last executing test programs: 2m41.823930012s ago: executing program 1 (id=124): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) unshare(0x22020600) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) 2m38.202023827s ago: executing program 1 (id=130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x8e14, 0x8ffff) 2m36.12728762s ago: executing program 1 (id=137): r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x310) 2m35.167735484s ago: executing program 1 (id=138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) 2m34.245569155s ago: executing program 1 (id=143): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80402, 0x0) 2m32.102926115s ago: executing program 1 (id=147): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m23.085461329s ago: executing program 2 (id=171): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x400000, 0x20) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r4, r4, 0x0, 0x1000000000007) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, 0x0, 0x0) close(r6) 2m17.625457344s ago: executing program 2 (id=189): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$loop(&(0x7f0000000140), 0x7fffffffffffffff, 0x101800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00), 0x0, 0x40d0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0) 2m16.696129696s ago: executing program 32 (id=147): mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 2m15.396364323s ago: executing program 2 (id=192): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000380)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4456, &(0x7f000000c300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1) shmget$private(0x0, 0x1000, 0x200, &(0x7f00008f0000/0x1000)=nil) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2m6.713314705s ago: executing program 2 (id=201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2m6.712694105s ago: executing program 2 (id=204): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80402, 0x0) 2m6.708312695s ago: executing program 0 (id=206): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x0, 0x0, 0x0}) 2m6.704189415s ago: executing program 2 (id=207): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000240)={0x5, 0x0, 0x0, 0xe0e0e0e0}) 2m6.160214459s ago: executing program 0 (id=211): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m5.096632943s ago: executing program 0 (id=212): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = fsopen(0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000, 0x0, r2}) r3 = fsmount(r1, 0x0, 0x1) fchdir(r3) open(&(0x7f0000000100)='.\x00', 0x591002, 0x40f) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) 2m2.754377613s ago: executing program 0 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2m2.17355788s ago: executing program 0 (id=217): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80402, 0x0) 2m1.25558125s ago: executing program 0 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) 1m51.124582503s ago: executing program 33 (id=207): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x109000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000240)={0x5, 0x0, 0x0, 0xe0e0e0e0}) 1m45.688196306s ago: executing program 34 (id=219): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) 32.73754971s ago: executing program 5 (id=396): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 29.353855142s ago: executing program 5 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 27.32951976s ago: executing program 5 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.332082718s ago: executing program 5 (id=419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0x0, @val={0x8c, 0x10, {0xb04, "8101c39cce7e", @short="3961bc13d6679f1e"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28004800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 25.734299837s ago: executing program 5 (id=421): r0 = socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 25.167732262s ago: executing program 5 (id=422): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xead25000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) 11.585555914s ago: executing program 7 (id=447): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfd85) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 9.516591747s ago: executing program 35 (id=422): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xead25000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = epoll_create1(0x0) r2 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) 9.341501214s ago: executing program 4 (id=450): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRESDEC=r5, @ANYRES16=r2, @ANYRES16, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=r1], 0x5, 0x0, &(0x7f0000000000)) 8.905512167s ago: executing program 4 (id=451): socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x5) socket$inet6(0x10, 0x80000, 0x3) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x8) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 8.694024098s ago: executing program 4 (id=452): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 7.684260077s ago: executing program 4 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioperm(0xc, 0x8, 0x24005) ioctl$KVM_RUN(r2, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.570444228s ago: executing program 3 (id=454): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1218001, &(0x7f0000000080)={[{@creator={'creator', 0x3d, "fafe25f4"}}, {@type={'type', 0x3d, "5ed07e02"}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@codepage={'codepage', 0x3d, 'iso8859-14'}}]}, 0x1, 0x342, &(0x7f0000000100)="$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") getdents64(0xffffffffffffffff, &(0x7f0000001280)=""/4089, 0xff9) 7.353579429s ago: executing program 6 (id=455): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x46, r7}) 7.336269971s ago: executing program 3 (id=456): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r3) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 6.184548314s ago: executing program 6 (id=457): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x400000, 0x20) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r4, r4, 0x0, 0x1000000000007) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, 0x0, 0x0) close(r6) 6.097488582s ago: executing program 4 (id=458): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)={[{@fat=@errors_remount}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@numtail}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@errors_remount}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@fat=@tz_utc}, {@numtail}, {@shortname_mixed}, {@fat=@errors_remount}, {@numtail}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlateno}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@shortname_win95}, {@shortname_winnt}, {@numtail}]}, 0x6, 0x2d1, &(0x7f0000000740)="$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") gettid() clock_gettime(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) 5.944053697s ago: executing program 7 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x44054}, 0x44000011) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) 5.018978508s ago: executing program 6 (id=461): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2}, 0x3c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "c80277", 0xc, 0x11, 0xff, @mcast1, @mcast1, {[], {0x4e20, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x0, @void}}}}}}}}, 0x0) 4.909457559s ago: executing program 7 (id=462): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.760404104s ago: executing program 7 (id=463): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0x59) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xf, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 4.702238009s ago: executing program 6 (id=464): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfe, 0x211, &(0x7f0000000480)="$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") mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 4.429425746s ago: executing program 3 (id=465): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') 3.67547368s ago: executing program 7 (id=466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x3, 0xff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x6, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000040)={&(0x7f0000000200)=[0x1, 0x297, 0x5, 0x1, 0x2, 0x2, 0x2, 0x1, 0x20000, 0x8, 0x42, 0xfffffff3, 0x8001, 0x7, 0x1000, 0x1, 0x71, 0x4, 0x4, 0x3, 0x0, 0x9, 0x7, 0x9, 0x1, 0x9, 0x6, 0x10000, 0x3, 0x400, 0x4, 0x8, 0x4, 0x0, 0xa, 0x0, 0x6, 0x5, 0x5, 0x5, 0x2, 0x6, 0x0, 0x9, 0x7118df42, 0x1, 0x7eaa, 0x101, 0x5, 0x0, 0xf6, 0x8, 0x5, 0x80000001, 0x3, 0x1, 0x0, 0x6, 0x0, 0xfffffff8, 0xf, 0x0, 0x8cb, 0xfffffff8, 0xc, 0x7fff, 0x1, 0x100, 0x5, 0x2, 0x15bc146c, 0xffffffff, 0x5, 0x9, 0xff, 0x10001, 0x2, 0x10001, 0x6, 0x6, 0x10, 0xa0, 0x0, 0x7, 0xba8, 0x4, 0x7, 0x1, 0x9, 0xb, 0x4, 0xb, 0x6, 0x3, 0x4, 0xfffffff7, 0x5, 0x2, 0xfffffffd, 0x8e4, 0x1e69, 0x1, 0x6, 0x6, 0x3, 0x2, 0x278, 0x8, 0x3, 0x76e, 0x9, 0x10001, 0x805, 0x2a, 0x2, 0x2, 0x3, 0x7fffffff, 0x1, 0x1, 0x8, 0xd, 0xf26a, 0x7, 0xbb1, 0x1, 0x5, 0x10, 0x9, 0x1, 0x200, 0x6, 0x401, 0x4, 0x5, 0x2, 0xd2, 0x2, 0x1, 0x9, 0x3, 0x7, 0x9, 0x7, 0x0, 0xfffff001, 0xfffffffc, 0x7, 0x48e, 0x7, 0x3, 0x3, 0x7fffffff, 0x80000000, 0x1, 0xb05, 0x1, 0x9, 0xffff, 0x8, 0x4, 0x833, 0x7, 0x8, 0x3, 0x6239, 0x1000, 0xb0c5, 0x31, 0x3, 0x0, 0x3, 0xf, 0x6, 0x3, 0x326, 0x2, 0xf65, 0x4, 0x9, 0x101, 0x8001, 0x0, 0x6, 0x6, 0x9, 0x400, 0x1, 0xb2, 0x0, 0x2, 0x9, 0x3, 0x1d34c96c, 0x800, 0xec, 0xcab0, 0x10, 0x4, 0x7, 0x1, 0x0, 0x2, 0x1, 0x2, 0x1, 0x9, 0x6, 0x9, 0x6, 0x7, 0x8166, 0x6, 0x8, 0x5, 0x1, 0x9, 0x0, 0x7ff800, 0x3, 0x7, 0x1, 0x6, 0x6, 0x6, 0x400, 0x5, 0x9, 0x7, 0xc, 0xd, 0x9c36, 0xff, 0x7, 0x2, 0x3, 0xf5, 0x1, 0x8, 0x0, 0x8000, 0x7, 0x0, 0x2, 0x1, 0x2, 0x8, 0x3, 0x1, 0xb, 0x8, 0x7, 0x7, 0x1, 0x0, 0x1, 0x26b1, 0x7fff, 0x1, 0x9, 0x6, 0x6, 0x7ff, 0x0, 0x6, 0x3, 0x3ff, 0x5, 0x9, 0x968, 0x7, 0x10000, 0x7, 0x246, 0x3, 0x1, 0x8, 0x2, 0xfff, 0x0, 0x3c, 0xfffffff7, 0x4, 0x10, 0x3d4f, 0x6, 0x7, 0x4, 0x5, 0x1, 0x7, 0x2, 0x7, 0x0, 0x4, 0x9, 0xf2, 0x1, 0x800, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x7, 0xffffbae4, 0xff, 0xffff, 0x7, 0x44a, 0xe, 0x7fff, 0x400, 0x5a, 0x8, 0x9, 0xf3b, 0x8d, 0x1000, 0x9, 0x5, 0xffffffff, 0x10001, 0x2, 0x7, 0x8, 0x2, 0x7f, 0x2, 0x10001, 0x9, 0x81, 0x82ea, 0x7, 0x347, 0x0, 0x6, 0xffffe93d, 0x0, 0x1, 0x1, 0x100, 0x400, 0x8, 0xf6, 0xffffffff, 0x1, 0x9, 0x4, 0x3, 0x8, 0x9, 0x7, 0x0, 0x7f, 0x5, 0xff, 0xe5f, 0x37e9252e, 0xfff, 0x7, 0x6, 0x400, 0x747, 0xfffff2d8, 0x5, 0xffffffff, 0xf, 0x74de, 0x1, 0xdc, 0xfff, 0x80, 0x7f, 0x8, 0x9, 0x31a9, 0xc4, 0x80000001, 0x80000001, 0xa6, 0x1, 0xf, 0x19, 0x3, 0x3, 0x2, 0x0, 0x6, 0x9, 0x3, 0x3, 0x5b, 0x0, 0x2, 0x0, 0x4e, 0x0, 0x80000001, 0x3, 0x1a3, 0x4, 0x100, 0x0, 0x8, 0xa, 0x3, 0xfffffff7, 0x2, 0x6, 0x5, 0x2, 0xe, 0x3, 0x8, 0x10000, 0x18baace1, 0x6, 0xff, 0x5, 0x90000000, 0x80000000, 0x7f, 0x0, 0xffffffff, 0xffff0001, 0xfffffff7, 0x80, 0x7, 0x6, 0x7ff, 0xffffff4a, 0x0, 0x1, 0x6, 0x7fff, 0x2670, 0x7, 0x44, 0x7, 0x0, 0x8, 0x2, 0x0, 0x5, 0x2, 0x1, 0xd, 0x140, 0x9, 0x1, 0x4, 0x2, 0x5, 0xd, 0x9, 0x8, 0xa, 0x70000, 0x80, 0xff, 0xfffffff7, 0x2, 0x7, 0x200, 0x33, 0xe, 0x101, 0xffff, 0x29, 0xb226, 0xffff0001, 0x7ff, 0x7, 0x4, 0x8, 0x800, 0xf292, 0x2, 0x474, 0x2, 0x2, 0x6, 0xdcd, 0x8, 0x7, 0x4, 0x1, 0xb2c0, 0x1, 0x9, 0x7, 0x3ff, 0x4, 0x7, 0x6, 0x1, 0xa7, 0x70c, 0x1, 0x8, 0x7f, 0x6, 0x6, 0x3, 0x2, 0x4, 0x5, 0x6, 0x7, 0x27400000, 0x10, 0x7, 0xa1, 0x3, 0xe, 0x80, 0x2d1, 0x7, 0xfffffff8, 0x5, 0xde, 0x64, 0x4, 0x0, 0x9, 0x1, 0x8, 0x3, 0x80, 0x7, 0x5, 0x7fffffff, 0x8, 0x7f, 0x7, 0x0, 0x1, 0x2, 0x8, 0x447, 0x0, 0x5d08, 0x4, 0x401, 0x2, 0x97, 0x6, 0x401, 0x5, 0xa, 0x10000, 0xe, 0x0, 0x7, 0x101, 0x2, 0x1ff, 0x9, 0x6, 0x400, 0x5, 0x3ff, 0x10000, 0x7, 0xb, 0x1, 0xfffffffb, 0x27c0, 0x5, 0x10001, 0x7, 0x7, 0x6, 0x5, 0x1, 0x1, 0x1, 0xd, 0x3, 0x7fff, 0xbf3, 0x7fffffff, 0x401, 0x7, 0x4, 0x2, 0x9, 0x8, 0x80, 0x0, 0x1, 0x8, 0x3, 0x5, 0x7fff, 0x2, 0x5, 0xfffff000, 0x4, 0x4c, 0x7, 0xc, 0x8001, 0x1caf795d, 0x7, 0x5, 0x8, 0x0, 0x3, 0x3, 0xfff, 0x8001, 0x5cea, 0x987, 0x83fb, 0x715, 0x5, 0x7, 0x9, 0xffff, 0x8d, 0x1ff, 0x7fff, 0x1, 0x9, 0x2, 0x100, 0x48, 0x9, 0x6, 0x8, 0x4, 0x1, 0x7, 0x2d59, 0x1, 0x7, 0xfffffff7, 0x5, 0x5, 0x6, 0x7, 0x4, 0x5, 0x109, 0x7f, 0x7, 0x5, 0x10, 0x7, 0x2, 0xdbee, 0x6, 0x0, 0x1, 0xc, 0xffffffff, 0x1, 0xef12, 0x2, 0x7fff, 0x2b, 0x4, 0x2d0, 0x3, 0x9, 0x3ff, 0x9, 0x1000, 0x0, 0x1, 0x1c000000, 0x400, 0x80000001, 0xf, 0x9, 0x4, 0x4d9fa7bb, 0x1ff, 0x3629, 0x1, 0xf6, 0xffff, 0x68, 0x1, 0xffff, 0x7ff, 0x7, 0x4, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x0, 0x7, 0x5, 0x0, 0x80000000, 0x10001, 0x9, 0xffff0ce4, 0x4, 0x3, 0xc, 0x8, 0xa4, 0x7e30eceb, 0x2, 0x94, 0x0, 0x7, 0x5, 0x1, 0x9, 0x3, 0xffffffff, 0x1f3, 0x0, 0x7, 0x80000001, 0xd6, 0x7f, 0xfffffffd, 0xfe, 0x10001, 0x401, 0xb51, 0x3, 0x3, 0x2, 0x7a, 0xfffffffc, 0x9, 0x8, 0x66b6, 0x200, 0x7fffffff, 0x7b, 0x1, 0xf, 0x6, 0x4, 0x10000, 0x1, 0x4, 0x5, 0x4238, 0x7, 0x2, 0x80, 0xff, 0x3, 0x3, 0x7c9, 0x2, 0x0, 0xffff8000, 0x1, 0x40, 0x1, 0xfffffffd, 0xec0c, 0x4, 0x9, 0x4, 0x5, 0xffffffff, 0xe, 0x7fff, 0x401, 0x800, 0x4, 0x10001, 0x9b86, 0x3, 0x7fffffff, 0xa046, 0x5, 0x4, 0x3ff, 0xff, 0x7, 0x40, 0x2, 0x6, 0x5, 0xfffffff8, 0x2de, 0x1, 0x2, 0x6, 0xa, 0x3, 0x2, 0xffffff00, 0x2, 0x10001, 0x6, 0x4c9d, 0xf5ca, 0x7fffffff, 0xf5c, 0x2, 0x7, 0xe, 0x0, 0x2, 0x9, 0x0, 0x2, 0x9, 0x3, 0x56, 0x9, 0x5, 0x7, 0x3ff, 0x4, 0xf7, 0x28, 0xfffffff9, 0x2, 0xff, 0x7205, 0x2, 0x3, 0x6, 0x2, 0x9, 0x8, 0x7, 0x7, 0xb0f6, 0x7ff, 0x2, 0x9, 0x800, 0x0, 0x4, 0x4, 0x0, 0x4, 0x6, 0x40, 0xfffffff8, 0xa2, 0x0, 0xa66, 0x4, 0xfffffffd, 0x6, 0x9, 0x8, 0x4e, 0x3, 0x0, 0xfffffff8, 0x3, 0x8001, 0x3, 0x542, 0xb20, 0x3, 0xcd3, 0x9, 0x5, 0x4, 0x3, 0x80000000, 0x1, 0x7f, 0x10001, 0x7, 0x7f, 0x20000000, 0x1, 0x5, 0x42ec, 0x5cbf, 0x9, 0x6, 0x4ea, 0x10001, 0x4b3e, 0x10, 0x55, 0x4, 0x2, 0x0, 0x5, 0x0, 0x1, 0x1, 0xff, 0x8000, 0xfffffffc, 0x8, 0x0, 0x0, 0x6, 0x1, 0x2ed1, 0x3, 0x4, 0x6, 0x2, 0x8a, 0x0, 0x3, 0x2, 0x401, 0x0, 0x6, 0x0, 0x80000001, 0xa, 0x5, 0xba41, 0xe, 0x7, 0xa0, 0x7, 0x50e, 0x200, 0x2, 0x4, 0x0, 0x2, 0x401, 0xffff, 0x373d, 0x80000000, 0x1, 0x100, 0x8, 0x10000, 0x80000000, 0x2, 0x3ff, 0x6, 0x2, 0x3, 0x6, 0x5, 0x4, 0x6, 0x10001, 0x3, 0xce1, 0x200, 0x7, 0xa, 0x1, 0xd0, 0x40, 0x3, 0x7, 0x10000, 0x913, 0x4000, 0x1, 0x3, 0x7f, 0x1bf, 0x7, 0x0, 0xdbd, 0x7f, 0x8, 0x7cd4, 0x4, 0x936, 0x1, 0x3, 0x4, 0x3, 0xfffffffb, 0x7, 0x7, 0x5, 0x3, 0x8, 0x400, 0xa, 0x1, 0x7, 0xce, 0x0, 0x9, 0x8000, 0x7, 0xffffff82, 0x65e, 0x5d, 0x42, 0xfffffff8, 0xfffffff8, 0x8526, 0x10, 0x0, 0x7, 0xfffffffe, 0x3c59, 0x8, 0x1, 0x401, 0x6, 0xf, 0x6, 0x7, 0x7f, 0x1000, 0x7, 0x5, 0x7, 0x0, 0xffff, 0x2676, 0x3, 0xff, 0x0, 0x2], 0x1, 0x400, 0x8}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x14, r4, 0x607}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={0x0}, 0x1, 0x0, 0x0, 0x4884}, 0xc001) 3.346562272s ago: executing program 6 (id=467): socket$nl_route(0x10, 0x3, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000005c0)=""/110) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000140)) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) exit(0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 3.221491245s ago: executing program 3 (id=468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000001c0)={0x8, r1, 0x1}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000280), &(0x7f00000003c0)=0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = dup2(r5, r3) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180060410004550", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, 0x0, 0x0) 2.24988173s ago: executing program 3 (id=469): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2200c840) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) syz_open_dev$dri(0x0, 0x1, 0x0) syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0xaee8, 0x0, 0x2, 0x37c}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.004987974s ago: executing program 6 (id=470): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffffff, 0x0, 0x400000, 0x20) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) sendfile(r4, r4, 0x0, 0x1000000000007) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_script(r6, 0x0, 0x0) close(r6) 137.553586ms ago: executing program 7 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x44054}, 0x44000011) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x8000) 74.765543ms ago: executing program 4 (id=472): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) 0s ago: executing program 3 (id=473): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a"], 0x1ec}}, 0x0) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.530537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.538410][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.554210][ T4183] device veth1_vlan entered promiscuous mode [ 59.570392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.578412][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.588953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.599333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.607934][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.615046][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.624401][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.637034][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.646718][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.661583][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.671775][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.679195][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.708475][ T4194] device veth0_vlan entered promiscuous mode [ 59.710032][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 59.722600][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.731312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.739522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.748064][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 59.756037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.764248][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 59.764357][ T23] Bluetooth: hci3: command 0x041b tx timeout [ 59.776952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.779080][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 59.786863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.800333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.808086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.824252][ T4183] device veth0_macvtap entered promiscuous mode [ 59.837270][ T4194] device veth1_vlan entered promiscuous mode [ 59.849851][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.857825][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.866849][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.877013][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.891391][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.904609][ T4183] device veth1_macvtap entered promiscuous mode [ 59.916110][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.933518][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.948656][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.990157][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.998295][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.012592][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.023406][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.032180][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.044932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.053969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.066917][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.080088][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.090955][ T4194] device veth0_macvtap entered promiscuous mode [ 60.098268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.106362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.116199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.125668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.134080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.142779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.153042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.162609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.170765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.180001][ T4190] device veth0_vlan entered promiscuous mode [ 60.193453][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.212214][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.221421][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.232213][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.241017][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.254379][ T4194] device veth1_macvtap entered promiscuous mode [ 60.263444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.272680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.280167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.288433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.298182][ T4190] device veth1_vlan entered promiscuous mode [ 60.326619][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.360772][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.372594][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.404311][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.414863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.424183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.446820][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.461840][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.474952][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.497147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.515290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.555013][ T4190] device veth0_macvtap entered promiscuous mode [ 60.571415][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.582206][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.591962][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.601066][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.625277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.633978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.675115][ T4190] device veth1_macvtap entered promiscuous mode [ 60.695006][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.721024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.729191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.741661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.755118][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.767801][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.793754][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.807670][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.818061][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.828697][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.840310][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.851633][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.859423][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.868182][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.877124][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.886308][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.914388][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.929067][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.939245][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.950508][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.961678][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.986497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.995870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.005079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.015941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.026340][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.027461][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.040834][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.051068][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.060061][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.068775][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.086240][ T4187] device veth0_vlan entered promiscuous mode [ 61.094242][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.105526][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.123217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.133214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.141138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.149247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.179919][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.183870][ T4187] device veth1_vlan entered promiscuous mode [ 61.197147][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.204171][ T4192] device veth0_vlan entered promiscuous mode [ 61.220174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.228096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.238189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.246299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.255299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.265053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.273482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.315132][ T4192] device veth1_vlan entered promiscuous mode [ 61.332544][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.346517][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.357787][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.379997][ T4187] device veth0_macvtap entered promiscuous mode [ 61.441010][ T4187] device veth1_macvtap entered promiscuous mode [ 61.483000][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.506829][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.513642][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.531078][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.547919][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.566505][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.576559][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.587359][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.598641][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.637368][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.651179][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.659409][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.710258][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.718923][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.744298][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.754296][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.758931][ T4294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 61.768665][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.788633][ T4192] device veth0_macvtap entered promiscuous mode [ 61.795620][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 61.807592][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 61.814047][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 61.827356][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.838197][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 61.869094][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.888278][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 61.896736][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.935266][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.942314][ T4299] netlink: 680 bytes leftover after parsing attributes in process `syz.3.9'. [ 61.960478][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.976097][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.988175][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.012108][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.032899][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.066198][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.077952][ T1272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.081344][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.094819][ T1272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.105426][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.116572][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.126158][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.147013][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 62.197895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.211177][ T4192] device veth1_macvtap entered promiscuous mode [ 62.301115][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.321183][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.347514][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.364270][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.380607][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.392173][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.402396][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.413544][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.429254][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.484874][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.576696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.642613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.838723][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.941107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.043674][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.145987][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.222318][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.276589][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.304633][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.386985][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.452902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.492703][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.577012][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.630413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.639465][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 63.648398][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.657368][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 63.702029][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.795218][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.856870][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.870376][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 63.881594][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 63.916202][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 63.969638][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.007547][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 64.016033][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 64.069570][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.088655][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.107590][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.119209][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.144371][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.159233][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.175341][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.185513][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.223389][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.264976][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.314641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.417575][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.451706][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.516313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.607294][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.646263][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.738841][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.769154][ T4337] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15'. [ 69.660749][ T4382] loop2: detected capacity change from 0 to 256 [ 70.081475][ T4382] ======================================================= [ 70.081475][ T4382] WARNING: The mand mount option has been deprecated and [ 70.081475][ T4382] and is ignored by this kernel. Remove the mand [ 70.081475][ T4382] option from the mount to silence this warning. [ 70.081475][ T4382] ======================================================= [ 70.117129][ T4378] device veth0_to_team entered promiscuous mode [ 70.311008][ T26] audit: type=1800 audit(1761297079.183:2): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.25" name="file1" dev="loop2" ino=1048590 res=0 errno=0 [ 70.342327][ T4379] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 70.355702][ T4379] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 70.366300][ T4379] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 71.140902][ T4282] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 71.162543][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.169069][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.184362][ T4282] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.217399][ T4398] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.224034][ T4387] loop0: detected capacity change from 0 to 2048 [ 71.938208][ T4387] EXT4-fs (loop0): quotafile must be on filesystem root [ 72.182379][ T4410] tmpfs: Bad value for 'mpol' [ 73.327023][ T4426] Zero length message leads to an empty skb [ 73.937599][ T4432] loop0: detected capacity change from 0 to 4096 [ 74.222812][ T4432] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 76.169845][ T4243] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.549822][ T4243] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.566358][ T4458] loop3: detected capacity change from 0 to 8192 [ 76.584864][ T4243] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 76.618351][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.756288][ T4243] usb 5-1: config 0 descriptor?? [ 77.459129][ T4243] ttusbir 5-1:0.0: cannot find expected altsetting [ 77.533878][ T4243] usb 5-1: USB disconnect, device number 2 [ 77.944283][ T4474] infiniband syz2: set active [ 77.949183][ T4474] infiniband syz2: added veth1_to_team [ 78.029469][ T4474] RDS/IB: syz2: added [ 78.034654][ T4474] smc: adding ib device syz2 with port count 1 [ 78.041030][ T4474] smc: ib device syz2 port 1 has pnetid [ 78.366849][ T4479] loop1: detected capacity change from 0 to 256 [ 78.750081][ T4243] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.910125][ T4495] netlink: 76 bytes leftover after parsing attributes in process `syz.1.57'. [ 79.640371][ T4495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.57'. [ 79.661736][ T4495] netlink: 'syz.1.57': attribute type 3 has an invalid length. [ 79.669451][ T4495] netlink: 11 bytes leftover after parsing attributes in process `syz.1.57'. [ 80.699831][ T4243] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 80.709829][ T4243] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 80.719664][ T4243] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.999845][ T4243] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.016467][ T4243] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.684564][ T1336] cfg80211: failed to load regulatory.db [ 81.854046][ T4243] usb 5-1: Product: syz [ 81.858251][ T4243] usb 5-1: Manufacturer: syz [ 81.933439][ T4243] usb 5-1: SerialNumber: syz [ 81.939625][ T4243] usb 5-1: config 0 descriptor?? [ 82.109895][ T4243] usb 5-1: can't set config #0, error -71 [ 82.787406][ T4243] usb 5-1: USB disconnect, device number 3 [ 82.844637][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 85.002900][ T4553] loop3: detected capacity change from 0 to 512 [ 85.101918][ T4555] sch_fq: defrate 0 ignored. [ 85.131154][ T4553] EXT4-fs (loop3): Ignoring removed bh option [ 85.183439][ T4553] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 85.345931][ T4553] EXT4-fs (loop3): 1 truncate cleaned up [ 85.519878][ T4553] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000005,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 86.116134][ T4576] loop0: detected capacity change from 0 to 256 [ 86.793972][ T4574] loop2: detected capacity change from 0 to 8192 [ 89.404319][ T4600] loop4: detected capacity change from 0 to 16 [ 89.530726][ T4600] erofs: (device loop4): mounted with root inode @ nid 36. [ 89.715783][ T4592] loop3: detected capacity change from 0 to 32768 [ 89.908947][ T4613] attempt to access beyond end of device [ 89.908947][ T4613] loop4: rw=0, want=24, limit=16 [ 89.994219][ T4613] attempt to access beyond end of device [ 89.994219][ T4613] loop4: rw=0, want=24, limit=16 [ 90.125958][ T4592] (syz.3.82,4592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.375012][ T4592] (syz.3.82,4592,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.588034][ T4616] loop1: detected capacity change from 0 to 1024 [ 90.617932][ T4592] JBD2: Ignoring recovery information on journal [ 90.721364][ T4612] loop2: detected capacity change from 0 to 32768 [ 90.930389][ T4612] [ 90.930389][ T4612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.930389][ T4612] [ 90.957760][ T4592] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.174038][ T4616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.528375][ T4616] mmap: syz.1.93 (4616) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 91.546878][ T4612] [ 91.546878][ T4612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.546878][ T4612] [ 91.700027][ T4612] [ 91.700027][ T4612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.700027][ T4612] [ 91.722876][ T4194] ocfs2: Unmounting device (7,3) on (node local) [ 91.745652][ T23] Bluetooth: hci2: command 0x2016 tx timeout [ 91.786158][ T4612] [ 91.786158][ T4612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.786158][ T4612] [ 91.820217][ T4612] [ 91.820217][ T4612] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.820217][ T4612] [ 92.285290][ T276] [ 92.285290][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.285290][ T276] [ 92.325981][ T4627] [ 92.325981][ T4627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.325981][ T4627] [ 92.415868][ T4627] [ 92.415868][ T4627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.415868][ T4627] [ 92.430070][ T4627] [ 92.430070][ T4627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.430070][ T4627] [ 92.520082][ T4627] [ 92.520082][ T4627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.520082][ T4627] [ 92.591377][ T4627] [ 92.591377][ T4627] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.591377][ T4627] [ 92.624144][ T276] [ 92.624144][ T276] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.624144][ T276] [ 92.671441][ T4190] [ 92.671441][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.671441][ T4190] [ 92.702173][ T4190] [ 92.702173][ T4190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 92.702173][ T4190] [ 93.485558][ T4644] loop1: detected capacity change from 0 to 8192 [ 93.604158][ T4648] loop3: detected capacity change from 0 to 256 [ 93.611241][ T4650] binder: 4649:4650 unknown command 0 [ 93.616646][ T4650] binder: 4649:4650 ioctl c0306201 200000000080 returned -22 [ 93.825787][ T4652] loop4: detected capacity change from 0 to 32768 [ 94.999557][ T4658] loop2: detected capacity change from 0 to 262144 [ 95.090115][ T4652] XFS (loop4): Mounting V5 Filesystem [ 95.105268][ T4658] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz.2.99 (4658) [ 95.208234][ T4658] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 95.217810][ T4658] BTRFS info (device loop2): using free space tree [ 95.224401][ T4658] BTRFS info (device loop2): has skinny extents [ 95.230737][ T4658] BTRFS info (device loop2): flagging fs with big metadata feature [ 95.260178][ T4652] XFS (loop4): Ending clean mount [ 95.592289][ T26] audit: type=1800 audit(1761297104.463:3): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.100" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 95.593102][ T4672] futex_wake_op: syz.4.100 tries to shift op by 32; fix this program [ 96.257707][ T4187] XFS (loop4): Unmounting Filesystem [ 96.329976][ T4463] BTRFS warning (device loop2): checksum verify failed on 30654464 wanted 0x6191332ca3bfabbd found 0x1eb22ab8dd59a02d level 0 [ 96.467351][ T4658] BTRFS info (device loop2): read error corrected: ino 0 off 30654464 (dev /dev/loop2 sector 76256) [ 96.479534][ T4658] BTRFS info (device loop2): read error corrected: ino 0 off 30658560 (dev /dev/loop2 sector 76264) [ 96.497017][ T4658] BTRFS info (device loop2): read error corrected: ino 0 off 30662656 (dev /dev/loop2 sector 76272) [ 96.508193][ T4658] BTRFS info (device loop2): read error corrected: ino 0 off 30666752 (dev /dev/loop2 sector 76280) [ 96.561878][ T4658] BTRFS info (device loop2): enabling ssd optimizations [ 100.336096][ T4739] HTB: quantum of class 4000A is big. Consider r2q change. [ 100.594782][ T4746] loop0: detected capacity change from 0 to 128 [ 101.375068][ T4743] loop4: detected capacity change from 0 to 8192 [ 101.769918][ T4758] loop4: detected capacity change from 0 to 256 [ 101.878356][ T4756] loop0: detected capacity change from 0 to 8192 [ 103.127005][ T4771] loop2: detected capacity change from 0 to 16 [ 103.288287][ T4771] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.134905][ T4777] attempt to access beyond end of device [ 104.134905][ T4777] loop2: rw=0, want=24, limit=16 [ 104.246686][ T4777] attempt to access beyond end of device [ 104.246686][ T4777] loop2: rw=0, want=24, limit=16 [ 105.876907][ T4783] loop2: detected capacity change from 0 to 128 [ 106.280911][ T4783] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000001000000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 106.399834][ T4783] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.479003][ T4786] loop4: detected capacity change from 0 to 32768 [ 106.597133][ T4786] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 106.640859][ T4786] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.476014][ T4408] (kworker/u4:10,4408,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 107.981471][ T4800] loop1: detected capacity change from 0 to 512 [ 108.343830][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 108.350840][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 108.382487][ T4800] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 108.407396][ T4187] ocfs2: Unmounting device (7,4) on (node local) [ 108.435244][ T4800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.531657][ T4800] EXT4-fs (loop1): 1 truncate cleaned up [ 108.573325][ T4800] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 108.715642][ T4805] ceph: No mds server is up or the cluster is laggy [ 108.742184][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 108.748992][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 109.542178][ T4817] loop0: detected capacity change from 0 to 256 [ 110.351742][ T4830] loop4: detected capacity change from 0 to 4096 [ 110.540929][ T4830] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 110.845380][ T4818] loop2: detected capacity change from 0 to 32768 [ 110.921822][ T4818] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.135 (4818) [ 110.968249][ T4818] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 111.003831][ T4818] BTRFS info (device loop2): using free space tree [ 111.028000][ T4818] BTRFS info (device loop2): has skinny extents [ 111.075709][ T4838] loop4: detected capacity change from 0 to 8192 [ 111.728798][ T4818] BTRFS info (device loop2): enabling ssd optimizations [ 111.892767][ T4864] loop1: detected capacity change from 0 to 1024 [ 112.216592][ T4818] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 112.269252][ T4864] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.762074][ T4864] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 113.076368][ T4878] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2826: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 113.228080][ T4864] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.143: missing EA_INODE flag [ 113.297479][ T4864] EXT4-fs (loop1): Remounting filesystem read-only [ 113.304859][ T4864] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.143: error while reading EA inode 11 err=-117 [ 113.326213][ T4864] EXT4-fs (loop1): Remounting filesystem read-only [ 113.544969][ T4864] syz.1.143 (4864) used greatest stack depth: 19880 bytes left [ 114.283824][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 114.524734][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 114.577687][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 114.589421][ T4900] block device autoloading is deprecated and will be removed. [ 114.609430][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.253455][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.364225][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.417323][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.441251][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.443686][ T4891] loop3: detected capacity change from 0 to 32768 [ 115.491019][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.575872][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.624031][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.643032][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.653991][ T4891] attempt to access beyond end of device [ 115.653991][ T4891] loop3: rw=0, want=4398046541840, limit=32768 [ 115.703871][ T4910] loop2: detected capacity change from 0 to 4096 [ 115.719859][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.736956][ T4891] lbmIODone: I/O error in JFS log [ 115.742479][ T4891] *** Log Format Error ! *** [ 115.747317][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 115.755768][ T4910] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 115.769058][ T4891] lmLogInit: exit(-22) [ 115.783379][ T4891] lmLogOpen: exit(-22) [ 115.787579][ T4891] jfs_mount_rw failed, return code = -22 [ 115.817999][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 115.964864][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 117.169893][ T4708] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.042022][ T4708] usb 5-1: Using ep0 maxpacket: 16 [ 118.325609][ T4708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.337699][ T4708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.348568][ T4708] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 118.358378][ T4708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.370060][ T4708] usb 5-1: config 0 descriptor?? [ 118.795791][ T4192] EXT4-fs error: 10 callbacks suppressed [ 118.795828][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 119.011773][ T4192] EXT4-fs: 10 callbacks suppressed [ 119.011787][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 119.124250][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 119.309560][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 119.339888][ T4708] usbhid 5-1:0.0: can't add hid device: -71 [ 119.998340][ T4708] usbhid: probe of 5-1:0.0 failed with error -71 [ 120.008972][ T4708] usb 5-1: USB disconnect, device number 4 [ 120.098812][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 120.245617][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 120.313905][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 120.396889][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 121.083159][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 121.130921][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 121.206062][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 121.408019][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 121.467778][ T4961] loop0: detected capacity change from 0 to 4096 [ 121.513175][ T4961] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 121.753632][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 122.372877][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 122.554945][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 122.597167][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 122.615586][ T4973] loop2: detected capacity change from 0 to 128 [ 122.753533][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 122.777345][ T4974] loop3: detected capacity change from 0 to 2048 [ 122.871598][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 122.984129][ T4981] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.005337][ T4973] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.017530][ T4973] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.300146][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 123.599839][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 123.861428][ T4192] EXT4-fs error: 1 callbacks suppressed [ 123.861539][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 123.979475][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 124.066376][ T4192] EXT4-fs: 2 callbacks suppressed [ 124.066388][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 124.261430][ T4988] loop0: detected capacity change from 0 to 256 [ 124.292847][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 124.369952][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 124.488901][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 124.562371][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 125.139261][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 125.625519][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 125.775845][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 125.829942][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 125.928678][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 125.981464][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 126.064041][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 126.134615][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 126.242933][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 126.318939][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 126.427890][ T4192] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 126.435773][ T5010] loop4: detected capacity change from 0 to 32768 [ 126.489932][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 126.518874][ T5010] attempt to access beyond end of device [ 126.518874][ T5010] loop4: rw=0, want=4398046541840, limit=32768 [ 126.561009][ T5010] lbmIODone: I/O error in JFS log [ 126.570034][ T5010] *** Log Format Error ! *** [ 126.585104][ T5010] lmLogInit: exit(-22) [ 126.589195][ T5010] lmLogOpen: exit(-22) [ 126.661958][ T5010] jfs_mount_rw failed, return code = -22 [ 126.755896][ T5016] loop3: detected capacity change from 0 to 4096 [ 126.760108][ T4192] EXT4-fs (loop1): Remounting filesystem read-only [ 126.772958][ T5019] loop0: detected capacity change from 0 to 128 [ 126.828619][ T5016] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 127.247897][ T5025] attempt to access beyond end of device [ 127.247897][ T5025] loop0: rw=2049, want=250, limit=128 [ 129.412623][ T5042] gfs2: not a GFS2 filesystem [ 130.422089][ T5052] loop3: detected capacity change from 0 to 128 [ 130.454246][ T5054] loop4: detected capacity change from 0 to 256 [ 132.080523][ T5065] loop0: detected capacity change from 0 to 4096 [ 132.093192][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.135114][ T5067] loop3: detected capacity change from 0 to 128 [ 132.154984][ T5065] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 132.232978][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.279263][ T5049] loop2: detected capacity change from 0 to 32768 [ 132.379930][ T5049] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 132.429878][ T4886] Bluetooth: hci5: command 0x0409 tx timeout [ 132.488193][ T5072] attempt to access beyond end of device [ 132.488193][ T5072] loop3: rw=2049, want=250, limit=128 [ 132.558021][ T5049] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.591647][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.598454][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185327][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.314447][ T5077] (syz.2.192,5077,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 133.322544][ T5077] (syz.2.192,5077,0):ocfs2_search_chain:1785 ERROR: status = -12 [ 133.330661][ T5077] (syz.2.192,5077,0):ocfs2_search_chain:1871 ERROR: status = -12 [ 133.338466][ T5077] (syz.2.192,5077,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -12 [ 133.346896][ T5077] (syz.2.192,5077,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -12 [ 133.355315][ T5077] (syz.2.192,5077,0):__ocfs2_claim_clusters:2355 ERROR: status = -12 [ 133.363472][ T5077] (syz.2.192,5077,0):__ocfs2_claim_clusters:2363 ERROR: status = -12 [ 133.371637][ T5077] (syz.2.192,5077,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12 [ 133.380376][ T5077] (syz.2.192,5077,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12 [ 133.389026][ T5077] (syz.2.192,5077,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12 [ 133.398715][ T5077] (syz.2.192,5077,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12 [ 133.408152][ T5077] (syz.2.192,5077,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12 [ 133.416926][ T5077] (syz.2.192,5077,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12 [ 133.425939][ T5077] (syz.2.192,5077,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12 [ 133.435460][ T5077] (syz.2.192,5077,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12 [ 133.444556][ T5077] (syz.2.192,5077,0):ocfs2_mknod:357 ERROR: status = -12 [ 133.454456][ T5077] (syz.2.192,5077,0):ocfs2_mknod:502 ERROR: status = -12 [ 133.461803][ T5077] (syz.2.192,5077,0):ocfs2_mkdir:659 ERROR: status = -12 [ 133.781872][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 133.817868][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.852755][ T5046] chnl_net:caif_netlink_parms(): no params data found [ 134.055325][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.110173][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.118171][ T5046] device bridge_slave_0 entered promiscuous mode [ 134.162014][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.170142][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.178009][ T5046] device bridge_slave_1 entered promiscuous mode [ 134.293193][ T5046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.351736][ T5046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.436071][ T5046] team0: Port device team_slave_0 added [ 134.484233][ T5046] team0: Port device team_slave_1 added [ 134.510020][ T4886] Bluetooth: hci5: command 0x041b tx timeout [ 134.539000][ T5099] loop2: detected capacity change from 0 to 1024 [ 134.627511][ T5099] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.775109][ T5080] loop3: detected capacity change from 0 to 32768 [ 134.818520][ T5080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.200 (5080) [ 134.922827][ T5099] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 134.955520][ T5080] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 135.008757][ T5080] BTRFS info (device loop3): turning off barriers [ 135.164381][ T5080] BTRFS info (device loop3): turning on flush-on-commit [ 135.188707][ T5080] BTRFS info (device loop3): force zlib compression, level 3 [ 135.213658][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.233061][ T5080] BTRFS info (device loop3): enabling all of the rescue options [ 135.241968][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.273742][ T5099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #11: comm syz.2.204: missing EA_INODE flag [ 135.296109][ T5080] BTRFS info (device loop3): ignoring data csums [ 135.306950][ T5080] BTRFS info (device loop3): ignoring bad roots [ 135.319581][ T5099] EXT4-fs (loop2): Remounting filesystem read-only [ 135.329555][ T5080] BTRFS info (device loop3): disabling log replay at mount time [ 135.339124][ T5046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.350275][ T5099] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.204: error while reading EA inode 11 err=-117 [ 135.369952][ T5080] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 135.495041][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.622493][ T5080] BTRFS info (device loop3): using free space tree [ 135.629034][ T5080] BTRFS info (device loop3): has skinny extents [ 135.638635][ T5099] EXT4-fs (loop2): Remounting filesystem read-only [ 135.646943][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.809702][ T5046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.843721][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 135.891562][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.014851][ T4310] BTRFS warning (device loop3): checksum verify failed on 1052672 wanted 0x37e030f7 found 0x5afefc99 level 0 [ 136.020928][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.061193][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.062973][ T5080] BTRFS error (device loop3): failed to read chunk root [ 136.134077][ T5046] device hsr_slave_0 entered promiscuous mode [ 136.176765][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.243185][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.330595][ T5046] device hsr_slave_1 entered promiscuous mode [ 136.341693][ T5046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.353449][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.361054][ T5080] BTRFS error (device loop3): open_ctree failed: -22 [ 136.371058][ T5046] Cannot create hsr debugfs directory [ 136.395450][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.559361][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.584039][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.592029][ T4886] Bluetooth: hci5: command 0x040f tx timeout [ 136.752738][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.775997][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.867196][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 136.877766][ T5046] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.900285][ T5046] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.918375][ T5046] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.928106][ T5046] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.940653][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 136.989034][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 137.007461][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 137.025784][ T154] device hsr_slave_0 left promiscuous mode [ 137.039387][ T154] device hsr_slave_1 left promiscuous mode [ 137.050508][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.075906][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.085780][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.099411][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.108371][ T154] device bridge_slave_1 left promiscuous mode [ 137.120761][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.179158][ T154] device bridge_slave_0 left promiscuous mode [ 137.198974][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.245246][ T154] device veth1_macvtap left promiscuous mode [ 137.252305][ T154] device veth0_macvtap left promiscuous mode [ 137.258375][ T154] device veth1_vlan left promiscuous mode [ 137.266334][ T154] device veth0_vlan left promiscuous mode [ 137.465796][ T154] team0 (unregistering): Port device team_slave_1 removed [ 137.485417][ T154] team0 (unregistering): Port device team_slave_0 removed [ 137.505705][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.521400][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.596283][ T154] bond0 (unregistering): Released all slaves [ 137.786459][ T5046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.818640][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.837095][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.862994][ T5046] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.885209][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.905889][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.918396][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.925517][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.939130][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.962463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.977105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.985976][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.993065][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.022362][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.062069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.083566][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.101844][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.132613][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.159610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.181557][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.207252][ T5046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.223009][ T5046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.248195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.256806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.293971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.306593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.335781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.544015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.559959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.572059][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.680110][ T4883] Bluetooth: hci5: command 0x0419 tx timeout [ 138.870651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.886392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.922838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.940323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.952177][ T5046] device veth0_vlan entered promiscuous mode [ 138.960323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.981144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.018342][ T5046] device veth1_vlan entered promiscuous mode [ 139.653803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.796026][ T5209] loop4: detected capacity change from 0 to 4096 [ 139.840373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.855581][ T5209] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 140.345209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.608187][ T4190] EXT4-fs error: 45 callbacks suppressed [ 140.608200][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 140.654539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.759853][ T4190] EXT4-fs: 45 callbacks suppressed [ 140.760014][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 141.255308][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 141.280963][ T5046] device veth0_macvtap entered promiscuous mode [ 141.337001][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 141.342271][ T5046] device veth1_macvtap entered promiscuous mode [ 141.429603][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.464651][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.484698][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.547889][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.568494][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.514759][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.520602][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.535216][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.575044][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 142.589738][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.621062][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.639739][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.668827][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.689431][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.714847][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.725594][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 142.750326][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.779738][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.799318][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 142.826658][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.859693][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.872871][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 142.909692][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.944996][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.000057][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.043654][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 143.051148][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.096018][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 143.099622][ T5046] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.149862][ T5046] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.185531][ T5046] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.189098][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 143.214666][ T5046] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.262588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.289378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.329740][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 143.418519][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 143.506442][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 143.551447][ T5231] loop0: detected capacity change from 0 to 1024 [ 143.566125][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.617995][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.648258][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 143.661960][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 143.686316][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.706876][ T5231] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 143.732979][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.787669][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 143.796941][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.835030][ T5238] loop3: detected capacity change from 0 to 128 [ 143.880461][ T5231] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,stripe=0x0000000000000003,min_batch_time=0x0000000000000001,nogrpid,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x0000000000. Quota mode: none. [ 144.030019][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 144.052608][ T5238] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.156289][ T5238] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.191164][ T5231] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #11: comm syz.0.217: missing EA_INODE flag [ 144.214751][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 144.235019][ T5231] EXT4-fs (loop0): Remounting filesystem read-only [ 144.264720][ T5231] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.217: error while reading EA inode 11 err=-117 [ 144.340000][ T5231] EXT4-fs (loop0): Remounting filesystem read-only [ 144.499303][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 144.572170][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 144.713088][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 144.782823][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 144.925140][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 144.997102][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 145.157368][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 145.235341][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 145.374196][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 145.462260][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 145.690163][ T4190] EXT4-fs error: 11 callbacks suppressed [ 145.690202][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 146.292436][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 146.321928][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 146.349179][ T4190] EXT4-fs: 11 callbacks suppressed [ 146.349191][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 146.465149][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 146.488505][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 146.505325][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 146.649555][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 146.666660][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 146.922724][ T5280] loop5: detected capacity change from 0 to 4096 [ 147.079585][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 147.101539][ T5280] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 147.589053][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 147.972616][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 148.175567][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 148.187090][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 148.439666][ C1] sched: RT throttling activated [ 148.869558][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.019900][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 149.193645][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.268014][ T4183] EXT4-fs error: 3 callbacks suppressed [ 149.268028][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.308826][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 149.388449][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.405169][ T4183] EXT4-fs: 3 callbacks suppressed [ 149.405181][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 149.498454][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 149.522999][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.628733][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 149.662364][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.758013][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 149.781696][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 149.973749][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 150.577681][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 150.620606][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 150.712986][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 150.764935][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 150.872066][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 150.882811][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 151.495426][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 151.579604][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 151.861114][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 151.869704][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 153.191881][ T5320] vivid-006: kernel_thread() failed [ 153.296592][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.320085][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.387869][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 153.395010][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 153.598787][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.608483][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.639931][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 153.682820][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 153.699451][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.771709][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 153.836848][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 153.924978][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 154.487996][ T4190] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 154.566623][ T4190] EXT4-fs (loop2): Remounting filesystem read-only [ 154.628219][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 154.854258][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.025024][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.089987][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.201614][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.230023][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.280022][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.345673][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.423613][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.479119][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.570967][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.625770][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.664636][ T4451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.748981][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 155.798648][ T4451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.823045][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 155.837901][ T5351] loop5: detected capacity change from 0 to 32768 [ 155.880303][ T5351] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.237 (5351) [ 155.946112][ T4451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.961930][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 156.004199][ T5351] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 156.050572][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 156.059952][ T5351] BTRFS info (device loop5): using free space tree [ 156.066607][ T5351] BTRFS info (device loop5): has skinny extents [ 156.071809][ T4451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.197903][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 156.268873][ T5378] loop4: detected capacity change from 0 to 128 [ 156.355640][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 156.371632][ T5357] chnl_net:caif_netlink_parms(): no params data found [ 156.674756][ T5384] loop3: detected capacity change from 0 to 4096 [ 156.746399][ T5384] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 156.863984][ T5378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.056709][ T5378] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.461565][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 157.479790][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 157.552756][ T4886] Bluetooth: hci2: command 0x0409 tx timeout [ 157.677180][ T5351] BTRFS info (device loop5): enabling ssd optimizations [ 158.394399][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.430033][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.500669][ T5357] device bridge_slave_0 entered promiscuous mode [ 158.537905][ T5357] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.578523][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.587126][ T5357] device bridge_slave_1 entered promiscuous mode [ 158.770703][ T5357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.823824][ T5357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.960660][ T5357] team0: Port device team_slave_0 added [ 158.968373][ T5357] team0: Port device team_slave_1 added [ 159.805177][ T4883] Bluetooth: hci2: command 0x041b tx timeout [ 160.017922][ T4183] EXT4-fs error: 10 callbacks suppressed [ 160.017954][ T4183] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 160.061772][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.068736][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.101357][ T4183] EXT4-fs: 10 callbacks suppressed [ 160.101369][ T4183] EXT4-fs (loop0): Remounting filesystem read-only [ 160.183412][ T5429] loop5: detected capacity change from 0 to 256 [ 160.209928][ T5357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.231406][ T5357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.238378][ T5357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.343546][ T5357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.306295][ T5357] device hsr_slave_0 entered promiscuous mode [ 161.530054][ T5357] device hsr_slave_1 entered promiscuous mode [ 161.539393][ T5357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.569327][ T5357] Cannot create hsr debugfs directory [ 161.841635][ T5451] loop3: detected capacity change from 0 to 128 [ 162.056418][ T4883] Bluetooth: hci2: command 0x040f tx timeout [ 162.586842][ T4884] Bluetooth: hci3: command 0x0409 tx timeout [ 162.840716][ T5432] chnl_net:caif_netlink_parms(): no params data found [ 162.996053][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.007794][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.016403][ T5432] device bridge_slave_0 entered promiscuous mode [ 163.025195][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.032331][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.040261][ T5432] device bridge_slave_1 entered promiscuous mode [ 163.064021][ T5476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.250'. [ 163.129792][ T4236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.370454][ T5357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.830339][ T5487] loop3: detected capacity change from 0 to 4096 [ 163.863365][ T5487] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 163.887246][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.923521][ T5357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.949962][ T4236] usb 5-1: Using ep0 maxpacket: 8 [ 164.085200][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.167519][ T5357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.180091][ T4236] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 164.210572][ T5490] loop5: detected capacity change from 0 to 128 [ 164.227809][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.326968][ T4236] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.388925][ T5490] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.406388][ T4236] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.440151][ T5490] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.462972][ T2336] Bluetooth: hci2: command 0x0419 tx timeout [ 164.531720][ T4236] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.579902][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.729942][ T5357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.939945][ T4236] usb 5-1: GET_CAPABILITIES returned 0 [ 164.947241][ T4236] usbtmc 5-1:16.0: can't read capabilities [ 164.965204][ T5432] team0: Port device team_slave_0 added [ 165.127030][ T4884] Bluetooth: hci3: command 0x041b tx timeout [ 165.156483][ T4295] usb 5-1: USB disconnect, device number 5 [ 165.173541][ T5432] team0: Port device team_slave_1 added [ 165.378285][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.405935][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.490071][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.525191][ T4451] device hsr_slave_0 left promiscuous mode [ 165.574079][ T4451] device hsr_slave_1 left promiscuous mode [ 165.584922][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.595454][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.608277][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.626665][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.635898][ T4451] device bridge_slave_1 left promiscuous mode [ 165.655025][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.683693][ T4451] device bridge_slave_0 left promiscuous mode [ 165.712747][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.798192][ T4451] device veth1_macvtap left promiscuous mode [ 165.809022][ T4451] device veth0_macvtap left promiscuous mode [ 165.822919][ T4451] device veth1_vlan left promiscuous mode [ 165.828724][ T4451] device veth0_vlan left promiscuous mode [ 165.857164][ T5523] loop4: detected capacity change from 0 to 128 [ 166.937314][ T5537] loop3: detected capacity change from 0 to 256 [ 167.126110][ T4451] team0 (unregistering): Port device team_slave_1 removed [ 167.141500][ T4451] team0 (unregistering): Port device team_slave_0 removed [ 167.160329][ T4884] Bluetooth: hci3: command 0x040f tx timeout [ 168.010117][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.193385][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.936960][ T5554] loop5: detected capacity change from 0 to 4096 [ 173.654619][ T4815] Bluetooth: hci3: command 0x0419 tx timeout [ 174.143934][ T5562] loop4: detected capacity change from 0 to 128 [ 174.265463][ T4451] bond0 (unregistering): Released all slaves [ 174.378674][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.389872][ T5562] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.450024][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.458131][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.602515][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.108823][ T5357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.156027][ T5357] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.224093][ T5572] loop3: detected capacity change from 0 to 128 [ 175.241018][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.249001][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.288665][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.304867][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.314427][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.321686][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.347331][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.358160][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.367892][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.375153][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.384620][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.477534][ T5432] device hsr_slave_0 entered promiscuous mode [ 175.495059][ T5432] device hsr_slave_1 entered promiscuous mode [ 175.534626][ T5432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.536138][ T26] audit: type=1326 audit(1761297184.403:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.5.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81837fc9 code=0x7ffc0000 [ 175.550236][ T5432] Cannot create hsr debugfs directory [ 175.585465][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.598604][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.617244][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.816763][ T5578] attempt to access beyond end of device [ 175.816763][ T5578] loop3: rw=2049, want=250, limit=128 [ 175.927888][ T26] audit: type=1326 audit(1761297184.403:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.5.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81837fc9 code=0x7ffc0000 [ 175.965433][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.111221][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.196607][ T26] audit: type=1326 audit(1761297184.623:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.5.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcf81837fc9 code=0x7ffc0000 [ 176.300028][ T5581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 176.340689][ T26] audit: type=1326 audit(1761297184.733:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.5.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81837fc9 code=0x7ffc0000 [ 176.403880][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.430778][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.449575][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.470207][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.667516][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.685152][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.937247][ T5603] loop5: detected capacity change from 0 to 4096 [ 178.003973][ T5603] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 180.749832][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 181.126745][ T5432] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 181.227349][ T5432] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 181.283469][ T5432] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 181.328735][ T5432] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 181.609242][ T5357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.660165][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.680462][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.386856][ T5635] loop3: detected capacity change from 0 to 4096 [ 182.657747][ T5640] loop4: detected capacity change from 0 to 128 [ 183.250360][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.462814][ T26] audit: type=1800 audit(1761297191.853:8): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.280" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 183.539463][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.648717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.668983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.731115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.799401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.826573][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.833746][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.908851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.028669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.081844][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.089040][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.157633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.323928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.915085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.961890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.123993][ T5666] process 'syz.5.284' launched './file1' with NULL argv: empty string added [ 185.152975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.178414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.223948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.268830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.320221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.470280][ T5639] attempt to access beyond end of device [ 185.470280][ T5639] loop4: rw=2049, want=250, limit=128 [ 185.515217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.567723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.600369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.641695][ T5432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.702529][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 185.750041][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.818603][ T5678] loop5: detected capacity change from 0 to 4096 [ 185.892811][ T5678] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 186.037493][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 186.053440][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 186.098595][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 186.116680][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 186.145373][ T5357] device veth0_vlan entered promiscuous mode [ 186.182748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.239915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.250053][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.264955][ T5357] device veth1_vlan entered promiscuous mode [ 186.295418][ T5357] device veth0_macvtap entered promiscuous mode [ 186.310742][ T5357] device veth1_macvtap entered promiscuous mode [ 186.330351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 186.426821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 186.438186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 186.447898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 186.456936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.487357][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.509823][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.544755][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.588676][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.614211][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.990458][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.059853][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.119848][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.182086][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.189615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.240189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.259296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.323724][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.385945][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.438267][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.517333][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.549667][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.589676][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.599582][ T5357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.651005][ T5357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.721294][ T5357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.796534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.822256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.857733][ T5357] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.869692][ T5716] loop4: detected capacity change from 0 to 128 [ 187.896902][ T5357] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.937411][ T5357] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.957635][ T5357] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.968127][ T5716] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.062570][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.099866][ T5716] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.185720][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.231567][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.269021][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.448042][ T4536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.533693][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.559162][ T4536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.961958][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.991551][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.065472][ T5729] loop5: detected capacity change from 0 to 256 [ 189.176234][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.185915][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.201830][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.228374][ T5432] device veth0_vlan entered promiscuous mode [ 189.436510][ T5432] device veth1_vlan entered promiscuous mode [ 189.588973][ T5432] device veth0_macvtap entered promiscuous mode [ 189.640382][ T5432] device veth1_macvtap entered promiscuous mode [ 189.676016][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 189.707223][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 189.752868][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.782911][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.800352][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 189.831251][ T5062] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 189.929255][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.999526][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.117505][ T5741] Bluetooth: Invalid esc byte 0xff [ 190.386014][ T4313] Bluetooth: (null): Invalid header checksum [ 190.418849][ T4313] Bluetooth: (null): Invalid header checksum [ 190.453922][ T4313] Bluetooth: (null): Invalid header checksum [ 190.544864][ T4313] Bluetooth: (null): Invalid header checksum [ 190.680631][ T4313] Bluetooth: (null): Invalid header checksum [ 190.686850][ T4313] Bluetooth: (null): Invalid header checksum [ 190.719666][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.745519][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.764132][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.776058][ T4536] Bluetooth: (null): Invalid header checksum [ 190.790300][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.805806][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.817607][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.840046][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.888232][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.895047][ T4408] Bluetooth: (null): Invalid header checksum [ 190.948280][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.988342][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.025715][ T4408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.208363][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.225754][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.246442][ T5755] loop3: detected capacity change from 0 to 16 [ 191.343759][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.658256][ T5758] loop6: detected capacity change from 0 to 4096 [ 191.925016][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.080082][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.254601][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.420863][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.457160][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.467090][ T5432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.478177][ T5432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.591958][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.884751][ T5432] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.099314][ T5432] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.253737][ T5432] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.386834][ T5432] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.452782][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.474319][ T5758] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 193.643429][ T5755] erofs: (device loop3): mounted with root inode @ nid 36. [ 193.746977][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.044137][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057274][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.469288][ T5766] loop5: detected capacity change from 0 to 128 [ 195.238922][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.297003][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.373279][ T4451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.461612][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 195.534233][ T4451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.638941][ T4408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.654112][ T4408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.854489][ T4451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.442270][ T5387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.509819][ T13] Bluetooth: hci0: command 0xfc11 tx timeout [ 196.516138][ T146] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 196.726723][ T4451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.000780][ T5812] capability: warning: `syz.6.303' uses deprecated v2 capabilities in a way that may be insecure [ 198.292352][ T5820] loop7: detected capacity change from 0 to 8 [ 199.015251][ T5820] SQUASHFS error: lzo decompression failed, data probably corrupt [ 199.023577][ T5820] SQUASHFS error: Failed to read block 0x82: -5 [ 199.029872][ T5820] SQUASHFS error: Unable to read metadata cache entry [80] [ 199.037485][ T5820] SQUASHFS error: Unable to read inode 0x11f [ 199.673214][ T5830] loop3: detected capacity change from 0 to 256 [ 202.630387][ T5836] loop7: detected capacity change from 0 to 4096 [ 204.155568][ T5842] loop6: detected capacity change from 0 to 128 [ 204.380623][ T5842] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.400358][ T5842] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.180271][ T5893] netlink: 4 bytes leftover after parsing attributes in process `syz.7.319'. [ 207.206556][ T5893] device wg2 entered promiscuous mode [ 207.214217][ T5896] loop3: detected capacity change from 0 to 256 [ 207.691202][ T5903] loop5: detected capacity change from 0 to 4096 [ 207.796395][ T5903] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 207.812576][ T5903] ntfs3: loop5: failed to replay log file. Can't mount rw! [ 207.859877][ T5905] loop7: detected capacity change from 0 to 4096 [ 207.931047][ T5905] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 208.705604][ T5920] loop6: detected capacity change from 0 to 128 [ 208.721680][ T4451] device hsr_slave_0 left promiscuous mode [ 208.761978][ T4451] device hsr_slave_1 left promiscuous mode [ 208.933008][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.284730][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.361641][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.369125][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.494133][ T4451] device bridge_slave_1 left promiscuous mode [ 209.512543][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.543096][ T4451] device bridge_slave_0 left promiscuous mode [ 209.549437][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.579396][ T4451] rdma_rxe: ignoring netdev event = 10 for veth1_to_team [ 210.632558][ T4451] device veth1_macvtap left promiscuous mode [ 210.638699][ T4451] device veth0_macvtap left promiscuous mode [ 210.643779][ T5944] loop7: detected capacity change from 0 to 16384 [ 210.681885][ T4451] device veth1_vlan left promiscuous mode [ 210.708666][ T4451] device veth0_vlan left promiscuous mode [ 210.749753][ T5948] loop_set_status: loop7 () has still dirty pages (nrpages=5) [ 210.833347][ T5952] loop5: detected capacity change from 0 to 8 [ 210.945890][ T5952] SQUASHFS error: zstd decompression error: 2 [ 210.970042][ T5952] SQUASHFS error: zstd decompression failed, data probably corrupt [ 211.031180][ T5952] SQUASHFS error: Failed to read block 0x62b: -5 [ 211.100489][ T5952] SQUASHFS error: Unable to read metadata cache entry [629] [ 211.130000][ T5952] SQUASHFS error: Unable to read directory block [629:ff26] [ 211.147963][ T5957] SQUASHFS error: Unable to read metadata cache entry [629] [ 211.175681][ T5963] loop7: detected capacity change from 0 to 128 [ 211.188832][ T5957] SQUASHFS error: Unable to read directory block [629:ff26] [ 211.222206][ T4451] infiniband syz2: set down [ 211.293298][ T5963] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.580984][ T5969] loop3: detected capacity change from 0 to 4096 [ 211.822552][ T5963] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 211.854673][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.455013][ T5969] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 213.118845][ T4451] team0 (unregistering): Port device team_slave_1 removed [ 213.282952][ T4312] smc: removing ib device syz2 [ 213.305729][ T4451] team0 (unregistering): Port device team_slave_0 removed [ 213.862536][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.966903][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.419904][ T4451] bond0 (unregistering): Released all slaves [ 215.308758][ T5997] loop4: detected capacity change from 0 to 256 [ 216.590060][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 216.642605][ T6026] loop3: detected capacity change from 0 to 4096 [ 217.067307][ T6026] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 217.719040][ T6037] loop6: detected capacity change from 0 to 128 [ 217.881012][ T6037] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 217.941780][ T6037] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 218.238936][ T6049] device bond1 entered promiscuous mode [ 218.476468][ T6057] loop5: detected capacity change from 0 to 32768 [ 218.671833][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 219.037443][ T6070] netlink: 'syz.6.360': attribute type 12 has an invalid length. [ 219.049142][ T6070] netlink: 'syz.6.360': attribute type 29 has an invalid length. [ 219.057423][ T6070] netlink: 148 bytes leftover after parsing attributes in process `syz.6.360'. [ 219.067744][ T6070] netlink: 'syz.6.360': attribute type 1 has an invalid length. [ 220.979843][ T6077] loop6: detected capacity change from 0 to 128 [ 221.010224][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 221.072691][ T13] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 221.388866][ T6094] loop7: detected capacity change from 0 to 256 [ 222.139773][ T13] usb 4-1: string descriptor 0 read error: -71 [ 222.146165][ T13] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 222.686027][ T6094] FAT-fs (loop7): Directory bread(block 64) failed [ 222.693364][ T6094] FAT-fs (loop7): Directory bread(block 65) failed [ 222.700027][ T6094] FAT-fs (loop7): Directory bread(block 66) failed [ 222.706574][ T6094] FAT-fs (loop7): Directory bread(block 67) failed [ 222.713168][ T6094] FAT-fs (loop7): Directory bread(block 68) failed [ 222.719775][ T6094] FAT-fs (loop7): Directory bread(block 69) failed [ 222.726340][ T6094] FAT-fs (loop7): Directory bread(block 70) failed [ 222.732939][ T6094] FAT-fs (loop7): Directory bread(block 71) failed [ 222.739490][ T6094] FAT-fs (loop7): Directory bread(block 72) failed [ 222.746056][ T6094] FAT-fs (loop7): Directory bread(block 73) failed [ 222.758770][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.815949][ T13] usb 4-1: config 0 descriptor?? [ 223.600532][ T6102] loop3: detected capacity change from 0 to 2048 [ 223.607715][ T13] usb 4-1: can't set config #0, error -71 [ 223.620812][ T13] usb 4-1: USB disconnect, device number 2 [ 223.679925][ T6102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.706092][ T6108] loop7: detected capacity change from 0 to 128 [ 223.765663][ T6104] loop6: detected capacity change from 0 to 256 [ 223.833680][ T6108] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.892453][ T6108] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.924373][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.237343][ T6144] loop5: detected capacity change from 0 to 128 [ 226.597307][ T6149] loop7: detected capacity change from 0 to 4096 [ 226.743168][ T6149] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 229.568604][ T6162] syz.3.381 uses obsolete (PF_INET,SOCK_PACKET) [ 229.974080][ T6169] loop7: detected capacity change from 0 to 128 [ 230.126026][ T6165] loop4: detected capacity change from 0 to 4096 [ 230.136149][ T6169] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.189917][ T6169] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.217364][ T6173] loop5: detected capacity change from 0 to 512 [ 230.261493][ T6173] FAT-fs (loop5): Unrecognized mount option "codepage=737Z|" or missing value [ 231.258077][ T6192] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 231.258077][ T6192] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#' [ 231.890228][ T6197] loop2: detected capacity change from 0 to 7 [ 232.210240][ T6197] Dev loop2: unable to read RDB block 7 [ 232.486462][ T6193] loop6: detected capacity change from 0 to 4096 [ 232.495809][ T6197] loop2: unable to read partition table [ 232.521965][ T6197] loop2: partition table beyond EOD, truncated [ 232.553503][ T6197] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 232.725341][ T6209] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 232.836595][ T6211] loop3: detected capacity change from 0 to 4096 [ 232.868316][ T6193] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 232.893562][ T6214] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 232.934685][ T6211] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 233.066836][ T6219] loop5: detected capacity change from 0 to 128 [ 233.119325][ T6223] loop4: detected capacity change from 0 to 256 [ 233.463985][ T6228] loop7: detected capacity change from 0 to 128 [ 233.579081][ T6228] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 233.700423][ T6228] FAT-fs (loop7): Filesystem has been set read-only [ 235.411877][ T6255] loop3: detected capacity change from 0 to 128 [ 235.606732][ T6255] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 235.685206][ T6255] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.388639][ T6267] input: syz1 as /devices/virtual/input/input6 [ 236.501835][ T6281] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 236.536029][ T6281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 236.792091][ T6285] loop3: detected capacity change from 0 to 1024 [ 236.972296][ T6285] EXT4-fs (loop3): Ignoring removed oldalloc option [ 237.007855][ T6285] EXT4-fs (loop3): Ignoring removed bh option [ 237.094442][ T6290] loop7: detected capacity change from 0 to 4096 [ 237.113047][ T6285] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.140119][ T6290] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 237.197685][ T6285] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,data_err=abort,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 239.363633][ T6310] loop6: detected capacity change from 0 to 256 [ 239.625296][ T6318] loop7: detected capacity change from 0 to 128 [ 239.790536][ T6318] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.865073][ T6318] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.989200][ T6343] loop7: detected capacity change from 0 to 128 [ 241.097431][ T6343] EXT4-fs warning (device loop7): ext4_fill_super:3980: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 241.205766][ T6343] EXT4-fs (loop7): Encoding requested by superblock is unknown [ 244.297270][ T6368] loop7: detected capacity change from 0 to 4096 [ 244.332318][ T6368] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 244.352174][ T6368] ntfs3: loop7: failed to replay log file. Can't mount rw! [ 244.372107][ T4681] udevd[4681]: incorrect via_raid_member checksum on /dev/loop7 [ 245.672691][ T6392] loop4: detected capacity change from 0 to 2048 [ 245.765561][ T6392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.210058][ T6406] loop4: detected capacity change from 0 to 128 [ 246.267155][ T6407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.304885][ T6407] loop7: detected capacity change from 0 to 512 [ 246.974842][ T6407] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 247.057683][ T6406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 247.071217][ T6406] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.124596][ T6407] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 247.140407][ T6407] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.351231][ T6450] loop4: detected capacity change from 0 to 4096 [ 251.471991][ T6450] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 252.843641][ T6452] loop7: detected capacity change from 0 to 1024 [ 253.080568][ T6452] EXT4-fs error (device loop7): ext4_fill_super:4841: comm syz.7.442: inode #2: comm syz.7.442: iget: illegal inode # [ 253.154345][ T6452] EXT4-fs (loop7): get root inode failed [ 253.163561][ T6452] EXT4-fs (loop7): mount failed [ 254.056483][ T6460] loop3: detected capacity change from 0 to 2048 [ 254.161778][ T6460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.562295][ T6458] ODEBUG: Out of memory. ODEBUG disabled [ 255.120688][ T6472] ptrace attach of "./syz-executor exec"[4194] was attempted by "./syz-executor exec"[6472] [ 256.043400][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049863][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.411130][ T6476] loop4: detected capacity change from 0 to 24 [ 256.460404][ T6476] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 256.529961][ T6476] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 256.698042][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 258.159135][ T6504] loop3: detected capacity change from 0 to 64 [ 258.160547][ T4236] Bluetooth: hci5: command 0x0406 tx timeout [ 259.473661][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 259.497239][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 259.566722][ T6524] loop6: detected capacity change from 0 to 128 [ 259.780450][ T6532] loop4: detected capacity change from 0 to 256 [ 259.796688][ T6524] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.812134][ T6524] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.117616][ T6549] loop6: detected capacity change from 0 to 16 [ 261.160912][ T6549] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 261.732753][ T6549] overlayfs: missing 'lowerdir' [ 261.938486][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 262.053242][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.092590][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.418784][ T6491] device bridge_slave_0 entered promiscuous mode [ 262.460712][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.517010][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.543643][ T6491] device bridge_slave_1 entered promiscuous mode [ 263.492311][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.619084][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.456580][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 265.540007][ T6579] loop6: detected capacity change from 0 to 128 [ 265.565448][ T6491] team0: Port device team_slave_0 added [ 265.834950][ T6491] team0: Port device team_slave_1 added [ 266.103155][ C0] ------------[ cut here ]------------ [ 266.109021][ C0] WARNING: CPU: 0 PID: 6588 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x172c/0x1f80 [ 266.119130][ C0] Modules linked in: [ 266.123051][ C0] CPU: 0 PID: 6588 Comm: syz.7.471 Not tainted syzkaller #0 [ 266.130358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.140447][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 266.146809][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 51 6c 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 40 6c 3a f8 0f 0b e9 3c ef ff ff e8 34 6c 3a f8 <0f> 0b e9 b8 f2 ff ff e8 68 ef 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 266.166447][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 266.172547][ C0] RAX: ffffffff893d5e5c RBX: ffff88807db04c80 RCX: ffff888025f65940 [ 266.180532][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.188497][ C0] RBP: ffffc90000007ae8 R08: ffff888025f65940 R09: 0000000000000003 [ 266.196485][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888060c5e400 [ 266.204467][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 266.212466][ C0] FS: 00007f94f75966c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 266.221417][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.228022][ C0] CR2: 000000110c29fb6d CR3: 0000000067391000 CR4: 00000000003506f0 [ 266.236032][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.244021][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.252168][ C0] Call Trace: [ 266.255456][ C0] [ 266.258322][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 266.264344][ C0] ? verify_lock_unused+0x140/0x140 [ 266.269550][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 266.274622][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 266.280113][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 266.285575][ C0] __iterate_interfaces+0x243/0x500 [ 266.290785][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 266.297029][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 266.303294][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 266.310330][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 266.315525][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 266.320730][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 266.326701][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 266.332690][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 266.337363][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 266.342488][ C0] hrtimer_run_softirq+0x176/0x240 [ 266.347592][ C0] handle_softirqs+0x328/0x820 [ 266.352384][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 266.357238][ C0] ? do_softirq+0x200/0x200 [ 266.361750][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 266.366942][ C0] __irq_exit_rcu+0x12f/0x220 [ 266.371641][ C0] ? irq_exit_rcu+0x20/0x20 [ 266.376171][ C0] irq_exit_rcu+0x5/0x20 [ 266.380447][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 266.386079][ C0] [ 266.389003][ C0] [ 266.391952][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.397945][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 266.404480][ C0] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 266.424109][ C0] RSP: 0018:ffffc900034bf5c0 EFLAGS: 00000206 [ 266.430197][ C0] RAX: 5eeac46c1e888f00 RBX: 0000000000000a06 RCX: 5eeac46c1e888f00 [ 266.438167][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 266.446158][ C0] RBP: ffffc900034bf650 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 266.454141][ C0] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: dffffc0000000000 [ 266.462133][ C0] R13: 0000000000000000 R14: ffff88801eb68ec0 R15: 1ffff92000697eb8 [ 266.470134][ C0] ? _raw_spin_unlock+0x40/0x40 [ 266.475001][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 266.480061][ C0] __wake_up_sync_key+0x11b/0x180 [ 266.485090][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 266.491123][ C0] ? sock_load_diag_module+0x130/0x130 [ 266.496583][ C0] __unix_dgram_recvmsg+0x497/0xd50 [ 266.501796][ C0] ? unix_unhash+0x10/0x10 [ 266.506210][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 266.511450][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.517615][ C0] ? mark_lock+0x94/0x320 [ 266.522013][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 266.527032][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 266.532430][ C0] ____sys_recvmsg+0x291/0x580 [ 266.537200][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 266.542249][ C0] ? import_iovec+0x6f/0xa0 [ 266.546749][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 266.551440][ C0] ? __sys_recvmsg+0x250/0x250 [ 266.556215][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 266.561251][ C0] ? __might_fault+0xb3/0x110 [ 266.565919][ C0] do_recvmmsg+0x344/0x7a0 [ 266.570348][ C0] ? __sys_recvmmsg+0x280/0x280 [ 266.575205][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 266.580243][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 266.585263][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 266.589870][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 266.595068][ C0] do_syscall_64+0x4c/0xa0 [ 266.599469][ C0] ? clear_bhb_loop+0x30/0x80 [ 266.604152][ C0] ? clear_bhb_loop+0x30/0x80 [ 266.608821][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.614726][ C0] RIP: 0033:0x7f94f934ffc9 [ 266.619152][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.638784][ C0] RSP: 002b:00007f94f7596038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 266.647217][ C0] RAX: ffffffffffffffda RBX: 00007f94f95a7090 RCX: 00007f94f934ffc9 [ 266.655221][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 266.663204][ C0] RBP: 00007f94f93d2f91 R08: 0000000000000000 R09: 0000000000000000 [ 266.671201][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 266.679196][ C0] R13: 00007f94f95a7128 R14: 00007f94f95a7090 R15: 00007ffe72785d68 [ 266.687233][ C0] [ 266.690297][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.697559][ C0] CPU: 0 PID: 6588 Comm: syz.7.471 Not tainted syzkaller #0 [ 266.704826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.714884][ C0] Call Trace: [ 266.718154][ C0] [ 266.720993][ C0] dump_stack_lvl+0x168/0x230 [ 266.725665][ C0] ? show_regs_print_info+0x20/0x20 [ 266.730854][ C0] ? load_image+0x3b0/0x3b0 [ 266.735356][ C0] panic+0x2c9/0x7f0 [ 266.739243][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 266.743755][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 266.749464][ C0] __warn+0x248/0x2b0 [ 266.753439][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 266.759165][ C0] report_bug+0x1b7/0x2e0 [ 266.763514][ C0] handle_bug+0x3a/0x70 [ 266.767752][ C0] exc_invalid_op+0x16/0x40 [ 266.772241][ C0] asm_exc_invalid_op+0x16/0x20 [ 266.777076][ C0] RIP: 0010:__ieee80211_beacon_get+0x172c/0x1f80 [ 266.783405][ C0] Code: f8 0f 0b e9 f1 fa ff ff e8 51 6c 3a f8 0f 0b 4c 8b 74 24 08 e9 36 fe ff ff e8 40 6c 3a f8 0f 0b e9 3c ef ff ff e8 34 6c 3a f8 <0f> 0b e9 b8 f2 ff ff e8 68 ef 6b 00 44 89 e1 80 e1 07 80 c1 03 38 [ 266.803081][ C0] RSP: 0018:ffffc900000078c0 EFLAGS: 00010246 [ 266.809168][ C0] RAX: ffffffff893d5e5c RBX: ffff88807db04c80 RCX: ffff888025f65940 [ 266.817132][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.825238][ C0] RBP: ffffc90000007ae8 R08: ffff888025f65940 R09: 0000000000000003 [ 266.833220][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888060c5e400 [ 266.841195][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f28 [ 266.849179][ C0] ? __ieee80211_beacon_get+0x172c/0x1f80 [ 266.854939][ C0] ? ieee80211_beacon_get_template+0x30/0x30 [ 266.860915][ C0] ? verify_lock_unused+0x140/0x140 [ 266.866142][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 266.871195][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 266.876665][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 266.882134][ C0] __iterate_interfaces+0x243/0x500 [ 266.887348][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 266.893578][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 266.899806][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 266.906924][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 266.912114][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 266.917302][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 266.923268][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 266.929252][ C0] ? hw_scan_work+0xeb0/0xeb0 [ 266.933943][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 266.939054][ C0] hrtimer_run_softirq+0x176/0x240 [ 266.944164][ C0] handle_softirqs+0x328/0x820 [ 266.948922][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 266.953769][ C0] ? do_softirq+0x200/0x200 [ 266.958262][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 266.963453][ C0] __irq_exit_rcu+0x12f/0x220 [ 266.968117][ C0] ? irq_exit_rcu+0x20/0x20 [ 266.972636][ C0] irq_exit_rcu+0x5/0x20 [ 266.976865][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 266.982486][ C0] [ 266.985407][ C0] [ 266.988326][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.994301][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 267.000792][ C0] Code: 74 05 e8 5e 2c cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f6 b5 9e f7 65 8b 05 87 b3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 267.020387][ C0] RSP: 0018:ffffc900034bf5c0 EFLAGS: 00000206 [ 267.026444][ C0] RAX: 5eeac46c1e888f00 RBX: 0000000000000a06 RCX: 5eeac46c1e888f00 [ 267.034408][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: 0000000000000001 [ 267.042373][ C0] RBP: ffffc900034bf650 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 267.050336][ C0] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: dffffc0000000000 [ 267.058299][ C0] R13: 0000000000000000 R14: ffff88801eb68ec0 R15: 1ffff92000697eb8 [ 267.066303][ C0] ? _raw_spin_unlock+0x40/0x40 [ 267.071142][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 267.076162][ C0] __wake_up_sync_key+0x11b/0x180 [ 267.081180][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 267.087179][ C0] ? sock_load_diag_module+0x130/0x130 [ 267.092645][ C0] __unix_dgram_recvmsg+0x497/0xd50 [ 267.097846][ C0] ? unix_unhash+0x10/0x10 [ 267.102252][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 267.107446][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.113597][ C0] ? mark_lock+0x94/0x320 [ 267.117922][ C0] ? unix_dgram_recvmsg+0xb2/0xd0 [ 267.122942][ C0] ? unix_dgram_sendmsg+0x1890/0x1890 [ 267.128309][ C0] ____sys_recvmsg+0x291/0x580 [ 267.133081][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 267.138114][ C0] ? import_iovec+0x6f/0xa0 [ 267.142617][ C0] ___sys_recvmsg+0x1af/0x4f0 [ 267.147313][ C0] ? __sys_recvmsg+0x250/0x250 [ 267.152091][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 267.157121][ C0] ? __might_fault+0xb3/0x110 [ 267.161803][ C0] do_recvmmsg+0x344/0x7a0 [ 267.166222][ C0] ? __sys_recvmmsg+0x280/0x280 [ 267.171098][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 267.176135][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 267.181163][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 267.185777][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 267.190979][ C0] do_syscall_64+0x4c/0xa0 [ 267.195423][ C0] ? clear_bhb_loop+0x30/0x80 [ 267.200096][ C0] ? clear_bhb_loop+0x30/0x80 [ 267.204781][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.210679][ C0] RIP: 0033:0x7f94f934ffc9 [ 267.215098][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.234706][ C0] RSP: 002b:00007f94f7596038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 267.243131][ C0] RAX: ffffffffffffffda RBX: 00007f94f95a7090 RCX: 00007f94f934ffc9 [ 267.251310][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 267.259295][ C0] RBP: 00007f94f93d2f91 R08: 0000000000000000 R09: 0000000000000000 [ 267.267272][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 267.275239][ C0] R13: 00007f94f95a7128 R14: 00007f94f95a7090 R15: 00007ffe72785d68 [ 267.283230][ C0] [ 267.286549][ C0] Kernel Offset: disabled [ 267.291125][ C0] Rebooting in 86400 seconds..