last executing test programs: 1m56.854005966s ago: executing program 3 (id=171): r0 = socket$kcm(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") setxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) 1m56.739138686s ago: executing program 0 (id=173): socket$kcm(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPCvJ4mTbtNmF3qACtgFCgtarb3xtlHVC90LCFWVEIgD4rANiTcKseMQO1UTIpH+DXDgCn8CByQOSD1x4MYRiQNCKgekBSLQBgkkoxlPUm/idL2Nf0D8+UijmTfPM9/3ksy8mefJvAAm1o2IOIiIYkS8FREL+fpCPsXrnSn93KPD/ZWjw/2VQrTb3/pbIctP10XXNqln833ORcQ3vxbxvcLZuM3dvY3lWq26nafLrfpWubm7d3u9vrxWXatuVipLi0t3Xr37SmVgdb1e/8XDr66/8e1f/+rT7//u4Ms/TIs1n+d112OQOlWfOYmTmo6IN4YRbAym8nlxzOXgo0ki4mMR8bns+F+IqeyvEwC4zNrthWgvdKcBgMsuyfrACkkp7wuYjyQplTp9eC/ElaTWaLZuPWjsbK52+squxkzyYL1WvXNt9g8/yK4YZgppejHLy/KzdOVU+m5EXIuIn8w+k6VLK43a6vguewBgoj17qv3/52yn/e9Dj2/1AID/G3PjLgAAMHLafwCYPNp/AJg8fbT/+Zf9B0MvCwAwGk9x/58MsxwAwOjo/weAyaP9B4CJ8o0330yn9lH+/uvVt3d3Nhpv316tNjdK9Z2V0kpje6u01misZe/sqT9pf7VGY2vx5dh5p9yqNlvl5u7e/XpjZ7N1P3uv9/3qzEhqBQB8mGvX3/t9ISIOXnsmm6JrLAdtNVxunueByeUlfjC5jPYFk6v/e/zfDrUcwPj0vA+Y67n4uJ8+RRDPGcH/lJuf7L//3xjPcLno/4fJNfWRtpodeDmA0dP/D5Or3S6cHvO/eJIFAFxKF3jGv/2jQV2EAGP1pOeAB/L9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwy8xHx/SgkpXws8PlIklIp4rmIuBozhQfrteqdiHg+rkfEzGyaXhx3oQGAC0r+UsjH/7q58NL86dxi4V/ZYP/FtPXP120vpuv/frJ+9nj4sMoH211gXEEAYMDeWW61tiv5vOtG/tHh/srxNMryPLwX/8mHIl45OtzPpk7OdExn87nsWuLKPwp5ujMW6YsRMTWA+AfvRsQnetW/kPWNXM1HPu2OH3ns50YaP3ksfpLldebpxdfHB1AWmDTv3YuI13sdf0ncyOa9j/+57Ax1cQ/vdXZ2fO47OtwvHsc/Pv9N9YifHvM3+o3x8m++fmZle6GT927Ei9OPxT85/xzHL5wT/6U+4//xU5/58VfOyWv/LOJm9I7fHavcqm+Vm7t7t9fry2vVtepmpbK0uHTn1buvVMpZH3X5uKf6rL++duv588qW1v/KOfHneta/eLLtF/qs/8///dZ3P/sh8b/0+V7xk3ihZ/yOtE38Yp/xl6/88tzhu9P4q+fU/0m//1t9xn//z3urfX4UABiB5u7exnKtVt2+0EJ6FzqI/ZxZSIs40B32WCh2Ff5PMdxYT7UwM6yf6tAXpk+uFQe75++kexxxdZKB1+JCC49GFWu85yVg+D446MddEgAAAAAAAAAAAAAA4Dyj+NelcdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+u/AQAA//9xkcaD") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioprio_get$uid(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m54.714528139s ago: executing program 0 (id=175): r0 = socket$kcm(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") setxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioprio_get$uid(0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000280)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) 1m54.437039613s ago: executing program 3 (id=176): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x40}}, 0x0) 1m52.845531529s ago: executing program 0 (id=179): socket$kcm(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$eJzs3c9vI1cdAPCvJ4mTbtNmF3qACtgFCgtarb3xtlHVC90LCFWVEIgD4rANiTcKseMQO1UTIpH+DXDgCn8CByQOSD1x4MYRiQNCKgekBSLQBgkkoxlPUm/idL2Nf0D8+UijmTfPM9/3ksy8mefJvAAm1o2IOIiIYkS8FREL+fpCPsXrnSn93KPD/ZWjw/2VQrTb3/pbIctP10XXNqln833ORcQ3vxbxvcLZuM3dvY3lWq26nafLrfpWubm7d3u9vrxWXatuVipLi0t3Xr37SmVgdb1e/8XDr66/8e1f/+rT7//u4Ms/TIs1n+d112OQOlWfOYmTmo6IN4YRbAym8nlxzOXgo0ki4mMR8bns+F+IqeyvEwC4zNrthWgvdKcBgMsuyfrACkkp7wuYjyQplTp9eC/ElaTWaLZuPWjsbK52+squxkzyYL1WvXNt9g8/yK4YZgppejHLy/KzdOVU+m5EXIuIn8w+k6VLK43a6vguewBgoj17qv3/52yn/e9Dj2/1AID/G3PjLgAAMHLafwCYPNp/AJg8fbT/+Zf9B0MvCwAwGk9x/58MsxwAwOjo/weAyaP9B4CJ8o0330yn9lH+/uvVt3d3Nhpv316tNjdK9Z2V0kpje6u01misZe/sqT9pf7VGY2vx5dh5p9yqNlvl5u7e/XpjZ7N1P3uv9/3qzEhqBQB8mGvX3/t9ISIOXnsmm6JrLAdtNVxunueByeUlfjC5jPYFk6v/e/zfDrUcwPj0vA+Y67n4uJ8+RRDPGcH/lJuf7L//3xjPcLno/4fJNfWRtpodeDmA0dP/D5Or3S6cHvO/eJIFAFxKF3jGv/2jQV2EAGP1pOeAB/L9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwy8xHx/SgkpXws8PlIklIp4rmIuBozhQfrteqdiHg+rkfEzGyaXhx3oQGAC0r+UsjH/7q58NL86dxi4V/ZYP/FtPXP120vpuv/frJ+9nj4sMoH211gXEEAYMDeWW61tiv5vOtG/tHh/srxNMryPLwX/8mHIl45OtzPpk7OdExn87nsWuLKPwp5ujMW6YsRMTWA+AfvRsQnetW/kPWNXM1HPu2OH3ns50YaP3ksfpLldebpxdfHB1AWmDTv3YuI13sdf0ncyOa9j/+57Ax1cQ/vdXZ2fO47OtwvHsc/Pv9N9YifHvM3+o3x8m++fmZle6GT927Ei9OPxT85/xzHL5wT/6U+4//xU5/58VfOyWv/LOJm9I7fHavcqm+Vm7t7t9fry2vVtepmpbK0uHTn1buvVMpZH3X5uKf6rL++duv588qW1v/KOfHneta/eLLtF/qs/8///dZ3P/sh8b/0+V7xk3ihZ/yOtE38Yp/xl6/88tzhu9P4q+fU/0m//1t9xn//z3urfX4UABiB5u7exnKtVt2+0EJ6FzqI/ZxZSIs40B32WCh2Ff5PMdxYT7UwM6yf6tAXpk+uFQe75++kexxxdZKB1+JCC49GFWu85yVg+D446MddEgAAAAAAAAAAAAAA4Dyj+NelcdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+u/AQAA//9xkcaD") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioprio_get$uid(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1m52.114343101s ago: executing program 4 (id=180): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f0000000100)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000040805ed00000000000000000000000005000300110000000600024000000000"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) getegid() r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 1m52.027872569s ago: executing program 3 (id=182): r0 = socket$kcm(0x10, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") setxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioprio_get$uid(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) 1m49.866874143s ago: executing program 3 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"/16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8927, &(0x7f0000000040)={'macvtap0\x00'}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$clear(0x7, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) 1m49.865537424s ago: executing program 0 (id=185): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f0000000100)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000040805ed00000000000000000000000005000300110000000600024000000000"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) getegid() r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 1m49.013916086s ago: executing program 0 (id=186): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, &(0x7f0000000540)=0x3e4b, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 1m47.983627824s ago: executing program 0 (id=187): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f0000000100)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000040805ed00000000000000000000000005000300110000000600024000000000"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) getegid() r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r3, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r4], 0x28}}, 0x0) 1m46.913979566s ago: executing program 3 (id=189): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000540)=0x3e4b, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 1m45.893214593s ago: executing program 3 (id=190): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, &(0x7f0000000100)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000040805ed00000000000000000000000005000300110000000600024000000000"], 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) getegid() r5 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0) 9.697905681s ago: executing program 4 (id=195): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") setxattr$security_capability(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) ioprio_get$uid(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000280)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f000000bdc0)={'wlan1\x00'}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) 8.571390868s ago: executing program 4 (id=292): fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3814744, &(0x7f00000007c0)={[{@noauto_da_alloc}, {@acl}, {@test_dummy_encryption}, {@resgid}, {@jqfmt_vfsv0}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x46f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpriority(0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'macsec0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.566274498s ago: executing program 1 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)) fcntl$lock(r0, 0x26, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 6.865101994s ago: executing program 2 (id=294): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 6.098867009s ago: executing program 1 (id=295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) clock_settime(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r5 = dup(r4) listen(r5, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) tkill(r3, 0xb) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 6.096320529s ago: executing program 2 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x2002, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000220000006600000016000a002500000000000000950000000000000083b0f68ff64f2bbbfa4700050f8f437c64ca67172fe2e9f4cbf78078026790dca6b70048f14db9f5ad4db0c64343a94fc9a278dfd0f8c5b545c1918238e7646235"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x6f, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000280), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c000dd544d5733e44460787fa85a8b29b7d8ff1dd09cc1b04e5ccf337e3303f37a935ccabc51a70237c01ec288778"]) umount2(&(0x7f0000000000)='./file0\x00', 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r12, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r13, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040800}, 0x2004840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000f0000000000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0xd2, &(0x7f0000000080)=""/210}, 0x90) 5.209491685s ago: executing program 2 (id=297): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 5.076516266s ago: executing program 1 (id=298): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 3.364590122s ago: executing program 4 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000f3ff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffc, 0x79, 0x11, 0xc0}, [@ldst], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2}, 0x90) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x0, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) 3.363502842s ago: executing program 1 (id=308): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 3.362473372s ago: executing program 2 (id=301): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.185611278s ago: executing program 1 (id=302): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.718137893s ago: executing program 2 (id=303): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) clock_settime(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = dup(r2) listen(r3, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x0) tkill(r1, 0xb) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) 1.242589014s ago: executing program 4 (id=304): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.039984261s ago: executing program 2 (id=305): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 722.829528ms ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x2002, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000220000006600000016000a002500000000000000950000000000000083b0f68ff64f2bbbfa4700050f8f437c64ca67172fe2e9f4cbf78078026790dca6b70048f14db9f5ad4db0c64343a94fc9a278dfd0f8c5b545c1918238e7646235"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x6f, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000280), 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c000dd544d5733e44460787fa85a8b29b7d8ff1dd09cc1b04e5ccf337e3303f37a935ccabc51a70237c01ec288778"]) umount2(&(0x7f0000000000)='./file0\x00', 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r12, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r9, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r13, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040800}, 0x2004840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="0000000f0000000000", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0xd2, &(0x7f0000000080)=""/210}, 0x90) 0s ago: executing program 4 (id=307): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, &(0x7f0000000540)=0x3e4b, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) kernel console output (not intermixed with test programs): ] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.405586][ T4960] device veth0_macvtap entered promiscuous mode [ 110.410006][ T4960] device veth1_macvtap entered promiscuous mode [ 110.676587][ T5155] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 110.679593][ T5155] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 110.682079][ T5155] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.150: Failed to acquire dquot type 0 [ 110.755432][ T5156] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.150: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 110.862058][ T5156] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.150: Directory hole found for htree leaf block 0 [ 111.341572][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 111.358272][ T4414] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 111.360593][ T4414] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:7: Failed to release dquot type 0 [ 111.424665][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.427188][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.481171][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.491359][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.499379][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.510652][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.515397][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.523912][ T5160] loop4: detected capacity change from 0 to 512 [ 111.527817][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.532506][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.544135][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.550523][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.556661][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.571853][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.574237][ T5160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.577091][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.581402][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.585737][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.590654][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.593391][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.596365][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.599125][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.602167][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.604952][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.608388][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.611133][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.614028][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.616734][ T4960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.619852][ T4960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.623948][ T4960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.626284][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.636802][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.644704][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.658809][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.701388][ T4960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.703825][ T4960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.707261][ T4960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.719353][ T4960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.895249][ T5164] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 111.898274][ T5164] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 111.900884][ T5164] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.153: Failed to acquire dquot type 0 [ 111.968225][ T5165] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.153: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 112.614131][ T5165] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.153: Directory hole found for htree leaf block 0 [ 112.653219][ T5168] loop2: detected capacity change from 0 to 512 [ 112.705241][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 112.707343][ T55] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 112.710271][ T55] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:3: Failed to release dquot type 0 [ 112.740650][ T5168] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.989003][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.991164][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.995184][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.109335][ T5175] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 113.112416][ T5175] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 113.114947][ T5175] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.154: Failed to acquire dquot type 0 [ 113.159957][ T5175] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.154: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 113.187947][ T5175] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.154: Directory hole found for htree leaf block 0 [ 113.758338][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 113.760329][ T4867] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:16: Failed to release dquot type 0 [ 113.796879][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.799413][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.803421][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.876300][ T5179] loop2: detected capacity change from 0 to 512 [ 114.087421][ T5179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.042319][ T5191] __quota_error: 1 callbacks suppressed [ 115.042333][ T5191] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 115.046405][ T5191] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 115.048882][ T5191] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.157: Failed to acquire dquot type 0 [ 115.114630][ T5193] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.157: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 116.220899][ T5193] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.157: Directory hole found for htree leaf block 0 [ 116.320939][ T5198] loop0: detected capacity change from 0 to 512 [ 116.384400][ T5198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.520455][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 116.522518][ T9] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-6 [ 116.529201][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 0 [ 116.627745][ T5204] loop4: detected capacity change from 0 to 512 [ 116.700062][ T5207] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 116.703135][ T5207] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 116.705594][ T5207] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.160: Failed to acquire dquot type 0 [ 116.780856][ T5208] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.160: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 117.358094][ T5208] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.160: Directory hole found for htree leaf block 0 [ 117.420607][ T5206] loop2: detected capacity change from 0 to 512 [ 117.423330][ T4960] EXT4-fs (loop0): unmounting filesystem. [ 117.434994][ T9] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-6 [ 117.437454][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 0 [ 117.497049][ T5206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 117.499704][ T5204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.535775][ T5217] loop0: detected capacity change from 0 to 512 [ 118.196253][ T5224] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 118.199276][ T5224] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 118.201777][ T5224] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.162: Failed to acquire dquot type 0 [ 118.213709][ T5225] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 118.216767][ T5225] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.219393][ T5225] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.161: Failed to acquire dquot type 0 [ 118.356928][ T5226] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.162: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 118.425036][ T5217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.531583][ T5232] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.163: Failed to acquire dquot type 0 [ 119.661610][ T5233] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.163: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 120.176325][ T5226] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.162: Directory hole found for htree leaf block 0 [ 120.179904][ T5233] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.163: Directory hole found for htree leaf block 0 [ 120.241104][ T4302] EXT4-fs (loop2): unmounting filesystem. [ 120.243382][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 120.245594][ T55] __quota_error: 2 callbacks suppressed [ 120.245605][ T55] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 120.249849][ T55] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:3: Failed to release dquot type 0 [ 120.307372][ T4960] EXT4-fs (loop0): unmounting filesystem. [ 120.312101][ T55] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-6 [ 120.314369][ T55] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:3: Failed to release dquot type 0 [ 120.437925][ T5242] loop0: detected capacity change from 0 to 256 [ 122.312621][ T5254] loop3: detected capacity change from 0 to 512 [ 122.381217][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.400591][ T5257] loop0: detected capacity change from 0 to 512 [ 122.560634][ T5257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 122.747687][ T5265] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 122.750697][ T5265] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 122.753057][ T5265] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.171: Failed to acquire dquot type 0 [ 122.848665][ T5266] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.171: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 124.249101][ T5268] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 124.251938][ T5268] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 124.254322][ T5268] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.173: Failed to acquire dquot type 0 [ 124.311928][ T5266] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.171: Directory hole found for htree leaf block 0 [ 124.343398][ T4960] EXT4-fs (loop0): unmounting filesystem. [ 124.365516][ T5271] loop4: detected capacity change from 0 to 512 [ 124.414509][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 124.571911][ T4616] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 124.580059][ T4616] syz.1.40: attempt to access beyond end of device [ 124.580059][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 124.584756][ T4616] syz.1.40: attempt to access beyond end of device [ 124.584756][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 124.588394][ T4616] syz.1.40: attempt to access beyond end of device [ 124.588394][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 124.593991][ T4616] syz.1.40: attempt to access beyond end of device [ 124.593991][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 124.603629][ T4311] EXT4-fs (loop3): unmounting filesystem. [ 124.607599][ T4616] syz.1.40: attempt to access beyond end of device [ 124.607599][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 124.610480][ T4962] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-6 [ 124.616193][ T4962] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:17: Failed to release dquot type 0 [ 124.631534][ T5276] loop0: detected capacity change from 0 to 512 [ 124.633996][ T4616] syz.1.40: attempt to access beyond end of device [ 124.633996][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 124.637587][ T4616] syz.1.40: attempt to access beyond end of device [ 124.637587][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 124.652730][ T4616] syz.1.40: attempt to access beyond end of device [ 124.652730][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 124.656535][ T4616] syz.1.40: attempt to access beyond end of device [ 124.656535][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 124.725937][ T5279] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.174: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 124.746075][ T5279] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.174: Directory hole found for htree leaf block 0 [ 125.222423][ T5276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.231545][ T4616] syz.1.40: attempt to access beyond end of device [ 125.231545][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 125.462110][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 125.467370][ T5248] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 125.470835][ T5248] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:19: Failed to release dquot type 0 [ 125.547912][ T5285] EXT4-fs error (device loop0): ext4_search_dir:1549: inode #2: block 3: comm syz.0.175: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 125.567890][ T5285] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.175: Directory hole found for htree leaf block 0 [ 126.028129][ T5287] loop4: detected capacity change from 0 to 512 [ 126.149013][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.150744][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.175735][ T4960] EXT4-fs (loop0): unmounting filesystem. [ 126.184666][ T4534] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-6 [ 126.197588][ T4534] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:13: Failed to release dquot type 0 [ 126.199048][ T5287] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 126.440660][ T5292] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 126.443862][ T5292] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 126.446411][ T5292] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.178: Failed to acquire dquot type 0 [ 126.680943][ T5292] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.178: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 126.691911][ T5292] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.178: Directory hole found for htree leaf block 0 [ 126.879876][ T4312] EXT4-fs (loop4): unmounting filesystem. [ 126.917313][ T4361] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 126.937969][ T4361] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:6: Failed to release dquot type 0 [ 127.038997][ T5297] loop0: detected capacity change from 0 to 512 [ 127.047280][ T5301] loop3: detected capacity change from 0 to 512 [ 127.089673][ T5297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.267749][ T5301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.479650][ T5308] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 127.482730][ T5308] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 127.485227][ T5308] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.179: Failed to acquire dquot type 0 [ 128.748009][ T5310] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 128.750845][ T5310] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 128.753510][ T5310] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.182: Failed to acquire dquot type 0 [ 128.756662][ T5311] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 3: comm syz.3.182: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 128.786273][ T5311] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.182: Directory hole found for htree leaf block 0 [ 128.910870][ T4311] EXT4-fs (loop3): unmounting filesystem. [ 129.170535][ T4962] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-6 [ 129.172908][ T4962] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:17: Failed to release dquot type 0 [ 129.177236][ T4960] EXT4-fs (loop0): unmounting filesystem. [ 129.588929][ T4616] bio_check_eod: 26728 callbacks suppressed [ 129.588945][ T4616] syz.1.40: attempt to access beyond end of device [ 129.588945][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 129.594181][ T4616] syz.1.40: attempt to access beyond end of device [ 129.594181][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 129.601121][ T4616] syz.1.40: attempt to access beyond end of device [ 129.601121][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 129.606756][ T4616] syz.1.40: attempt to access beyond end of device [ 129.606756][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 129.613528][ T4616] syz.1.40: attempt to access beyond end of device [ 129.613528][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 129.617408][ T4616] syz.1.40: attempt to access beyond end of device [ 129.617408][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 129.634868][ T4616] syz.1.40: attempt to access beyond end of device [ 129.634868][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 129.641507][ T4616] syz.1.40: attempt to access beyond end of device [ 129.641507][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 129.645386][ T4616] syz.1.40: attempt to access beyond end of device [ 129.645386][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 129.653268][ T4616] syz.1.40: attempt to access beyond end of device [ 129.653268][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 130.035045][ T4453] device hsr_slave_0 left promiscuous mode [ 130.088738][ T4453] device hsr_slave_1 left promiscuous mode [ 130.247962][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.250114][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.260788][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.262791][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.278429][ T4453] device bridge_slave_1 left promiscuous mode [ 130.280286][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.576690][ T4453] device bridge_slave_0 left promiscuous mode [ 130.633219][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.286082][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.289802][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.292172][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.295198][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.297546][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.303381][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.358070][ T4453] device veth1_macvtap left promiscuous mode [ 131.359766][ T4453] device veth0_macvtap left promiscuous mode [ 131.361362][ T4453] device veth1_vlan left promiscuous mode [ 131.362844][ T4453] device veth0_vlan left promiscuous mode [ 133.389567][ T47] Bluetooth: hci2: command tx timeout [ 134.602382][ T4616] bio_check_eod: 47874 callbacks suppressed [ 134.602400][ T4616] syz.1.40: attempt to access beyond end of device [ 134.602400][ T4616] loop1: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 134.607570][ T4616] syz.1.40: attempt to access beyond end of device [ 134.607570][ T4616] loop1: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 134.612902][ T4616] syz.1.40: attempt to access beyond end of device [ 134.612902][ T4616] loop1: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 134.616563][ T4616] syz.1.40: attempt to access beyond end of device [ 134.616563][ T4616] loop1: rw=0, sector=89248, nr_sectors = 8 limit=40427 [ 134.625009][ T4616] syz.1.40: attempt to access beyond end of device [ 134.625009][ T4616] loop1: rw=0, sector=89256, nr_sectors = 8 limit=40427 [ 134.628956][ T4616] syz.1.40: attempt to access beyond end of device [ 134.628956][ T4616] loop1: rw=0, sector=89264, nr_sectors = 8 limit=40427 [ 134.632450][ T4616] syz.1.40: attempt to access beyond end of device [ 134.632450][ T4616] loop1: rw=0, sector=89272, nr_sectors = 8 limit=40427 [ 134.635886][ T4616] syz.1.40: attempt to access beyond end of device [ 134.635886][ T4616] loop1: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 134.643241][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 134.652908][ T4616] syz.1.40: attempt to access beyond end of device [ 134.652908][ T4616] loop1: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 134.656424][ T4616] syz.1.40: attempt to access beyond end of device [ 134.656424][ T4616] loop1: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 134.839717][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 135.039222][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.389188][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.538228][ T47] Bluetooth: hci2: command tx timeout [ 137.372130][ T47] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.382768][ T47] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.386307][ T47] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.389120][ T47] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.391905][ T47] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 137.394083][ T47] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.557941][ T47] Bluetooth: hci2: command tx timeout [ 139.270612][ T4453] bond0 (unregistering): Released all slaves [ 139.478035][ T4318] Bluetooth: hci7: command tx timeout [ 139.617496][ T4616] bio_check_eod: 102457 callbacks suppressed [ 139.617510][ T4616] syz.1.40: attempt to access beyond end of device [ 139.617510][ T4616] loop1: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 139.628267][ T4318] Bluetooth: hci2: command tx timeout [ 139.632760][ T4616] syz.1.40: attempt to access beyond end of device [ 139.632760][ T4616] loop1: rw=524288, sector=86544, nr_sectors = 8 limit=40427 [ 139.653602][ T4616] syz.1.40: attempt to access beyond end of device [ 139.653602][ T4616] loop1: rw=524288, sector=86552, nr_sectors = 8 limit=40427 [ 139.657346][ T4616] syz.1.40: attempt to access beyond end of device [ 139.657346][ T4616] loop1: rw=524288, sector=86560, nr_sectors = 8 limit=40427 [ 139.673125][ T4616] syz.1.40: attempt to access beyond end of device [ 139.673125][ T4616] loop1: rw=524288, sector=86568, nr_sectors = 8 limit=40427 [ 139.676729][ T4616] syz.1.40: attempt to access beyond end of device [ 139.676729][ T4616] loop1: rw=524288, sector=86576, nr_sectors = 8 limit=40427 [ 139.687366][ T4616] syz.1.40: attempt to access beyond end of device [ 139.687366][ T4616] loop1: rw=524288, sector=86584, nr_sectors = 8 limit=40427 [ 139.691889][ T4616] syz.1.40: attempt to access beyond end of device [ 139.691889][ T4616] loop1: rw=524288, sector=86592, nr_sectors = 8 limit=40427 [ 139.695379][ T4616] syz.1.40: attempt to access beyond end of device [ 139.695379][ T4616] loop1: rw=524288, sector=86600, nr_sectors = 8 limit=40427 [ 139.706790][ T4616] syz.1.40: attempt to access beyond end of device [ 139.706790][ T4616] loop1: rw=524288, sector=86608, nr_sectors = 8 limit=40427 [ 140.712843][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 140.767332][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 141.386764][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.388935][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.391477][ T5333] device bridge_slave_0 entered promiscuous mode [ 141.394909][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.396851][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.401759][ T5359] device bridge_slave_0 entered promiscuous mode [ 141.408999][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.410859][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.413351][ T5333] device bridge_slave_1 entered promiscuous mode [ 141.428507][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.430358][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.432850][ T5359] device bridge_slave_1 entered promiscuous mode [ 141.514914][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.546106][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.548649][ T47] Bluetooth: hci7: command tx timeout [ 141.780443][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.831021][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.836468][ T5333] team0: Port device team_slave_0 added [ 141.871049][ T5333] team0: Port device team_slave_1 added [ 141.946947][ T5359] team0: Port device team_slave_0 added [ 142.025635][ T5359] team0: Port device team_slave_1 added [ 143.068442][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.070287][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.076704][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.088796][ T4318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.094525][ T4318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.097260][ T4318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.099926][ T4318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.102684][ T4318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.104753][ T4318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.299994][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.301769][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.319753][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.328352][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.330365][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.337095][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.361400][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 143.379176][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.380926][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.387342][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.560054][ T5359] device hsr_slave_0 entered promiscuous mode [ 143.627949][ T4318] Bluetooth: hci7: command tx timeout [ 143.648333][ T5359] device hsr_slave_1 entered promiscuous mode [ 143.727948][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.729919][ T5359] Cannot create hsr debugfs directory [ 143.928238][ T47] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 143.931572][ T47] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 143.934026][ T47] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 143.939245][ T47] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 143.948193][ T47] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 143.950798][ T47] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 144.030396][ T5333] device hsr_slave_0 entered promiscuous mode [ 144.138371][ T5333] device hsr_slave_1 entered promiscuous mode [ 144.198013][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.199965][ T5333] Cannot create hsr debugfs directory [ 144.639175][ T4616] bio_check_eod: 36075 callbacks suppressed [ 144.639191][ T4616] syz.1.40: attempt to access beyond end of device [ 144.639191][ T4616] loop1: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 144.717937][ T4616] syz.1.40: attempt to access beyond end of device [ 144.717937][ T4616] loop1: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 144.721756][ T4616] syz.1.40: attempt to access beyond end of device [ 144.721756][ T4616] loop1: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 144.725280][ T4616] syz.1.40: attempt to access beyond end of device [ 144.725280][ T4616] loop1: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 144.775925][ T4616] syz.1.40: attempt to access beyond end of device [ 144.775925][ T4616] loop1: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 144.781073][ T4616] syz.1.40: attempt to access beyond end of device [ 144.781073][ T4616] loop1: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 144.794113][ T4616] syz.1.40: attempt to access beyond end of device [ 144.794113][ T4616] loop1: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 144.797579][ T4616] syz.1.40: attempt to access beyond end of device [ 144.797579][ T4616] loop1: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 144.867332][ T4616] syz.1.40: attempt to access beyond end of device [ 144.867332][ T4616] loop1: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 145.148286][ T4318] Bluetooth: hci1: command tx timeout [ 145.174495][ T4616] syz.1.40: attempt to access beyond end of device [ 145.174495][ T4616] loop1: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 145.717853][ T4318] Bluetooth: hci7: command tx timeout [ 145.811640][ T5333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.934665][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 146.011272][ T5333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.031432][ T47] Bluetooth: hci8: command tx timeout [ 146.119334][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 146.239861][ T5333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.306674][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.319096][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.326645][ T5394] device bridge_slave_0 entered promiscuous mode [ 146.405718][ T5333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.429105][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.430924][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.433522][ T5394] device bridge_slave_1 entered promiscuous mode [ 146.438181][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.440077][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.442660][ T5402] device bridge_slave_0 entered promiscuous mode [ 146.525456][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.527408][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.530764][ T5402] device bridge_slave_1 entered promiscuous mode [ 146.581966][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.586534][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.604650][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.609512][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.247944][ T4318] Bluetooth: hci1: command tx timeout [ 147.338925][ T5402] team0: Port device team_slave_0 added [ 147.638635][ T5394] team0: Port device team_slave_0 added [ 148.166970][ T47] Bluetooth: hci8: command tx timeout [ 148.709323][ T5402] team0: Port device team_slave_1 added [ 148.713192][ T5394] team0: Port device team_slave_1 added [ 148.840991][ T4453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.904767][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.906686][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.929204][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.933994][ T5333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.008392][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.010214][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.016686][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.021806][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.023632][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.649674][ T4616] bio_check_eod: 32766 callbacks suppressed [ 149.649718][ T4616] syz.1.40: attempt to access beyond end of device [ 149.649718][ T4616] loop1: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 149.720359][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.728796][ T4318] Bluetooth: hci1: command tx timeout [ 149.734833][ T4616] syz.1.40: attempt to access beyond end of device [ 149.734833][ T4616] loop1: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 149.747955][ T4616] syz.1.40: attempt to access beyond end of device [ 149.747955][ T4616] loop1: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 149.751479][ T4616] syz.1.40: attempt to access beyond end of device [ 149.751479][ T4616] loop1: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 149.754845][ T4616] syz.1.40: attempt to access beyond end of device [ 149.754845][ T4616] loop1: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 149.768116][ T4616] syz.1.40: attempt to access beyond end of device [ 149.768116][ T4616] loop1: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 149.771574][ T4616] syz.1.40: attempt to access beyond end of device [ 149.771574][ T4616] loop1: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 149.774869][ T4616] syz.1.40: attempt to access beyond end of device [ 149.774869][ T4616] loop1: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 149.783302][ T4616] syz.1.40: attempt to access beyond end of device [ 149.783302][ T4616] loop1: rw=0, sector=87976, nr_sectors = 8 limit=40427 [ 149.786871][ T4616] syz.1.40: attempt to access beyond end of device [ 149.786871][ T4616] loop1: rw=0, sector=87984, nr_sectors = 8 limit=40427 [ 149.821118][ T4453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.892794][ T5359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.905318][ T5333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.047140][ T5333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 150.327965][ T47] Bluetooth: hci8: command tx timeout [ 150.782408][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.784238][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.790860][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.979682][ T4453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.049909][ T5359] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.054839][ T5333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 151.141802][ T4453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.240505][ T5359] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.342431][ T5402] device hsr_slave_0 entered promiscuous mode [ 151.385563][ T5402] device hsr_slave_1 entered promiscuous mode [ 151.787932][ T47] Bluetooth: hci1: command tx timeout [ 152.108335][ T5402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.110267][ T5402] Cannot create hsr debugfs directory [ 152.208209][ T5359] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.279640][ T5394] device hsr_slave_0 entered promiscuous mode [ 152.308360][ T5394] device hsr_slave_1 entered promiscuous mode [ 152.331697][ T5451] overlayfs: failed to resolve './file2': -2 [ 152.347901][ T47] Bluetooth: hci8: command tx timeout [ 152.358098][ T5394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.360043][ T5394] Cannot create hsr debugfs directory [ 152.522812][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.576409][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.619794][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.622372][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.625840][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.641820][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.647611][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.649606][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.656955][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.669035][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.678885][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.680855][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.740786][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.743562][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.746366][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.775958][ T5333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.786273][ T5333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.844202][ T5402] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.869567][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.873165][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.876093][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.879567][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.882289][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.884869][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.887614][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.898616][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.901249][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.903623][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.960278][ T5402] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.985771][ T5359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.079780][ T5402] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.137505][ T5359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.264902][ T5402] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.285099][ T5359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.319733][ T5359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.470623][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.476765][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.480289][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.668993][ T4616] bio_check_eod: 50425 callbacks suppressed [ 154.669011][ T4616] syz.1.40: attempt to access beyond end of device [ 154.669011][ T4616] loop1: rw=524288, sector=89400, nr_sectors = 8 limit=40427 [ 154.674128][ T4616] syz.1.40: attempt to access beyond end of device [ 154.674128][ T4616] loop1: rw=524288, sector=89408, nr_sectors = 8 limit=40427 [ 154.705866][ T4616] syz.1.40: attempt to access beyond end of device [ 154.705866][ T4616] loop1: rw=524288, sector=89416, nr_sectors = 8 limit=40427 [ 154.711839][ T4616] syz.1.40: attempt to access beyond end of device [ 154.711839][ T4616] loop1: rw=524288, sector=89424, nr_sectors = 8 limit=40427 [ 154.715349][ T4616] syz.1.40: attempt to access beyond end of device [ 154.715349][ T4616] loop1: rw=524288, sector=89432, nr_sectors = 8 limit=40427 [ 154.727346][ T4616] syz.1.40: attempt to access beyond end of device [ 154.727346][ T4616] loop1: rw=524288, sector=89440, nr_sectors = 8 limit=40427 [ 154.733493][ T4616] syz.1.40: attempt to access beyond end of device [ 154.733493][ T4616] loop1: rw=524288, sector=89448, nr_sectors = 8 limit=40427 [ 154.737006][ T4616] syz.1.40: attempt to access beyond end of device [ 154.737006][ T4616] loop1: rw=524288, sector=89456, nr_sectors = 8 limit=40427 [ 154.764116][ T4616] syz.1.40: attempt to access beyond end of device [ 154.764116][ T4616] loop1: rw=524288, sector=89464, nr_sectors = 8 limit=40427 [ 154.768674][ T4616] syz.1.40: attempt to access beyond end of device [ 154.768674][ T4616] loop1: rw=524288, sector=89472, nr_sectors = 8 limit=40427 [ 154.781282][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.783943][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.703510][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.706184][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.758968][ T5333] device veth0_vlan entered promiscuous mode [ 155.765115][ T5333] device veth1_vlan entered promiscuous mode [ 155.768385][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.770936][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.244565][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.649077][ T5333] device veth0_macvtap entered promiscuous mode [ 156.660839][ T5333] device veth1_macvtap entered promiscuous mode [ 156.699355][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.702130][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.704770][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.707363][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.733881][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.736952][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.748534][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.751191][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.753653][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.756264][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.759384][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.762115][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.766174][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.071193][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.075640][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.839384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.848402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.850941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.855627][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.883370][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.885776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.889649][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.892309][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.894960][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.897647][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.902336][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.905427][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.908075][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.910818][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.913370][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.916236][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.918860][ T5333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.921608][ T5333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.927724][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.138745][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.141500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.146004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.149433][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.158047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.164079][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.166012][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.175012][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.180727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.184991][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.186973][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.194851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.202933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.476119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.480397][ T5333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.482934][ T5333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.485349][ T5333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.490922][ T5333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.503214][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.509043][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.512964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.714898][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.717708][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.727158][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.730632][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.758073][ T4318] Bluetooth: hci0: command 0x0406 tx timeout [ 159.065569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.068869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.479914][ T5359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.689935][ T4616] bio_check_eod: 49615 callbacks suppressed [ 159.690089][ T4616] syz.1.40: attempt to access beyond end of device [ 159.690089][ T4616] loop1: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 159.775783][ T4616] syz.1.40: attempt to access beyond end of device [ 159.775783][ T4616] loop1: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 159.779445][ T4616] syz.1.40: attempt to access beyond end of device [ 159.779445][ T4616] loop1: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 159.784877][ T4616] syz.1.40: attempt to access beyond end of device [ 159.784877][ T4616] loop1: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 159.789547][ T4616] syz.1.40: attempt to access beyond end of device [ 159.789547][ T4616] loop1: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 159.793179][ T4616] syz.1.40: attempt to access beyond end of device [ 159.793179][ T4616] loop1: rw=524288, sector=88136, nr_sectors = 8 limit=40427 [ 159.796791][ T4616] syz.1.40: attempt to access beyond end of device [ 159.796791][ T4616] loop1: rw=524288, sector=88144, nr_sectors = 8 limit=40427 [ 159.815056][ T4616] syz.1.40: attempt to access beyond end of device [ 159.815056][ T4616] loop1: rw=524288, sector=88152, nr_sectors = 8 limit=40427 [ 159.818697][ T4616] syz.1.40: attempt to access beyond end of device [ 159.818697][ T4616] loop1: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 159.822137][ T4616] syz.1.40: attempt to access beyond end of device [ 159.822137][ T4616] loop1: rw=524288, sector=88168, nr_sectors = 8 limit=40427 [ 160.947048][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.952760][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.980368][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.363611][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.370100][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.372383][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.377561][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.381175][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.429094][ T5394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.480800][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.519734][ T5394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.620424][ T5394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.960941][ T4616] bio_check_eod: 26448 callbacks suppressed [ 164.960958][ T4616] syz.1.40: attempt to access beyond end of device [ 164.960958][ T4616] loop1: rw=0, sector=89544, nr_sectors = 8 limit=40427 [ 164.965925][ T4616] syz.1.40: attempt to access beyond end of device [ 164.965925][ T4616] loop1: rw=0, sector=89552, nr_sectors = 8 limit=40427 [ 164.970115][ T4616] syz.1.40: attempt to access beyond end of device [ 164.970115][ T4616] loop1: rw=0, sector=89560, nr_sectors = 8 limit=40427 [ 164.973783][ T4616] syz.1.40: attempt to access beyond end of device [ 164.973783][ T4616] loop1: rw=0, sector=89568, nr_sectors = 8 limit=40427 [ 164.977235][ T4616] syz.1.40: attempt to access beyond end of device [ 164.977235][ T4616] loop1: rw=0, sector=89576, nr_sectors = 8 limit=40427 [ 164.981324][ T4616] syz.1.40: attempt to access beyond end of device [ 164.981324][ T4616] loop1: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 164.984899][ T4616] syz.1.40: attempt to access beyond end of device [ 164.984899][ T4616] loop1: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 165.056971][ T4616] syz.1.40: attempt to access beyond end of device [ 165.056971][ T4616] loop1: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 165.088963][ T4616] syz.1.40: attempt to access beyond end of device [ 165.088963][ T4616] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 165.092485][ T4616] syz.1.40: attempt to access beyond end of device [ 165.092485][ T4616] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 165.250251][ T5394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.142163][ T5402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 167.238517][ T5402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 167.280346][ T5402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.303729][ T5402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.411859][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.416904][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.474633][ T4453] device hsr_slave_0 left promiscuous mode [ 168.754076][ T4453] device hsr_slave_1 left promiscuous mode [ 169.048450][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.051486][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.064721][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.192537][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.227477][ T4453] device bridge_slave_1 left promiscuous mode [ 169.253975][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.429904][ T4453] device bridge_slave_0 left promiscuous mode [ 169.431665][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.650725][ T4453] device hsr_slave_0 left promiscuous mode [ 169.949870][ T4453] device hsr_slave_1 left promiscuous mode [ 169.972507][ T4616] bio_check_eod: 14080 callbacks suppressed [ 169.973051][ T4616] syz.1.40: attempt to access beyond end of device [ 169.973051][ T4616] loop1: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 170.438566][ T4616] syz.1.40: attempt to access beyond end of device [ 170.438566][ T4616] loop1: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 170.442850][ T4616] syz.1.40: attempt to access beyond end of device [ 170.442850][ T4616] loop1: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 170.473164][ T4616] syz.1.40: attempt to access beyond end of device [ 170.473164][ T4616] loop1: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 170.538621][ T4616] syz.1.40: attempt to access beyond end of device [ 170.538621][ T4616] loop1: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 170.542260][ T4616] syz.1.40: attempt to access beyond end of device [ 170.542260][ T4616] loop1: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 170.567470][ T4616] syz.1.40: attempt to access beyond end of device [ 170.567470][ T4616] loop1: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 170.598935][ T4616] syz.1.40: attempt to access beyond end of device [ 170.598935][ T4616] loop1: rw=524288, sector=87992, nr_sectors = 8 limit=40427 [ 170.602502][ T4616] syz.1.40: attempt to access beyond end of device [ 170.602502][ T4616] loop1: rw=524288, sector=88000, nr_sectors = 8 limit=40427 [ 170.605990][ T4616] syz.1.40: attempt to access beyond end of device [ 170.605990][ T4616] loop1: rw=524288, sector=88008, nr_sectors = 8 limit=40427 [ 170.984239][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.010817][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.878367][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.880381][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.903543][ T4453] device bridge_slave_1 left promiscuous mode [ 171.905316][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.529525][ T4453] device bridge_slave_0 left promiscuous mode [ 172.533713][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.217229][ T4616] bio_check_eod: 5282 callbacks suppressed [ 175.217244][ T4616] syz.1.40: attempt to access beyond end of device [ 175.217244][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 175.222605][ T4616] syz.1.40: attempt to access beyond end of device [ 175.222605][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 175.226058][ T4616] syz.1.40: attempt to access beyond end of device [ 175.226058][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 175.242023][ T4616] syz.1.40: attempt to access beyond end of device [ 175.242023][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 175.263945][ T4616] syz.1.40: attempt to access beyond end of device [ 175.263945][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 175.267621][ T4616] syz.1.40: attempt to access beyond end of device [ 175.267621][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 175.279108][ T4616] syz.1.40: attempt to access beyond end of device [ 175.279108][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 175.282921][ T4616] syz.1.40: attempt to access beyond end of device [ 175.282921][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 175.289082][ T4616] syz.1.40: attempt to access beyond end of device [ 175.289082][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 175.292784][ T4616] syz.1.40: attempt to access beyond end of device [ 175.292784][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 175.419720][ T4453] device veth1_macvtap left promiscuous mode [ 175.421444][ T4453] device veth0_macvtap left promiscuous mode [ 175.423076][ T4453] device veth1_vlan left promiscuous mode [ 175.424610][ T4453] device veth0_vlan left promiscuous mode [ 175.920238][ T4453] device veth1_macvtap left promiscuous mode [ 175.922341][ T4453] device veth0_macvtap left promiscuous mode [ 175.924453][ T4453] device veth1_vlan left promiscuous mode [ 175.927442][ T4453] device veth0_vlan left promiscuous mode [ 180.258385][ T4616] bio_check_eod: 30416 callbacks suppressed [ 180.258401][ T4616] syz.1.40: attempt to access beyond end of device [ 180.258401][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 180.265197][ T4616] syz.1.40: attempt to access beyond end of device [ 180.265197][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 180.271004][ T4616] syz.1.40: attempt to access beyond end of device [ 180.271004][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 180.275059][ T4616] syz.1.40: attempt to access beyond end of device [ 180.275059][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 180.287945][ T4616] syz.1.40: attempt to access beyond end of device [ 180.287945][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 180.291622][ T4616] syz.1.40: attempt to access beyond end of device [ 180.291622][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 180.295229][ T4616] syz.1.40: attempt to access beyond end of device [ 180.295229][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 180.328111][ T4616] syz.1.40: attempt to access beyond end of device [ 180.328111][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 180.332038][ T4616] syz.1.40: attempt to access beyond end of device [ 180.332038][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 180.345615][ T4616] syz.1.40: attempt to access beyond end of device [ 180.345615][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 183.937329][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 185.086274][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 185.274618][ T4616] bio_check_eod: 36640 callbacks suppressed [ 185.274798][ T4616] syz.1.40: attempt to access beyond end of device [ 185.274798][ T4616] loop1: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 185.369493][ T4616] syz.1.40: attempt to access beyond end of device [ 185.369493][ T4616] loop1: rw=0, sector=87872, nr_sectors = 8 limit=40427 [ 185.373083][ T4616] syz.1.40: attempt to access beyond end of device [ 185.373083][ T4616] loop1: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 185.376518][ T4616] syz.1.40: attempt to access beyond end of device [ 185.376518][ T4616] loop1: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 185.381429][ T4616] syz.1.40: attempt to access beyond end of device [ 185.381429][ T4616] loop1: rw=0, sector=87896, nr_sectors = 8 limit=40427 [ 185.385597][ T4616] syz.1.40: attempt to access beyond end of device [ 185.385597][ T4616] loop1: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 185.389429][ T4616] syz.1.40: attempt to access beyond end of device [ 185.389429][ T4616] loop1: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 185.393178][ T4616] syz.1.40: attempt to access beyond end of device [ 185.393178][ T4616] loop1: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 185.396767][ T4616] syz.1.40: attempt to access beyond end of device [ 185.396767][ T4616] loop1: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 185.400851][ T4616] syz.1.40: attempt to access beyond end of device [ 185.400851][ T4616] loop1: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 185.568553][ T4318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.573033][ T4318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.575616][ T4318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.580463][ T4318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.583256][ T4318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.585484][ T4318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.601466][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.567520][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.400795][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.404296][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.628960][ T4318] Bluetooth: hci3: command tx timeout [ 189.717861][ T4318] Bluetooth: hci3: command tx timeout [ 190.606251][ T4616] bio_check_eod: 39866 callbacks suppressed [ 190.606268][ T4616] syz.1.40: attempt to access beyond end of device [ 190.606268][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 190.627913][ T4616] syz.1.40: attempt to access beyond end of device [ 190.627913][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 190.631542][ T4616] syz.1.40: attempt to access beyond end of device [ 190.631542][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 190.635157][ T4616] syz.1.40: attempt to access beyond end of device [ 190.635157][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 190.657928][ T4616] syz.1.40: attempt to access beyond end of device [ 190.657928][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 190.682216][ T4616] syz.1.40: attempt to access beyond end of device [ 190.682216][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 190.685848][ T4616] syz.1.40: attempt to access beyond end of device [ 190.685848][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 190.690592][ T4616] syz.1.40: attempt to access beyond end of device [ 190.690592][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 190.694204][ T4616] syz.1.40: attempt to access beyond end of device [ 190.694204][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 190.697739][ T4616] syz.1.40: attempt to access beyond end of device [ 190.697739][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 191.788045][ T47] Bluetooth: hci3: command tx timeout [ 192.921295][ T4453] bond0 (unregistering): Released all slaves [ 193.868036][ T47] Bluetooth: hci3: command tx timeout [ 194.587900][ T4303] Bluetooth: hci5: command 0x0406 tx timeout [ 195.152764][ T4453] team0 (unregistering): Port device team_slave_1 removed [ 195.430700][ T4453] team0 (unregistering): Port device team_slave_0 removed [ 195.609961][ T4616] bio_check_eod: 134602 callbacks suppressed [ 195.609978][ T4616] syz.1.40: attempt to access beyond end of device [ 195.609978][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 195.615008][ T4616] syz.1.40: attempt to access beyond end of device [ 195.615008][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 195.618578][ T4616] syz.1.40: attempt to access beyond end of device [ 195.618578][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 195.622771][ T4616] syz.1.40: attempt to access beyond end of device [ 195.622771][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 195.626286][ T4616] syz.1.40: attempt to access beyond end of device [ 195.626286][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 195.629998][ T4616] syz.1.40: attempt to access beyond end of device [ 195.629998][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 195.633516][ T4616] syz.1.40: attempt to access beyond end of device [ 195.633516][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 195.637101][ T4616] syz.1.40: attempt to access beyond end of device [ 195.637101][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 195.640880][ T4616] syz.1.40: attempt to access beyond end of device [ 195.640880][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 195.644319][ T4616] syz.1.40: attempt to access beyond end of device [ 195.644319][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 195.719371][ T4453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.939546][ T4453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.543606][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.547314][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.550515][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.553253][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.555901][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.558742][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.745450][ T4453] bond0 (unregistering): Released all slaves [ 199.233140][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.257907][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.261123][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.293738][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.309504][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.312228][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.314609][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.316426][ T4832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.366063][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.405074][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.407757][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.411700][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.413583][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.415826][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.428134][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.582089][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.593434][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.595962][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.627995][ T4303] Bluetooth: hci4: command tx timeout [ 199.629648][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.630564][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.962323][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.387739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.410325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.471787][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.617940][ T4616] bio_check_eod: 129933 callbacks suppressed [ 200.617956][ T4616] syz.1.40: attempt to access beyond end of device [ 200.617956][ T4616] loop1: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 200.623367][ T4616] syz.1.40: attempt to access beyond end of device [ 200.623367][ T4616] loop1: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 200.627284][ T4616] syz.1.40: attempt to access beyond end of device [ 200.627284][ T4616] loop1: rw=0, sector=89248, nr_sectors = 8 limit=40427 [ 200.631526][ T4616] syz.1.40: attempt to access beyond end of device [ 200.631526][ T4616] loop1: rw=0, sector=89256, nr_sectors = 8 limit=40427 [ 200.635319][ T4616] syz.1.40: attempt to access beyond end of device [ 200.635319][ T4616] loop1: rw=0, sector=89264, nr_sectors = 8 limit=40427 [ 200.639491][ T4616] syz.1.40: attempt to access beyond end of device [ 200.639491][ T4616] loop1: rw=0, sector=89272, nr_sectors = 8 limit=40427 [ 200.643669][ T4616] syz.1.40: attempt to access beyond end of device [ 200.643669][ T4616] loop1: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 200.647160][ T4616] syz.1.40: attempt to access beyond end of device [ 200.647160][ T4616] loop1: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 200.651664][ T4616] syz.1.40: attempt to access beyond end of device [ 200.651664][ T4616] loop1: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 200.655128][ T4616] syz.1.40: attempt to access beyond end of device [ 200.655128][ T4616] loop1: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 201.408998][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.411627][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.455660][ T5394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.489530][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.503429][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.506056][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.518783][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.529653][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.532189][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.534034][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.536261][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.658268][ T5704] chnl_net:caif_netlink_parms(): no params data found [ 201.716215][ T4303] Bluetooth: hci4: command tx timeout [ 202.480395][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.491457][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.500081][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.502077][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.504603][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.548699][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.554698][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.568147][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.570906][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.578606][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.586590][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.619596][ T5732] chnl_net:caif_netlink_parms(): no params data found [ 202.728546][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.732401][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.746292][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.752984][ T47] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.755715][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.768372][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.793732][ T5402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.828518][ T5402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.604929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.607601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.611432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.614103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.691449][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.788085][ T4318] Bluetooth: hci4: command tx timeout [ 203.827971][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.829950][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.832649][ T5704] device bridge_slave_0 entered promiscuous mode [ 203.851176][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.853034][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.892099][ T5732] device bridge_slave_0 entered promiscuous mode [ 203.910759][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.912648][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.915563][ T5704] device bridge_slave_1 entered promiscuous mode [ 203.939285][ T4318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.942503][ T4318] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.945060][ T4318] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.948569][ T4318] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.950899][ T4318] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 203.953193][ T4318] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.027961][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.030005][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.032655][ T5732] device bridge_slave_1 entered promiscuous mode [ 204.184584][ T5704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.196743][ T5704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.202453][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.231892][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.263116][ T5704] team0: Port device team_slave_0 added [ 204.268446][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 204.280288][ T5732] team0: Port device team_slave_0 added [ 204.291933][ T5704] team0: Port device team_slave_1 added [ 204.300762][ T5732] team0: Port device team_slave_1 added [ 204.347339][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.350503][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.357280][ T5704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.383981][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.385932][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.395104][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.407441][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.412678][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.420491][ T5704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.426506][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.434664][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.440605][ T5762] device bridge_slave_0 entered promiscuous mode [ 204.447721][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.450142][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.466431][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.486231][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 204.493065][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.495174][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.529475][ T5762] device bridge_slave_1 entered promiscuous mode [ 204.621461][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.670186][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.739894][ T5732] device hsr_slave_0 entered promiscuous mode [ 204.778278][ T5732] device hsr_slave_1 entered promiscuous mode [ 204.817888][ T5732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.819924][ T5732] Cannot create hsr debugfs directory [ 204.828019][ T4303] Bluetooth: hci2: command tx timeout [ 204.880436][ T5704] device hsr_slave_0 entered promiscuous mode [ 204.918159][ T5704] device hsr_slave_1 entered promiscuous mode [ 204.977919][ T5704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.979917][ T5704] Cannot create hsr debugfs directory [ 205.210685][ T5762] team0: Port device team_slave_0 added [ 205.292347][ T5762] team0: Port device team_slave_1 added [ 205.345968][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.348025][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.351049][ T5777] device bridge_slave_0 entered promiscuous mode [ 205.378707][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.380584][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.383319][ T5777] device bridge_slave_1 entered promiscuous mode [ 205.422254][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.424067][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.448021][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.479388][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.481269][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.497896][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.524466][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.558657][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.599706][ T5762] device hsr_slave_0 entered promiscuous mode [ 205.628705][ T4616] bio_check_eod: 52603 callbacks suppressed [ 205.628719][ T4616] syz.1.40: attempt to access beyond end of device [ 205.628719][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 205.633661][ T4616] syz.1.40: attempt to access beyond end of device [ 205.633661][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 205.637389][ T4616] syz.1.40: attempt to access beyond end of device [ 205.637389][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 205.641789][ T4616] syz.1.40: attempt to access beyond end of device [ 205.641789][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 205.645500][ T4616] syz.1.40: attempt to access beyond end of device [ 205.645500][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 205.650491][ T4616] syz.1.40: attempt to access beyond end of device [ 205.650491][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 205.654046][ T4616] syz.1.40: attempt to access beyond end of device [ 205.654046][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 205.659254][ T5762] device hsr_slave_1 entered promiscuous mode [ 205.663120][ T4616] syz.1.40: attempt to access beyond end of device [ 205.663120][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 205.666886][ T4616] syz.1.40: attempt to access beyond end of device [ 205.666886][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 205.670815][ T4616] syz.1.40: attempt to access beyond end of device [ 205.670815][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 205.697862][ T5762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.699855][ T5762] Cannot create hsr debugfs directory [ 205.878684][ T4303] Bluetooth: hci4: command tx timeout [ 205.881130][ T5704] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.892170][ T5777] team0: Port device team_slave_0 added [ 205.911384][ T5777] team0: Port device team_slave_1 added [ 206.033372][ T5704] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.037953][ T4318] Bluetooth: hci1: command tx timeout [ 206.072762][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.074653][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.097955][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.171137][ T5704] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.206074][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.208067][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.214483][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.270363][ T5704] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.370393][ T5777] device hsr_slave_0 entered promiscuous mode [ 206.408246][ T5777] device hsr_slave_1 entered promiscuous mode [ 206.447902][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.449913][ T5777] Cannot create hsr debugfs directory [ 206.634334][ T5704] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.660739][ T5704] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.778610][ T5704] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.829829][ T5704] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.908006][ T4318] Bluetooth: hci2: command tx timeout [ 207.962215][ T5704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.031962][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.034499][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.061797][ T5704] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.108104][ T4303] Bluetooth: hci1: command tx timeout [ 208.123798][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.126490][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.129829][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.131701][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.188942][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.191431][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.198473][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.208456][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.210356][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.219998][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.228641][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.231418][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.240374][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.248793][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.258951][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.261602][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.331576][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.338589][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.347309][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.352159][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.414371][ T5732] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.451572][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.458235][ T5732] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.489822][ T5732] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.548057][ T5732] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.816946][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.865438][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.867546][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.876793][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.882832][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.885234][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.943614][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.946371][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.949513][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.951367][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.961518][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.988106][ T4318] Bluetooth: hci2: command tx timeout [ 209.042099][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.044698][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.047306][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.058270][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.060094][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.158079][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.161103][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.163758][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.169073][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 209.180246][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.190388][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.198853][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.202532][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.209138][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.214226][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.217136][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.237029][ T5704] device veth0_vlan entered promiscuous mode [ 209.344230][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.346939][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.350350][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.355045][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.364311][ T5704] device veth1_vlan entered promiscuous mode [ 209.389692][ T5732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.393113][ T5732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.401980][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.404666][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.407265][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.410793][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.434769][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.437461][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.454397][ T5704] device veth0_macvtap entered promiscuous mode [ 209.466708][ T5704] device veth1_macvtap entered promiscuous mode [ 209.493520][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.496297][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.517885][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.520680][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.523185][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.525916][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.542629][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.545334][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.562888][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.565804][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.577980][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.582533][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.585409][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.599399][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.609105][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.617106][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.621364][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.623871][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.626476][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.648054][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.651342][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.653820][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.657545][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.676982][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.687773][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.699509][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.706453][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.710267][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.202695][ T5704] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.228025][ T4303] Bluetooth: hci1: command tx timeout [ 210.289930][ T5704] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.518042][ T5704] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.520487][ T5704] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.724491][ T4616] bio_check_eod: 80290 callbacks suppressed [ 210.724509][ T4616] syz.1.40: attempt to access beyond end of device [ 210.724509][ T4616] loop1: rw=524288, sector=86704, nr_sectors = 8 limit=40427 [ 210.738050][ T4616] syz.1.40: attempt to access beyond end of device [ 210.738050][ T4616] loop1: rw=524288, sector=86712, nr_sectors = 8 limit=40427 [ 210.762811][ T4616] syz.1.40: attempt to access beyond end of device [ 210.762811][ T4616] loop1: rw=524288, sector=86720, nr_sectors = 8 limit=40427 [ 210.766695][ T4616] syz.1.40: attempt to access beyond end of device [ 210.766695][ T4616] loop1: rw=524288, sector=86728, nr_sectors = 8 limit=40427 [ 210.775634][ T4616] syz.1.40: attempt to access beyond end of device [ 210.775634][ T4616] loop1: rw=524288, sector=86736, nr_sectors = 8 limit=40427 [ 210.780410][ T4616] syz.1.40: attempt to access beyond end of device [ 210.780410][ T4616] loop1: rw=524288, sector=86744, nr_sectors = 8 limit=40427 [ 210.783931][ T4616] syz.1.40: attempt to access beyond end of device [ 210.783931][ T4616] loop1: rw=524288, sector=86752, nr_sectors = 8 limit=40427 [ 210.787540][ T4616] syz.1.40: attempt to access beyond end of device [ 210.787540][ T4616] loop1: rw=524288, sector=86760, nr_sectors = 8 limit=40427 [ 210.791436][ T4616] syz.1.40: attempt to access beyond end of device [ 210.791436][ T4616] loop1: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 210.795094][ T4616] syz.1.40: attempt to access beyond end of device [ 210.795094][ T4616] loop1: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 210.866080][ T4832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.897908][ T4832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.937498][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.950626][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.952724][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.958876][ T4832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.960185][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.961031][ T4832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.975244][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.069018][ T4303] Bluetooth: hci2: command tx timeout [ 212.268025][ T4318] Bluetooth: hci1: command tx timeout [ 212.959015][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.961769][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.730853][ T5881] loop2: detected capacity change from 0 to 512 [ 214.773199][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.776030][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.790824][ T5732] device veth0_vlan entered promiscuous mode [ 214.796742][ T5732] device veth1_vlan entered promiscuous mode [ 214.797005][ T5881] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.749048][ T4616] bio_check_eod: 36784 callbacks suppressed [ 215.749064][ T4616] syz.1.40: attempt to access beyond end of device [ 215.749064][ T4616] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 215.754173][ T4616] syz.1.40: attempt to access beyond end of device [ 215.754173][ T4616] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 215.757688][ T4616] syz.1.40: attempt to access beyond end of device [ 215.757688][ T4616] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 215.768081][ T4616] syz.1.40: attempt to access beyond end of device [ 215.768081][ T4616] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 215.771743][ T4616] syz.1.40: attempt to access beyond end of device [ 215.771743][ T4616] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 215.775301][ T4616] syz.1.40: attempt to access beyond end of device [ 215.775301][ T4616] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 215.851427][ T5888] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 215.854331][ T5888] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 215.856774][ T5888] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.275: Failed to acquire dquot type 0 [ 215.903264][ T5888] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.275: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 215.933375][ T5888] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.275: Directory hole found for htree leaf block 0 [ 216.328047][ T4616] syz.1.40: attempt to access beyond end of device [ 216.328047][ T4616] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 216.331705][ T4616] syz.1.40: attempt to access beyond end of device [ 216.331705][ T4616] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 216.365794][ T4616] syz.1.40: attempt to access beyond end of device [ 216.365794][ T4616] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 216.386029][ T4616] syz.1.40: attempt to access beyond end of device [ 216.386029][ T4616] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 216.470776][ T5704] EXT4-fs (loop2): unmounting filesystem. [ 216.473363][ T4833] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-6 [ 216.475644][ T4833] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:15: Failed to release dquot type 0 [ 216.746381][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.789819][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.792566][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.429112][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.473779][ T5907] loop2: detected capacity change from 0 to 512 [ 219.493667][ T5732] device veth0_macvtap entered promiscuous mode [ 219.497851][ T5732] device veth1_macvtap entered promiscuous mode [ 219.526318][ T5907] EXT4-fs: Ignoring removed oldalloc option [ 219.529038][ T5907] EXT4-fs (loop2): Test dummy encryption mode enabled [ 219.541668][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.544566][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.549592][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 219.552177][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 219.559246][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.688635][ T5907] EXT4-fs error (device loop2): __ext4_iget:5055: inode #11: block 1: comm syz.2.280: invalid block [ 219.692321][ T5907] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.280: couldn't read orphan inode 11 (err -117) [ 219.698339][ T5907] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.701238][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.755525][ T5918] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.280: Directory hole found for htree leaf block 0 [ 220.760773][ T4616] bio_check_eod: 38426 callbacks suppressed [ 220.760787][ T4616] syz.1.40: attempt to access beyond end of device [ 220.760787][ T4616] loop1: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 220.765817][ T4616] syz.1.40: attempt to access beyond end of device [ 220.765817][ T4616] loop1: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 220.793183][ T4616] syz.1.40: attempt to access beyond end of device [ 220.793183][ T4616] loop1: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 220.796618][ T4616] syz.1.40: attempt to access beyond end of device [ 220.796618][ T4616] loop1: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 220.800993][ T4616] syz.1.40: attempt to access beyond end of device [ 220.800993][ T4616] loop1: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 220.804551][ T4616] syz.1.40: attempt to access beyond end of device [ 220.804551][ T4616] loop1: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 220.808639][ T4616] syz.1.40: attempt to access beyond end of device [ 220.808639][ T4616] loop1: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 220.813403][ T5920] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.280: Directory hole found for htree leaf block 0 [ 220.817112][ T4616] syz.1.40: attempt to access beyond end of device [ 220.817112][ T4616] loop1: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 220.821170][ T4616] syz.1.40: attempt to access beyond end of device [ 220.821170][ T4616] loop1: rw=0, sector=87464, nr_sectors = 8 limit=40427 [ 220.824720][ T4616] syz.1.40: attempt to access beyond end of device [ 220.824720][ T4616] loop1: rw=0, sector=87472, nr_sectors = 8 limit=40427 [ 221.645377][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.648433][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.650924][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.653509][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.656073][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.659978][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.662624][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.665452][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.668465][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.671175][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.673823][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.676585][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.681309][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.698269][ T5917] device veth1_macvtap left promiscuous mode [ 221.714921][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.717580][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.042017][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.044806][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.047331][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.057886][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.060459][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.063163][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.065653][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.081293][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.083843][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.086504][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.097940][ T5732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.104631][ T5732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.117733][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.128397][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.277721][ T5704] EXT4-fs (loop2): unmounting filesystem. [ 222.361535][ T5924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.410025][ T5924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.441025][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.443975][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.448213][ T5732] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.450507][ T5732] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.453592][ T5732] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.455861][ T5732] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.469896][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.661933][ T5925] loop2: detected capacity change from 0 to 32768 [ 223.616253][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.552170][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.822170][ T4616] bio_check_eod: 36367 callbacks suppressed [ 225.822186][ T4616] syz.1.40: attempt to access beyond end of device [ 225.822186][ T4616] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 225.838040][ T4616] syz.1.40: attempt to access beyond end of device [ 225.838040][ T4616] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 225.841674][ T4616] syz.1.40: attempt to access beyond end of device [ 225.841674][ T4616] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 225.848517][ T4616] syz.1.40: attempt to access beyond end of device [ 225.848517][ T4616] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 225.852415][ T4616] syz.1.40: attempt to access beyond end of device [ 225.852415][ T4616] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 226.106199][ T4616] syz.1.40: attempt to access beyond end of device [ 226.106199][ T4616] loop1: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 227.127175][ T4616] syz.1.40: attempt to access beyond end of device [ 227.127175][ T4616] loop1: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 227.158344][ T4616] syz.1.40: attempt to access beyond end of device [ 227.158344][ T4616] loop1: rw=524288, sector=87120, nr_sectors = 8 limit=40427 [ 227.170004][ T4616] syz.1.40: attempt to access beyond end of device [ 227.170004][ T4616] loop1: rw=524288, sector=87128, nr_sectors = 8 limit=40427 [ 227.180119][ T4616] syz.1.40: attempt to access beyond end of device [ 227.180119][ T4616] loop1: rw=524288, sector=87136, nr_sectors = 8 limit=40427 [ 227.509136][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.519817][ T5085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.530425][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.533070][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.538146][ T5085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.098541][ T5951] binder_user_error: 2 callbacks suppressed [ 228.098578][ T5951] binder: 5948:5951 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.299113][ T5951] binder: 5948:5951 ioctl 89f0 20000240 returned -22 [ 228.740984][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.754777][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.788260][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.851778][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.854579][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.856978][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.859026][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.868285][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 228.870992][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 228.873415][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.875254][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.879545][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.881906][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.896977][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.232339][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.235042][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.237528][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.240524][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.243392][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.246495][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.249428][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.252380][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.255065][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.257680][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.266705][ T5777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.270907][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.344103][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.346816][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.349868][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.358465][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.361055][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.368282][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.379487][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.384063][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.385872][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.399075][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.401609][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.402702][ T5953] loop4: detected capacity change from 0 to 512 [ 229.403974][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.406999][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.416370][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.490056][ T5953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.778404][ T5960] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 229.781340][ T5960] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 229.783819][ T5960] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.195: Failed to acquire dquot type 0 [ 229.864989][ T5961] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 3: comm syz.4.195: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 230.041272][ T5961] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.195: Directory hole found for htree leaf block 0 [ 230.462363][ T5732] EXT4-fs (loop4): unmounting filesystem. [ 230.465050][ T4429] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-6 [ 230.469709][ T4429] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 0 [ 230.529017][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.531598][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.534019][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.638912][ T5968] loop4: detected capacity change from 0 to 512 [ 230.665394][ T5968] EXT4-fs: Ignoring removed oldalloc option [ 230.691573][ T5968] EXT4-fs (loop4): Test dummy encryption mode enabled [ 231.333269][ T4616] bio_check_eod: 41518 callbacks suppressed [ 231.333361][ T4616] syz.1.40: attempt to access beyond end of device [ 231.333361][ T4616] loop1: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 231.618125][ T4616] syz.1.40: attempt to access beyond end of device [ 231.618125][ T4616] loop1: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 231.663839][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.869794][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.873535][ T5968] EXT4-fs error (device loop4): __ext4_iget:5055: inode #11: block 1: comm syz.4.292: invalid block [ 231.876544][ T5968] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.292: couldn't read orphan inode 11 (err -117) [ 231.898839][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.901127][ T4616] syz.1.40: attempt to access beyond end of device [ 231.901127][ T4616] loop1: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 231.904708][ T4616] syz.1.40: attempt to access beyond end of device [ 231.904708][ T4616] loop1: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 231.916800][ T5968] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 231.952438][ T4616] syz.1.40: attempt to access beyond end of device [ 231.952438][ T4616] loop1: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 231.956031][ T4616] syz.1.40: attempt to access beyond end of device [ 231.956031][ T4616] loop1: rw=524288, sector=87408, nr_sectors = 8 limit=40427 [ 232.147765][ T4616] syz.1.40: attempt to access beyond end of device [ 232.147765][ T4616] loop1: rw=524288, sector=87416, nr_sectors = 8 limit=40427 [ 232.959163][ T4616] syz.1.40: attempt to access beyond end of device [ 232.959163][ T4616] loop1: rw=524288, sector=87424, nr_sectors = 8 limit=40427 [ 232.962725][ T4616] syz.1.40: attempt to access beyond end of device [ 232.962725][ T4616] loop1: rw=524288, sector=87432, nr_sectors = 8 limit=40427 [ 232.966228][ T4616] syz.1.40: attempt to access beyond end of device [ 232.966228][ T4616] loop1: rw=524288, sector=87440, nr_sectors = 8 limit=40427 [ 233.282136][ T5989] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.292: Directory hole found for htree leaf block 0 [ 233.314437][ T5990] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.292: Directory hole found for htree leaf block 0 [ 233.775856][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.778928][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.783223][ T5987] device veth1_macvtap left promiscuous mode [ 234.033084][ T5762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.035894][ T5762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.272053][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.279513][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.282862][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.285680][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.298342][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.309249][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 235.311310][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 235.373135][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.375625][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.378756][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.677227][ T5732] EXT4-fs (loop4): unmounting filesystem. [ 236.884830][ T4616] bio_check_eod: 25978 callbacks suppressed [ 236.884845][ T4616] syz.1.40: attempt to access beyond end of device [ 236.884845][ T4616] loop1: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 236.902429][ T5777] device veth0_vlan entered promiscuous mode [ 236.908214][ T4616] syz.1.40: attempt to access beyond end of device [ 236.908214][ T4616] loop1: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 236.909187][ T5777] device veth1_vlan entered promiscuous mode [ 236.926819][ T5777] device veth0_macvtap entered promiscuous mode [ 237.313080][ T4616] syz.1.40: attempt to access beyond end of device [ 237.313080][ T4616] loop1: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 237.669194][ T4616] syz.1.40: attempt to access beyond end of device [ 237.669194][ T4616] loop1: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 237.725610][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.728553][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.731282][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.733673][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.736418][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.739231][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.752140][ T4616] syz.1.40: attempt to access beyond end of device [ 237.752140][ T4616] loop1: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 237.755845][ T4616] syz.1.40: attempt to access beyond end of device [ 237.755845][ T4616] loop1: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 237.784564][ T4616] syz.1.40: attempt to access beyond end of device [ 237.784564][ T4616] loop1: rw=524288, sector=88792, nr_sectors = 8 limit=40427 [ 237.826021][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.025036][ T4616] syz.1.40: attempt to access beyond end of device [ 238.025036][ T4616] loop1: rw=524288, sector=88800, nr_sectors = 8 limit=40427 [ 238.044594][ T4616] syz.1.40: attempt to access beyond end of device [ 238.044594][ T4616] loop1: rw=524288, sector=88808, nr_sectors = 8 limit=40427 [ 238.066572][ T4616] syz.1.40: attempt to access beyond end of device [ 238.066572][ T4616] loop1: rw=524288, sector=88816, nr_sectors = 8 limit=40427 [ 238.354794][ T5777] device veth1_macvtap entered promiscuous mode [ 238.357534][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.366266][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.378276][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.388760][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.399068][ T5248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.414665][ T4453] device hsr_slave_0 left promiscuous mode [ 238.448009][ T4453] device hsr_slave_1 left promiscuous mode [ 238.528585][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.534265][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.537005][ T4453] device bridge_slave_1 left promiscuous mode [ 238.543861][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.606970][ T4453] device bridge_slave_0 left promiscuous mode [ 238.609687][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.670595][ T4453] device hsr_slave_0 left promiscuous mode [ 238.708150][ T4453] device hsr_slave_1 left promiscuous mode [ 238.787977][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.791738][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.794591][ T4453] device bridge_slave_1 left promiscuous mode [ 238.809190][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.850585][ T4453] device bridge_slave_0 left promiscuous mode [ 238.852660][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.938960][ T4453] device hsr_slave_0 left promiscuous mode [ 238.980546][ T4453] device hsr_slave_1 left promiscuous mode [ 239.038200][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.040802][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.043426][ T4453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.047880][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.065431][ T4453] device bridge_slave_1 left promiscuous mode [ 239.067173][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.091214][ T4453] device bridge_slave_0 left promiscuous mode [ 239.093034][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.132224][ T4453] device hsr_slave_0 left promiscuous mode [ 239.266358][ T4453] device hsr_slave_1 left promiscuous mode [ 239.598925][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.626324][ T4453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.752130][ T4453] device bridge_slave_1 left promiscuous mode [ 239.812118][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.872644][ T28] INFO: task kworker/u4:12:4507 blocked for more than 144 seconds. [ 239.879615][ T28] Not tainted 6.1.106-syzkaller #0 [ 239.882411][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.901578][ T28] task:kworker/u4:12 state:D stack:0 pid:4507 ppid:2 flags:0x00000008 [ 239.983453][ T28] Workqueue: writeback wb_workfn (flush-7:1) [ 239.985063][ T28] Call trace: [ 239.985913][ T28] __switch_to+0x320/0x754 [ 239.987022][ T28] __schedule+0xef4/0x1d44 [ 239.988238][ T28] schedule+0xc4/0x170 [ 239.989286][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 239.990736][ T28] down_write+0x84/0x88 [ 239.992784][ T28] f2fs_balance_fs+0x40c/0x60c [ 239.994113][ T28] f2fs_write_inode+0x42c/0x4a0 [ 239.995410][ T28] __writeback_single_inode+0x614/0x1770 [ 239.996991][ T28] writeback_sb_inodes+0x978/0x1718 [ 240.021469][ T28] __writeback_inodes_wb+0x110/0x39c [ 240.022912][ T28] wb_writeback+0x428/0x1130 [ 240.024092][ T28] wb_workfn+0xc08/0x1034 [ 240.025210][ T28] process_one_work+0x7ac/0x1404 [ 240.026454][ T28] worker_thread+0x8e4/0xfec [ 240.027650][ T28] kthread+0x250/0x2d8 [ 240.043614][ T28] ret_from_fork+0x10/0x20 [ 240.047232][ T28] [ 240.047232][ T28] Showing all locks held in the system: [ 240.054437][ T28] 1 lock held by rcu_tasks_kthre/12: [ 240.060754][ T28] #0: ffff800015b950b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 240.072781][ T28] 1 lock held by rcu_tasks_trace/13: [ 240.076529][ T28] #0: ffff800015b958b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 240.087413][ T28] 1 lock held by khungtaskd/28: [ 240.093994][ T28] #0: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 240.107988][ T28] 2 locks held by kworker/u4:2/39: [ 240.109576][ T28] 2 locks held by getty/4054: [ 240.110774][ T28] #0: ffff0000d61d5098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 240.113208][ T28] #1: ffff80001bea02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 240.115753][ T28] 3 locks held by kworker/0:4/4349: [ 240.117098][ T28] #0: ffff0000d5e67138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.120323][ T28] #1: ffff80001e2e7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.123593][ T28] #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.125876][ T28] 3 locks held by kworker/0:7/4353: [ 240.127245][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.134707][ T28] #1: ffff80001e537c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.139912][ T28] #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.144606][ T28] 3 locks held by kworker/1:6/4381: [ 240.147218][ T28] #0: ffff0000d5e67138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.152562][ T28] #1: ffff80001e547c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.159271][ T28] #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.163881][ T28] 3 locks held by kworker/u4:7/4414: [ 240.166905][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.173560][ T28] #1: ffff80001bf57c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.179855][ T28] #2: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.184478][ T28] 2 locks held by kworker/u4:8/4415: [ 240.187065][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.193513][ T28] #1: ffff80001e317c20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.198739][ T28] 4 locks held by kworker/u4:10/4453: [ 240.201333][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.207510][ T28] #1: ffff80001e4a7c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.212630][ T28] #2: ffff800017fd8a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 240.217355][ T28] #3: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.222265][ T28] 4 locks held by kworker/u4:12/4507: [ 240.226090][ T28] #0: ffff0000c40ce938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 240.231549][ T28] #1: ffff80001f2d7c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 240.238113][ T28] #2: ffff0000ce8e40e0 (&type->s_umount_key#52){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 240.244193][ T28] #3: ffff0000d5439140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c [ 240.249107][ T28] 5 locks held by syz.1.40/4616: [ 240.251714][ T28] 1 lock held by syz-executor/5762: [ 240.255335][ T28] #0: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 240.260218][ T28] 1 lock held by syz-executor/5777: [ 240.262822][ T28] #0: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 240.267924][ T28] 1 lock held by syz.2.305/6025: [ 240.271915][ T28] 2 locks held by syz.1.306/6027: [ 240.274530][ T28] #0: ffff80001803f6b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 240.279989][ T28] #1: ffff800017fe4888 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 240.285917][ T28] [ 240.286591][ T28] ============================================= [ 240.286591][ T28] [ 240.294514][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 240.296346][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.106-syzkaller #0 [ 240.298456][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 240.301045][ T28] Call trace: [ 240.301910][ T28] dump_backtrace+0x1c8/0x1f4 [ 240.303117][ T28] show_stack+0x2c/0x3c [ 240.304314][ T28] dump_stack_lvl+0x108/0x170 [ 240.305641][ T28] dump_stack+0x1c/0x58 [ 240.306812][ T28] panic+0x300/0x804 [ 240.307811][ T28] hung_task_panic+0x0/0x2c [ 240.309003][ T28] kthread+0x250/0x2d8 [ 240.310129][ T28] ret_from_fork+0x10/0x20 [ 240.311413][ T28] SMP: stopping secondary CPUs [ 240.312716][ T28] Kernel Offset: disabled [ 240.313898][ T28] CPU features: 0x080000,02070084,26017203 [ 240.315410][ T28] Memory Limit: none [ 241.013804][ T28] Rebooting in 86400 seconds..