from 0 to 512 [ 500.554603][ T8044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 500.930163][ T8044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 500.949123][ T8044] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.081821][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.7.489'. [ 502.419901][ T8080] netlink: 80 bytes leftover after parsing attributes in process `syz.7.494'. [ 502.825891][ T5822] block nbd0: Receive control failed (result -104) [ 503.036816][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 503.837176][ T8103] veth0_to_team: entered promiscuous mode [ 503.843208][ T8103] veth0_to_team: entered allmulticast mode [ 504.036682][ T8103] netlink: 40 bytes leftover after parsing attributes in process `syz.7.502'. [ 504.880077][ T6779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 505.566339][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.3.513'. [ 506.311689][ T8142] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 506.320937][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.331234][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.359248][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.367212][ T8142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.376216][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.384011][ T8142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.410790][ T8142] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 506.997046][ T8152] loop7: detected capacity change from 0 to 512 [ 507.041193][ T8152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.161436][ T8152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 507.175510][ T8152] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.186617][ T8173] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 508.197234][ T8173] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 509.600714][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 510.297989][ T8207] netlink: 'syz.3.536': attribute type 64 has an invalid length. [ 510.370790][ T8205] batadv0: entered promiscuous mode [ 510.376796][ T8205] vlan2: entered promiscuous mode [ 510.399937][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 511.581825][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 515.427719][ T8255] loop9: detected capacity change from 0 to 512 [ 515.547642][ T8255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 515.841607][ T8255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 515.854950][ T8255] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.212919][ T8217] Set syz1 is full, maxelem 65536 reached [ 519.487980][ T6779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 521.084822][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.706911][ T8326] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 521.753911][ T8326] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 523.037009][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 524.274122][ T8370] netlink: 104 bytes leftover after parsing attributes in process `syz.9.591'. [ 526.362379][ T8404] team_slave_0: entered promiscuous mode [ 526.368604][ T8404] team_slave_1: entered promiscuous mode [ 526.374811][ T8404] vlan3: entered promiscuous mode [ 526.380477][ T8404] team0: entered promiscuous mode [ 526.515702][ T8409] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 529.090776][ T8459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.624'. [ 529.335833][ T8459] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 529.449624][ T8459] macvlan2: entered promiscuous mode [ 529.455455][ T8459] macvlan2: entered allmulticast mode [ 529.463878][ T8459] bond1: entered promiscuous mode [ 529.469413][ T8459] bridge1: entered promiscuous mode [ 529.478406][ T8459] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.548839][ T8459] bond1: left promiscuous mode [ 529.554038][ T8459] bridge1: left promiscuous mode [ 529.808699][ T8473] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 530.970982][ T6910] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 531.163408][ T6910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.174237][ T6910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.287477][ T6910] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 531.297198][ T6910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 531.306671][ T6910] usb 1-1: SerialNumber: syz [ 531.623688][ T6910] usb 1-1: 0:2 : does not exist [ 531.747113][ T6910] usb 1-1: USB disconnect, device number 3 [ 535.546219][ T1546] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 535.835916][ T1546] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.847499][ T1546] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.910034][ T1546] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 535.919828][ T1546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 535.928389][ T1546] usb 4-1: SerialNumber: syz [ 536.246166][ T1546] usb 4-1: 0:2 : does not exist [ 536.365626][ T1546] usb 4-1: USB disconnect, device number 2 [ 536.420854][ T8573] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 536.857917][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.864886][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.596175][ T8621] Bluetooth: MGMT ver 1.23 [ 540.042847][ T8627] fuse: Unknown parameter 'user_id00000000000000000000' [ 540.273983][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.9.684'. [ 542.377905][ T8666] fuse: Unknown parameter 'user_id00000000000000000000' [ 542.979247][ T8674] netlink: 20 bytes leftover after parsing attributes in process `syz.9.700'. [ 543.260203][ T8673] siw: device registration error -23 [ 544.739392][ T8703] fuse: Unknown parameter 'user_id00000000000000000000' [ 545.153338][ T8710] netlink: 20 bytes leftover after parsing attributes in process `syz.7.715'. [ 545.580340][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.718'. [ 546.300445][ T8723] siw: device registration error -23 [ 547.260759][ T8743] fuse: Bad value for 'fd' [ 547.750631][ T8750] netlink: 20 bytes leftover after parsing attributes in process `syz.7.729'. [ 548.565236][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.733'. [ 548.817659][ T8765] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 549.091982][ T8761] macvlan2: entered promiscuous mode [ 549.097734][ T8761] macvlan2: entered allmulticast mode [ 549.104783][ T8761] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 550.366898][ T8784] fuse: Bad value for 'fd' [ 550.819056][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 552.033736][ T8815] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 552.760344][ T8826] fuse: Bad value for 'fd' [ 553.707235][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.762'. [ 554.485396][ T8856] netlink: 14 bytes leftover after parsing attributes in process `syz.8.766'. [ 554.546753][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.622408][ T8848] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 554.646193][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.664191][ T8856] bond0 (unregistering): Released all slaves [ 555.601126][ T8870] fuse: Unknown parameter '0x0000000000000003' [ 556.674485][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.776'. [ 557.519504][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.781'. [ 557.963082][ T8915] fuse: Unknown parameter '0x0000000000000003' [ 558.887552][ T8932] netlink: 20 bytes leftover after parsing attributes in process `syz.7.792'. [ 559.877556][ T8946] fuse: Unknown parameter '0x0000000000000003' [ 560.036079][ T8949] loop0: detected capacity change from 0 to 512 [ 560.075363][ T8949] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 560.118857][ T8951] loop9: detected capacity change from 0 to 512 [ 560.217446][ T8949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.318476][ T8951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.336031][ T8951] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 560.389092][ T8961] netlink: 22 bytes leftover after parsing attributes in process `syz.7.801'. [ 560.508398][ T8951] Quota error (device loop9): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 560.519501][ T8951] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 560.530117][ T8951] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.800: Failed to acquire dquot type 0 [ 560.961575][ T6779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.157602][ T30] audit: type=1800 audit(1752735067.020:7): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.799" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 561.261581][ T30] audit: type=1800 audit(1752735067.070:8): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.799" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 561.315889][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.7.806'. [ 561.493953][ T7622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.702538][ T1915] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 561.895428][ T1915] usb 10-1: Using ep0 maxpacket: 8 [ 562.107936][ T1915] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 562.117768][ T1915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.126450][ T1915] usb 10-1: Product: syz [ 562.130972][ T1915] usb 10-1: Manufacturer: syz [ 562.136039][ T1915] usb 10-1: SerialNumber: syz [ 562.463451][ T1915] usb 10-1: config 0 descriptor?? [ 562.966392][ T1915] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 563.153120][ T8995] loop7: detected capacity change from 0 to 128 [ 563.260407][ T8996] fuse: Unknown parameter '0x0000000000000003' [ 563.742241][ T8999] loop3: detected capacity change from 0 to 512 [ 563.830297][ T8999] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 564.471052][ T30] audit: type=1326 audit(1752735070.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.8.819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f657e18e929 code=0x0 [ 564.857404][ T9015] loop7: detected capacity change from 0 to 512 [ 565.049552][ T9015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.064016][ T9015] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.089277][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 565.214795][ T1915] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 565.286858][ T1915] usb 10-1: USB disconnect, device number 5 [ 565.624729][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.263646][ T9043] netlink: 'syz.3.826': attribute type 5 has an invalid length. [ 566.299796][ T9043] ip6erspan0: entered promiscuous mode [ 566.423318][ T9046] fuse: Unknown parameter '0x0000000000000003' [ 567.020699][ T9058] fuse: Bad value for 'fd' [ 567.359825][ T9061] loop0: detected capacity change from 0 to 512 [ 567.487206][ T9061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.916016][ T7622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.343728][ T9077] overlayfs: failed to clone lowerpath [ 568.505261][ T1546] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 568.683906][ T9082] loop2: detected capacity change from 0 to 7 [ 568.713267][ T9082] Dev loop2: unable to read RDB block 7 [ 568.719801][ T9082] loop2: unable to read partition table [ 568.746106][ T1546] usb 1-1: Using ep0 maxpacket: 8 [ 568.779151][ T1546] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.788897][ T1546] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.797908][ T1546] usb 1-1: Product: syz [ 568.802296][ T1546] usb 1-1: Manufacturer: syz [ 568.807454][ T1546] usb 1-1: SerialNumber: syz [ 568.825853][ T9082] loop2: partition table beyond EOD, truncated [ 568.836796][ T9082] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 568.850762][ T1546] usb 1-1: config 0 descriptor?? [ 569.132910][ T1546] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.749163][ T9092] fuse: Unknown parameter '0x0000000000000003' [ 571.078258][ T9113] overlayfs: failed to clone lowerpath [ 571.336822][ T1546] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 571.414647][ T1546] usb 1-1: USB disconnect, device number 4 [ 572.483531][ T9128] loop7: detected capacity change from 0 to 128 [ 572.532139][ T9129] fuse: Unknown parameter 'fd0x0000000000000003' [ 574.012978][ T9154] No control pipe specified [ 574.715995][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 575.038330][ T9170] fuse: Unknown parameter 'fd0x0000000000000003' [ 575.773075][ T9184] capability: warning: `syz.8.874' uses deprecated v2 capabilities in a way that may be insecure [ 576.473906][ T9195] No control pipe specified [ 576.518795][ T9195] overlayfs: failed to clone lowerpath [ 577.994171][ T9221] fuse: Unknown parameter 'fd0x0000000000000003' [ 578.591959][ T9223] loop9: detected capacity change from 0 to 1764 [ 579.517907][ T9240] No control pipe specified [ 579.567229][ T9240] overlayfs: failed to clone lowerpath [ 582.081753][ T9282] autofs: Bad value for 'fd' [ 582.736045][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 582.955483][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 583.010361][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 583.022642][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.100287][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 583.110217][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.118834][ T9] usb 4-1: Product: syz [ 583.123393][ T9] usb 4-1: Manufacturer: syz [ 583.128574][ T9] usb 4-1: SerialNumber: syz [ 583.243876][ T9] usb 4-1: config 0 descriptor?? [ 583.304642][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 583.314411][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 583.908635][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 583.945873][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 584.404936][ T9302] loop9: detected capacity change from 0 to 4096 [ 584.444598][ T9302] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.508412][ T9302] EXT4-fs (loop9): Test dummy encryption mode enabled [ 584.595678][ T9] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 584.611524][ T9] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 584.698650][ T9302] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.783149][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 584.825670][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 584.864659][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 584.914058][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 584.957103][ T9] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 584.992222][ T9] usb 4-1: USB disconnect, device number 3 [ 585.255128][ T30] audit: type=1800 audit(1752735091.120:10): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.909" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 585.571656][ T6779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.888381][ T9342] autofs: Bad value for 'fd' [ 588.795715][ T9359] atomic_op ffff88812806c128 conn xmit_atomic 0000000000000000 [ 589.008513][ T1915] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 589.646120][ T1915] usb 10-1: Using ep0 maxpacket: 16 [ 589.691204][ T9370] loop7: detected capacity change from 0 to 1024 [ 589.729214][ T1915] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 589.741472][ T1915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 589.870975][ T1915] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 589.882120][ T1915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.890820][ T1915] usb 10-1: Product: syz [ 589.895411][ T1915] usb 10-1: Manufacturer: syz [ 589.900365][ T1915] usb 10-1: SerialNumber: syz [ 589.911050][ T1915] usb 10-1: config 0 descriptor?? [ 589.942526][ T1915] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 589.956163][ T1915] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 590.009134][ T9370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.022298][ T9370] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.095854][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 590.325326][ T9370] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.929: bg 0: block 393: padding at end of block bitmap is not set [ 590.401303][ T9379] autofs: Bad value for 'fd' [ 590.404863][ T9370] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 590.417160][ T9379] overlayfs: failed to clone lowerpath [ 590.419022][ T9370] EXT4-fs (loop7): This should not happen!! Data will be lost [ 590.419022][ T9370] [ 590.605844][ T1915] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 590.615951][ T1915] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 590.779405][ T9383] loop0: detected capacity change from 0 to 512 [ 590.872683][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.989463][ T9383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.002908][ T9383] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 591.275442][ T1915] em28xx 10-1:0.0: AC97 command still being executed: not handled properly! [ 591.284615][ T1915] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 591.478143][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 591.503888][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 591.537471][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 591.588972][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 591.622092][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 591.695808][ T1915] usb 10-1: USB disconnect, device number 6 [ 591.710698][ T7622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.098392][ T9398] atomic_op ffff88812806c928 conn xmit_atomic 0000000000000000 [ 592.816848][ T9411] autofs: Unknown parameter '0x0000000000000000' [ 593.897399][ T9420] loop9: detected capacity change from 0 to 1024 [ 594.042922][ T9420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.055906][ T9420] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.220294][ T9420] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.947: bg 0: block 393: padding at end of block bitmap is not set [ 594.303194][ T9420] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 117 [ 594.316587][ T9420] EXT4-fs (loop9): This should not happen!! Data will be lost [ 594.316587][ T9420] [ 594.804652][ T6779] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.569748][ T1915] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 595.775767][ T1915] usb 10-1: Using ep0 maxpacket: 16 [ 595.804111][ T1915] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 595.816673][ T1915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 595.946645][ T1915] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 595.956363][ T1915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.964726][ T1915] usb 10-1: Product: syz [ 595.974949][ T1915] usb 10-1: Manufacturer: syz [ 595.980162][ T1915] usb 10-1: SerialNumber: syz [ 596.057390][ T9450] autofs: Unknown parameter '0x0000000000000000' [ 596.113282][ T1915] usb 10-1: config 0 descriptor?? [ 596.164195][ T1915] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 596.180207][ T1915] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 596.802038][ T1915] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 596.823428][ T1915] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 596.929553][ T9457] 9pnet_fd: Insufficient options for proto=fd [ 597.485135][ T1915] em28xx 10-1:0.0: AC97 command still being executed: not handled properly! [ 597.494387][ T1915] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 597.668427][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 597.710661][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 597.747714][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 597.780467][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 597.817022][ T1915] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 597.855573][ T1915] usb 10-1: USB disconnect, device number 7 [ 598.328737][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.335648][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.617347][ T9489] autofs: Unknown parameter '0x0000000000000000' [ 601.781247][ T9519] loop0: detected capacity change from 0 to 512 [ 601.884903][ T9519] EXT4-fs: Ignoring removed i_version option [ 601.891834][ T9519] EXT4-fs: Ignoring removed nobh option [ 601.935712][ T1915] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 601.951238][ T9519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 602.117053][ T1915] usb 10-1: Using ep0 maxpacket: 8 [ 602.117809][ T9519] EXT4-fs (loop0): 1 truncate cleaned up [ 602.130572][ T9519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.140501][ T1915] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 602.156782][ T1915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.165448][ T1915] usb 10-1: Product: syz [ 602.169949][ T1915] usb 10-1: Manufacturer: syz [ 602.174881][ T1915] usb 10-1: SerialNumber: syz [ 602.191313][ T1915] usb 10-1: config 0 descriptor?? [ 602.485681][ T1915] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.267455][ T7622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.973833][ T1915] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 605.057566][ T1915] usb 10-1: USB disconnect, device number 8 [ 607.726986][ T9603] autofs: Unknown parameter '0x0000000000000000' [ 608.684564][ T9619] nbd: must specify at least one socket [ 610.572598][ T9644] autofs: Unknown parameter 'fd0x0000000000000000' [ 612.883132][ T9659] nbd: must specify at least one socket [ 616.166496][ T9679] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1033'. [ 617.373921][ T9688] autofs: Unknown parameter 'fd0x0000000000000000' [ 617.458820][ T9688] overlayfs: failed to clone lowerpath [ 624.761181][ T9723] autofs: Unknown parameter 'fd0x0000000000000000' [ 632.906513][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.922494][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.955941][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 632.972941][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 632.984260][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 635.521724][ T5824] Bluetooth: hci2: command tx timeout [ 637.582534][ T9767] chnl_net:caif_netlink_parms(): no params data found [ 637.615248][ T5824] Bluetooth: hci2: command tx timeout [ 639.706968][ T5824] Bluetooth: hci2: command tx timeout [ 641.865128][ T5824] Bluetooth: hci2: command tx timeout [ 642.238410][ T9795] loop7: detected capacity change from 0 to 1024 [ 642.716950][ T9795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.844697][ T9795] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 642.857610][ T9795] EXT4-fs (loop7): This should not happen!! Data will be lost [ 642.857610][ T9795] [ 642.872957][ T9795] EXT4-fs (loop7): Total free blocks count 0 [ 642.880844][ T9795] EXT4-fs (loop7): Free/Dirty block details [ 642.887133][ T9795] EXT4-fs (loop7): free_blocks=0 [ 642.892307][ T9795] EXT4-fs (loop7): dirty_blocks=0 [ 642.897712][ T9795] EXT4-fs (loop7): Block reservation details [ 642.903923][ T9795] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 644.347717][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 644.385086][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 644.395671][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 644.431734][ T5822] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 644.443562][ T5822] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 646.990042][ T5822] Bluetooth: hci6: command tx timeout [ 649.025950][ T9767] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.033579][ T9767] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.041689][ T9767] bridge_slave_0: entered allmulticast mode [ 649.051455][ T9767] bridge_slave_0: entered promiscuous mode [ 649.177796][ T5824] Bluetooth: hci6: command tx timeout [ 649.573935][ T9767] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.581964][ T9767] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.590388][ T9767] bridge_slave_1: entered allmulticast mode [ 649.600503][ T9767] bridge_slave_1: entered promiscuous mode [ 650.826837][ T9767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.871706][ T9767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.147502][ T6631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.204730][ T5824] Bluetooth: hci6: command tx timeout [ 651.621862][ T9767] team0: Port device team_slave_0 added [ 651.934309][ T9767] team0: Port device team_slave_1 added [ 652.149947][ T4140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.260057][ T9799] chnl_net:caif_netlink_parms(): no params data found [ 652.830997][ T4140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.071280][ T4140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.157766][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.165323][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.192218][ T9767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.321263][ T5824] Bluetooth: hci6: command tx timeout [ 653.420937][ T4140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.511497][ T9767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.524431][ T9767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.552698][ T9767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.006221][ T9767] hsr_slave_0: entered promiscuous mode [ 655.016986][ T9767] hsr_slave_1: entered promiscuous mode [ 655.026080][ T9767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.033896][ T9767] Cannot create hsr debugfs directory [ 655.106184][ T4140] bridge_slave_1: left allmulticast mode [ 655.112126][ T4140] bridge_slave_1: left promiscuous mode [ 655.119205][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.150527][ T9857] siw: device registration error -23 [ 655.293521][ T4140] bridge_slave_0: left allmulticast mode [ 655.299672][ T4140] bridge_slave_0: left promiscuous mode [ 655.306704][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.757130][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.929191][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.030126][ T4140] bond0 (unregistering): Released all slaves [ 658.901563][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.909384][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.917387][ T9799] bridge_slave_0: entered allmulticast mode [ 658.927575][ T9799] bridge_slave_0: entered promiscuous mode [ 659.215661][ T4140] hsr_slave_0: left promiscuous mode [ 659.296484][ T4140] hsr_slave_1: left promiscuous mode [ 659.305310][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.313082][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.562661][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.571162][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.727642][ T4140] veth1_vlan: left promiscuous mode [ 659.733798][ T4140] veth0_vlan: left promiscuous mode [ 659.752773][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.760091][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 662.319040][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 662.492013][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 662.816472][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.824120][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.836451][ T9799] bridge_slave_1: entered allmulticast mode [ 662.847646][ T9799] bridge_slave_1: entered promiscuous mode [ 664.039927][ T9799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.228083][ T9799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.552759][ T9799] team0: Port device team_slave_0 added [ 665.843434][ T9799] team0: Port device team_slave_1 added [ 666.319001][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.327666][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.354602][ T9799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.613491][ T9799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.621131][ T9799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.651689][ T9799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.396375][ T9799] hsr_slave_0: entered promiscuous mode [ 667.406758][ T9799] hsr_slave_1: entered promiscuous mode [ 667.415634][ T9799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.423450][ T9799] Cannot create hsr debugfs directory [ 671.555393][ T9767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 674.676976][ T9767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.809556][ T9767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.941735][ T9767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.390674][ T9799] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 677.564107][ T9799] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 677.675573][ T9767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.699458][ T9799] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 677.821624][ T9799] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 678.101696][ T9767] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.235488][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.243077][ T3886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.413591][ T3886] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.421251][ T3886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.849707][ T9799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.109967][ T9799] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.880649][ T4140] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.888432][ T4140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.905129][ T4140] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.912710][ T4140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.263245][ T9799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.560604][ T5789] ===================================================== [ 696.568020][ T5789] BUG: KMSAN: uninit-value in crc32_be_base+0x215/0x270 [ 696.575415][ T5789] crc32_be_base+0x215/0x270 [ 696.580258][ T5789] crc32_be_arch+0x3f/0x50 [ 696.585069][ T5789] sw842_decompress+0x15c6/0x1780 [ 696.590346][ T5789] crypto842_sdecompress+0x46/0x60 [ 696.595888][ T5789] scomp_acomp_comp_decomp+0xa46/0x1120 [ 696.601630][ T5789] scomp_acomp_decompress+0x30/0x40 [ 696.607261][ T5789] crypto_acomp_decompress+0x5b1/0xe80 [ 696.613032][ T5789] zswap_decompress+0x510/0xea0 [ 696.618214][ T5789] zswap_load+0x262/0x570 [ 696.622757][ T5789] swap_read_folio+0x6ac/0x3010 [ 696.627945][ T5789] swap_cluster_readahead+0xa82/0xb20 [ 696.633561][ T5789] swapin_readahead+0x1d9/0x15b0 [ 696.638865][ T5789] do_swap_page+0xa39/0x9df0 [ 696.643706][ T5789] handle_mm_fault+0x4276/0xe5e0 [ 696.649031][ T5789] do_user_addr_fault+0x177d/0x2560 [ 696.654545][ T5789] exc_page_fault+0x68/0xb0 [ 696.659425][ T5789] asm_exc_page_fault+0x2b/0x30 [ 696.664488][ T5789] [ 696.667062][ T5789] Uninit was created at: [ 696.671647][ T5789] __alloc_frozen_pages_noprof+0x689/0xf00 [ 696.677846][ T5789] alloc_pages_mpol+0x328/0x860 [ 696.682939][ T5789] folio_alloc_mpol_noprof+0x56/0x1d0 [ 696.688690][ T5789] __read_swap_cache_async+0x2a7/0x980 [ 696.694382][ T5789] swap_cluster_readahead+0x9ff/0xb20 [ 696.700117][ T5789] swapin_readahead+0x1d9/0x15b0 [ 696.705373][ T5789] do_swap_page+0xa39/0x9df0 [ 696.710194][ T5789] handle_mm_fault+0x4276/0xe5e0 [ 696.715646][ T5789] do_user_addr_fault+0x177d/0x2560 [ 696.721043][ T5789] exc_page_fault+0x68/0xb0 [ 696.725864][ T5789] asm_exc_page_fault+0x2b/0x30 [ 696.730920][ T5789] [ 696.733488][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(none) [ 696.746024][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.756399][ T5789] ===================================================== [ 696.763471][ T5789] Disabling lock debugging due to kernel taint [ 696.769910][ T5789] Kernel panic - not syncing: kmsan.panic set ... [ 696.776521][ T5789] CPU: 1 UID: 0 PID: 5789 Comm: syz-executor Tainted: G B 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(none) [ 696.790522][ T5789] Tainted: [B]=BAD_PAGE [ 696.794812][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.805043][ T5789] Call Trace: [ 696.808472][ T5789] [ 696.811551][ T5789] __dump_stack+0x26/0x30 [ 696.816129][ T5789] dump_stack_lvl+0x53/0x270 [ 696.820926][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 696.826989][ T5789] dump_stack+0x1e/0x25 [ 696.831383][ T5789] panic+0x4bd/0xd50 [ 696.835582][ T5789] kmsan_report+0x31c/0x320 [ 696.840359][ T5789] ? scomp_acomp_comp_decomp+0xa46/0x1120 [ 696.846300][ T5789] ? __msan_warning+0x1b/0x30 [ 696.851219][ T5789] ? crc32_be_base+0x215/0x270 [ 696.856218][ T5789] ? crc32_be_arch+0x3f/0x50 [ 696.861071][ T5789] ? sw842_decompress+0x15c6/0x1780 [ 696.866528][ T5789] ? crypto842_sdecompress+0x46/0x60 [ 696.872046][ T5789] ? scomp_acomp_comp_decomp+0xa46/0x1120 [ 696.877994][ T5789] ? scomp_acomp_decompress+0x30/0x40 [ 696.883685][ T5789] ? crypto_acomp_decompress+0x5b1/0xe80 [ 696.889587][ T5789] ? zswap_decompress+0x510/0xea0 [ 696.894834][ T5789] ? zswap_load+0x262/0x570 [ 696.899541][ T5789] ? swap_read_folio+0x6ac/0x3010 [ 696.904816][ T5789] ? swap_cluster_readahead+0xa82/0xb20 [ 696.910612][ T5789] ? swapin_readahead+0x1d9/0x15b0 [ 696.915977][ T5789] ? do_swap_page+0xa39/0x9df0 [ 696.920983][ T5789] ? handle_mm_fault+0x4276/0xe5e0 [ 696.926430][ T5789] ? do_user_addr_fault+0x177d/0x2560 [ 696.932042][ T5789] ? exc_page_fault+0x68/0xb0 [ 696.936979][ T5789] ? asm_exc_page_fault+0x2b/0x30 [ 696.942232][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 696.948332][ T5789] ? __do_index+0x21/0x520 [ 696.953007][ T5789] ? filter_irq_stacks+0x49/0x190 [ 696.958240][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 696.963589][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 696.969658][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 696.975007][ T5789] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 696.981499][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 696.986860][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 696.992941][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 696.998282][ T5789] __msan_warning+0x1b/0x30 [ 697.002973][ T5789] crc32_be_base+0x215/0x270 [ 697.007871][ T5789] crc32_be_arch+0x3f/0x50 [ 697.012519][ T5789] sw842_decompress+0x15c6/0x1780 [ 697.017861][ T5789] ? kmsan_report+0x303/0x320 [ 697.022775][ T5789] crypto842_sdecompress+0x46/0x60 [ 697.028113][ T5789] ? __pfx_crypto842_sdecompress+0x10/0x10 [ 697.034170][ T5789] scomp_acomp_comp_decomp+0xa46/0x1120 [ 697.039971][ T5789] scomp_acomp_decompress+0x30/0x40 [ 697.045365][ T5789] ? __pfx_scomp_acomp_decompress+0x10/0x10 [ 697.051473][ T5789] crypto_acomp_decompress+0x5b1/0xe80 [ 697.057292][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.062645][ T5789] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 697.069200][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.074550][ T5789] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 697.081145][ T5789] zswap_decompress+0x510/0xea0 [ 697.086234][ T5789] zswap_load+0x262/0x570 [ 697.090743][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 697.096811][ T5789] swap_read_folio+0x6ac/0x3010 [ 697.101876][ T5789] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 697.108180][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.113509][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 697.119694][ T5789] swap_cluster_readahead+0xa82/0xb20 [ 697.125473][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.130829][ T5789] ? kmsan_report+0x300/0x320 [ 697.135748][ T5789] swapin_readahead+0x1d9/0x15b0 [ 697.140899][ T5789] ? unmap_mapping_range+0x131/0x150 [ 697.146417][ T5789] ? filter_irq_stacks+0x49/0x190 [ 697.151660][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.157000][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.162312][ T5789] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 697.168337][ T5789] do_swap_page+0xa39/0x9df0 [ 697.173154][ T5789] ? __pfx_default_wake_function+0x10/0x10 [ 697.179175][ T5789] ? stack_depot_save_flags+0x35/0x7b0 [ 697.184824][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.190127][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.195438][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.200754][ T5789] ? do_user_addr_fault+0x177d/0x2560 [ 697.206301][ T5789] ? filter_irq_stacks+0x13f/0x190 [ 697.211650][ T5789] ? stack_depot_save_flags+0x35/0x7b0 [ 697.217372][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.222692][ T5789] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 697.229264][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.234629][ T5789] handle_mm_fault+0x4276/0xe5e0 [ 697.239856][ T5789] ? lock_vma_under_rcu+0x6c1/0x8d0 [ 697.245282][ T5789] do_user_addr_fault+0x177d/0x2560 [ 697.250684][ T5789] ? kmsan_get_metadata+0xfb/0x160 [ 697.256061][ T5789] exc_page_fault+0x68/0xb0 [ 697.260792][ T5789] asm_exc_page_fault+0x2b/0x30 [ 697.265886][ T5789] RIP: 0033:0x7f1a61556609 [ 697.270475][ T5789] Code: 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 48 89 f8 48 83 fa 20 72 37 fe 6f 06 48 83 fa 40 0f 87 b9 00 00 00 c5 fe 6f 4c 16 e0 c5 fe [ 697.290328][ T5789] RSP: 002b:00007ffef14ec718 EFLAGS: 00010206 [ 697.296707][ T5789] RAX: 00007f1a5ba00000 RBX: 000055557e4acd20 RCX: 0000000000000004 [ 697.304957][ T5789] RDX: 00000000000001ae RSI: 000055557e4b66c0 RDI: 00007f1a5ba00000 [ 697.313099][ T5789] RBP: 000055557e4b7dc0 R08: 0000000000000007 R09: 000055557e4bb530 [ 697.321233][ T5789] R10: 11a39ae2615f9f72 R11: 0000000000000202 R12: 0000000000000001 [ 697.329357][ T5789] R13: 0000000000000010 R14: 00007ffef14ec730 R15: 0000000000000000 [ 697.337523][ T5789] [ 697.341159][ T5789] Kernel Offset: disabled [ 697.345694][ T5789] Rebooting in 86400 seconds..