last executing test programs: 54.92534815s ago: executing program 0 (id=303): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa094}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 54.005196406s ago: executing program 0 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 52.41554787s ago: executing program 0 (id=310): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010000008046", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x181003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x80, 0x0, &(0x7f00000008c0)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x0, 0x28}, @fda={0x66646185, 0x6, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x40}}, 0x40}, @acquire_done, @decrefs={0x40046307, 0x3}], 0x72, 0x0, &(0x7f00000009c0)="f4911948bf4fec36a4901ad503f4425a469820fa700773c2778c8e87e84eebd2f48a96a1a457597c44e0c4707e25878fe34237abbddada61f6ed1a097f513ba25c9df332dc89afc8cefff5cd9a962b524a0800cf66ecab1a227176b8653c340931e24df3f98dd9de98d620efcfa42834241a"}) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x68}, 0x1, 0x0, 0x0, 0x4008058}, 0x80c7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000300), 0x8442, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 18.883600987s ago: executing program 1 (id=384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010000008046", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x181003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x80, 0x0, &(0x7f00000008c0)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x0, 0x28}, @fda={0x66646185, 0x6, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x40}}, 0x40}, @acquire_done, @decrefs={0x40046307, 0x3}], 0x72, 0x0, &(0x7f00000009c0)="f4911948bf4fec36a4901ad503f4425a469820fa700773c2778c8e87e84eebd2f48a96a1a457597c44e0c4707e25878fe34237abbddada61f6ed1a097f513ba25c9df332dc89afc8cefff5cd9a962b524a0800cf66ecab1a227176b8653c340931e24df3f98dd9de98d620efcfa42834241a"}) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x68}, 0x1, 0x0, 0x0, 0x4008058}, 0x80c7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000300), 0x8442, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 11.479976723s ago: executing program 1 (id=398): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x48000) ioctl$NBD_DO_IT(r0, 0xab03) 11.132082213s ago: executing program 1 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_socket_connect_nvme_tcp() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000ff7f00000008000300", @ANYRES32=r7], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x84, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dad278361c164385e5da37fafc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x84}}, 0x4081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 10.011667383s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffc93}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 8.682825886s ago: executing program 0 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000002c0)='./file1\x00', 0x3902120, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYRES32=r1], 0x6, 0x635, &(0x7f0000001340)="$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") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x22) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x4800003e, r7, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25b45, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x200}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x8100, 0x182) syz_80211_join_ibss(&(0x7f00000002c0)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.629952823s ago: executing program 1 (id=408): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010000008046", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x181003, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x80, 0x0, &(0x7f00000008c0)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x3, 0x0, 0x28}, @fda={0x66646185, 0x6, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f00000003c0)={0x0, 0x20, 0x40}}, 0x40}, @acquire_done, @decrefs={0x40046307, 0x3}], 0x72, 0x0, &(0x7f00000009c0)="f4911948bf4fec36a4901ad503f4425a469820fa700773c2778c8e87e84eebd2f48a96a1a457597c44e0c4707e25878fe34237abbddada61f6ed1a097f513ba25c9df332dc89afc8cefff5cd9a962b524a0800cf66ecab1a227176b8653c340931e24df3f98dd9de98d620efcfa42834241a"}) write$P9_RSTATu(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000006465767b6376666f7892ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde05f7"], 0x232) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYRES16=r4], 0x68}, 0x1, 0x0, 0x0, 0x4008058}, 0x80c7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x0, 0x0, 0x0) sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x0, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000300), 0x8442, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) 8.456340103s ago: executing program 3 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.111732794s ago: executing program 4 (id=415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x7, 0x9}, {0x5, 0x3}, 0x0, 0x2, 0x9}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902", 0x57, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x80008, 0x3, &(0x7f0000000040)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r7 = syz_open_dev$loop(0x0, 0x0, 0x80142) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x3, 0xad, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0xf38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9]}) 5.670519195s ago: executing program 3 (id=417): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 5.515867193s ago: executing program 4 (id=418): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85512, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfde8f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 5.477075437s ago: executing program 3 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) 3.967189781s ago: executing program 2 (id=420): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000b00)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.966849182s ago: executing program 3 (id=421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_socket_connect_nvme_tcp() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000ff7f00000008000300", @ANYRES32=r7], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x84, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dad278361c164385e5da37fafc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x84}}, 0x4081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 3.193913111s ago: executing program 2 (id=422): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa094}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 3.152472395s ago: executing program 4 (id=423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x60}}, 0x48010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r11, 0x781, 0x1000000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x4000) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r16, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5045794abaa81f218f9c964eb635ff29"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x80c0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x1000) syz_genetlink_get_family_id$nl802154(0x0, r1) 2.441799258s ago: executing program 3 (id=424): r0 = syz_open_dev$rtc(&(0x7f0000000280), 0x1, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6a0ac4ff000000007110520000000000950000000000befede5af53851933112ea910000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) tkill(r1, 0x35) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, 0x0) fstat(r3, &(0x7f0000000540)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done], 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00003a8000/0x1000)=nil) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x193, &(0x7f0000000380)="$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") 2.303935153s ago: executing program 2 (id=425): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000240)=ANY=[@ANYBLOB="626172726965722c6e6c733d6d616363726f617469616e2c73657373696f6e3d3078666666666666666666666666666637662c626172726965722c63726561746f723dddf2bd6c2c706172743d3078303030303030303030303030303031662c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c63726561746f723d65fd44c22c6e6f6465636f6d706f73652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="1c000000001552ae12f70a08bed3da659a45f6f260feb098324ea84f74793e94d6c6233b097c91744e5267096b0684c89937f52ddcf0a378e3be556c4cc1854e1db6e6b54b689c266cdf36b28a4e3bdc919f5cdf2bdaf02961b6ccbb1b27c9bc63a801b1064400d4faa8488fe0a0bea1603e706f", @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303030342c6e6c733d63703733372c626172726965722c666f7263652c6465636f6d706f73652c626172726965722c6e6c733d6b6f69382d752c626172726965722c626172726965722c747970653dfe453e622c73657373696f6e3d3078303030303030303030303030303030392c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x6da, &(0x7f0000004980)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.866178154s ago: executing program 2 (id=426): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0xe014, 0x0, 0x0, 0xf290fe5919da84ca, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x68, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) 1.862816015s ago: executing program 0 (id=427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 934.921642ms ago: executing program 4 (id=428): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 670.899113ms ago: executing program 4 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x7, 0x9}, {0x5, 0x3}, 0x0, 0x2, 0x9}) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902", 0x57, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x80008, 0x3, &(0x7f0000000040)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) keyctl$chown(0x6, 0x0, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000180)=['-[\'\x00'], 0x4}) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r7 = syz_open_dev$loop(0x0, 0x0, 0x80142) ioctl$BLKBSZSET(r7, 0x40081271, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x3, 0xad, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0xf38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9]}) 572.016614ms ago: executing program 2 (id=430): syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x900808, 0x0, 0x1, 0x0, &(0x7f00000006c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40046f01, &(0x7f0000000080)={0x2, 0xd9e, 0x7}) 570.796274ms ago: executing program 3 (id=431): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r3, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xfffffffffffffc93}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x15, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0) 243.999322ms ago: executing program 2 (id=432): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {@stripe={'stripe', 0x3d, 0x20}}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000b00)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 221.055474ms ago: executing program 1 (id=433): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x1508}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 208.457456ms ago: executing program 4 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_socket_connect_nvme_tcp() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000ff7f00000008000300", @ANYRES32=r7], 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x84, r6, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "dad278361c164385e5da37fafc"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x84}}, 0x4081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) 0s ago: executing program 1 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85512, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfde8f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) kernel console output (not intermixed with test programs): amps until 2038-01-19 (0x7fffffff) [ 135.614724][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 136.128708][ T4493] loop2: detected capacity change from 0 to 40427 [ 136.146465][ T4493] F2FS-fs (loop2): Invalid segment count (1) [ 136.153573][ T4493] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.174522][ T4493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 136.277657][ T4493] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.293011][ T4493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.359204][ T4493] syz.2.148: attempt to access beyond end of device [ 136.359204][ T4493] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 136.903438][ T4521] loop1: detected capacity change from 0 to 1024 [ 137.048763][ T4506] delete_channel: no stack [ 138.329635][ T4532] loop1: detected capacity change from 0 to 2048 [ 138.443322][ T4532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.459005][ T4532] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.685424][ T4515] loop3: detected capacity change from 0 to 32768 [ 139.275087][ T4515] (syz.3.154,4515,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.294473][ T3643] EXT4-fs (loop1): unmounting filesystem. [ 139.341242][ T4515] (syz.3.154,4515,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.400160][ T4515] JBD2: Ignoring recovery information on journal [ 139.625649][ T4515] JBD2: recovery failed [ 139.672387][ T4515] (syz.3.154,4515,0):ocfs2_journal_load:1112 ERROR: Failed to load journal! [ 139.692419][ T4515] (syz.3.154,4515,0):ocfs2_check_volume:2425 ERROR: ocfs2 journal load failed! -5 [ 139.729879][ T4515] (syz.3.154,4515,0):ocfs2_check_volume:2481 ERROR: status = -5 [ 139.872873][ T4515] (syz.3.154,4515,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 139.894306][ T4515] (syz.3.154,4515,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 140.955502][ T4561] loop3: detected capacity change from 0 to 256 [ 141.290197][ T4567] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 143.102975][ T4573] delete_channel: no stack [ 145.312157][ T4604] capability: warning: `syz.4.181' uses deprecated v2 capabilities in a way that may be insecure [ 145.628864][ T4609] loop3: detected capacity change from 0 to 256 [ 145.641158][ T4609] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.915253][ T4609] vfat filesystem being mounted at /13/bus supports timestamps until 2107-12-31 (0x10391447e) [ 146.470614][ T4597] loop1: detected capacity change from 0 to 32768 [ 146.491179][ T4597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.179 (4597) [ 146.516658][ T4597] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.527692][ T4597] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 146.537573][ T4597] BTRFS info (device loop1): using free space tree [ 147.639673][ T4597] BTRFS error (device loop1): open_ctree failed [ 147.703474][ T4632] loop4: detected capacity change from 0 to 512 [ 147.715413][ T4632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 147.755028][ T4632] EXT4-fs (loop4): 1 truncate cleaned up [ 147.774137][ T4632] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.817414][ T4632] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.4.185: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 147.900452][ T4632] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 148.052564][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 148.242298][ T4642] loop4: detected capacity change from 0 to 512 [ 148.320549][ T4642] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.343107][ T4642] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.373344][ T4646] loop3: detected capacity change from 0 to 2048 [ 148.606878][ T4642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.186'. [ 148.753687][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 148.912788][ T4646] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 148.933302][ T4646] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.053995][ T4654] loop4: detected capacity change from 0 to 1024 [ 149.247157][ T4657] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 149.253731][ T4657] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 150.298676][ T4657] vhci_hcd vhci_hcd.0: Device attached [ 150.567085][ T4203] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 150.725487][ T4638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 150.895867][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 150.903211][ T3689] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.077725][ T4667] netlink: 'syz.4.192': attribute type 4 has an invalid length. [ 151.125971][ T4667] netlink: 'syz.4.192': attribute type 4 has an invalid length. [ 151.526721][ T3689] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 151.543134][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.562587][ T3689] usb 2-1: Product: syz [ 151.569721][ T3689] usb 2-1: Manufacturer: syz [ 151.582968][ T3689] usb 2-1: SerialNumber: syz [ 151.680525][ T3689] usb 2-1: config 0 descriptor?? [ 151.774344][ T3689] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 152.433053][ T3689] (null): failure setting delay to 10us [ 152.439963][ T4658] vhci_hcd: connection reset by peer [ 152.447579][ T9] vhci_hcd: stop threads [ 152.451944][ T9] vhci_hcd: release socket [ 152.459205][ T3689] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5 [ 152.496809][ T9] vhci_hcd: disconnect device [ 152.533133][ T3689] usb 2-1: USB disconnect, device number 2 [ 153.042234][ T3644] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.052616][ T3644] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.061282][ T3644] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.070137][ T3644] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.077741][ T3644] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.093699][ T3644] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.350319][ T4672] loop4: detected capacity change from 0 to 40427 [ 153.377215][ T4672] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 153.482935][ T4672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 153.726084][ T4672] F2FS-fs (loop4): invalid crc value [ 153.755591][ T4672] F2FS-fs (loop4): Found nat_bits in checkpoint [ 153.859556][ T4672] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 153.878666][ T4693] loop3: detected capacity change from 0 to 1024 [ 153.902855][ T4672] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.067580][ T4685] loop1: detected capacity change from 0 to 65536 [ 154.129877][ T3864] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.811901][ T4692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.440832][ T4682] chnl_net:caif_netlink_parms(): no params data found [ 155.606320][ T3644] Bluetooth: hci6: command tx timeout [ 155.649742][ T4685] XFS (loop1): Mounting V5 Filesystem [ 155.763470][ T4203] vhci_hcd: vhci_device speed not set [ 155.782403][ T4709] loop3: detected capacity change from 0 to 1024 [ 156.848602][ T4685] XFS (loop1): Ending clean mount [ 157.113174][ T3658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.127132][ T3643] XFS (loop1): Unmounting Filesystem [ 157.160193][ T3658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.168828][ T3658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.186709][ T4718] netlink: 'syz.3.203': attribute type 4 has an invalid length. [ 157.187049][ T3658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.242249][ T4722] netlink: 'syz.3.203': attribute type 4 has an invalid length. [ 157.263627][ T3658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.271220][ T3658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.450224][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.537818][ T4682] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.555567][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.578380][ T4682] device bridge_slave_0 entered promiscuous mode [ 157.637123][ T4728] loop3: detected capacity change from 0 to 64 [ 157.645021][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.683364][ T3658] Bluetooth: hci6: command tx timeout [ 157.722546][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.746898][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.817678][ T4728] hfs: request for non-existent node 1280 in B*Tree [ 157.849769][ T4728] hfs: request for non-existent node 1280 in B*Tree [ 157.894756][ T4682] device bridge_slave_1 entered promiscuous mode [ 158.082779][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.114040][ T4682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.162174][ T4732] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 158.168724][ T4732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.220648][ T4737] loop1: detected capacity change from 0 to 512 [ 158.232648][ T4732] vhci_hcd vhci_hcd.0: Device attached [ 158.239338][ T4737] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.270540][ T4737] EXT4-fs (loop1): 1 truncate cleaned up [ 158.281694][ T4737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.315195][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.363199][ T3643] EXT4-fs (loop1): unmounting filesystem. [ 158.419458][ T4682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.433099][ T3688] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 158.492984][ T4203] usb 15-1: new low-speed USB device number 3 using vhci_hcd [ 158.541568][ T4744] loop1: detected capacity change from 0 to 512 [ 158.558279][ T4682] team0: Port device team_slave_0 added [ 158.578790][ T4744] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.621647][ T4744] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 158.641601][ T4744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 158.663217][ T4744] System zones: 0-2, 18-18, 34-34 [ 158.668837][ T4682] team0: Port device team_slave_1 added [ 158.687836][ T4744] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.855790][ T4744] EXT4-fs (loop1): 1 truncate cleaned up [ 158.893335][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 158.920590][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.949828][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.016767][ T4682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.053453][ T3688] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 159.073222][ T3688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.106995][ T3688] usb 4-1: Product: syz [ 159.118784][ T3643] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /51/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 159.144252][ T3688] usb 4-1: Manufacturer: syz [ 159.159145][ T3688] usb 4-1: SerialNumber: syz [ 159.187485][ T3688] usb 4-1: config 0 descriptor?? [ 159.255139][ T3688] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 159.363245][ T3658] Bluetooth: hci1: command tx timeout [ 159.432770][ T4682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.462447][ T4682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.573234][ T4682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.653426][ T3688] (null): failure setting delay to 10us [ 159.665129][ T3688] i2c-tiny-usb: probe of 4-1:0.0 failed with error -5 [ 159.693834][ T4733] vhci_hcd: connection reset by peer [ 159.703493][ T4071] vhci_hcd: stop threads [ 159.710852][ T3688] usb 4-1: USB disconnect, device number 3 [ 159.723023][ T4071] vhci_hcd: release socket [ 159.727587][ T4071] vhci_hcd: disconnect device [ 159.763311][ T3658] Bluetooth: hci6: command tx timeout [ 159.817486][ T3643] EXT4-fs (loop1): unmounting filesystem. [ 159.847283][ T4717] chnl_net:caif_netlink_parms(): no params data found [ 160.121320][ T4682] device hsr_slave_0 entered promiscuous mode [ 160.135804][ T4682] device hsr_slave_1 entered promiscuous mode [ 160.162818][ T4682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.179456][ T4682] Cannot create hsr debugfs directory [ 160.557749][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.573084][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.608501][ T4717] device bridge_slave_0 entered promiscuous mode [ 160.644166][ T4772] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 160.759241][ T4774] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 160.837830][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.858707][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.898728][ T4717] device bridge_slave_1 entered promiscuous mode [ 161.135992][ T3644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.146331][ T3644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.160095][ T3644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.168506][ T3644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.177819][ T3644] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 161.181394][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.198988][ T3649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.387008][ T4783] loop3: detected capacity change from 0 to 2048 [ 161.443834][ T3649] Bluetooth: hci1: command tx timeout [ 161.474515][ T4783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.505824][ T4783] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.539461][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.740651][ T4717] team0: Port device team_slave_0 added [ 161.786091][ T4717] team0: Port device team_slave_1 added [ 161.843027][ T3649] Bluetooth: hci6: command tx timeout [ 162.389872][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 162.566515][ T9] device hsr_slave_0 left promiscuous mode [ 162.593826][ T9] device hsr_slave_1 left promiscuous mode [ 162.648697][ T4797] loop3: detected capacity change from 0 to 512 [ 162.658215][ T4797] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.673241][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.680799][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.691670][ T4797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.701390][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.721053][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.738614][ T4799] loop4: detected capacity change from 0 to 512 [ 162.745893][ T9] device bridge_slave_1 left promiscuous mode [ 162.752152][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.773455][ T4799] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.783517][ T4797] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 162.783537][ T4797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 162.816412][ T4797] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.823259][ T4797] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 162.834007][ T9] device bridge_slave_0 left promiscuous mode [ 162.834122][ T4797] EXT4-fs warning (device loop3): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.840279][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.885230][ T9] device veth1_macvtap left promiscuous mode [ 162.891749][ T9] device veth0_macvtap left promiscuous mode [ 162.897933][ T9] device veth1_vlan left promiscuous mode [ 162.904161][ T9] device veth0_vlan left promiscuous mode [ 162.911617][ T4799] EXT4-fs (loop4): 1 truncate cleaned up [ 162.918014][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 162.922098][ T4797] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 162.954704][ T4797] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.215: bg 0: block 40: padding at end of block bitmap is not set [ 162.994568][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 163.001177][ T4797] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 163.039666][ T4797] EXT4-fs (loop3): 1 truncate cleaned up [ 163.053110][ T4797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.092256][ T4797] overlayfs: unrecognized mount option "úYˆ¾üןüð—_yá·Ÿ}åO·ÿ~ã{yZÿͲW£§ÃÔéz¥ýZtGÄæ(‚•d¼ÝÃŽ[%ç" or missing value [ 163.283246][ T3649] Bluetooth: hci2: command tx timeout [ 163.325053][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 163.523128][ T3649] Bluetooth: hci1: command tx timeout [ 163.603027][ T4203] vhci_hcd: vhci_device speed not set [ 163.976914][ T9] team0 (unregistering): Port device team_slave_1 removed [ 164.118720][ T9] team0 (unregistering): Port device team_slave_0 removed [ 164.205733][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.311647][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.513528][ T4814] loop4: detected capacity change from 0 to 32768 [ 164.617374][ T4814] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 164.957189][ T3963] ocfs2: Unmounting device (7,4) on (node local) [ 165.246171][ T4820] loop4: detected capacity change from 0 to 2048 [ 165.304036][ T4820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.312701][ T4820] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.363062][ T3649] Bluetooth: hci2: command tx timeout [ 165.603257][ T3649] Bluetooth: hci1: command tx timeout [ 165.695317][ T4824] fs-verity: sha256 using implementation "sha256-avx2" [ 165.712390][ T4824] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.220: bg 0: block 345: padding at end of block bitmap is not set [ 165.733146][ T4824] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0 [ 165.741731][ T4824] fs-verity (loop4, inode 13): Error -117 building Merkle tree [ 166.353332][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 166.364253][ T9] bond0 (unregistering): Released all slaves [ 166.610223][ T4829] netlink: 'syz.4.221': attribute type 4 has an invalid length. [ 166.675298][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.682686][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.719880][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.912217][ T4827] netlink: 'syz.4.221': attribute type 4 has an invalid length. [ 166.933249][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.940231][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.996904][ T4833] loop3: detected capacity change from 0 to 2048 [ 167.024617][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.082754][ T4833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.107032][ T4833] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.443098][ T3649] Bluetooth: hci2: command tx timeout [ 167.918873][ T4717] device hsr_slave_0 entered promiscuous mode [ 167.967894][ T4717] device hsr_slave_1 entered promiscuous mode [ 168.026613][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 168.201370][ T4778] chnl_net:caif_netlink_parms(): no params data found [ 168.365180][ T4682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 168.398866][ T4682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 168.417266][ T4682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 168.435690][ T4682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 168.874825][ T4717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.049652][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.104768][ T4851] loop4: detected capacity change from 0 to 32768 [ 169.173311][ T4717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.311846][ T4851] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 169.323495][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.378451][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.400373][ T4778] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.464073][ T4778] device bridge_slave_0 entered promiscuous mode [ 169.507751][ T4778] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.523071][ T3649] Bluetooth: hci2: command tx timeout [ 169.528465][ T4778] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.529702][ T4778] device bridge_slave_1 entered promiscuous mode [ 169.560439][ T3963] ocfs2: Unmounting device (7,4) on (node local) [ 169.687782][ T4717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.759950][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.760070][ T4872] loop3: detected capacity change from 0 to 4096 [ 170.038948][ T4717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.061282][ T4877] loop4: detected capacity change from 0 to 1024 [ 170.130531][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.177486][ T4778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.188331][ T4877] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.281867][ T4778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.318061][ T4883] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 170.355316][ T4877] netlink: 104 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.377166][ T4682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.435878][ T4778] team0: Port device team_slave_0 added [ 170.450386][ T4883] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 170.506585][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.515489][ T4890] EXT4-fs error (device loop4): __ext4_remount:6449: comm syz.4.230: Abort forced by user [ 170.580987][ T4890] EXT4-fs (loop4): Remounting filesystem read-only [ 170.589034][ T4778] team0: Port device team_slave_1 added [ 170.627094][ T4890] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 170.644757][ T4877] netlink: 32 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.684435][ T4877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.743273][ T4877] netlink: 48 bytes leftover after parsing attributes in process `syz.4.230'. [ 170.791877][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.823830][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.899643][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 170.925121][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.942003][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.946398][ T4899] loop3: detected capacity change from 0 to 2048 [ 170.949172][ T3990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.003621][ T3963] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 171.024226][ T3963] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 171.044611][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.051712][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.080559][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.111245][ T4899] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.124370][ T4778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.184278][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.287709][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.341465][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.475388][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.632537][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.729668][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.736844][ T3990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.793492][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.967132][ T4778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.974607][ T4778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.993963][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 172.002219][ T4778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.201408][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.239443][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.257583][ T3963] EXT4-fs (loop4): unmounting filesystem. [ 172.887564][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.156421][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.185494][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.394929][ T4778] device hsr_slave_0 entered promiscuous mode [ 173.415624][ T4778] device hsr_slave_1 entered promiscuous mode [ 173.433123][ T4778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.441302][ T4778] Cannot create hsr debugfs directory [ 173.467713][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.503550][ T4931] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 173.512181][ T3658] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.522973][ T3658] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.530880][ T3658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.540266][ T3658] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.548816][ T3658] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.556209][ T3658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.629988][ T4933] netlink: 'syz.3.239': attribute type 4 has an invalid length. [ 173.687996][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.708561][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.725938][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.743366][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.763740][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.783555][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.815308][ T4682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.134091][ T4940] loop3: detected capacity change from 0 to 1024 [ 174.430978][ T4939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.538368][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.689585][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.700098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.818094][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.970490][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.999955][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.011316][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.026715][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.059590][ T3796] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.066702][ T3796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.085954][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.104678][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.123577][ T3796] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.130696][ T3796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.314359][ T4682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.321859][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.346547][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.362030][ T4959] loop3: detected capacity change from 0 to 512 [ 175.421858][ T4959] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.462580][ T4959] EXT4-fs (loop3): 1 truncate cleaned up [ 175.490621][ T4959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.603549][ T3658] Bluetooth: hci3: command tx timeout [ 175.673635][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 175.738062][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.765819][ T4070] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 175.783823][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.791470][ T4070] syz.0.82: attempt to access beyond end of device [ 175.791470][ T4070] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 175.807881][ T4070] syz.0.82: attempt to access beyond end of device [ 175.807881][ T4070] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 175.826224][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.828159][ T4070] syz.0.82: attempt to access beyond end of device [ 175.828159][ T4070] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 175.848422][ T4070] syz.0.82: attempt to access beyond end of device [ 175.848422][ T4070] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 175.862320][ T4070] syz.0.82: attempt to access beyond end of device [ 175.862320][ T4070] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 175.871793][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.879542][ T4070] syz.0.82: attempt to access beyond end of device [ 175.879542][ T4070] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 175.898589][ T4070] syz.0.82: attempt to access beyond end of device [ 175.898589][ T4070] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 175.898611][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.899417][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.913085][ T4070] syz.0.82: attempt to access beyond end of device [ 175.913085][ T4070] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 175.932372][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.960279][ T4070] syz.0.82: attempt to access beyond end of device [ 175.960279][ T4070] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 175.975034][ T4070] syz.0.82: attempt to access beyond end of device [ 175.975034][ T4070] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 175.995447][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.009951][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.113764][ T4717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.224314][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.239309][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.591749][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.615593][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.760354][ T4932] chnl_net:caif_netlink_parms(): no params data found [ 176.921623][ T4682] device veth0_vlan entered promiscuous mode [ 176.929902][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.939909][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.956335][ T4682] device veth1_vlan entered promiscuous mode [ 176.986802][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.002606][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.013825][ T4825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.119565][ T9] device hsr_slave_0 left promiscuous mode [ 177.180622][ T9] device hsr_slave_1 left promiscuous mode [ 177.209285][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.236803][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.271795][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.300480][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.327185][ T9] device bridge_slave_1 left promiscuous mode [ 177.355446][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.426422][ T9] device bridge_slave_0 left promiscuous mode [ 177.438263][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.538542][ T9] device hsr_slave_0 left promiscuous mode [ 177.551570][ T9] device hsr_slave_1 left promiscuous mode [ 177.573130][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.599030][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.634123][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.652389][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.670863][ T9] device bridge_slave_1 left promiscuous mode [ 177.681986][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.691673][ T3658] Bluetooth: hci3: command tx timeout [ 177.704047][ T9] device bridge_slave_0 left promiscuous mode [ 177.710325][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.768262][ T9] device veth1_macvtap left promiscuous mode [ 177.783052][ T9] device veth0_macvtap left promiscuous mode [ 177.790370][ T9] device veth1_vlan left promiscuous mode [ 177.809457][ T9] device veth0_vlan left promiscuous mode [ 177.820716][ T9] device veth1_macvtap left promiscuous mode [ 177.838128][ T9] device veth0_macvtap left promiscuous mode [ 177.846825][ T9] device veth1_vlan left promiscuous mode [ 177.852646][ T9] device veth0_vlan left promiscuous mode [ 178.860837][ T9] team0 (unregistering): Port device team_slave_1 removed [ 178.918913][ T9] team0 (unregistering): Port device team_slave_0 removed [ 178.962019][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.049002][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.763188][ T3658] Bluetooth: hci3: command tx timeout [ 179.824383][ T9] bond0 (unregistering): Released all slaves [ 180.418586][ T9] team0 (unregistering): Port device team_slave_1 removed [ 180.476099][ T9] team0 (unregistering): Port device team_slave_0 removed [ 180.529644][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.608372][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.796668][ T4070] bio_check_eod: 67956 callbacks suppressed [ 180.796688][ T4070] syz.0.82: attempt to access beyond end of device [ 180.796688][ T4070] loop0: rw=0, sector=87224, nr_sectors = 8 limit=40427 [ 180.819789][ T4070] syz.0.82: attempt to access beyond end of device [ 180.819789][ T4070] loop0: rw=0, sector=87232, nr_sectors = 8 limit=40427 [ 180.833376][ T4070] syz.0.82: attempt to access beyond end of device [ 180.833376][ T4070] loop0: rw=0, sector=87240, nr_sectors = 8 limit=40427 [ 180.847027][ T4070] syz.0.82: attempt to access beyond end of device [ 180.847027][ T4070] loop0: rw=0, sector=87248, nr_sectors = 8 limit=40427 [ 180.860556][ T4070] syz.0.82: attempt to access beyond end of device [ 180.860556][ T4070] loop0: rw=0, sector=87256, nr_sectors = 8 limit=40427 [ 180.878377][ T4070] syz.0.82: attempt to access beyond end of device [ 180.878377][ T4070] loop0: rw=0, sector=87264, nr_sectors = 8 limit=40427 [ 180.892234][ T4070] syz.0.82: attempt to access beyond end of device [ 180.892234][ T4070] loop0: rw=0, sector=87272, nr_sectors = 8 limit=40427 [ 180.905759][ T4070] syz.0.82: attempt to access beyond end of device [ 180.905759][ T4070] loop0: rw=0, sector=87280, nr_sectors = 8 limit=40427 [ 180.921418][ T4070] syz.0.82: attempt to access beyond end of device [ 180.921418][ T4070] loop0: rw=0, sector=87288, nr_sectors = 8 limit=40427 [ 180.935159][ T4070] syz.0.82: attempt to access beyond end of device [ 180.935159][ T4070] loop0: rw=0, sector=87296, nr_sectors = 8 limit=40427 [ 181.391906][ T9] bond0 (unregistering): Released all slaves [ 181.536372][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 181.556742][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.573197][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.581497][ T5013] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 181.612347][ T5014] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 181.645163][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.754008][ T4932] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.772502][ T4932] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.789131][ T4932] device bridge_slave_0 entered promiscuous mode [ 181.806784][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.823859][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.843049][ T3658] Bluetooth: hci3: command tx timeout [ 181.851232][ T4682] device veth0_macvtap entered promiscuous mode [ 181.922498][ T4778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.955865][ T4778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.991228][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.002461][ T4932] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.021421][ T4932] device bridge_slave_1 entered promiscuous mode [ 182.032865][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.839270][ T4682] device veth1_macvtap entered promiscuous mode [ 182.854220][ T4778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.864616][ T4778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.890408][ T4932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.033557][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.053944][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.078507][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.106036][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.125689][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.144028][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.164672][ T4932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.249718][ T4717] device veth0_vlan entered promiscuous mode [ 183.270744][ T4932] team0: Port device team_slave_0 added [ 183.313278][ T4932] team0: Port device team_slave_1 added [ 183.372181][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.392980][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.469308][ T4932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.481235][ T5025] loop3: detected capacity change from 0 to 32768 [ 183.505774][ T5025] [ 183.505774][ T5025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.505774][ T5025] [ 183.514889][ T4932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.530744][ T4932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.566010][ T4932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.566197][ T5025] jfs filesystem being mounted at /48/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 183.591158][ T4717] device veth1_vlan entered promiscuous mode [ 183.623165][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.637643][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.649014][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.659975][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.683401][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.702935][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.719074][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.736739][ T4001] [ 183.736739][ T4001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.736739][ T4001] [ 183.749652][ T4001] [ 183.749652][ T4001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 183.749652][ T4001] [ 183.750597][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.807838][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.827314][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.914015][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.959926][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.993880][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.023134][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.042999][ T4682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.073192][ T4682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.094450][ T4682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.102234][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.123864][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.224740][ T4932] device hsr_slave_0 entered promiscuous mode [ 184.238216][ T4932] device hsr_slave_1 entered promiscuous mode [ 184.269750][ T4932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.293035][ T4932] Cannot create hsr debugfs directory [ 184.301158][ T4682] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.333165][ T4682] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.341950][ T4682] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.375637][ T4682] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.676518][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.699006][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.747945][ T4717] device veth0_macvtap entered promiscuous mode [ 184.868351][ T4717] device veth1_macvtap entered promiscuous mode [ 184.898349][ T4778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.948469][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.970838][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.001839][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.033359][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.053043][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.072055][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.086938][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.108314][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.134672][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.212959][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 185.243875][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.263432][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.290788][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.307455][ T4778] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.342713][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.363431][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.382977][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.403027][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.426439][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.445885][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.469936][ T4717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.499906][ T4717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.524813][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.569583][ T3925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.573563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.604628][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.614511][ T3925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.624845][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.646267][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.671435][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.678616][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.697642][ T5040] loop3: detected capacity change from 0 to 32768 [ 185.710538][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.740421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.750420][ T5040] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.773505][ T4717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.782244][ T4717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.814826][ T4070] bio_check_eod: 47682 callbacks suppressed [ 185.814844][ T4070] syz.0.82: attempt to access beyond end of device [ 185.814844][ T4070] loop0: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 185.835324][ T4717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.851771][ T4717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.870666][ T4070] syz.0.82: attempt to access beyond end of device [ 185.870666][ T4070] loop0: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 185.886049][ T4070] syz.0.82: attempt to access beyond end of device [ 185.886049][ T4070] loop0: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 185.899691][ T4070] syz.0.82: attempt to access beyond end of device [ 185.899691][ T4070] loop0: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 185.913863][ T4070] syz.0.82: attempt to access beyond end of device [ 185.913863][ T4070] loop0: rw=0, sector=88632, nr_sectors = 8 limit=40427 [ 185.933033][ T3649] Bluetooth: hci0: command 0x0406 tx timeout [ 185.944174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.953272][ T4070] syz.0.82: attempt to access beyond end of device [ 185.953272][ T4070] loop0: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 185.965175][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.975947][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.983083][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.991061][ T4070] syz.0.82: attempt to access beyond end of device [ 185.991061][ T4070] loop0: rw=0, sector=88648, nr_sectors = 8 limit=40427 [ 186.013523][ T4070] syz.0.82: attempt to access beyond end of device [ 186.013523][ T4070] loop0: rw=0, sector=88656, nr_sectors = 8 limit=40427 [ 186.044522][ T4070] syz.0.82: attempt to access beyond end of device [ 186.044522][ T4070] loop0: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 186.060634][ T4070] syz.0.82: attempt to access beyond end of device [ 186.060634][ T4070] loop0: rw=0, sector=88672, nr_sectors = 8 limit=40427 [ 186.086033][ T4001] ocfs2: Unmounting device (7,3) on (node local) [ 186.117212][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.164257][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.183567][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.213870][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.245173][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.273976][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.287083][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.337716][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.354117][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.377556][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.468557][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.512230][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.528208][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.536608][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.558179][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.582627][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.614929][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.644291][ T5066] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 186.709722][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.739436][ T5065] netlink: 'syz.3.253': attribute type 4 has an invalid length. [ 186.801319][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.830907][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.855105][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.893121][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 187.020068][ T3925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.052821][ T3925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.282258][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 187.569927][ T5067] delete_channel: no stack [ 188.203945][ T4778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.241415][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.250918][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.442725][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.467768][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.467018][ T4778] device veth0_vlan entered promiscuous mode [ 189.512975][ T5107] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 189.643180][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.652452][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.772520][ T5110] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 189.831908][ T4778] device veth1_vlan entered promiscuous mode [ 190.690629][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.704188][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.713597][ T5101] loop3: detected capacity change from 0 to 32768 [ 190.806751][ T5101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 190.857842][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.872001][ T4070] bio_check_eod: 16992 callbacks suppressed [ 190.872018][ T4070] syz.0.82: attempt to access beyond end of device [ 190.872018][ T4070] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 190.897827][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.910231][ T4070] syz.0.82: attempt to access beyond end of device [ 190.910231][ T4070] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 190.935718][ T4001] ocfs2: Unmounting device (7,3) on (node local) [ 190.940474][ T4070] syz.0.82: attempt to access beyond end of device [ 190.940474][ T4070] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 190.943297][ T4778] device veth0_macvtap entered promiscuous mode [ 190.989190][ T4070] syz.0.82: attempt to access beyond end of device [ 190.989190][ T4070] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 191.030442][ T4932] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.084814][ T4932] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.098635][ T4070] syz.0.82: attempt to access beyond end of device [ 191.098635][ T4070] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 191.145913][ T4932] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.165099][ T4070] syz.0.82: attempt to access beyond end of device [ 191.165099][ T4070] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 191.351472][ T4070] syz.0.82: attempt to access beyond end of device [ 191.351472][ T4070] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 191.509765][ T5119] delete_channel: no stack [ 191.567779][ T4070] syz.0.82: attempt to access beyond end of device [ 191.567779][ T4070] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 191.763511][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.818991][ T4070] syz.0.82: attempt to access beyond end of device [ 191.818991][ T4070] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 191.843996][ T4070] syz.0.82: attempt to access beyond end of device [ 191.843996][ T4070] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 191.861493][ T4778] device veth1_macvtap entered promiscuous mode [ 191.884836][ T4932] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 192.265263][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.303125][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.353017][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.378166][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.422128][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.470726][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.506709][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.538347][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.592992][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.646540][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.692070][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.401138][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.460109][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.555121][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.584827][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.612979][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.648035][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.668461][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.683181][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.705680][ T4778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.732953][ T4778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.754738][ T4778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.785743][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.800889][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.831103][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.852781][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.871975][ T5163] netlink: 'syz.0.272': attribute type 4 has an invalid length. [ 194.020101][ T4778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.039275][ T4778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.059725][ T4778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.080043][ T4778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.093445][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.099796][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.240734][ T5167] loop2: detected capacity change from 0 to 32768 [ 194.278620][ T5167] XFS (loop2): invalid log iosize: 0 [not 12-30] [ 194.751249][ T4932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.123528][ T5169] delete_channel: no stack [ 196.105451][ T4070] bio_check_eod: 11264 callbacks suppressed [ 196.105474][ T4070] syz.0.82: attempt to access beyond end of device [ 196.105474][ T4070] loop0: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 196.160405][ T9] device hsr_slave_0 left promiscuous mode [ 196.198398][ T9] device hsr_slave_1 left promiscuous mode [ 196.223742][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.271667][ T4070] syz.0.82: attempt to access beyond end of device [ 196.271667][ T4070] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 196.303007][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.321439][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.344159][ T4070] syz.0.82: attempt to access beyond end of device [ 196.344159][ T4070] loop0: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 196.358124][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.406225][ T9] device bridge_slave_1 left promiscuous mode [ 196.412562][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.443484][ T4070] syz.0.82: attempt to access beyond end of device [ 196.443484][ T4070] loop0: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 196.464140][ T9] device bridge_slave_0 left promiscuous mode [ 196.476350][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.483118][ T4070] syz.0.82: attempt to access beyond end of device [ 196.483118][ T4070] loop0: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 196.522417][ T4070] syz.0.82: attempt to access beyond end of device [ 196.522417][ T4070] loop0: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 196.543467][ T4070] syz.0.82: attempt to access beyond end of device [ 196.543467][ T4070] loop0: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 196.558590][ T4070] syz.0.82: attempt to access beyond end of device [ 196.558590][ T4070] loop0: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 196.574267][ T4070] syz.0.82: attempt to access beyond end of device [ 196.574267][ T4070] loop0: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 196.620011][ T4070] syz.0.82: attempt to access beyond end of device [ 196.620011][ T4070] loop0: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 196.680745][ T5193] loop2: detected capacity change from 0 to 1024 [ 196.741053][ T5193] hfsplus: bad catalog entry type [ 196.813999][ T9] device veth1_macvtap left promiscuous mode [ 196.849571][ T9] device veth0_macvtap left promiscuous mode [ 196.915554][ T9] device veth1_vlan left promiscuous mode [ 196.977187][ T9] device veth0_vlan left promiscuous mode [ 197.418526][ T11] hfsplus: b-tree write err: -5, ino 4 [ 199.064129][ T9] team0 (unregistering): Port device team_slave_1 removed [ 199.110809][ T9] team0 (unregistering): Port device team_slave_0 removed [ 199.206199][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.293745][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.392626][ T9] bond0 (unregistering): Released all slaves [ 201.141633][ T4070] bio_check_eod: 25980 callbacks suppressed [ 201.141655][ T4070] syz.0.82: attempt to access beyond end of device [ 201.141655][ T4070] loop0: rw=0, sector=87128, nr_sectors = 8 limit=40427 [ 201.213547][ T4070] syz.0.82: attempt to access beyond end of device [ 201.213547][ T4070] loop0: rw=0, sector=87136, nr_sectors = 8 limit=40427 [ 201.227513][ T4070] syz.0.82: attempt to access beyond end of device [ 201.227513][ T4070] loop0: rw=0, sector=87144, nr_sectors = 8 limit=40427 [ 201.241542][ T4070] syz.0.82: attempt to access beyond end of device [ 201.241542][ T4070] loop0: rw=0, sector=87152, nr_sectors = 8 limit=40427 [ 201.255501][ T4070] syz.0.82: attempt to access beyond end of device [ 201.255501][ T4070] loop0: rw=0, sector=87160, nr_sectors = 8 limit=40427 [ 201.333135][ T4932] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.366579][ T4070] syz.0.82: attempt to access beyond end of device [ 201.366579][ T4070] loop0: rw=0, sector=87168, nr_sectors = 8 limit=40427 [ 201.380982][ T4070] syz.0.82: attempt to access beyond end of device [ 201.380982][ T4070] loop0: rw=0, sector=87176, nr_sectors = 8 limit=40427 [ 201.395892][ T4070] syz.0.82: attempt to access beyond end of device [ 201.395892][ T4070] loop0: rw=0, sector=87184, nr_sectors = 8 limit=40427 [ 201.409539][ T4070] syz.0.82: attempt to access beyond end of device [ 201.409539][ T4070] loop0: rw=0, sector=87192, nr_sectors = 8 limit=40427 [ 201.410098][ T5206] netlink: 'syz.2.283': attribute type 4 has an invalid length. [ 201.441107][ T4070] syz.0.82: attempt to access beyond end of device [ 201.441107][ T4070] loop0: rw=0, sector=87200, nr_sectors = 8 limit=40427 [ 201.447230][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.463951][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.505713][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.521040][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.539174][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.555673][ T3990] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.555881][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.562828][ T3990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.766947][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.790693][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.117928][ T3990] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.125173][ T3990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.154537][ T5217] delete_channel: no stack [ 202.412331][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.544505][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 202.586185][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.615606][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.655113][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.689668][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.709377][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.732578][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.749903][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.762395][ T5234] loop3: detected capacity change from 0 to 1024 [ 202.908302][ T5233] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 202.939860][ T5233] device hsr0 entered promiscuous mode [ 203.017362][ T5233] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.148917][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.158406][ T75] hfsplus: b-tree write err: -5, ino 4 [ 203.187545][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.631822][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.756633][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.907142][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.952244][ T3990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.987425][ T3990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.067211][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.268837][ T5248] ip6t_rpfilter: unknown options [ 204.319986][ T5248] loop2: detected capacity change from 0 to 8 [ 204.414556][ T5248] SQUASHFS error: Unable to read inode 0x9 [ 205.059652][ T5252] netlink: 'syz.2.295': attribute type 4 has an invalid length. [ 205.643334][ T5258] nbd1: detected capacity change from 0 to 12 [ 205.693757][ T52] block nbd1: Send control failed (result -89) [ 205.701060][ T52] block nbd1: Request send failed, requeueing [ 205.712184][ T3658] block nbd1: Receive control failed (result -32) [ 205.751332][ T52] block nbd1: Dead connection, failed to find a fallback [ 205.763186][ T52] block nbd1: shutting down sockets [ 205.768981][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.780838][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.800364][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.811128][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.827334][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.868634][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.878077][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.887252][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.902803][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.912230][ T93] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.922183][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.931395][ T93] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.939876][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.949077][ T93] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.960515][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 205.969823][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 205.978087][ T5079] ldm_validate_partition_table(): Disk read failed. [ 205.997614][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.007298][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.033094][ T93] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 206.042232][ T93] Buffer I/O error on dev nbd1, logical block 0, async page read [ 206.053132][ T5079] Dev nbd1: unable to read RDB block 0 [ 206.102164][ T5079] nbd1: unable to read partition table [ 206.122545][ T5079] nbd1: partition table beyond EOD, truncated [ 206.143055][ T4070] bio_check_eod: 13998 callbacks suppressed [ 206.143076][ T4070] syz.0.82: attempt to access beyond end of device [ 206.143076][ T4070] loop0: rw=0, sector=88312, nr_sectors = 8 limit=40427 [ 206.171830][ T5079] ldm_validate_partition_table(): Disk read failed. [ 206.203009][ T5079] Dev nbd1: unable to read RDB block 0 [ 206.223369][ T5079] nbd1: unable to read partition table [ 206.260787][ T5079] nbd1: partition table beyond EOD, truncated [ 206.272319][ T4070] syz.0.82: attempt to access beyond end of device [ 206.272319][ T4070] loop0: rw=0, sector=88320, nr_sectors = 8 limit=40427 [ 206.294290][ T4070] syz.0.82: attempt to access beyond end of device [ 206.294290][ T4070] loop0: rw=0, sector=88328, nr_sectors = 8 limit=40427 [ 206.397552][ T4070] syz.0.82: attempt to access beyond end of device [ 206.397552][ T4070] loop0: rw=0, sector=88336, nr_sectors = 8 limit=40427 [ 206.422126][ T4070] syz.0.82: attempt to access beyond end of device [ 206.422126][ T4070] loop0: rw=0, sector=88344, nr_sectors = 8 limit=40427 [ 206.440005][ T4070] syz.0.82: attempt to access beyond end of device [ 206.440005][ T4070] loop0: rw=0, sector=88352, nr_sectors = 8 limit=40427 [ 206.458675][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.488339][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.518089][ T4932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.523065][ T4070] syz.0.82: attempt to access beyond end of device [ 206.523065][ T4070] loop0: rw=0, sector=88360, nr_sectors = 8 limit=40427 [ 206.596716][ T4070] syz.0.82: attempt to access beyond end of device [ 206.596716][ T4070] loop0: rw=0, sector=88368, nr_sectors = 8 limit=40427 [ 206.651544][ T4070] syz.0.82: attempt to access beyond end of device [ 206.651544][ T4070] loop0: rw=0, sector=88376, nr_sectors = 8 limit=40427 [ 206.748022][ T4070] syz.0.82: attempt to access beyond end of device [ 206.748022][ T4070] loop0: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 208.168752][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.211985][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.307027][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.327601][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.364490][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.376707][ T5277] loop3: detected capacity change from 0 to 32768 [ 208.389629][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.406735][ T4932] device veth0_vlan entered promiscuous mode [ 208.408444][ T5277] JBD2: Ignoring recovery information on journal [ 208.457486][ T5272] loop1: detected capacity change from 0 to 40427 [ 208.507573][ T5277] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 208.539127][ T5272] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 208.593020][ T5272] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 208.606273][ T5272] F2FS-fs (loop1): invalid crc value [ 208.622853][ T5272] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.675162][ T4932] device veth1_vlan entered promiscuous mode [ 208.701790][ T5272] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 208.742301][ T5272] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.778347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.794869][ T4001] ocfs2: Unmounting device (7,3) on (node local) [ 208.802164][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.828076][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.847169][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.869861][ T4932] device veth0_macvtap entered promiscuous mode [ 208.978031][ T4932] device veth1_macvtap entered promiscuous mode [ 209.020252][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.041256][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 209.081745][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.091812][ T11] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 209.109162][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.141820][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.174534][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.207340][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.247732][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.292971][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.339859][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.352564][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.381561][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.422108][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.448325][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.464476][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.481449][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.571288][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.607310][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.648043][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.679173][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.712273][ T4932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.747589][ T4932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.786397][ T4932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.812960][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.828303][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.859127][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.897668][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.946118][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.983956][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.046122][ T5299] netlink: 'syz.0.305': attribute type 4 has an invalid length. [ 210.115594][ T4932] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.144127][ T5304] loop1: detected capacity change from 0 to 256 [ 210.151354][ T5304] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 210.172957][ T4932] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.181882][ T4932] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.230182][ T4932] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.241207][ T5304] vfat filesystem being mounted at /3/bus supports timestamps until 2107-12-31 (0x10391447e) [ 210.453894][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.462053][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.538066][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 210.558526][ T3796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.577244][ T3796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.613314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.696310][ T5301] loop3: detected capacity change from 0 to 32768 [ 210.757787][ T5301] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 210.800166][ T5301] JBD2: Ignoring recovery information on journal [ 211.080786][ T5301] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 211.870500][ T3649] Bluetooth: hci4: command 0x0406 tx timeout [ 211.915170][ T4070] bio_check_eod: 12901 callbacks suppressed [ 211.915219][ T4070] syz.0.82: attempt to access beyond end of device [ 211.915219][ T4070] loop0: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 212.146159][ T4070] syz.0.82: attempt to access beyond end of device [ 212.146159][ T4070] loop0: rw=0, sector=88648, nr_sectors = 8 limit=40427 [ 212.453239][ T4070] syz.0.82: attempt to access beyond end of device [ 212.453239][ T4070] loop0: rw=0, sector=88656, nr_sectors = 8 limit=40427 [ 212.753967][ T4070] syz.0.82: attempt to access beyond end of device [ 212.753967][ T4070] loop0: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 213.007823][ T4070] syz.0.82: attempt to access beyond end of device [ 213.007823][ T4070] loop0: rw=0, sector=88672, nr_sectors = 8 limit=40427 [ 213.129624][ T4001] ocfs2: Unmounting device (7,3) on (node local) [ 213.153398][ T4070] syz.0.82: attempt to access beyond end of device [ 213.153398][ T4070] loop0: rw=0, sector=88680, nr_sectors = 8 limit=40427 [ 213.199945][ T4070] syz.0.82: attempt to access beyond end of device [ 213.199945][ T4070] loop0: rw=0, sector=88688, nr_sectors = 8 limit=40427 [ 213.265048][ T4070] syz.0.82: attempt to access beyond end of device [ 213.265048][ T4070] loop0: rw=0, sector=88696, nr_sectors = 8 limit=40427 [ 213.321213][ T4070] syz.0.82: attempt to access beyond end of device [ 213.321213][ T4070] loop0: rw=0, sector=88704, nr_sectors = 8 limit=40427 [ 213.391398][ T4070] syz.0.82: attempt to access beyond end of device [ 213.391398][ T4070] loop0: rw=0, sector=88712, nr_sectors = 8 limit=40427 [ 213.436938][ T5318] loop4: detected capacity change from 0 to 32768 [ 213.615266][ T5318] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 213.948613][ T4932] ocfs2: Unmounting device (7,4) on (node local) [ 214.363610][ T5353] netlink: 'syz.1.319': attribute type 4 has an invalid length. [ 214.485951][ T5344] loop3: detected capacity change from 0 to 40427 [ 214.508936][ T5344] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 214.544124][ T5344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.574136][ T5344] F2FS-fs (loop3): invalid crc value [ 214.757742][ T5344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 215.253067][ T3658] Bluetooth: hci3: command tx timeout [ 215.877801][ T5357] loop4: detected capacity change from 0 to 32768 [ 215.923269][ T5344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 215.938969][ T5344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.020680][ T5357] XFS (loop4): Mounting V5 Filesystem [ 216.050012][ T46] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.081890][ T46] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.186423][ T5357] XFS (loop4): Ending clean mount [ 216.209835][ T5357] XFS (loop4): Quotacheck needed: Please wait. [ 216.287206][ T5357] XFS (loop4): Quotacheck: Done. [ 217.164595][ T4070] bio_check_eod: 9353 callbacks suppressed [ 217.164616][ T4070] syz.0.82: attempt to access beyond end of device [ 217.164616][ T4070] loop0: rw=524288, sector=88304, nr_sectors = 8 limit=40427 [ 217.185716][ T4070] syz.0.82: attempt to access beyond end of device [ 217.185716][ T4070] loop0: rw=524288, sector=88312, nr_sectors = 8 limit=40427 [ 217.201138][ T4070] syz.0.82: attempt to access beyond end of device [ 217.201138][ T4070] loop0: rw=524288, sector=88320, nr_sectors = 8 limit=40427 [ 217.227736][ T4932] XFS (loop4): Unmounting Filesystem [ 217.230660][ T4070] syz.0.82: attempt to access beyond end of device [ 217.230660][ T4070] loop0: rw=524288, sector=88328, nr_sectors = 8 limit=40427 [ 217.322859][ T4070] syz.0.82: attempt to access beyond end of device [ 217.322859][ T4070] loop0: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 217.368060][ T4070] syz.0.82: attempt to access beyond end of device [ 217.368060][ T4070] loop0: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 217.507119][ T4070] syz.0.82: attempt to access beyond end of device [ 217.507119][ T4070] loop0: rw=524288, sector=88352, nr_sectors = 8 limit=40427 [ 217.615052][ T4070] syz.0.82: attempt to access beyond end of device [ 217.615052][ T4070] loop0: rw=524288, sector=88360, nr_sectors = 8 limit=40427 [ 217.712650][ T4070] syz.0.82: attempt to access beyond end of device [ 217.712650][ T4070] loop0: rw=524288, sector=88368, nr_sectors = 8 limit=40427 [ 217.820034][ T4070] syz.0.82: attempt to access beyond end of device [ 217.820034][ T4070] loop0: rw=524288, sector=88376, nr_sectors = 8 limit=40427 [ 217.917486][ T5385] loop4: detected capacity change from 0 to 512 [ 218.072791][ T5385] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 218.181952][ T5385] EXT4-fs (loop4): 1 truncate cleaned up [ 218.978137][ T5385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 218.988697][ T5396] loop1: detected capacity change from 0 to 1024 [ 219.341814][ T4932] EXT4-fs (loop4): unmounting filesystem. [ 219.352163][ T36] hfsplus: b-tree write err: -5, ino 4 [ 219.476770][ T5400] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 219.486411][ T5400] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 220.191462][ T5404] netlink: 'syz.4.330': attribute type 4 has an invalid length. [ 221.782300][ T3658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.798553][ T3658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.807177][ T3658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.815934][ T3658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.824426][ T3658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 221.832848][ T3658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.989627][ T5416] loop3: detected capacity change from 0 to 4096 [ 222.097956][ T5427] loop2: detected capacity change from 0 to 512 [ 222.147907][ T5427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.167309][ T5411] loop4: detected capacity change from 0 to 40427 [ 222.195650][ T5427] EXT4-fs (loop2): 1 truncate cleaned up [ 222.201331][ T5427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.209515][ T4070] bio_check_eod: 8614 callbacks suppressed [ 222.209534][ T4070] syz.0.82: attempt to access beyond end of device [ 222.209534][ T4070] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 222.272331][ T5411] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 222.327019][ T5411] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.374549][ T5411] F2FS-fs (loop4): invalid crc value [ 222.436262][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 222.456355][ T5411] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.459005][ T4070] syz.0.82: attempt to access beyond end of device [ 222.459005][ T4070] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 222.591091][ T5437] loop3: detected capacity change from 0 to 8 [ 222.656877][ T4070] syz.0.82: attempt to access beyond end of device [ 222.656877][ T4070] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 222.669389][ T5437] SQUASHFS error: Unable to read inode 0x9 [ 222.674603][ T5424] chnl_net:caif_netlink_parms(): no params data found [ 222.687048][ T5411] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.707305][ T5411] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.723753][ T5439] loop2: detected capacity change from 0 to 512 [ 222.791523][ T4070] syz.0.82: attempt to access beyond end of device [ 222.791523][ T4070] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 222.825512][ T5439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.833945][ T4070] syz.0.82: attempt to access beyond end of device [ 222.833945][ T4070] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 222.848583][ T5439] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.893291][ T4070] syz.0.82: attempt to access beyond end of device [ 222.893291][ T4070] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 222.907359][ T4070] syz.0.82: attempt to access beyond end of device [ 222.907359][ T4070] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 222.935982][ T36] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 223.015189][ T5447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.342'. [ 223.051454][ T4070] syz.0.82: attempt to access beyond end of device [ 223.051454][ T4070] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 223.066917][ T36] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 223.123414][ T4070] syz.0.82: attempt to access beyond end of device [ 223.123414][ T4070] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 223.168901][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.188107][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.237862][ T5424] device bridge_slave_0 entered promiscuous mode [ 223.245323][ T5423] loop1: detected capacity change from 0 to 32768 [ 223.252606][ T4070] syz.0.82: attempt to access beyond end of device [ 223.252606][ T4070] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 223.316305][ T5451] netlink: 'syz.3.344': attribute type 4 has an invalid length. [ 223.367330][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.378621][ T5423] XFS (loop1): Mounting V5 Filesystem [ 223.423081][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.546299][ T5424] device bridge_slave_1 entered promiscuous mode [ 223.602776][ T5423] XFS (loop1): Ending clean mount [ 223.676847][ T5423] XFS (loop1): Quotacheck needed: Please wait. [ 223.775963][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.786418][ T5423] XFS (loop1): Quotacheck: Done. [ 223.838517][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.923129][ T3658] Bluetooth: hci5: command tx timeout [ 224.195744][ T5424] team0: Port device team_slave_0 added [ 224.301531][ T5424] team0: Port device team_slave_1 added [ 224.393915][ T4778] XFS (loop1): Unmounting Filesystem [ 224.542434][ T5470] loop4: detected capacity change from 0 to 1024 [ 224.622578][ T5431] blk_print_req_error: 25 callbacks suppressed [ 224.622592][ T5431] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.065137][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.289180][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.304364][ T5473] loop1: detected capacity change from 0 to 64 [ 225.352422][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.608565][ T5424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.869876][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.892821][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.938334][ T5469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.002978][ T3658] Bluetooth: hci5: command tx timeout [ 226.026931][ T5424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.152455][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.182309][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 226.495841][ T5485] loop2: detected capacity change from 0 to 512 [ 226.660115][ T5485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.315471][ T4070] bio_check_eod: 14840 callbacks suppressed [ 227.315488][ T4070] syz.0.82: attempt to access beyond end of device [ 227.315488][ T4070] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 227.399900][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.441760][ T5485] EXT4-fs (loop2): 1 truncate cleaned up [ 227.455748][ T4070] syz.0.82: attempt to access beyond end of device [ 227.455748][ T4070] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 227.464484][ T5485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.526476][ T4070] syz.0.82: attempt to access beyond end of device [ 227.526476][ T4070] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 227.555548][ T5424] device hsr_slave_0 entered promiscuous mode [ 227.572704][ T5424] device hsr_slave_1 entered promiscuous mode [ 227.604995][ T5424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.633878][ T4070] syz.0.82: attempt to access beyond end of device [ 227.633878][ T4070] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 227.655484][ T5424] Cannot create hsr debugfs directory [ 227.676117][ T4070] syz.0.82: attempt to access beyond end of device [ 227.676117][ T4070] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 227.707669][ T4070] syz.0.82: attempt to access beyond end of device [ 227.707669][ T4070] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 227.728615][ T4070] syz.0.82: attempt to access beyond end of device [ 227.728615][ T4070] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 227.751321][ T4070] syz.0.82: attempt to access beyond end of device [ 227.751321][ T4070] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 227.778694][ T4070] syz.0.82: attempt to access beyond end of device [ 227.778694][ T4070] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 227.818027][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 227.846676][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.873147][ T4070] syz.0.82: attempt to access beyond end of device [ 227.873147][ T4070] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 228.043929][ T5494] ip6t_rpfilter: unknown options [ 228.063796][ T5494] loop1: detected capacity change from 0 to 8 [ 228.084004][ T3649] Bluetooth: hci5: command tx timeout [ 228.167393][ T5494] SQUASHFS error: Unable to read inode 0x9 [ 228.878920][ T5431] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.896214][ T5496] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 229.576331][ T5504] loop1: detected capacity change from 0 to 64 [ 230.153582][ T5508] loop3: detected capacity change from 0 to 512 [ 230.182966][ T3658] Bluetooth: hci5: command tx timeout [ 230.278024][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.301013][ T5508] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.507511][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 231.234286][ T5424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.298066][ T5533] loop1: detected capacity change from 0 to 1024 [ 231.340768][ T5424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.483453][ T5533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.875705][ T4778] EXT4-fs (loop1): unmounting filesystem. [ 232.041783][ T5524] loop2: detected capacity change from 0 to 32768 [ 232.056666][ T5424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.121686][ T5549] netlink: 'syz.1.365': attribute type 4 has an invalid length. [ 232.165303][ T5524] [ 232.165303][ T5524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.165303][ T5524] [ 232.226135][ T5524] jfs filesystem being mounted at /38/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 232.236982][ T5424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.320279][ T5524] [ 232.320279][ T5524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.320279][ T5524] [ 232.323494][ T4070] bio_check_eod: 13044 callbacks suppressed [ 232.323516][ T4070] syz.0.82: attempt to access beyond end of device [ 232.323516][ T4070] loop0: rw=524288, sector=87488, nr_sectors = 8 limit=40427 [ 232.392159][ T5524] [ 232.392159][ T5524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.392159][ T5524] [ 232.398214][ T4070] syz.0.82: attempt to access beyond end of device [ 232.398214][ T4070] loop0: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 232.430656][ T4070] syz.0.82: attempt to access beyond end of device [ 232.430656][ T4070] loop0: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 232.458247][ T4070] syz.0.82: attempt to access beyond end of device [ 232.458247][ T4070] loop0: rw=524288, sector=87512, nr_sectors = 8 limit=40427 [ 232.483955][ T5524] [ 232.483955][ T5524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.483955][ T5524] [ 232.515216][ T5552] loop4: detected capacity change from 0 to 512 [ 232.555091][ T5552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 232.594902][ T5552] EXT4-fs (loop4): 1 truncate cleaned up [ 232.600852][ T5552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.600957][ T5524] [ 232.600957][ T5524] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.600957][ T5524] [ 232.689779][ T4070] syz.0.82: attempt to access beyond end of device [ 232.689779][ T4070] loop0: rw=524288, sector=87520, nr_sectors = 8 limit=40427 [ 232.709251][ T107] [ 232.709251][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.709251][ T107] [ 232.781085][ T4932] EXT4-fs (loop4): unmounting filesystem. [ 232.800008][ T4070] syz.0.82: attempt to access beyond end of device [ 232.800008][ T4070] loop0: rw=524288, sector=87528, nr_sectors = 8 limit=40427 [ 232.827338][ T75] device hsr_slave_0 left promiscuous mode [ 232.850731][ T4682] [ 232.850731][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.850731][ T4682] [ 232.875366][ T4682] [ 232.875366][ T4682] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 232.875366][ T4682] [ 232.886860][ T75] device hsr_slave_1 left promiscuous mode [ 232.894750][ T4070] syz.0.82: attempt to access beyond end of device [ 232.894750][ T4070] loop0: rw=524288, sector=87536, nr_sectors = 8 limit=40427 [ 232.926405][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.939957][ T4070] syz.0.82: attempt to access beyond end of device [ 232.939957][ T4070] loop0: rw=524288, sector=87544, nr_sectors = 8 limit=40427 [ 232.976911][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.988774][ T5564] loop4: detected capacity change from 0 to 64 [ 233.027038][ T4070] syz.0.82: attempt to access beyond end of device [ 233.027038][ T4070] loop0: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 233.052096][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.099541][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.140639][ T75] device bridge_slave_1 left promiscuous mode [ 233.169349][ T4070] syz.0.82: attempt to access beyond end of device [ 233.169349][ T4070] loop0: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 233.198784][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.237667][ T75] device bridge_slave_0 left promiscuous mode [ 233.265849][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.339160][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 233.374768][ T75] device veth1_macvtap left promiscuous mode [ 233.402450][ T75] device veth0_macvtap left promiscuous mode [ 233.451607][ T75] device veth1_vlan left promiscuous mode [ 233.465099][ T75] device veth0_vlan left promiscuous mode [ 234.567313][ T5576] loop4: detected capacity change from 0 to 1024 [ 235.927522][ T5574] loop3: detected capacity change from 0 to 40427 [ 236.019320][ T5574] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 236.033195][ T5574] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 236.037314][ T5575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.099857][ T5574] F2FS-fs (loop3): invalid crc value [ 236.242774][ T5574] F2FS-fs (loop3): Found nat_bits in checkpoint [ 236.401747][ T5574] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 236.413304][ T5574] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 237.220141][ T5595] loop3: detected capacity change from 0 to 1024 [ 237.247862][ T5595] EXT4-fs: Ignoring removed orlov option [ 237.267392][ T5595] EXT4-fs: Ignoring removed bh option [ 237.280122][ T5595] EXT4-fs (loop3): Test dummy encryption mode enabled [ 237.315862][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 237.333028][ T4070] bio_check_eod: 14334 callbacks suppressed [ 237.333045][ T4070] syz.0.82: attempt to access beyond end of device [ 237.333045][ T4070] loop0: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 237.353057][ T4070] syz.0.82: attempt to access beyond end of device [ 237.353057][ T4070] loop0: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 237.366928][ T4070] syz.0.82: attempt to access beyond end of device [ 237.366928][ T4070] loop0: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 237.380603][ T4070] syz.0.82: attempt to access beyond end of device [ 237.380603][ T4070] loop0: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 237.398241][ T4070] syz.0.82: attempt to access beyond end of device [ 237.398241][ T4070] loop0: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 237.411952][ T4070] syz.0.82: attempt to access beyond end of device [ 237.411952][ T4070] loop0: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 237.427455][ T4070] syz.0.82: attempt to access beyond end of device [ 237.427455][ T4070] loop0: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 237.442631][ T4070] syz.0.82: attempt to access beyond end of device [ 237.442631][ T4070] loop0: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 237.463028][ T4070] syz.0.82: attempt to access beyond end of device [ 237.463028][ T4070] loop0: rw=0, sector=87464, nr_sectors = 8 limit=40427 [ 237.493047][ T4070] syz.0.82: attempt to access beyond end of device [ 237.493047][ T4070] loop0: rw=0, sector=87472, nr_sectors = 8 limit=40427 [ 237.640616][ T75] team0 (unregistering): Port device team_slave_1 removed [ 237.680480][ T5595] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 237.736460][ T75] team0 (unregistering): Port device team_slave_0 removed [ 237.850335][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.942662][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.232515][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 238.349444][ T5604] loop3: detected capacity change from 0 to 512 [ 238.357234][ T5604] EXT4-fs: Ignoring removed i_version option [ 238.366870][ T5604] EXT4-fs: Ignoring removed nobh option [ 238.373734][ T5604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 238.418023][ T5604] EXT4-fs (loop3): 1 truncate cleaned up [ 238.428894][ T5604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.318340][ T75] bond0 (unregistering): Released all slaves [ 239.513188][ T5606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 239.691452][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 239.849392][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.028408][ T5613] loop1: detected capacity change from 0 to 16 [ 240.354316][ T5613] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 242.342876][ T4070] bio_check_eod: 35251 callbacks suppressed [ 242.342934][ T4070] syz.0.82: attempt to access beyond end of device [ 242.342934][ T4070] loop0: rw=524288, sector=88328, nr_sectors = 8 limit=40427 [ 242.364916][ T4070] syz.0.82: attempt to access beyond end of device [ 242.364916][ T4070] loop0: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 242.380332][ T4070] syz.0.82: attempt to access beyond end of device [ 242.380332][ T4070] loop0: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 242.403097][ T4070] syz.0.82: attempt to access beyond end of device [ 242.403097][ T4070] loop0: rw=524288, sector=88352, nr_sectors = 8 limit=40427 [ 242.443166][ T4070] syz.0.82: attempt to access beyond end of device [ 242.443166][ T4070] loop0: rw=524288, sector=88360, nr_sectors = 8 limit=40427 [ 242.480258][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.493349][ T4070] syz.0.82: attempt to access beyond end of device [ 242.493349][ T4070] loop0: rw=524288, sector=88368, nr_sectors = 8 limit=40427 [ 242.526228][ T3925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.554663][ T5431] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.574113][ T4070] syz.0.82: attempt to access beyond end of device [ 242.574113][ T4070] loop0: rw=524288, sector=88376, nr_sectors = 8 limit=40427 [ 242.578436][ T5424] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.603554][ T4070] syz.0.82: attempt to access beyond end of device [ 242.603554][ T4070] loop0: rw=524288, sector=88384, nr_sectors = 8 limit=40427 [ 242.671476][ T5629] netlink: 'syz.4.381': attribute type 4 has an invalid length. [ 242.743120][ T4070] syz.0.82: attempt to access beyond end of device [ 242.743120][ T4070] loop0: rw=524288, sector=88392, nr_sectors = 8 limit=40427 [ 242.792957][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.802217][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.810827][ T4071] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.817988][ T4071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.827304][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.852978][ T4070] syz.0.82: attempt to access beyond end of device [ 242.852978][ T4070] loop0: rw=524288, sector=88400, nr_sectors = 8 limit=40427 [ 242.868040][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.918051][ T4071] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.925312][ T4071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.955880][ T5625] loop3: detected capacity change from 0 to 4096 [ 243.128506][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.158946][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.161108][ T5639] loop4: detected capacity change from 0 to 16 [ 243.168794][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.195431][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.211448][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.231661][ T5639] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 243.289101][ T5641] loop1: detected capacity change from 0 to 256 [ 243.299046][ T5641] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.343631][ T5641] vfat filesystem being mounted at /30/bus supports timestamps until 2107-12-31 (0x10391447e) [ 243.422631][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.885894][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.147335][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.217163][ T5648] 9pnet_fd: Insufficient options for proto=fd [ 244.224821][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.275247][ T4071] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.495883][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.545845][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.556536][ T5424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.950185][ T5663] loop2: detected capacity change from 0 to 512 [ 245.142417][ T5663] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.187703][ T5663] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.410017][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.387'. [ 245.934691][ T5672] loop3: detected capacity change from 0 to 512 [ 245.972723][ T5672] EXT4-fs: Ignoring removed i_version option [ 245.983111][ T5672] EXT4-fs: Ignoring removed nobh option [ 246.049425][ T5672] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.166832][ T5679] loop4: detected capacity change from 0 to 1024 [ 246.200106][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 246.246022][ T5431] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.379768][ T5672] EXT4-fs (loop3): 1 truncate cleaned up [ 246.490190][ T5672] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.540661][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.595482][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.277042][ T5424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.422811][ T4070] bio_check_eod: 11180 callbacks suppressed [ 247.422827][ T4070] syz.0.82: attempt to access beyond end of device [ 247.422827][ T4070] loop0: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 247.472743][ T5687] ip6t_rpfilter: unknown options [ 247.483167][ T5687] loop2: detected capacity change from 0 to 8 [ 247.497184][ T5687] SQUASHFS error: Unable to read inode 0x9 [ 247.690856][ T4070] syz.0.82: attempt to access beyond end of device [ 247.690856][ T4070] loop0: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 247.710048][ T5431] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.736965][ T4070] syz.0.82: attempt to access beyond end of device [ 247.736965][ T4070] loop0: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 247.758660][ T4070] syz.0.82: attempt to access beyond end of device [ 247.758660][ T4070] loop0: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 247.773229][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 247.810507][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.865788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.923130][ T4070] syz.0.82: attempt to access beyond end of device [ 247.923130][ T4070] loop0: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 247.976769][ T5424] device veth0_vlan entered promiscuous mode [ 247.989998][ T4070] syz.0.82: attempt to access beyond end of device [ 247.989998][ T4070] loop0: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 248.020242][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 248.045125][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.057784][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.076323][ T4070] syz.0.82: attempt to access beyond end of device [ 248.076323][ T4070] loop0: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 248.125608][ T5424] device veth1_vlan entered promiscuous mode [ 248.143504][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.151294][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.192634][ T4070] syz.0.82: attempt to access beyond end of device [ 248.192634][ T4070] loop0: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 248.249479][ T4070] syz.0.82: attempt to access beyond end of device [ 248.249479][ T4070] loop0: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 248.277431][ T5691] loop2: detected capacity change from 0 to 512 [ 248.301967][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.322499][ T4070] syz.0.82: attempt to access beyond end of device [ 248.322499][ T4070] loop0: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 248.381892][ T5691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.432433][ T5691] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.848884][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.893616][ T5424] device veth0_macvtap entered promiscuous mode [ 248.904308][ T5424] device veth1_macvtap entered promiscuous mode [ 248.936808][ T5700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.393'. [ 248.978735][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.010756][ T5678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.034262][ T5699] loop3: detected capacity change from 0 to 16 [ 249.063775][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.077667][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.088631][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.092612][ T5699] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 249.109051][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.131644][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.149731][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.160961][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.290139][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.301461][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.317026][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.333371][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.744011][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.829256][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.880187][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.936487][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.025647][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.050299][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.073104][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.094187][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.105271][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.124255][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.138537][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.200437][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.217373][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.236218][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.262445][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 251.262570][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.282626][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 251.392679][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.457929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.479327][ T5424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.503419][ T5424] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.559159][ T5424] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.607224][ T5424] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.004467][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.040795][ T5725] loop1: detected capacity change from 0 to 512 [ 252.042230][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.105273][ T4136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.131494][ T4136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.147174][ T5725] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 252.150505][ T4136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.183600][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.191080][ T5725] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.349001][ T5729] loop2: detected capacity change from 0 to 1024 [ 252.470025][ T4070] bio_check_eod: 11773 callbacks suppressed [ 252.470180][ T4070] syz.0.82: attempt to access beyond end of device [ 252.470180][ T4070] loop0: rw=524288, sector=89952, nr_sectors = 8 limit=40427 [ 252.583447][ T4070] syz.0.82: attempt to access beyond end of device [ 252.583447][ T4070] loop0: rw=524288, sector=89960, nr_sectors = 8 limit=40427 [ 252.644527][ T4070] syz.0.82: attempt to access beyond end of device [ 252.644527][ T4070] loop0: rw=524288, sector=89968, nr_sectors = 8 limit=40427 [ 252.649894][ T5730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.400'. [ 252.740134][ T4070] syz.0.82: attempt to access beyond end of device [ 252.740134][ T4070] loop0: rw=0, sector=86016, nr_sectors = 8 limit=40427 [ 252.952199][ T4070] syz.0.82: attempt to access beyond end of device [ 252.952199][ T4070] loop0: rw=0, sector=86024, nr_sectors = 8 limit=40427 [ 252.972102][ T3796] hfsplus: b-tree write err: -5, ino 4 [ 253.000012][ T4070] syz.0.82: attempt to access beyond end of device [ 253.000012][ T4070] loop0: rw=0, sector=86032, nr_sectors = 8 limit=40427 [ 253.047846][ T4070] syz.0.82: attempt to access beyond end of device [ 253.047846][ T4070] loop0: rw=0, sector=86040, nr_sectors = 8 limit=40427 [ 253.079079][ T5706] loop3: detected capacity change from 0 to 32768 [ 253.080821][ T4070] syz.0.82: attempt to access beyond end of device [ 253.080821][ T4070] loop0: rw=0, sector=86048, nr_sectors = 8 limit=40427 [ 253.132547][ T5735] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 253.136098][ T5706] [ 253.136098][ T5706] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.136098][ T5706] [ 253.177209][ T5738] loop4: detected capacity change from 0 to 16 [ 253.193579][ T5738] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 253.223187][ T4070] syz.0.82: attempt to access beyond end of device [ 253.223187][ T4070] loop0: rw=0, sector=86056, nr_sectors = 8 limit=40427 [ 253.238496][ T5706] jfs filesystem being mounted at /85/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 253.368993][ T4070] syz.0.82: attempt to access beyond end of device [ 253.368993][ T4070] loop0: rw=0, sector=86064, nr_sectors = 8 limit=40427 [ 253.430874][ T5706] [ 253.430874][ T5706] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.430874][ T5706] [ 253.499069][ T5706] [ 253.499069][ T5706] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.499069][ T5706] [ 253.514995][ T5706] [ 253.514995][ T5706] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 253.514995][ T5706] [ 254.159749][ T5706] [ 254.159749][ T5706] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.159749][ T5706] [ 254.181260][ T107] [ 254.181260][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.181260][ T107] [ 254.311242][ T5745] loop2: detected capacity change from 0 to 512 [ 254.329727][ T4778] EXT4-fs (loop1): unmounting filesystem. [ 254.473881][ T4001] [ 254.473881][ T4001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.473881][ T4001] [ 254.491730][ T5745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.530103][ T5745] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.584018][ T4001] [ 254.584018][ T4001] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 254.584018][ T4001] [ 254.733555][ T5762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'. [ 255.452061][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 255.535543][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.541967][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.241327][ T5778] loop4: detected capacity change from 0 to 1024 [ 256.550676][ T3796] hfsplus: b-tree write err: -5, ino 4 [ 257.191393][ T5784] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 257.274002][ T5746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.477050][ T4070] bio_check_eod: 8787 callbacks suppressed [ 257.477123][ T4070] syz.0.82: attempt to access beyond end of device [ 257.477123][ T4070] loop0: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 257.625974][ T4070] syz.0.82: attempt to access beyond end of device [ 257.625974][ T4070] loop0: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 257.641061][ T4070] syz.0.82: attempt to access beyond end of device [ 257.641061][ T4070] loop0: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 257.682018][ T5796] loop4: detected capacity change from 0 to 16 [ 258.959669][ T5796] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 259.044423][ T5802] loop2: detected capacity change from 0 to 2048 [ 259.175690][ T4070] syz.0.82: attempt to access beyond end of device [ 259.175690][ T4070] loop0: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 259.290103][ T5804] loop3: detected capacity change from 0 to 512 [ 259.358642][ T4070] syz.0.82: attempt to access beyond end of device [ 259.358642][ T4070] loop0: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 259.451199][ T5802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 259.470644][ T5802] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.517241][ T5804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.542104][ T5804] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.605131][ T4070] syz.0.82: attempt to access beyond end of device [ 259.605131][ T4070] loop0: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 259.764475][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 259.902928][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 260.247496][ T4070] syz.0.82: attempt to access beyond end of device [ 260.247496][ T4070] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 260.308234][ T4070] syz.0.82: attempt to access beyond end of device [ 260.308234][ T4070] loop0: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 260.437997][ T4070] syz.0.82: attempt to access beyond end of device [ 260.437997][ T4070] loop0: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 260.505522][ T4070] syz.0.82: attempt to access beyond end of device [ 260.505522][ T4070] loop0: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 260.662030][ T4001] EXT4-fs (loop3): unmounting filesystem. [ 260.846949][ T5825] loop2: detected capacity change from 0 to 1024 [ 261.098480][ T11] hfsplus: b-tree write err: -5, ino 4 [ 261.169030][ T5829] ip6t_rpfilter: unknown options [ 261.198323][ T5829] loop3: detected capacity change from 0 to 8 [ 261.224185][ T5829] SQUASHFS error: Unable to read inode 0x9 [ 262.481439][ T5844] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 262.501907][ T4070] bio_check_eod: 4317 callbacks suppressed [ 262.501927][ T4070] syz.0.82: attempt to access beyond end of device [ 262.501927][ T4070] loop0: rw=0, sector=88024, nr_sectors = 8 limit=40427 [ 262.572703][ T4070] syz.0.82: attempt to access beyond end of device [ 262.572703][ T4070] loop0: rw=0, sector=88032, nr_sectors = 8 limit=40427 [ 262.617031][ T4070] syz.0.82: attempt to access beyond end of device [ 262.617031][ T4070] loop0: rw=0, sector=88040, nr_sectors = 8 limit=40427 [ 262.703979][ T4070] syz.0.82: attempt to access beyond end of device [ 262.703979][ T4070] loop0: rw=0, sector=88048, nr_sectors = 8 limit=40427 [ 262.723319][ T4070] syz.0.82: attempt to access beyond end of device [ 262.723319][ T4070] loop0: rw=0, sector=88056, nr_sectors = 8 limit=40427 [ 262.839581][ T4070] syz.0.82: attempt to access beyond end of device [ 262.839581][ T4070] loop0: rw=0, sector=88064, nr_sectors = 8 limit=40427 [ 262.840034][ T5851] loop4: detected capacity change from 0 to 512 [ 262.855768][ T5852] loop2: detected capacity change from 0 to 2048 [ 262.867004][ T4070] syz.0.82: attempt to access beyond end of device [ 262.867004][ T4070] loop0: rw=0, sector=88072, nr_sectors = 8 limit=40427 [ 262.935362][ T5851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.951555][ T4070] syz.0.82: attempt to access beyond end of device [ 262.951555][ T4070] loop0: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 262.973257][ T5851] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.003224][ T5857] loop1: detected capacity change from 0 to 16 [ 263.010124][ T5857] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 263.017437][ T4070] syz.0.82: attempt to access beyond end of device [ 263.017437][ T4070] loop0: rw=0, sector=88088, nr_sectors = 8 limit=40427 [ 263.032509][ T4070] syz.0.82: attempt to access beyond end of device [ 263.032509][ T4070] loop0: rw=0, sector=88096, nr_sectors = 8 limit=40427 [ 263.137801][ T5852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 263.165728][ T5852] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.203750][ T27] INFO: task kworker/u4:8:3830 blocked for more than 143 seconds. [ 263.213030][ T27] Not tainted 6.1.114-syzkaller #0 [ 263.516232][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.434'. [ 263.526925][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.817577][ T27] task:kworker/u4:8 state:D stack:23296 pid:3830 ppid:2 flags:0x00004000 [ 263.945898][ T27] Workqueue: writeback wb_workfn (flush-7:0) [ 263.992254][ T27] Call Trace: [ 264.020674][ T27] [ 264.044198][ T27] __schedule+0x143f/0x4570 [ 264.058241][ T27] ? release_firmware_map_entry+0x186/0x186 [ 264.064313][ T27] ? blk_check_plugged+0x250/0x250 [ 264.069456][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 264.074721][ T27] ? wq_worker_sleeping+0x5f/0x270 [ 264.079871][ T27] schedule+0xbf/0x180 [ 264.084050][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 264.090514][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 264.096537][ T27] ? down_write_killable_nested+0x90/0x90 [ 264.102291][ T27] ? read_lock_is_recursive+0x10/0x10 [ 264.107777][ T27] ? rwsem_write_trylock+0x166/0x210 [ 264.113148][ T27] ? clear_nonspinnable+0x60/0x60 [ 264.118207][ T27] ? from_kgid+0x1a3/0x730 [ 264.123084][ T27] f2fs_balance_fs+0x4fb/0x6c0 [ 264.127901][ T27] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 264.133945][ T27] ? folio_unlock+0x122/0x2f0 [ 264.138655][ T27] f2fs_write_inode+0x4c3/0x540 [ 264.143691][ T27] __writeback_single_inode+0x67d/0x11e0 [ 264.149371][ T27] writeback_sb_inodes+0xc2b/0x1b20 [ 264.164538][ T27] ? queue_io+0x630/0x630 [ 264.169015][ T27] ? __writeback_inodes_wb+0x400/0x400 [ 264.183269][ T27] __writeback_inodes_wb+0x114/0x400 [ 264.188710][ T27] wb_writeback+0x4b1/0xe10 [ 264.202970][ T27] ? percpu_ref_tryget+0x260/0x260 [ 264.208143][ T27] ? _find_next_bit+0x11b/0x120 [ 264.223007][ T27] wb_workfn+0xc9e/0x1020 [ 264.227411][ T27] ? inode_wait_for_writeback+0x280/0x280 [ 264.237250][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 264.248094][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 264.259456][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 264.271938][ T27] ? process_one_work+0x7a9/0x11d0 [ 264.282933][ T27] process_one_work+0x8a9/0x11d0 [ 264.293954][ T27] ? worker_detach_from_pool+0x260/0x260 [ 264.306362][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 264.317510][ T27] ? kthread_data+0x4e/0xc0 [ 264.326613][ T27] ? wq_worker_running+0x97/0x190 [ 264.342977][ T27] worker_thread+0xa47/0x1200 [ 264.347712][ T27] ? release_firmware_map_entry+0x186/0x186 [ 264.363001][ T27] kthread+0x28d/0x320 [ 264.373152][ T27] ? worker_clr_flags+0x190/0x190 [ 264.378226][ T27] ? kthread_blkcg+0xd0/0xd0 [ 264.392994][ T27] ret_from_fork+0x1f/0x30 [ 264.403056][ T27] [ 264.406205][ T27] [ 264.406205][ T27] Showing all locks held in the system: [ 264.433868][ T4682] EXT4-fs (loop2): unmounting filesystem. [ 264.467223][ T27] 1 lock held by rcu_tasks_kthre/12: [ 264.469322][ T4932] EXT4-fs (loop4): unmounting filesystem. [ 264.472800][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 264.563222][ T27] 1 lock held by rcu_tasks_trace/13: [ 264.584647][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 264.601332][ T27] 1 lock held by khungtaskd/27: [ 264.614174][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 264.660997][ T27] 2 locks held by kworker/u4:2/36: [ 264.688566][ T27] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 264.711225][ T27] #1: ffffc90000ad7d20 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.722277][ T27] 2 locks held by kworker/u4:3/46: [ 264.729159][ T27] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 264.745695][ T27] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x419/0x790 [ 264.760578][ T27] 3 locks held by kworker/0:2/125: [ 264.768946][ T27] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.786463][ T27] #1: ffffc90002d1fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.801358][ T27] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 264.819558][ T27] 2 locks held by getty/3396: [ 264.824507][ T27] #0: ffff88814b85f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 264.842301][ T27] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 264.853668][ T27] 3 locks held by kworker/1:7/3697: [ 264.858906][ T27] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.869707][ T27] #1: ffffc90003d6fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.882962][ T27] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 264.894131][ T27] 4 locks held by kworker/u4:8/3830: [ 264.899434][ T27] #0: ffff888142acb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.911085][ T27] #1: ffffc90004807d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.923813][ T27] #2: ffff88807e3d00e0 (&type->s_umount_key#66){++++}-{3:3}, at: trylock_super+0x1b/0xf0 [ 264.934150][ T27] #3: ffff8880758ad1e8 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4fb/0x6c0 [ 264.945376][ T27] 7 locks held by syz.0.82/4070: [ 264.950392][ T27] 2 locks held by kworker/1:17/4146: [ 264.956062][ T27] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.967155][ T27] #1: ffffc9000384fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 264.979221][ T27] [ 264.981867][ T27] ============================================= [ 264.981867][ T27] [ 264.990926][ T27] NMI backtrace for cpu 0 [ 264.995276][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.114-syzkaller #0 [ 265.003180][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.013247][ T27] Call Trace: [ 265.016558][ T27] [ 265.019501][ T27] dump_stack_lvl+0x1e3/0x2cb [ 265.024328][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 265.029801][ T27] ? panic+0x764/0x764 [ 265.033888][ T27] ? vprintk_emit+0x622/0x740 [ 265.038595][ T27] ? printk_sprint+0x490/0x490 [ 265.043409][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 265.048544][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 265.053540][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 265.059709][ T27] ? _printk+0xd1/0x111 [ 265.063897][ T27] ? panic+0x764/0x764 [ 265.067991][ T27] ? __wake_up_klogd+0xcc/0x100 [ 265.072857][ T27] ? panic+0x764/0x764 [ 265.076951][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 265.083041][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 265.089125][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 265.095120][ T27] watchdog+0xf88/0xfd0 [ 265.099316][ T27] ? watchdog+0x1f8/0xfd0 [ 265.103646][ T27] kthread+0x28d/0x320 [ 265.107710][ T27] ? hungtask_pm_notify+0x50/0x50 [ 265.112734][ T27] ? kthread_blkcg+0xd0/0xd0 [ 265.117324][ T27] ret_from_fork+0x1f/0x30 [ 265.121750][ T27] [ 265.127102][ T27] Sending NMI from CPU 0 to CPUs 1: [ 265.132433][ C1] NMI backtrace for cpu 1 [ 265.132447][ C1] CPU: 1 PID: 4070 Comm: syz.0.82 Not tainted 6.1.114-syzkaller #0 [ 265.132462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.132470][ C1] RIP: 0010:check_preemption_disabled+0x63/0x110 [ 265.132494][ C1] Code: 44 24 08 0f 85 c7 00 00 00 89 d8 48 83 c4 10 5b 41 5c 41 5e 41 5f c3 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c9 49 89 f6 49 89 ff 65 4c 8b 25 4d 93 5b 75 41 f6 44 24 2f 04 [ 265.132506][ C1] RSP: 0018:ffffc9000357e868 EFLAGS: 00000046 [ 265.132519][ C1] RAX: 0000000080000000 RBX: 0000000000000001 RCX: ffff888026845940 [ 265.132529][ C1] RDX: ffff888026845940 RSI: ffffffff8b0c0fa0 RDI: ffffffff8b5d7540 [ 265.132540][ C1] RBP: 00000000ffffffff R08: ffffffff81b81974 R09: fffff94000316b0f [ 265.132551][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 265.132560][ C1] R13: ffff888026845940 R14: 00000000ffffffff R15: ffff888067010248 [ 265.132571][ C1] FS: 00007ff81ec386c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 265.132584][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.132594][ C1] CR2: 00007f76dc507ab8 CR3: 000000001e75f000 CR4: 00000000003506e0 [ 265.132606][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 265.132619][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 265.132628][ C1] Call Trace: [ 265.132632][ C1] [ 265.132636][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 265.132652][ C1] ? read_lock_is_recursive+0x10/0x10 [ 265.132675][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 265.132690][ C1] ? nmi_handle+0x25/0x440 [ 265.132718][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 265.132732][ C1] ? nmi_handle+0x12e/0x440 [ 265.132753][ C1] ? nmi_handle+0x25/0x440 [ 265.132774][ C1] ? check_preemption_disabled+0x63/0x110 [ 265.132793][ C1] ? default_do_nmi+0x62/0x150 [ 265.132808][ C1] ? exc_nmi+0xa8/0x100 [ 265.132823][ C1] ? end_repeat_nmi+0x16/0x31 [ 265.132851][ C1] ? xas_reload+0xe4/0x470 [ 265.132867][ C1] ? check_preemption_disabled+0x63/0x110 [ 265.132889][ C1] ? check_preemption_disabled+0x63/0x110 [ 265.132909][ C1] ? check_preemption_disabled+0x63/0x110 [ 265.132929][ C1] [ 265.132933][ C1] [ 265.132939][ C1] lock_is_held_type+0x76/0x180 [ 265.132958][ C1] xas_reload+0xfd/0x470 [ 265.132973][ C1] __filemap_get_folio+0x33b/0xe80 [ 265.132989][ C1] ? __filemap_get_folio+0x150/0xe80 [ 265.133004][ C1] ? page_cache_prev_miss+0x500/0x500 [ 265.133025][ C1] ? do_garbage_collect+0x22d7/0x81f0 [ 265.133043][ C1] pagecache_get_page+0x28/0x250 [ 265.133066][ C1] f2fs_grab_cache_page+0x2b/0x3c0 [ 265.133090][ C1] ? up_read+0x20/0x20 [ 265.133109][ C1] __get_node_page+0x131/0xda0 [ 265.133132][ C1] do_garbage_collect+0x23f0/0x81f0 [ 265.133179][ C1] ? f2fs_gc+0x32a0/0x32a0 [ 265.133194][ C1] ? get_victim_by_default+0x6893/0x6ff0 [ 265.133218][ C1] ? mark_lock+0x9a/0x340 [ 265.133250][ C1] ? f2fs_gc+0xef4/0x32a0 [ 265.133265][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 265.133296][ C1] ? up_write+0x19d/0x580 [ 265.133316][ C1] ? get_ckpt_valid_blocks+0x2f0/0x2f0 [ 265.133336][ C1] ? __up_read+0x690/0x690 [ 265.133361][ C1] f2fs_gc+0x1169/0x32a0 [ 265.133390][ C1] ? f2fs_start_bidx_of_node+0x370/0x370 [ 265.133413][ C1] ? rwsem_write_trylock+0x166/0x210 [ 265.133440][ C1] f2fs_balance_fs+0x506/0x6c0 [ 265.133462][ C1] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 265.133482][ C1] ? f2fs_commit_atomic_write+0x14f0/0x14f0 [ 265.133506][ C1] ? __up_read+0x2b9/0x690 [ 265.133525][ C1] ? folio_unlock+0x122/0x2f0 [ 265.133541][ C1] f2fs_map_blocks+0x3172/0x3ab0 [ 265.133573][ C1] ? f2fs_do_map_lock+0x70/0x70 [ 265.133597][ C1] expand_inode_data+0x56d/0xaf0 [ 265.133627][ C1] ? f2fs_insert_range+0x3c0/0x3c0 [ 265.133641][ C1] ? file_modified_flags+0x3e1/0x480 [ 265.133670][ C1] ? rcu_read_lock_any_held+0xb3/0x160 [ 265.133692][ C1] f2fs_fallocate+0x44a/0x9f0 [ 265.133709][ C1] vfs_fallocate+0x547/0x6b0 [ 265.133731][ C1] do_vfs_ioctl+0x222c/0x2a90 [ 265.133747][ C1] ? __x64_compat_sys_ioctl+0x80/0x80 [ 265.133761][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 265.133781][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 265.133801][ C1] ? __kmem_cache_free+0x25c/0x3c0 [ 265.133822][ C1] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 265.133840][ C1] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 265.133858][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 265.133882][ C1] ? __fget_files+0x28/0x4a0 [ 265.133904][ C1] ? __fget_files+0x28/0x4a0 [ 265.133918][ C1] ? __fget_files+0x435/0x4a0 [ 265.133932][ C1] ? __fget_files+0x28/0x4a0 [ 265.133949][ C1] ? bpf_lsm_file_ioctl+0x5/0x10 [ 265.133964][ C1] ? security_file_ioctl+0x7d/0xa0 [ 265.133982][ C1] __se_sys_ioctl+0x81/0x160 [ 265.133996][ C1] do_syscall_64+0x3b/0xb0 [ 265.134008][ C1] ? clear_bhb_loop+0x45/0xa0 [ 265.134021][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 265.134042][ C1] RIP: 0033:0x7ff81dd7dff9 [ 265.134060][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.134072][ C1] RSP: 002b:00007ff81ec38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.134088][ C1] RAX: ffffffffffffffda RBX: 00007ff81df36058 RCX: 00007ff81dd7dff9 [ 265.134098][ C1] RDX: 00000000200000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 265.134108][ C1] RBP: 00007ff81ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 265.134116][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.134125][ C1] R13: 0000000000000001 R14: 00007ff81df36058 R15: 00007fffb85a0608 [ 265.134141][ C1] [ 265.164109][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 265.164126][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.114-syzkaller #0 [ 265.164146][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.164158][ T27] Call Trace: [ 265.164164][ T27] [ 265.164170][ T27] dump_stack_lvl+0x1e3/0x2cb [ 265.164198][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 265.164220][ T27] ? panic+0x764/0x764 [ 265.164242][ T27] ? llist_add_batch+0x160/0x1d0 [ 265.164293][ T27] ? vscnprintf+0x59/0x80 [ 265.164320][ T27] panic+0x318/0x764 [ 265.164345][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 265.164368][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 265.164397][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 265.164417][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 265.164441][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 265.164465][ T27] watchdog+0xfc7/0xfd0 [ 265.164498][ T27] ? watchdog+0x1f8/0xfd0 [ 265.164528][ T27] kthread+0x28d/0x320 [ 265.164547][ T27] ? hungtask_pm_notify+0x50/0x50 [ 265.164573][ T27] ? kthread_blkcg+0xd0/0xd0 [ 265.164593][ T27] ret_from_fork+0x1f/0x30 [ 265.164632][ T27] [ 265.182723][ T27] Kernel Offset: disabled [ 265.814093][ T27] Rebooting in 86400 seconds..