last executing test programs: 1m4.875836446s ago: executing program 2 (id=2888): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 1m3.63769831s ago: executing program 2 (id=2890): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x810000, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@fmask={'fmask', 0x3d, 0x8afa}}, {@uid={'uid', 0x3d, 0xee00}}, {@utf8}]}, 0x1, 0x14f7, &(0x7f0000001580)="$eJzs3AuUzlXbMPB97b3/jGnS3SSHYV/7+nOnwTZJkkNCDkmSJElOCUmTJAmJIaekIQk5TpLDEJLDNCaN8/mQc9LkkSZJQnIK+1t6nvf1PF/P+/a+39P3Wuud67fWXrOv2fe172vPNWvu//9ea+4feo6q16J+7WZEJP4l8NcvKUKIGCHEMCHEDUKIQAhRKb5S/JX1AgpS/rUnYX+uR9OvdQXsWuL+523c/7yN+5+3cf/zNu5/3sb9z9u4/3kb95+xvGz7nGI38si7g9//z8v49f9/kdzyk7/ZWP7mXv+NFO5/3sb9z9u4/3kb9z9v4/7nbdz///1q/Sdr3P+8jfvPWF52rd9/5nFtx7X+/WOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljec81dpIcS/za91XYwxxhhjjDHGGPvz+PzXugLGGGOMMcYYY4z9/wdCCiW0CEQ+kV/EiAIiVlwn4sT1oqC4QUTEjSJe3CQKiZtFYVFEFBXFRIIoLkoII1BYQSIUJUUpERW3iNLiVpEoyoiyopxworxIEreJCuJ2UVHcISqJO0VlcZeoIqqKaqK6uFvUEPeImqKWqC3uFXVEXVFP1Bf3iQbiftFQPCAaiQdFY/GQaCIeFk3FI6KZeFQ0F4+JFuJx0VI8IVqJ1qKNaCva/T/lvyL6ildFP9FfpIgBYqB4TQwSg8UQMVQME6+L4eINMUK8KVLFSDFKvCVGi7fFGPGOGCvGifHiXTFBTBSTxGQxRUwVaeI9MU28L6aLD8QMMVPMErNFupgj5ooPxTwxXywQH4mF4mOxSCwWS8RSkSE+EZlimcgSn4rl4jORLVaIlWKVWC3WiLVinVgvNoiNYpPYLLaIrWKb2C4+FzvETrFL7BZ7xF6xT3wh9osvxQHxlcgRX/8388/+X/m9QIAACRI0aMgH+SAGYiAWYiEO4qAgFIQIRCAe4qEQFILCUBiKQlFIgAQoASUAAYGAoCSUhChEoTSUhkRIhLJQFhw4SIIkqAC3Q0WoCJWgElSGylAFqkJVqA7VoQbUgJpQE2pDbagDdaAe1IP74D64HxpCQ2gEjaAxNIYm0ASaQlNoBs2gOTSHFtACWkJLaAWtoA20gXbQDtpDe+gAHaATdILO0Bm6QBdIhmToCl2hG3SD7tAdekAP6Ak9oRf0ht7wCrwCr8Kr0B/qyAEwEAbCIBgEQ2AoDIXXYTi8AW/Am5AKI2EUvAVvwdswBs7AWBgH42E81JATYRJMBpJTIQ3SYBpMg+kwHWbATJgJsyEd5sBcmAvzYD7Mh49gIXwMH8NiWAxLIQMyIBOWQRZkwXI4C9mwAlbCKlgNa2A1rIP1sA42wibYCFtgC2yDbfA5fA47YSfsht2wF/bCF/AFfAlfQirkQA4chINwCA7BYTgMuZALR+AIHIWjcAyOwXE4DifgJJyCk3AaTsMZOAvn4BxcgAtwEV5K+K753jIbUoW8Qkst88l8MkbGyFgZK+NknCwoC8qIjMh4GS8LyUKysCwsi8qiMkEmyBKyhESJkmQoS8qSMiqjsrQsLRNloiwry0onnUySSbKCrCAryoqykrxTVpZ3ySqyquzoqsvqsobs5GrKWrK2rC3ryLqynqwv68sGsoFsKBvKRrKRbCwbyybyYdlUDoAh8Ki80pkWciS0lKOglWwt28i28m14UraXY6CD7Cg7yaflOBgLXWR7lyyfk13lJOgmX5CT4UXZQ06FnvJl2Uv2ln3kK7Kv7OD6yf5yBgyQA+VsGCQHyyFyqJwHdeWVjtWTb8pUOVKOkm/JpfC2HCPfkWPlODlevisnyIlykpwsp8ipMk2+J6fJ9+V0+YGcIWfKWXK2TJdz5Fz5oZwn58sF8iO5UH4sF8nFcolcKjPkJzJTLpNZ8lO5XH4ms+UKuVKukqvlGrlWrpPr5Qa5UW6Sm+UWuVVuk9vl53KH3Cl3yd1yj9wr98kv5H75pTwgv5I58mt5UP5FHpLfyMPyW5krv5NH5PfyqPxBHpM/yuPyJ3lCnpSn5M/ytPxFnpFn5Tl5Xl6Qv8qL8pK8LL0UCpRUSmkVqHwqv4pRBVSsuk7FqetVQXWDiqgbVby6SRVSN6vCqogqqoqpBFVclVBGobKKVKhKqlIqqm5RpdWtKlGVUWVVOeVUeZWkblMV1O2qorpDVVJ3qsrqLlVFVVXVVHV1t6qh7lE1VS1VW92r6qi6qp6qr+5TDdT9qqF6QDVSD6rG6iHVRD2smqpHVDP1qGquHlMt1OOqpXpCtVKtVRvVVrVTT6r26inVQXVUndTTqrN6RnVRz6pk9Zzqqp5X3dQLqrt6UfVQL6me6mXVS/VWfdQldVl51U/1VylqgBqoXlOD1GA1RA1Vw9Trarh6Q41Qb6pUNVKNUm+p0eptNUa9o8aqcWq8eldNUBPVJDVZTVFTVZp6T01T76vp6gM1Q81Us9Rsla7mqCF/22nBfyH//X+SP+K3Z9+mtqvP1Q61U+1Su9UetVftU/vUfrVfHVAHVI7KUQfVQXVIHVKH1WGVq3LVEXVEHVVH1TF1TB1Xx9UJdVKdVz+r0+oXdUadVWfVeXVBXVAX//YzEBq01EprHeh8Or+O0QV0rL5Ox+nrdUF9g47oG3W8vkkX0jfrwrqILqqL6QRdXJfQRqO2mnSoS+pSOqpv0aX1rTpRl9FldTntdHmdpG/7l/P/qL52up1ur9vrDrqD7qQ76c66s+6iu+hknay76q66m+6mu+vuuofuoXvqnrqX7qX76D66r+6r++l+OkWn6IH6NT1ID9ZD9FA9TL+uh+vheoQeoVN1qh6lR+nRerQeo8fosXqsHq/H6wl6gp6kJ+kpeopO02l6mp6mp+vpeoaeoWfpWTpdp+u5eq6ep+fpBXqBXqgX6kV6kV6il+gMnaEzdabO0ll6uV6us/UKvUKv0qv0Gr1Gr9Pr9Aa9QW/Sm/QWvUVn6+16u96hd+hdepfeo/fofXqf3q/36wP6gM7ROfqgPqgP6UP6sD6sc3WuPqKP6KP6qD6mj+nj+rg+oU/oU/qUPq1P6zP6jD6nz+kL+oK+qC/qy/rylcu+QAYy0IEO8gX5gpggJogNYoO4IC4oGBQMIkEkiA/ig0LBzUHhoEhQNCgWJATFgxKBCTCwAQVhUDIoFUSDW4LSwa1BYlAmKBuUC1xQPkgKbgsqBLcHFYM7gkrBnUHl4K6gSlA1qBZUD+4OagT3BDWDWkHt4N6gTlA3qBfUD+4LGgT3Bw2DB4JGwYNB4+ChoEnwcNA0eCRoFjwaNA8eC1oEjwctgyeCVkHroE3QNmj3p+7v/ZkiT7l+pr9JMQPMQPOaGWQGmyFmqBlmXjfDzRtmhHnTpJqRZpR5y4w2b5sx5h0z1owz4827ZoKZaCaZyWaKmWrSzHtmmnnfTDcfmBlmppllZpt0M8fMNR+aeWa+WWA+MgvNx2aRWWyWmKUmw3xiMs0yk2U+NcvNZybbrDArzSqz2qwxa806s95sMBvNJrPZbDFbzTaz3XxudpidZpfZbfaYvWaf+cLsN1+aA+Yrk2O+NgfNX8wh8405bL41ueY7c8R8b46aH8wx86M5bn4yJ8xJc8r8bE6bX8wZc9acM+fNBfOruWgumcvGX7m4v/Lyjho15sN8GIMxGIuxGIdxWBALYgQjGI/xWAgLYWEsjEWxKCZgApbAEngFIWFJLIlRjGJpLI2JmIhlsSw6dJiESVgBK2BFrIiVsBJWxspYBatgNayGd+PdeA/eg7WwFt6L92JdrIv1sT42wAbYEBtiI2yEjbExNsEm2BSbYjNshs2xObbAFtgSW2IrbIVtsA22w3bYHttjB+yAnbATdsbO2AW7YDImY1fsit2wG3bH7tgDe2BP7Im9sBf2wT7YF/tiP+yHKZiCA3EgDsJBOASH4DAchsNxOI7AEZiKqTgKR+FoHI1jcAyOxXE4Ht/FCTgRJ+FknIJTMQ3TcBpOw+k4HWfgDJyFszAd03EuzsV5OA8X4AJciAtxES7CJbgEMzADMzETszALl+NyzMZsXIkrcTWuxrW4FtfjetyIG3EzbsatuBW343bcgTtwF+7CPbgH9+E+3I/78QAewBzMwYN4EA/hITyMhzEXc/EIHsGjeBSP4TE8jsfxBJ7AU3gKT+NpPINn8Byewwv4K17ES3gZPcZYKWLtdTbOXm8L2htsjC1g/z4uaovZBFvclrDGFrZF/iFGa22iLWPL2nLW2fI2yd72u7iKrWqr2er2blvD3mNr/i5uYO+3De0DtpF90Na39/1D3Ng+ZJvYx21T+4RtZlvb5ratbWEfty3tE7aVbW3b2La2s33GdrHP2mT7nO1qn/9dnGmX2fV2g91oN9n99kt7zp63R+0P9oL91faz/e0w+7odbt+wI+ybNtWO/F083r5rJ9iJdpKdbKfYqb+LZ9nZNt3OsXPth3aenf+7OMN+YhfaLLvILrZL7NLf4is1ZdlP7XL7mc22K+xKu8qutmvsWrvu32tdZbfYrXab3We/sDvsTrvL7rZ77N7f4ivnOGC/sjn2a3vEfm8P2W/sYXvM5trvfouvnO+Y/dEetz/ZE/akPWV/tqftL/aMPfvb+a+c/Wd7yV623goCkqRIU0D5KD/FUAGKpesojq6ngnQDRehGiqebqBDdTIWpCBWlYpRAxakEGUKyRBRSSSpFUbqFStOtlEhlqCyVI0flKYluowp0O1WkO6gS3UmV6S6qQlWpGlWnu6kG3UM1qRbVpnupDtWlelSf7qMGdD81pAeoET1IjekhakIPU1N6hJrRo9ScHqMW9Di1pCeoFbWmNtSW2tGT1J6eog7UkTrR09SZnqEu9Cwl03PUlZ6nbvQCdacXqQe9RD3pZepFvakPvUJ96VXqR/0phQbQQHqNBtFgGkJDaRi9TsPpDRpBb1IqjaRR9BaNprdpDL1DY2kcjad3aQJNpEk0mabQVEqj92gavU/T6QOaQTNpFs2mdJpDc+lDmkfzaQF9RAvpY1pEi2kJLaUM+oQyaRll0ae0nD6jbFpBK2kVraY1tJbW0XraQBtpE22mLbSVttF2+px20E7aRbtpD+2lffQF7acv6QB9RTn0NR2kv9Ah+oYO07eUS9/REfqejtIPdIx+pOP0E52gk3SKfqbT9AudobN0js7TBfqVLtIlukyeRAihDFWowyDMF+YPY8ICYWx4XRgXXh8WDG8II+GNYXx4U1govDksHBYJi4bFwoSweFgiNCGGNqQwDEuGpcJoeEtYOrw1TAzLhGXDcqELy4dJ4W1hhfD2sGJ4R1gpvDOsHN4VVgmrho8/WD28O6wR3hPWDGuFtcN7wzph3bBeWD+8L2wQ3h82DB8IG4UPhhXDh8Im4cNh0/CRsFn4aNg8fCxsET4etgyfCFuFrcM2YduwXfhk2D58KuwQdgw7hU+HncNnwi7hs2Fy+FzYNXz+D9dTwgHhwPC18LXQ+wfUkujSaEb0k2hmdFk0K/ppdHn0s2h2dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a3Rb1Pv6+YUDJ51y2gUun8vvYlwBF+uuc3HuelfQ3eAi7kYX725yhdzNrrAr4oq6Yi7BFXclnHHorCMXupKulIu6W1xpd6tLdGVcWVfOOVfeJbm2rp1r59q7p1wH19F1ck+7p90z7hn3rHvWPee6uuddN/eC6+5edD3cS+4l97Lr5Xq7Pu4V19e96vq5/i7FpbiBbqAb5Aa5IW6IG+aGueFuuBvhRrhUl+pGuVFutBvtxrgxbqwb68a78W6Cm+AmuUluipvi0lyam+amueluupvhZrhZbpZLd+lurpvr5rl5boFb4BYmLnSL3CK3xC1xGS7DZbpMl+Wy3HK33GW7bLfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa3w+1wu9wut8ftcfvcPrff7XcH3AGX43LcQXfQHXKH3GH3rct137kj7nt31P3gjrkf3XH3kzvhTrpT7md32v3izriz7pw77y64X91Fd8lddt6lRd6LTIu8H5ke+SAyIzIzMisyO5IemROZG/kwMi8yP7Ig8lFkYeTjyKLI4siSyNJIRuSTSGZkWSQr8mlkeeSzSHZkRWRlZFVkdWRNxPviO0Jf0pfyUX+LL+1v9Ym+jC/ry3nny/skf5uv4G/3Ff0dvpK/01f2d/kqvqqv5p/wrXxr38a39e38k769f8p38B19J/+07+yf8V38sz7ZP+e7+ud9N/+C7+5f9D38S76nf9n38r19H/+K7+tf9f18f5/iB/iB/jU/yA/2Q/xQP8y/7of7N/wI/6ZP9SP9KP+WH+3f9mP8O36sH+fH+3f9BD/RT/KT/RQ/1af59/w0/76f7j/wM/xMP8vP9ul+jp/rP/Tz/Hy/wH/kF/qP/SK/2C/xS32G/8Rn+mU+y3/ql/vPfLZf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX67/9zv8Dv9Lr/b7/F7/T7/hd/vv/QH/Fc+x3/tD/q/+EP+G3/Yf+tz/Xf+iP/eH/U/+GP+R3/c/+RP+JP+lP/Zn/a/+DP+rD/nz/sL/ld/0V/yl/l/1hhjjDHG/kvS/mB9wD/5nvzbuGKgEOL6ncVy/35dCSE2F/7rfLBM6BwRQjzXv+ej/zbq1ElJSfnbY7OVCEotFkJErubnE1fjFaKTeEYki46iwj+tb7DsfYH+YP/onULE/l1OjLgaX93/9v9g/yefHp9ZOTwX/5/sv1iIxFJXcwqIq/HV/Sv+B/sXaf8H9Rf4Jk2IDn+XEyeuxlf3TxJPiedF8j88kjHGGGOMMcYY+6vBslr3P7p/vnJ/nqCv5uQXV+M/uj9njDHGGGOMMcbYtfdi7z7PPpmc3LE7T3jCE578++Ra/2VijDHGGGOM/dmuXvRf60oYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG863/i48Su9RkZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxa+3/BAAA//8P0TzQ") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0xf, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) 1m2.408280592s ago: executing program 2 (id=2894): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchdir(0xffffffffffffffff) r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) faccessat(r1, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000003cc0)) 1m1.487214116s ago: executing program 2 (id=2897): syz_emit_ethernet(0xb4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x0, 0x300) readv(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @adiantum, 0x0, '\x00', @d}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m0.624366795s ago: executing program 2 (id=2898): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) msgget(0x1, 0x11) set_mempolicy(0x3, 0x0, 0x0) unshare(0x46060480) r1 = shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000233000/0x2000)=nil, 0x0) mlockall(0x2) r2 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil) mlockall(0x1) shmdt(r2) shmat(0x0, &(0x7f00003b7000/0x1000)=nil, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f00003dc000/0x2000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) 53.350654243s ago: executing program 2 (id=2914): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r1) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x1002007d}}) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000680)='/dev/cpu/#/msr\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 30.607306059s ago: executing program 0 (id=2960): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000440), 0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 28.817215844s ago: executing program 0 (id=2962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) close(0xffffffffffffffff) setpriority(0x0, r0, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000005cc0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f0000005b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x44, 0x3, "ec"}, @lsrr={0x83, 0x1f, 0xf2, [@broadcast, @private=0xa010100, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast]}, @rr={0x7, 0x7, 0x44, [@broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x90}, 0x0) sched_getscheduler(0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ea8821d4bbe062028ccb7664bb1d099be2855788541cbe09a1e2998cbf"], 0x1, 0x1a2, &(0x7f0000000280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file3\x00', 0x0, 0x0) 27.313612693s ago: executing program 0 (id=2973): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(r1, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x20403, 0x0) fsopen(0x0, 0x0) 25.291904079s ago: executing program 0 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 22.974738753s ago: executing program 0 (id=2978): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0505350, &(0x7f0000000200)={{0x0, 0x4b}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 22.036544469s ago: executing program 0 (id=2970): bind$inet(0xffffffffffffffff, &(0x7f0000001700)={0x2, 0x0, @private}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xdc05) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x54e3, 0x0) sendto$inet6(r0, &(0x7f0000005980)="9f364a53a5120ef15a592e99f6d41311c30072f820785b7976d882cd83b0027990cc851d28c130f0ccd30b15de8a8a84ab34f28a8afcdf7244c6e1055af384079a2f339faf47c664be53331d1da1f0cf49d9582a355f4bb846e4ea182920fb72847523e52cfa4765c2fee80e3b0d302ab191b36ba0567a708661c7d48a6eacfeb86c9b0321afde86733b9cceb87e71ed1b00c7f491f1670074e9f1220446db7d20fa30822ea335131a4e2264b3a6edccf27107194f3f47f36c9ba5213ce5dff316486b28009075f0bd76a66fba5d372c3978c1605f562436716816167a0f9c71820df4bf6bc7e660e50edbef8530fd3b8e72323e9f4686298b14e3432ae8efa7284c874751e41d37a4ec906106a1e5b160388e8d7f712507b7f9a3c48636763f5c68f5c043b39ec2d150bf01f9ab0a1a2a22c499bc112ff47df04dcc1c790965c5c9cd2b1b1164c2e44dafe3569494b2ff644d006171cf90b1c38d7034413ef08b781f0b7ae9e1424555526a1389fa88260b73afab16eaedce0f87acf334bd6218cf18", 0x183, 0x24080005, &(0x7f0000002fc0)={0xa, 0x4e23, 0x4, @mcast1, 0x400}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000003280)="b5d64f5331b47ace4a5fbdc9fa839ced3b703c6119ff347b4f101b1627e440b35331d2ca3cddf324f56d96a126eb38559d551fe0828d6bc4dd93eee26af3283a739dc9bfbf75eec9f324dd8e05caeea9d6972ffd465047c7fd5488a57f5524bd46291f4d37f0a6ee9db2922ce13f51fc8a4bed50e9c5f7", 0x77}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000ac0), 0x118) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80000000}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0x40000, 0x198, 0x0, 0x198, 0x380, 0x358, 0x358, 0x380, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0002191400000000000404fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x478) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x6, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001f15b9409b0d1b849ac002", 0x11, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 13.336654071s ago: executing program 3 (id=2983): syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@discard}, {@user_xattr}]}, 0x1, 0x468, &(0x7f0000000840)="$eJzs3M1vFVUfB/Dv3L7w+jzlecQ3BKmCUEVbWxQ1ISTsXBBd6MJtQ0tDKKC0JkKIgcSFWxP9A3Qvf4JRE19WrgxbNbpQEmKgCxbG1MztveW29PYF2l5sP59kyjkzU86ZOf3N3HvyywmwbnWXP4pka5Ifk3RNVWee0D31z8SNi8fLrcjk5Bt/FtXzbt64eLx+av33tpQ/KklPJal8UOSxOdodO3/h1ODo6PC5Wr1v/PTbfWPnLzx38vTgyPDI8Jn+g/2HDr304ssD/ct2ra/+MPHbZ+2vbUxy5taRgc1lf7fWjjVex3LpTvfMe9lg33I31mIPNpSL9oXPn2x2Y1hVbUnK4eqoxn9X2nJ78Lry3c8t7RywoiZLG5oevjQJrGFFZtYraVVPgNVVf9GX33/rW5p/HmCNub576gvgzdrczsT0PEh7KlOFd/Z989WM7/fLqTvJW8de31VuWaF5GAAAAID17MujSZ5NDnc1zP9VVfLQ9Fmd1fLDSR5J8miSHUk1r2dnkl1JHk+yu55PtLDp7I/Z5985/1O5dg+XxwKuH00ON+R2TTSMf822tlrtP2UlHcWJk6PDzyf5b5KedGwo682ztJom+mysF+rzf+VWtl+fC6z141r7rPnoocHxwbu+YGa4fjnZ0T7X+BfTmUDlCD6R5MnF/IffVjPqRrZf+Wt61ysfPnC12endC44/K2ny02T/nPF/O26L+fMz+6rPg776U+FO339y6PNm7Rv/1irjf/P847+taMzXHVt6G19v/+WnZscWHv+5n/+dxZvVDnbW9r03OD5+rj/pLI7duX9g6X1eq+r3o36/yvHv2TP3+///td8pb+ieJHuTPFXLXd5fffcnTyd5JsmBedq8NPLr382Oif/WKsd/aEnxv/TCH5c/2tus/cXF/wvVzvTU9vj8t7DFDlCr+wkAAAAAAADA8qhU18ArKr3T5Uqlt3dqDb/t2VwZPTs2fuDE2XfPDE2tlbctHZV6pldXQz5of7V8uz4wq34wyf+SfNy2qVrvPX52dKjVFw/r3JYm8V/6va3VvQNW3CLWa02yacX7Aay+xcV/I6s3w1qx9PgH1orFxb9VQWEt8v6H9Uv8w/ol/mH9Ev+wfs2O//evHjty64udV1rUHWC1dLS6A0CL3Mu6fgoKd1+o/wWeGpys5ZnfJx379xc2LeZmFsX8T4BWPZEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7i//BAAA//+sAMBz") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) 12.122120633s ago: executing program 3 (id=2986): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000000)={0x0, 0x1}) 10.051600814s ago: executing program 3 (id=2990): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc028564e, &(0x7f0000000140)={0x3, 0x1, [0x3, 0x0, 0xa, 0x8001, 0x7, 0x5, 0x7fffffff, 0x7f]}) 9.089360713s ago: executing program 3 (id=2991): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r4, &(0x7f0000001c00)={0x2020}, 0x2020) read(r4, &(0x7f0000001b00)=""/194, 0xc2) 7.533420416s ago: executing program 3 (id=2993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_BTF_LOAD(0x4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@local, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x57, 0x12, {{'authenc(md5,xts-aes-neon)\x00'}, 0x58, 0x80, "25cac5216d1c8af0a97690"}}]}, 0x148}}, 0x0) 6.008104547s ago: executing program 1 (id=2995): io_uring_setup(0x7875, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xa0000004}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000003}, 0x1c) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x33, 0xfffffffffffffffe, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.353241979s ago: executing program 1 (id=2998): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) madvise(&(0x7f0000ed5000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mremap(&(0x7f0000adb000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000a02000/0x1000)=nil) shmat(0x0, &(0x7f0000a98000/0x5000)=nil, 0x0) shmat(0x0, &(0x7f00006d6000/0x1000)=nil, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f00002cb000/0x2000)=nil, 0x2000) madvise(&(0x7f000012f000/0x2000)=nil, 0xf01200, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r0) 4.12957966s ago: executing program 1 (id=2999): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(r1, 0x5423, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(0x0, 0x20403, 0x0) fsopen(0x0, 0x0) 4.12922692s ago: executing program 4 (id=3000): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) rt_sigsuspend(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x500000}}, 0x50) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r5}, 0x10) pivot_root(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 3.927054438s ago: executing program 4 (id=3001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary) keyctl$search(0xa, r3, &(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0) 2.796045412s ago: executing program 4 (id=3002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='net/dev\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x1, 0x2000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fdatasync(r3) 2.49472871s ago: executing program 1 (id=3003): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='qgroup_meta_free_all_pertrans\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x56, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x28, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x5, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0xffffffffffffffbb}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r6, 0x90d, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x44, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x4}]}, 0x44}}, 0x0) 1.613250371s ago: executing program 4 (id=3004): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000020c0)={'vxcan1\x00'}) socket(0x1, 0x803, 0x0) r2 = memfd_secret(0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001e80), 0x400c00, 0x0) fcntl$setsig(r2, 0xa, 0x2f) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newlink={0x70, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a82f8c, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_VF_PORTS={0x4}]}, 0x70}}, 0x0) 771.945789ms ago: executing program 4 (id=3005): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x1}, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c250000000000202020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x0, 'devices'}]}, 0x9) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x14201}}}}}}]}, 0x48}}, 0x0) 770.685219ms ago: executing program 3 (id=3013): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000080000030000007b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGApCpYcYjfQ5NBceimhUEoDpR+g9x5Dv0A/RaANhBJMe+hFZeWVo8SSrThKrFS/H6w9s7vy7Gj2P57RSCiAkTWZ/ShEvBIR3yQRhzuOFSM/OLl+3trD63PZlkSz+emfSST5vvb5Sf77YDtTjPj1q4iThc3l1ldWF8uVSrqU56ca1StT9ZXVU5eq5YV0Ib08Mzt75u3ZmffefWdgdX3j/N/ff3L3wzNfH1/77uf7R24ncTYO5cc66/EMbnRmJmMyf07G4+wTJ04PoLBhkuz2BbAjY3mcj0fWBxyOsTzqgf++LyOiCYyoRPzDiGqPA9pz+wHNg18aDz5YnwBtrn9x/bWR2NeaGx1YSx6bGWXz3YkBlJ+V8csfd25nWwzudQiAbd24GRGni8XN/V+S9387d7qPc54sQ/8HL87dbPzzZrfxT2Fj/BNdxj8Hu8TuTmwf/4X7Ayimp2z8937X8e/GotXEWJ77X2vMN55cvFRJs77t/xFxIsb3Zvmt1nPOrN1r9jrWOf7Ltqz89lgwv477xb2PP2a+3Cg/S507PbgZ8WrX8W+y0f5Jl/bPno/zfZZxLL3zWq9j29f/+Wr+FPF61/Z/tKKVbL0+OdW6H6bad8Vmf9069luv8ne7/ln7H9i6/hNJ53pt/enL+HHfP2mvYzu9//ckn7XSe/J918qNxtJ0xJ7k4837Zx49tp1vn5/V/8Txrfu/bvf//oj4vM/63zp6q+epw9D+80/V/k+fuPfRFz/0Kr+/9n+rlTqR7+mn/+v3Ap/luQMAAAAAAIBhU4iIQ5EUShvpQqFUWn9/x9E4UKjU6o2TF2vLl+ej9VnZiRgvtFe6D3e8H2I6fz9sOz/zRH42Io5ExLdj+1v50lytMr/blQcAAAAAAAAAAAAAAAAAAIAhcbDH5/8zv4/t9tUBz52v/IbRtW38D+KbnoCh5P8/jC7xD6NL/MPoEv8wusQ/jC7xD6NL/MPoEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu25trD63NZfv7qyvJi7eqp+bS+WKouz5XmaktXSgu12kIlLc3Vqtv9vUqtdmV6JpavTTXSemOqvrJ6oVpbvty4cKlaXkgvpOMvpFYAAAAAAAAAAAAAAAAAAADwcqmvrC6WK5V0SUJiR4nicFyGxIATu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wYAAP//Gis4ow==") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup, 0x2f, 0x1, 0x61e, &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f0000000a80), &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)=ANY=[], 0xfeeb, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2042, 0x0) pwritev2(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="06", 0x7ffffff2}], 0x1, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0xffffffffffffffff, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 737.663662ms ago: executing program 1 (id=3006): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000002140), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0xc, @sliced}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000001740)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpu.max\x00', 0x2, 0x0) fstat(r4, &(0x7f0000000180)) syz_usb_connect(0x0, 0x3e, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0505510, &(0x7f0000000080)) 0s ago: executing program 4 (id=3007): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x2c, r6, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): becomes ready [ 1190.680364][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1190.768365][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1190.834771][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1190.843992][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1190.853692][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1190.862629][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1190.871719][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1190.884529][T16341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1190.989234][T16684] loop4: detected capacity change from 0 to 1024 [ 1190.996507][T16684] hfsplus: unable to parse mount options [ 1191.019018][T16341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1191.056306][T16687] fuse: Bad value for 'fd' [ 1191.077638][T16614] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.134255][T16697] loop4: detected capacity change from 0 to 8 [ 1192.154397][T16614] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1192.243174][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2576'. [ 1192.463625][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1192.488626][T16697] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1192.504668][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1192.515122][T16697] SQUASHFS error: Failed to read block 0x9b: -5 [ 1192.531486][T16697] SQUASHFS error: Unable to read metadata cache entry [99] [ 1192.552861][T16697] SQUASHFS error: Unable to read inode 0x127 [ 1193.089147][T16716] loop4: detected capacity change from 0 to 1024 [ 1193.180808][T16716] EXT4-fs (loop4): INFO: recovery required on readonly filesystem [ 1193.406368][T16716] EXT4-fs (loop4): write access will be enabled during recovery [ 1193.623884][T16716] EXT4-fs (loop4): barriers disabled [ 1193.763751][T16716] JBD2: no valid journal superblock found [ 1193.769524][T16716] EXT4-fs (loop4): error loading journal [ 1193.826878][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1193.839803][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1193.886400][T16341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.941254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1193.985313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1194.117435][T16341] device veth0_vlan entered promiscuous mode [ 1194.172860][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1194.215202][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1194.981326][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1194.989940][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1195.002751][T16341] device veth1_vlan entered promiscuous mode [ 1195.133897][T16731] xt_recent: Unsupported userspace flags (00000042) [ 1195.179534][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1195.180246][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1195.380109][T16341] device veth0_macvtap entered promiscuous mode [ 1195.387231][T16341] device veth1_macvtap entered promiscuous mode [ 1195.442345][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.468617][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.492505][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.516345][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.533019][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.551885][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.595583][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1195.619492][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.631635][T16341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1195.641775][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1195.685503][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1195.702234][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1195.718417][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1195.742693][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.777701][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.804067][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.821507][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.831861][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.863658][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.882129][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1195.898273][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1195.946267][T16341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1196.003380][T16341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1196.015316][T16341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.042363][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1196.485364][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1196.535318][T16341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.566922][T16341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.588787][T16341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.598292][T16341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.010757][T10182] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1197.212537][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.220766][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.228604][ T4198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.267986][ T4198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.331217][T10182] usb 2-1: Using ep0 maxpacket: 32 [ 1197.386196][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1197.449677][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1197.931672][T10175] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1198.409694][T16778] overlayfs: failed to resolve './file0': -2 [ 1198.931361][T10175] usb 3-1: Using ep0 maxpacket: 16 [ 1199.121366][T10182] usb 2-1: unable to read config index 4 descriptor/start: -71 [ 1199.121403][T10182] usb 2-1: can't read configurations, error -71 [ 1199.278952][T16785] loop4: detected capacity change from 0 to 256 [ 1199.288834][T16785] FAT-fs (loop4): Unrecognized mount option "K ‡³hcheck=strict" or missing value [ 1199.463683][T10175] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 1199.473299][T10175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.481904][T10175] usb 3-1: Product: syz [ 1199.486079][T10175] usb 3-1: Manufacturer: syz [ 1199.490751][T10175] usb 3-1: SerialNumber: syz [ 1199.498489][T10175] usb 3-1: config 0 descriptor?? [ 1199.557170][T10175] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 1199.771274][T16766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.797766][T16766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.834105][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1199.864688][T16790] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 1200.412573][T16810] loop4: detected capacity change from 0 to 256 [ 1200.457948][T16810] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1200.510109][T16810] syz.4.2605: attempt to access beyond end of device [ 1200.510109][T16810] loop4: rw=524288, sector=524408, nr_sectors = 1 limit=256 [ 1200.527125][T16810] syz.4.2605: attempt to access beyond end of device [ 1200.527125][T16810] loop4: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 1200.567865][ T26] audit: type=1800 audit(1727540850.874:279): pid=16810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2605" name="file1" dev="loop4" ino=1048873 res=0 errno=0 [ 1200.600480][T16810] exFAT-fs (loop4): hint_cluster is invalid (65537) [ 1200.613856][T16810] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880580f8e60 iblock : 8, err : -5) [ 1200.624312][T16810] exFAT-fs (loop4): Filesystem has been set read-only [ 1200.633142][T16810] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00010000) [ 1201.044412][ T3682] usb 3-1: USB disconnect, device number 19 [ 1201.171246][T10047] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1201.956721][T10047] usb 2-1: Using ep0 maxpacket: 32 [ 1202.141230][T10047] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1202.185203][T10047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1203.371426][T10047] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1203.398078][T10047] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1203.449148][T10047] usb 2-1: Product: syz [ 1203.449173][T10047] usb 2-1: Manufacturer: syz [ 1203.449188][T10047] usb 2-1: SerialNumber: syz [ 1203.455895][T10047] usb 2-1: config 0 descriptor?? [ 1203.471494][T10047] usb 2-1: can't set config #0, error -71 [ 1203.476513][T10047] usb 2-1: USB disconnect, device number 23 [ 1203.606469][T16845] loop4: detected capacity change from 0 to 1024 [ 1203.725726][T16845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1203.751359][T12384] Bluetooth: hci1: command tx timeout [ 1203.864448][ T26] audit: type=1800 audit(1727540854.194:280): pid=16844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2613" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1203.944793][T16845] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1204.067678][T16845] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5882: Corrupt filesystem [ 1205.101128][T16845] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #15: comm syz.4.2613: mark_inode_dirty error [ 1205.210475][T16845] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.230367][T12384] Bluetooth: hci5: command 0x0406 tx timeout [ 1205.419281][T16845] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.542044][T16851] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 4114310728399543779 [ 1205.617657][T16875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2619'. [ 1205.823369][T16843] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.877104][T16843] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.910860][T16843] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.935560][T16845] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1205.979870][T16843] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.2613: Invalid inode table block 14224531095162842338 in block_group 0 [ 1208.410525][T10998] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1208.565899][T10998] EXT4-fs (loop4): unmounting filesystem. [ 1209.281996][T12384] Bluetooth: hci0: command tx timeout [ 1210.407366][ T4524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.815776][ T26] audit: type=1326 audit(1727540861.144:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1210.847401][ T4524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.905990][ T26] audit: type=1326 audit(1727540861.144:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1210.948745][T16923] loop2: detected capacity change from 0 to 736 [ 1211.094163][ T4524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.574657][ T26] audit: type=1326 audit(1727540861.894:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1211.997113][ T4524] team0: Port device netdevsim0 removed [ 1212.009518][ T26] audit: type=1326 audit(1727540861.954:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1212.041541][ T26] audit: type=1326 audit(1727540861.954:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1212.057466][ T4524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.117696][ T26] audit: type=1326 audit(1727540861.964:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1212.181098][ T26] audit: type=1326 audit(1727540861.974:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16917 comm="syz.3.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7fc00000 [ 1212.206923][T16930] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1212.213459][T16930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1212.374230][T16930] vhci_hcd vhci_hcd.0: Device attached [ 1212.691131][ T3680] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 1213.395707][T16225] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1213.407889][T12384] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1213.421263][T12384] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1213.451853][T12384] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1213.471673][ T3643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1213.481228][ T3643] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1213.489136][ T3643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1213.511370][T12385] Bluetooth: hci5: command 0x0406 tx timeout [ 1213.647492][T16939] lo speed is unknown, defaulting to 1000 [ 1213.921381][T16948] loop2: detected capacity change from 0 to 4096 [ 1213.937503][T16948] ntfs: (device loop2): parse_options(): Invalid uid option argument: 0xffffffffffffffff [ 1215.066371][T16225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.225104][T16225] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1215.481223][T16933] vhci_hcd: connection reset by peer [ 1215.491167][ T35] vhci_hcd: stop threads [ 1215.495432][ T35] vhci_hcd: release socket [ 1215.523821][T16966] program syz.0.2646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1215.552077][ T35] vhci_hcd: disconnect device [ 1215.591174][T12385] Bluetooth: hci4: command tx timeout [ 1215.598541][T16225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.608339][T16225] usb 2-1: config 0 descriptor?? [ 1215.631297][T16225] usb 2-1: can't set config #0, error -71 [ 1215.641077][T16225] usb 2-1: USB disconnect, device number 24 [ 1215.702942][T16966] dccp_close: ABORT with 24 bytes unread [ 1216.034735][T16939] chnl_net:caif_netlink_parms(): no params data found [ 1216.375498][T16972] loop2: detected capacity change from 0 to 32768 [ 1216.382737][T16972] XFS: noikeep mount option is deprecated. [ 1216.515288][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.372412][T16972] XFS (loop2): Mounting V5 Filesystem [ 1217.388160][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.458702][T16939] device bridge_slave_0 entered promiscuous mode [ 1217.519399][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.540719][T16972] XFS (loop2): Ending clean mount [ 1217.544201][T16225] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1217.549812][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.575966][T16972] XFS (loop2): Quotacheck needed: Please wait. [ 1217.587373][T16939] device bridge_slave_1 entered promiscuous mode [ 1217.671194][ T3643] Bluetooth: hci4: command tx timeout [ 1217.755638][T16972] XFS (loop2): Quotacheck: Done. [ 1217.815974][T16939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.831164][ T3680] vhci_hcd: vhci_device speed not set [ 1218.010613][ T3643] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1218.062290][T16225] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 1218.126405][T16225] usb 1-1: config 0 has no interface number 1 [ 1218.236422][T16225] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1218.364890][T16225] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1218.625262][T16939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1218.634759][T16225] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1218.654222][T16225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1218.691129][T16225] usb 1-1: SerialNumber: syz [ 1218.714788][T16225] usb 1-1: config 0 descriptor?? [ 1218.738653][T15615] XFS (loop2): Unmounting Filesystem [ 1218.763356][T16225] usb 1-1: Found UVC 0.00 device (0002:0000) [ 1218.809439][T16225] usb 1-1: No valid video chain found. [ 1219.662517][T16225] usb 1-1: USB disconnect, device number 18 [ 1219.754813][T12385] Bluetooth: hci4: command tx timeout [ 1219.996437][T16939] team0: Port device team_slave_0 added [ 1220.153755][T16939] team0: Port device team_slave_1 added [ 1220.288952][T16939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.351539][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.495930][T16939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.767325][T16939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.901073][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.951302][T16939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.831429][T12385] Bluetooth: hci4: command tx timeout [ 1222.102636][T17043] loop2: detected capacity change from 0 to 512 [ 1222.208978][T16939] device hsr_slave_0 entered promiscuous mode [ 1222.290981][T16939] device hsr_slave_1 entered promiscuous mode [ 1222.701704][T16939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1222.709429][T16939] Cannot create hsr debugfs directory [ 1222.762453][ T4524] device hsr_slave_0 left promiscuous mode [ 1222.786850][ T4524] device hsr_slave_1 left promiscuous mode [ 1222.814078][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.841604][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.881332][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.016066][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.026088][ T4524] device bridge_slave_1 left promiscuous mode [ 1223.032886][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.054044][ T4524] device bridge_slave_0 left promiscuous mode [ 1223.060217][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.091174][T10047] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1223.301061][T10047] usb 1-1: device descriptor read/64, error -71 [ 1223.977838][ T4524] device veth1_macvtap left promiscuous mode [ 1224.092329][ T4524] device veth0_macvtap left promiscuous mode [ 1224.108904][ T4524] device veth1_vlan left promiscuous mode [ 1224.163107][ T4524] device veth0_vlan left promiscuous mode [ 1224.281117][T10047] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1224.501855][T10047] usb 1-1: device descriptor read/64, error -71 [ 1224.961152][T10047] usb usb1-port1: attempt power cycle [ 1225.611230][T12385] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1225.801068][T10047] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1226.060004][T10047] usb 1-1: device not accepting address 21, error -71 [ 1228.000488][ T3625] libceph: connect (1)[c::]:6789 error -101 [ 1228.008768][ T3625] libceph: mon0 (1)[c::]:6789 connect error [ 1228.057802][ T3625] libceph: connect (1)[c::]:6789 error -101 [ 1228.064159][ T3625] libceph: mon0 (1)[c::]:6789 connect error [ 1228.188077][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 1228.292876][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 1228.339206][ T3625] libceph: connect (1)[c::]:6789 error -101 [ 1228.345566][ T3625] libceph: mon0 (1)[c::]:6789 connect error [ 1228.378500][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1228.452958][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1228.757781][T17113] ceph: No mds server is up or the cluster is laggy [ 1229.728820][ T4524] bond0 (unregistering): Released all slaves [ 1229.886177][T17089] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 1232.508604][T17137] loop2: detected capacity change from 0 to 32768 [ 1232.881929][T16939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1232.903326][T16939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1232.915535][T16939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1232.925524][T16939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1233.094477][T16939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.164541][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.173340][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.204965][T16939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.223426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1233.242084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1233.261365][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.268481][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.291438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1233.315672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.338100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.378782][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.385935][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.416548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1233.443214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1233.466506][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.487955][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.502062][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.524121][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.542518][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.570885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.585129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.604447][T16939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1233.639330][T16939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1233.662079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.679417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1234.020174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1234.043542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1234.063533][T16939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.524687][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1234.538176][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1234.589987][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.607174][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.618002][T16939] device veth0_vlan entered promiscuous mode [ 1234.625636][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.641799][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.666443][T16939] device veth1_vlan entered promiscuous mode [ 1234.717284][T16939] device veth0_macvtap entered promiscuous mode [ 1234.737141][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1234.751275][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1234.760420][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.781891][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.803643][T16939] device veth1_macvtap entered promiscuous mode [ 1234.812562][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1234.831619][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.856872][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.890035][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.911550][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.938570][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.971100][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.991051][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.000878][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.041135][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.062623][T16939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.073615][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1235.092275][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1235.120478][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.139297][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.161147][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.191541][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.211366][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.231059][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.240884][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.271510][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.291074][T16939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.311113][T16939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.332347][T16939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.343217][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1235.355957][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1235.384506][T16939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.401070][T16939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.409776][T16939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.431096][T16939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.550456][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.571529][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.598051][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1235.612404][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.620616][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.636668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1236.202114][T17247] loop2: detected capacity change from 0 to 1024 [ 1236.260132][T17247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.326566][ T26] audit: type=1800 audit(1727540886.614:288): pid=17246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2695" name="bus" dev="loop2" ino=861 res=0 errno=0 [ 1236.439068][T17242] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1236.963956][T17264] lo speed is unknown, defaulting to 1000 [ 1238.553800][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.560145][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.346584][T17300] ip6t_rpfilter: unknown options [ 1241.454471][T17315] loop4: detected capacity change from 0 to 256 [ 1241.586608][T17315] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1241.934813][ T26] audit: type=1800 audit(1727540892.264:289): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2701" name="file1" dev="loop4" ino=1048877 res=0 errno=0 [ 1242.627067][T17332] loop4: detected capacity change from 0 to 2048 [ 1242.820869][T17332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1249.079620][T17385] tun0: tun_chr_ioctl cmd 1074025675 [ 1249.097684][T17385] tun0: persist enabled [ 1249.112509][T17385] tun0: tun_chr_ioctl cmd 1074025675 [ 1249.141333][T17385] tun0: persist enabled [ 1251.069739][T17397] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1251.192594][T17399] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1251.313864][T12385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1251.324391][T12385] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1251.333557][T12385] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1251.343309][T12385] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1251.352401][T12385] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1251.359774][T12385] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1251.452740][T17404] loop4: detected capacity change from 0 to 256 [ 1251.536501][T17401] lo speed is unknown, defaulting to 1000 [ 1251.550921][T17404] FAT-fs (loop4): Directory bread(block 64) failed [ 1251.568213][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 1251.601119][T17404] FAT-fs (loop4): Directory bread(block 65) failed [ 1251.615296][T17404] FAT-fs (loop4): Directory bread(block 66) failed [ 1251.656515][T17404] FAT-fs (loop4): Directory bread(block 67) failed [ 1251.677996][T17406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 1251.687130][T17404] FAT-fs (loop4): Directory bread(block 68) failed [ 1251.711495][T17404] FAT-fs (loop4): Directory bread(block 69) failed [ 1251.742983][T17404] FAT-fs (loop4): Directory bread(block 70) failed [ 1251.771524][T17404] FAT-fs (loop4): Directory bread(block 71) failed [ 1251.778301][T17404] FAT-fs (loop4): Directory bread(block 72) failed [ 1251.794886][T17404] FAT-fs (loop4): Directory bread(block 73) failed [ 1252.043413][T17408] kvm [17407]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0xa700 [ 1252.337282][T17401] chnl_net:caif_netlink_parms(): no params data found [ 1253.431243][ T3643] Bluetooth: hci6: command tx timeout [ 1255.511571][ T3643] Bluetooth: hci6: command tx timeout [ 1255.863170][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.932027][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.028438][T17401] device bridge_slave_0 entered promiscuous mode [ 1256.142369][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.301713][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.310097][T17401] device bridge_slave_1 entered promiscuous mode [ 1256.495838][T17456] Invalid ELF header magic: != ELF [ 1257.182015][ T52] block nbd1: Attempted send on invalid socket [ 1257.188314][ T52] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1257.197510][T17456] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 1257.286918][T17401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.371912][T17401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.436487][ T26] audit: type=1326 audit(1727540907.764:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.1.2737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88e377dff9 code=0x0 [ 1257.591199][ T3643] Bluetooth: hci6: command tx timeout [ 1257.658010][T17401] team0: Port device team_slave_0 added [ 1258.183275][T17401] team0: Port device team_slave_1 added [ 1258.533043][T17401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.541321][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.936204][T17401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.115607][T17401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.187353][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.671321][T12385] Bluetooth: hci6: command tx timeout [ 1259.758068][T17401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.744303][T17493] loop4: detected capacity change from 0 to 40427 [ 1260.795108][T17493] F2FS-fs (loop4): Invalid segment/section count (31 != 24 * 1) [ 1260.802878][T17493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1260.812654][T17493] F2FS-fs (loop4): invalid crc value [ 1260.822556][T17493] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1260.848659][T17493] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1260.855737][T17493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1260.878090][T17493] syz.4.2743: attempt to access beyond end of device [ 1260.878090][T17493] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1261.683305][T17401] device hsr_slave_0 entered promiscuous mode [ 1261.692296][T16939] syz-executor: attempt to access beyond end of device [ 1261.692296][T16939] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1261.767172][T17501] xt_TCPMSS: Only works on TCP SYN packets [ 1262.153652][T17401] device hsr_slave_1 entered promiscuous mode [ 1262.181231][T17401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1262.189249][T17401] Cannot create hsr debugfs directory [ 1263.867996][T17401] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.906342][T17401] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.428131][T17401] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.667188][T17536] loop4: detected capacity change from 0 to 1024 [ 1269.520369][T17536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1269.565423][T17528] loop1: detected capacity change from 0 to 8192 [ 1269.718325][T17528] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1269.851606][T17528] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1269.861771][T17528] REISERFS (device loop1): using ordered data mode [ 1269.870984][T17528] reiserfs: using flush barriers [ 1269.876121][T17401] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.891143][T17528] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1269.929411][T17550] loop4: detected capacity change from 0 to 128 [ 1269.936768][T17528] REISERFS (device loop1): checking transaction log (loop1) [ 1269.973242][T17528] REISERFS (device loop1): Using r5 hash to sort names [ 1269.983756][T17528] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1270.011318][T17545] netlink: 'syz.3.2760': attribute type 24 has an invalid length. [ 1270.026960][T17553] loop4: detected capacity change from 0 to 512 [ 1270.044917][T17528] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1270.277148][T17553] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1270.311999][T17553] EXT4-fs (loop4): 1 truncate cleaned up [ 1270.371271][T17559] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1270.385717][T17559] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1270.403025][T17559] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1270.551205][T17553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1270.899491][T16939] EXT4-fs (loop4): unmounting filesystem. [ 1271.591579][T12385] Bluetooth: hci0: command 0x0406 tx timeout [ 1272.118384][T17401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1272.142042][T17401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1272.207840][T17401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1272.300070][T17401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1273.476441][T17590] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.487280][T17590] I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.496743][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1273.507465][T17590] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.516951][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1273.527197][T17590] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1273.534951][T17590] UDF-fs: Scanning with blocksize 512 failed [ 1273.543586][T17590] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.553696][T17590] I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.563132][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1273.573775][T17590] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.583325][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1273.592962][T17590] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1273.600663][T17590] UDF-fs: Scanning with blocksize 1024 failed [ 1273.608830][T17590] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.618785][T17590] I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.628310][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1273.638484][T17590] I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.648003][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1273.657646][T17590] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1273.665391][T17590] UDF-fs: Scanning with blocksize 2048 failed [ 1273.675927][T17590] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1273.685897][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1273.696054][T17590] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1273.705704][T17590] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 1273.713438][T17590] UDF-fs: Scanning with blocksize 4096 failed [ 1273.719569][T17590] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1273.772144][T17401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.050266][T17401] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.538255][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1278.552099][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1278.560086][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1278.579791][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1278.590460][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.597600][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.711812][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1278.735304][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1279.356718][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.363903][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.510624][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1279.529527][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1279.666765][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1280.117756][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1280.240679][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1280.422040][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1281.402607][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1282.261605][ T3643] Bluetooth: hci1: command 0x0406 tx timeout [ 1283.926603][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1283.938218][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1283.964781][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1283.999051][T17624] loop1: detected capacity change from 0 to 256 [ 1284.777833][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1284.803291][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1284.867330][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1284.880503][T17624] FAT-fs (loop1): Directory bread(block 64) failed [ 1284.907118][T17624] FAT-fs (loop1): Directory bread(block 65) failed [ 1284.929708][T17624] FAT-fs (loop1): Directory bread(block 66) failed [ 1284.946822][T17624] FAT-fs (loop1): Directory bread(block 67) failed [ 1284.971218][T17624] FAT-fs (loop1): Directory bread(block 68) failed [ 1285.151314][T17624] FAT-fs (loop1): Directory bread(block 69) failed [ 1285.167642][T17624] FAT-fs (loop1): Directory bread(block 70) failed [ 1285.270640][T17624] FAT-fs (loop1): Directory bread(block 71) failed [ 1285.373533][T17624] FAT-fs (loop1): Directory bread(block 72) failed [ 1285.484465][T17624] FAT-fs (loop1): Directory bread(block 73) failed [ 1285.733862][ T3643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1285.753388][ T3643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1285.766831][ T3643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1285.776074][ T3643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1286.245126][ T3643] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1286.258292][ T3643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1286.619764][T17635] lo speed is unknown, defaulting to 1000 [ 1287.105322][T17654] loop4: detected capacity change from 0 to 32768 [ 1287.112791][T17654] XFS: attr2 mount option is deprecated. [ 1287.118454][T17654] XFS: noikeep mount option is deprecated. [ 1288.037222][T17654] XFS (loop4): Mounting V5 Filesystem [ 1288.137314][T17669] loop1: detected capacity change from 0 to 2048 [ 1288.199198][T17669] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 1288.230317][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1288.262274][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1288.276314][T17654] XFS (loop4): Ending clean mount [ 1288.285788][T17654] XFS (loop4): Quotacheck needed: Please wait. [ 1288.311168][T12384] Bluetooth: hci5: command tx timeout [ 1288.337388][T17669] loop1: detected capacity change from 0 to 512 [ 1288.353213][T17669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1288.396593][T17669] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1288.423761][T17669] EXT4-fs (loop1): Remounting filesystem read-only [ 1288.437381][T17669] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2786: invalid indirect mapped block 1 (level 1) [ 1288.470825][T17669] EXT4-fs (loop1): 1 truncate cleaned up [ 1288.472045][T17654] XFS (loop4): Quotacheck: Done. [ 1288.476605][T17669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1288.510822][T14695] device hsr_slave_0 left promiscuous mode [ 1288.576414][T14695] device hsr_slave_1 left promiscuous mode [ 1288.591814][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1288.609477][T14695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.628068][T14695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1288.645841][T14695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1288.665100][T14695] device bridge_slave_1 left promiscuous mode [ 1288.733987][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.761797][T14695] device bridge_slave_0 left promiscuous mode [ 1288.768485][T14695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.822354][T17680] netlink: 'syz.4.2784': attribute type 298 has an invalid length. [ 1289.005683][T14695] device veth1_macvtap left promiscuous mode [ 1289.026196][T14695] device veth0_macvtap left promiscuous mode [ 1289.048712][T14695] device veth1_vlan left promiscuous mode [ 1289.078142][T14695] device veth0_vlan left promiscuous mode [ 1289.393099][T16193] EXT4-fs (loop1): unmounting filesystem. [ 1289.413663][T16939] XFS (loop4): Unmounting Filesystem [ 1289.740091][ T3682] infiniband syz0: ib_query_port failed (-19) [ 1290.398571][T12384] Bluetooth: hci5: command tx timeout [ 1290.664130][ T26] audit: type=1326 audit(1727540940.994:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.674326][T17695] loop4: detected capacity change from 0 to 512 [ 1290.728403][ T26] audit: type=1326 audit(1727540940.994:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.801224][ T26] audit: type=1326 audit(1727540940.994:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.857198][ T26] audit: type=1326 audit(1727540940.994:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.880880][ T26] audit: type=1326 audit(1727540940.994:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.904800][ T26] audit: type=1326 audit(1727540940.994:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.908825][T17699] loop1: detected capacity change from 0 to 512 [ 1290.927551][ T26] audit: type=1326 audit(1727540940.994:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.957605][ T26] audit: type=1326 audit(1727540940.994:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1290.976063][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.2790: corrupted inode contents [ 1290.980797][ T26] audit: type=1326 audit(1727540940.994:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1291.027708][ T26] audit: type=1326 audit(1727540940.994:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17694 comm="syz.4.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f6673f7dff9 code=0x7ffc0000 [ 1291.064619][T17695] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.2790: mark_inode_dirty error [ 1291.086754][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.2790: corrupted inode contents [ 1291.120524][T17695] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.2790: mark_inode_dirty error [ 1291.132931][T17601] blk_print_req_error: 2 callbacks suppressed [ 1291.132945][T17601] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1291.156665][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.2790: corrupted inode contents [ 1291.248441][T17695] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 1291.257870][T17695] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.2790: corrupted inode contents [ 1291.301689][T17695] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.2790: mark_inode_dirty error [ 1291.328797][T17695] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 1291.366449][T17695] EXT4-fs (loop4): 1 truncate cleaned up [ 1291.381371][T17695] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1291.391333][ T3884] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:7: Failed to release dquot type 1 [ 1291.410849][T17695] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff) [ 1291.506740][T16939] EXT4-fs (loop4): unmounting filesystem. [ 1291.737596][T17709] x_tables: duplicate entry at hook 2 [ 1291.883428][T14695] team0 (unregistering): Port device team_slave_1 removed [ 1291.983160][T14695] team0 (unregistering): Port device team_slave_0 removed [ 1292.062601][T14695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.149265][T14695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.471251][T12384] Bluetooth: hci5: command tx timeout [ 1293.396719][T14695] bond0 (unregistering): Released all slaves [ 1293.633570][T17401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.741196][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1293.762097][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1293.928170][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1293.950717][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1294.025216][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1294.268534][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1294.393375][T17401] device veth0_vlan entered promiscuous mode [ 1294.571246][T12384] Bluetooth: hci5: command tx timeout [ 1294.642270][T17401] device veth1_vlan entered promiscuous mode [ 1294.754437][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1294.778501][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1294.879487][T17401] device veth0_macvtap entered promiscuous mode [ 1294.926237][T17635] chnl_net:caif_netlink_parms(): no params data found [ 1294.981898][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.003116][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.003551][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1295.036023][T17401] device veth1_macvtap entered promiscuous mode [ 1295.056511][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2797'. [ 1295.079990][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1295.099545][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1295.137891][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.161162][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.175174][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.196140][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.206108][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.221051][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.231220][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1295.249369][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.272638][T17401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.311687][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1295.355798][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1295.412577][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.478064][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.587547][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.610603][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1295.628692][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1295.811879][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.786341][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.818183][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.889401][T17401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.920337][T17401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.947604][T17401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.027805][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1297.051441][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1297.084658][T17401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.099556][T17401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.108766][T17401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.121042][T17401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.230705][T17635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.244851][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.295828][T17635] device bridge_slave_0 entered promiscuous mode [ 1297.371385][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.378514][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.392417][T17635] device bridge_slave_1 entered promiscuous mode [ 1297.534119][T17635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.572517][T17635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1297.698152][T17635] team0: Port device team_slave_0 added [ 1297.727354][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.752567][T17635] team0: Port device team_slave_1 added [ 1297.960652][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.058201][T17635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.091216][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.117143][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.267395][T17635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.304149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1298.376688][T17741] netlink: 'syz.3.2800': attribute type 298 has an invalid length. [ 1298.936283][T17635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.948380][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.085913][T17635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.225189][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.411078][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.663204][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1299.997471][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.003771][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.036690][T17635] device hsr_slave_0 entered promiscuous mode [ 1300.069366][T17635] device hsr_slave_1 entered promiscuous mode [ 1300.127060][T17635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.151745][T17635] Cannot create hsr debugfs directory [ 1300.162078][T17753] device vlan2 entered promiscuous mode [ 1300.200574][T17753] device nlmon0 entered promiscuous mode [ 1300.201284][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2804'. [ 1300.223276][T17753] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 1300.513474][T17756] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2804'. [ 1300.541527][T17757] loop3: detected capacity change from 256 to 64 [ 1300.720525][T17761] loop4: detected capacity change from 0 to 2048 [ 1300.896325][T17761] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1300.930543][T17635] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.938687][T17761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1303.698620][T17635] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.846306][T17781] loop4: detected capacity change from 0 to 32768 [ 1304.896788][T17781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2813 (17781) [ 1305.824029][T17781] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1305.834636][T17781] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1305.843508][T17781] BTRFS info (device loop4): use zlib compression, level 3 [ 1305.850704][T17781] BTRFS info (device loop4): using free space tree [ 1305.933437][T17635] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.969817][T17794] netlink: 'syz.3.2815': attribute type 10 has an invalid length. [ 1306.042435][T17794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1306.101141][T17781] BTRFS info (device loop4): enabling ssd optimizations [ 1306.221170][T17794] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1306.261585][T12384] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1306.272021][T12384] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1306.282470][T12384] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1306.290837][T12384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1306.300691][T12384] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1306.309025][T12384] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1306.377689][T16939] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1306.412279][T17635] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.161959][T17824] loop4: detected capacity change from 0 to 256 [ 1307.213739][T17824] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 1307.459691][T16939] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 1307.475553][T16939] exFAT-fs (loop4): Filesystem has been set read-only [ 1307.482466][T16939] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000005) [ 1307.830842][T17802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.854548][T17802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.893538][T17802] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1307.963564][T17802] bond0 (unregistering): Released all slaves [ 1308.401128][T12385] Bluetooth: hci7: command tx timeout [ 1308.613598][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 1308.613843][ T26] audit: type=1804 audit(1727540958.884:324): pid=17828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2827" name="/newroot/7/file0/bus" dev="hugetlbfs" ino=124203 res=1 errno=0 [ 1310.099225][ T26] audit: type=1804 audit(1727540958.904:325): pid=17828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2827" name="/newroot/7/file0/bus" dev="hugetlbfs" ino=124203 res=1 errno=0 [ 1310.336452][ T3884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.389391][T17837] loop2: detected capacity change from 0 to 128 [ 1310.444692][T17837] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1310.481173][T12384] Bluetooth: hci7: command tx timeout [ 1310.647750][ T3884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.717566][T17841] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2820'. [ 1310.760775][T17837] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 1310.827324][T17837] FAT-fs (loop2): Filesystem has been set read-only [ 1310.876706][ T3884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.891481][T17837] FAT-fs (loop2): error, invalid access to FAT (entry 0x0affffff) [ 1310.941600][T17635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1311.006489][T17635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1311.245896][ T3884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.273076][T17401] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1311.325748][T17635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1311.365878][T17635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1311.766210][T17811] chnl_net:caif_netlink_parms(): no params data found [ 1311.774474][T12385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1311.786573][T12385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1311.795465][T12385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1311.803278][T12385] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1311.811517][T12385] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1311.824417][T12385] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1311.907293][T17847] syz.3.2825 (17847) used obsolete PPPIOCDETACH ioctl [ 1312.055197][T17635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1312.233100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1312.240886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1312.312639][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.319720][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.367474][T17811] device bridge_slave_0 entered promiscuous mode [ 1312.424441][T17635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1312.433566][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.440622][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.483177][T17811] device bridge_slave_1 entered promiscuous mode [ 1312.551104][T12384] Bluetooth: hci7: command tx timeout [ 1312.813578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1312.825181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1312.861155][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.868262][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.914822][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.116471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1313.140806][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.264575][T17848] chnl_net:caif_netlink_parms(): no params data found [ 1313.400081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1313.435051][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1313.462627][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.469737][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.529592][T12384] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1313.544386][T12384] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1313.913463][T12384] Bluetooth: hci4: command tx timeout [ 1314.317513][ T3643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1314.329332][ T3643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1314.336890][ T3643] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1314.358370][ T3643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1314.546347][T17811] team0: Port device team_slave_0 added [ 1314.571531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1314.638952][ T3643] Bluetooth: hci7: command tx timeout [ 1315.347377][T17811] team0: Port device team_slave_1 added [ 1315.401143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1315.409838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1315.473240][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1315.495320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1315.596890][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1315.702738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1315.713386][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1315.724481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1315.740287][T17635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1315.991126][T12385] Bluetooth: hci4: command tx timeout [ 1316.384693][T17635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1316.466513][T12385] Bluetooth: hci6: command tx timeout [ 1316.606384][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.614281][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.641375][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.659215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1316.687824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1316.894087][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.901669][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1317.741478][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1317.916544][T17848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.931689][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.959090][T17848] device bridge_slave_0 entered promiscuous mode [ 1318.064318][T17848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.071581][T12385] Bluetooth: hci4: command tx timeout [ 1318.077368][T17848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.118026][T17848] device bridge_slave_1 entered promiscuous mode [ 1318.348134][T17848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.387237][T17811] device hsr_slave_0 entered promiscuous mode [ 1318.424278][T17811] device hsr_slave_1 entered promiscuous mode [ 1318.455710][T17811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1318.508814][T17811] Cannot create hsr debugfs directory [ 1318.551264][T12385] Bluetooth: hci6: command tx timeout [ 1318.562597][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1318.570015][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1318.763542][T17848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.816959][T17848] team0: Port device team_slave_0 added [ 1320.105984][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 1320.120643][T17635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1320.145410][T17848] team0: Port device team_slave_1 added [ 1320.151171][T12385] Bluetooth: hci4: command tx timeout [ 1320.170604][T17878] chnl_net:caif_netlink_parms(): no params data found [ 1320.330540][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1320.346557][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1320.494270][T17848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.518558][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.568910][T17848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.631383][T12385] Bluetooth: hci6: command tx timeout [ 1320.640254][ T3884] device hsr_slave_0 left promiscuous mode [ 1320.658584][ T3884] device hsr_slave_1 left promiscuous mode [ 1320.685139][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.721153][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1320.753157][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1320.760582][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1320.817676][ T3884] device bridge_slave_1 left promiscuous mode [ 1320.842964][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.862542][ T3884] device bridge_slave_0 left promiscuous mode [ 1320.868771][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.034577][ T3884] device nlmon0 left promiscuous mode [ 1321.052202][ T3884] device veth1_macvtap left promiscuous mode [ 1321.058269][ T3884] device veth0_macvtap left promiscuous mode [ 1321.099246][ T3884] device veth1_vlan left promiscuous mode [ 1321.134500][ T3884] device veth0_vlan left promiscuous mode [ 1321.597084][ T3884] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 1322.711531][T12385] Bluetooth: hci6: command tx timeout [ 1323.721757][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 1323.971771][ T3884] team0 (unregistering): Port device team_slave_1 removed [ 1324.162381][ T3884] team0 (unregistering): Port device team_slave_0 removed [ 1324.478633][ T3884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.833517][ T3884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.804979][ T3884] bond0 (unregistering): Released all slaves [ 1327.079577][T17848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1327.088438][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.130144][T17848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1327.204422][T17635] device veth0_vlan entered promiscuous mode [ 1327.267714][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1327.283235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1327.337233][T17635] device veth1_vlan entered promiscuous mode [ 1327.380962][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1327.420364][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1327.468820][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1327.499740][T17848] device hsr_slave_0 entered promiscuous mode [ 1327.517110][T17848] device hsr_slave_1 entered promiscuous mode [ 1327.551468][T17848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.559057][T17848] Cannot create hsr debugfs directory [ 1327.620883][T17635] device veth0_macvtap entered promiscuous mode [ 1327.785800][T17811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.809289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1327.825397][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.877015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1327.915269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1327.954450][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.964434][T17878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.006092][T17878] device bridge_slave_0 entered promiscuous mode [ 1328.057419][T17635] device veth1_macvtap entered promiscuous mode [ 1328.184807][T17811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.286439][T17878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.301607][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.311754][T17878] device bridge_slave_1 entered promiscuous mode [ 1328.394682][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.513613][T17811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.657262][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.705635][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.755124][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.781045][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.811124][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.841100][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.882477][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.910508][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.956543][T17635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.046290][T17811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.107424][T17878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1329.135828][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1329.153174][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1329.183644][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.202716][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.233806][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.261058][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.271397][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.301888][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.322399][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.418203][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.444553][T17635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.470437][T17635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.503249][T17635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.530709][T17878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.635375][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1329.664760][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1329.785020][T17635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.803051][T17635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.832352][T17635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.851289][T17635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.920707][T17878] team0: Port device team_slave_0 added [ 1330.013433][T17878] team0: Port device team_slave_1 added [ 1330.244830][ T3884] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.409320][T17878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.417889][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.445213][T17878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.507754][ T3884] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.544679][T17878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.552199][T17878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.584540][T17878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1330.645796][ T3884] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.683453][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.722889][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.860406][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1330.957548][ T3884] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.075485][T17811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1331.412826][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.424583][T17878] device hsr_slave_0 entered promiscuous mode [ 1331.432966][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.444448][T17878] device hsr_slave_1 entered promiscuous mode [ 1331.490022][T17878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1331.551161][T17878] Cannot create hsr debugfs directory [ 1331.561516][T17811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1331.588813][T17811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1331.781531][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1331.851419][T17811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1332.853897][T17998] netlink: 'syz.0.2775': attribute type 2 has an invalid length. [ 1332.861967][T17998] netlink: 'syz.0.2775': attribute type 1 has an invalid length. [ 1333.492874][T17811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1333.645498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1333.661836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1333.783500][T17811] 8021q: adding VLAN 0 to HW filter on device team0 [ 1333.897650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1333.928319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1333.963428][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1333.970569][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1334.029504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1334.065750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1334.102336][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.109446][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1334.358653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1334.505963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1334.529451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1334.678778][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1334.896184][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1335.188495][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1335.222885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1335.264350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1335.406781][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1335.449286][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1335.469615][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1335.504666][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1335.559336][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1335.736562][T18031] netlink: 341 bytes leftover after parsing attributes in process `syz.0.2847'. [ 1337.091719][T18043] vivid-000: ================= START STATUS ================= [ 1337.101397][T18043] vivid-000: Generate PTS: true [ 1337.106393][T18043] vivid-000: Generate SCR: true [ 1337.111387][T18043] tpg source WxH: 320x180 (R'G'B) [ 1337.116461][T18043] tpg field: 1 [ 1337.119857][T18043] tpg crop: 320x180@0x0 [ 1337.124100][T18043] tpg compose: 320x180@0x0 [ 1337.128563][T18043] tpg colorspace: 8 [ 1337.132468][T18043] tpg transfer function: 0/2 [ 1337.137116][T18043] tpg quantization: 0/1 [ 1337.141361][T18043] tpg RGB range: 0/2 [ 1337.145382][T18043] vivid-000: ================== END STATUS ================== [ 1338.015021][T17848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1338.184407][ T3884] device hsr_slave_0 left promiscuous mode [ 1338.218067][ T3884] device hsr_slave_1 left promiscuous mode [ 1338.260438][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.490270][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.559884][T18064] xt_TCPMSS: Only works on TCP SYN packets [ 1338.751099][T18065] Process accounting resumed [ 1341.203023][ T3884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.220706][ T3884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.230407][ T3884] device bridge_slave_1 left promiscuous mode [ 1341.246929][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1341.417481][ T3884] device bridge_slave_0 left promiscuous mode [ 1341.452502][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.711573][ T3884] device veth1_macvtap left promiscuous mode [ 1341.721734][ T3884] device veth0_macvtap left promiscuous mode [ 1341.765323][ T3884] device veth1_vlan left promiscuous mode [ 1341.801279][ T3884] device veth0_vlan left promiscuous mode [ 1346.480080][ T3884] team0 (unregistering): Port device team_slave_1 removed [ 1346.721324][ T3884] team0 (unregistering): Port device team_slave_0 removed [ 1346.952978][ T3884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.131955][ T3884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.493332][ T3884] bond0 (unregistering): Released all slaves [ 1348.630623][T17848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1348.661794][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1348.669824][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1348.697085][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1348.728814][T17848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1348.755208][T17848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1348.927390][T17878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1348.969886][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1348.980368][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1349.089273][T17878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1349.098964][T17878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1349.548280][T17878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1351.056807][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1351.075147][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1351.366598][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1351.389108][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1351.457566][T17848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.546296][T17811] device veth0_vlan entered promiscuous mode [ 1351.594177][T17878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.628927][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.642904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.666557][T17848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.690032][T17878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.736250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.746777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.766838][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.787770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.810243][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.817374][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.873724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1351.947808][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.010746][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.018707][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.053077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.073464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1352.093745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1352.116622][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1352.146807][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1352.156046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1352.189535][T17811] device veth1_vlan entered promiscuous mode [ 1352.228030][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1352.240485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1352.258436][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.265526][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.279494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1352.288202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.297267][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.304356][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.331445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1352.416892][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.437754][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1352.465284][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1352.499896][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1352.519129][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1352.556809][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1352.572007][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1352.592924][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1352.604408][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1352.648429][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1352.666587][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1352.705191][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1352.739131][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1352.783762][T17811] device veth0_macvtap entered promiscuous mode [ 1352.853923][T17848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1352.942680][T17848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1353.065454][T17878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.163076][T17878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1353.183536][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.205407][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.238887][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1353.336550][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1353.411720][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.457609][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.534799][T17811] device veth1_macvtap entered promiscuous mode [ 1353.555036][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1353.614171][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.640191][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.664320][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.696060][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.726901][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.748320][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.780738][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.821052][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1353.881638][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.889681][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1353.911737][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1353.932041][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1353.971374][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.001776][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.043648][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.099183][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.150886][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.171224][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.211070][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.236671][T17811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.287534][T17811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.320570][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.345452][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1354.366577][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1354.431901][T17811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.440585][T17811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.458217][T17811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.484251][T17811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.604136][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.658371][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.675503][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.693845][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.720178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1354.744997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1355.081293][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1355.090327][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 1355.426855][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1355.444119][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1355.466697][T17878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.506823][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1355.523299][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1355.570097][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1355.590472][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1355.616553][T17878] device veth0_vlan entered promiscuous mode [ 1355.629120][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1355.647223][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1355.679716][T17878] device veth1_vlan entered promiscuous mode [ 1355.700370][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1355.779106][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1355.840841][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1355.886327][T17848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.941769][T17878] device veth0_macvtap entered promiscuous mode [ 1355.964108][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1355.985724][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1356.016046][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1356.047979][T17878] device veth1_macvtap entered promiscuous mode [ 1356.067647][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1356.088298][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1356.117522][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.148777][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.212278][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.277811][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.301108][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.325334][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.351274][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.371138][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.396314][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1356.429006][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1356.543576][T17878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1356.552541][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1356.560972][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1356.643983][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1357.966223][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.020168][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1358.059568][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.091210][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.627960][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.637889][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.649228][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.670055][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.680686][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.691648][T17878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1359.702670][T17878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1359.723079][T17878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1359.743003][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1359.752814][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1359.782186][T17878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.790863][T17878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.825124][T17878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.843384][T17878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.993873][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.021135][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.048680][ T3884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.056252][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1360.089126][ T3884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.163470][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1360.289295][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1360.311753][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1360.350907][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1360.400630][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1360.445588][T17848] device veth0_vlan entered promiscuous mode [ 1360.454639][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1360.487319][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1360.527623][T17848] device veth1_vlan entered promiscuous mode [ 1360.600602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1360.619015][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1360.646320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1360.666849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1360.692454][T17848] device veth0_macvtap entered promiscuous mode [ 1360.707150][T17848] device veth1_macvtap entered promiscuous mode [ 1360.745747][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.772370][T18250] loop2: detected capacity change from 0 to 256 [ 1360.781215][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.812319][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.891248][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.908820][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.936365][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1360.959133][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1360.983347][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.003068][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.027732][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.050216][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.075288][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.107868][T17848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1361.130126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1361.143159][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1361.159852][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1361.180148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1361.217806][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.237469][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.260459][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.299657][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.335107][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.365974][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.403392][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.422633][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1361.435325][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.441736][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.607431][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1361.640275][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.521729][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.594165][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.624526][T17848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.672515][T17848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.762691][T17848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.787463][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1362.807282][ T3884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1362.896978][T17848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.955018][T17848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.102434][T17848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.159116][T17848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.330161][ T26] audit: type=1326 audit(1727541013.654:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18263 comm="syz.0.2880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe14097dff9 code=0x0 [ 1363.365586][ T46] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1363.435569][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1364.005033][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.308234][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.322190][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.371460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1364.559587][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.651995][T14695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1365.214050][T18285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1366.147156][T18285] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1366.442285][T18305] loop2: detected capacity change from 0 to 256 [ 1366.523069][T18305] exfat: Deprecated parameter 'utf8' [ 1366.528450][T18305] exfat: Deprecated parameter 'utf8' [ 1366.576844][T18305] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1368.881238][T17822] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1369.181102][T17822] usb 4-1: Using ep0 maxpacket: 16 [ 1369.461173][T17822] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1369.489383][T17822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.547466][T17822] usb 4-1: Product: syz [ 1369.706464][T17822] usb 4-1: Manufacturer: syz [ 1369.723203][T17822] usb 4-1: SerialNumber: syz [ 1370.572842][T17822] usb 4-1: config 0 descriptor?? [ 1371.756885][T17822] usb 4-1: can't set config #0, error -71 [ 1371.779994][T17822] usb 4-1: USB disconnect, device number 16 [ 1372.943741][T18362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.556468][T18400] loop4: detected capacity change from 0 to 512 [ 1378.416580][T18400] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.2916: casefold flag without casefold feature [ 1378.459100][T18400] EXT4-fs (loop4): get root inode failed [ 1378.467643][T18400] EXT4-fs (loop4): mount failed [ 1382.062580][T12385] Bluetooth: hci7: unexpected event 0x04 length: 14 > 10 [ 1384.082078][ T3643] Bluetooth: hci7: command tx timeout [ 1384.408658][T18436] loop4: detected capacity change from 0 to 128 [ 1384.528599][T18441] syz.4.2927: attempt to access beyond end of device [ 1384.528599][T18441] loop4: rw=0, sector=121, nr_sectors = 120 limit=128 [ 1385.601440][T14695] kworker/u4:6: attempt to access beyond end of device [ 1385.601440][T14695] loop4: rw=1, sector=241, nr_sectors = 800 limit=128 [ 1386.489063][ T3682] kernel write not supported for file /snd/seq (pid: 3682 comm: kworker/0:7) [ 1389.574087][ T3643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1389.587919][ T3643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1389.601196][ T3643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1389.610577][ T3643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1389.618385][ T3643] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1389.627301][ T3643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1392.091601][ T3643] Bluetooth: hci6: command tx timeout [ 1393.277870][T18497] trusted_key: encrypted_key: insufficient parameters specified [ 1393.320949][ T4524] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.530055][ T4524] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.659663][T16950] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1393.911143][T16950] usb 4-1: Using ep0 maxpacket: 16 [ 1393.928792][ T4524] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.151223][ T3643] Bluetooth: hci6: command tx timeout [ 1395.607629][T18468] chnl_net:caif_netlink_parms(): no params data found [ 1395.791208][T16950] usb 4-1: unable to get BOS descriptor set [ 1395.810409][ T4524] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.851165][T16950] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1395.859431][T16950] usb 4-1: can't read configurations, error -71 [ 1396.425997][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.486428][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.692701][T18468] device bridge_slave_0 entered promiscuous mode [ 1397.575285][T12385] Bluetooth: hci6: command tx timeout [ 1397.794297][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.811348][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.212551][T18468] device bridge_slave_1 entered promiscuous mode [ 1398.624754][T18548] program syz.4.2955 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1398.728191][T18548] dccp_close: ABORT with 24 bytes unread [ 1398.760831][T18468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1398.796456][T18468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.977700][T18468] team0: Port device team_slave_0 added [ 1399.000517][T18468] team0: Port device team_slave_1 added [ 1399.066176][T18468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.073496][T18550] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1399.113968][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.179503][T18468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.284456][T18557] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1399.325273][T18468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.338159][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.376277][T18468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.230373][T12385] Bluetooth: hci6: command tx timeout [ 1401.238184][T18468] device hsr_slave_0 entered promiscuous mode [ 1401.255022][T18468] device hsr_slave_1 entered promiscuous mode [ 1401.280367][T18468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.301779][T18468] Cannot create hsr debugfs directory [ 1403.061248][T15195] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1403.441450][T15195] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1403.473909][T15195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.521958][T15195] usb 4-1: config 0 descriptor?? [ 1403.897946][ T120] block nbd1: Attempted send on invalid socket [ 1403.904197][ T120] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1403.913981][T18607] (syz.1.2965,18607,0):ocfs2_get_sector:1771 ERROR: status = -5 [ 1403.921699][T18607] (syz.1.2965,18607,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 1403.929815][T18607] (syz.1.2965,18607,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 1403.938580][T18607] (syz.1.2965,18607,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 1405.561139][ T3643] Bluetooth: hci1: unexpected event for opcode 0x2002 [ 1405.816832][T18613] loop1: detected capacity change from 0 to 512 [ 1405.955823][T18613] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1406.083414][T18613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 1406.112349][T18613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1406.119065][T18613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2967: bg 0: block 361: padding at end of block bitmap is not set [ 1406.263951][T18613] EXT4-fs (loop1): Remounting filesystem read-only [ 1406.296640][T18613] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 1406.341137][T15195] pegasus 4-1:0.0: can't reset MAC [ 1406.346388][T15195] pegasus: probe of 4-1:0.0 failed with error -5 [ 1406.389724][T15195] usb 4-1: USB disconnect, device number 19 [ 1406.401811][T18613] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.2967: attempt to clear invalid blocks 33619980 len 1 [ 1406.444662][ T4524] device hsr_slave_0 left promiscuous mode [ 1406.474573][ T4524] device hsr_slave_1 left promiscuous mode [ 1406.487885][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.506229][T18613] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2967: invalid indirect mapped block 1811939328 (level 0) [ 1406.511403][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.544147][ T4524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.565413][ T4524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.576214][T18613] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2967: invalid indirect mapped block 2185560079 (level 1) [ 1406.604909][ T4524] device bridge_slave_1 left promiscuous mode [ 1406.621963][ T4524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.650387][ T4524] device bridge_slave_0 left promiscuous mode [ 1406.660532][ T4524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.679724][T18613] EXT4-fs (loop1): 1 truncate cleaned up [ 1406.703097][T18613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1406.773628][ T4524] device veth1_macvtap left promiscuous mode [ 1406.779695][ T4524] device veth0_macvtap left promiscuous mode [ 1406.821300][ T4524] device veth1_vlan left promiscuous mode [ 1406.827146][ T4524] device veth0_vlan left promiscuous mode [ 1406.842456][T17811] EXT4-fs (loop1): unmounting filesystem. [ 1407.072142][T18634] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1408.069986][T18629] loop4: detected capacity change from 0 to 8192 [ 1409.451592][T18629] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1409.737360][ T3643] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1409.748177][T12385] Bluetooth: hci5: command 0x0406 tx timeout [ 1409.754348][ T3643] Bluetooth: hci1: Injecting HCI hardware error event [ 1409.766217][T12385] Bluetooth: hci1: hardware error 0x00 [ 1409.783604][T18629] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 1409.801332][T18629] REISERFS (device loop4): using ordered data mode [ 1409.818121][T18629] reiserfs: using flush barriers [ 1409.830234][T18629] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1410.584521][T18629] REISERFS (device loop4): checking transaction log (loop4) [ 1410.605274][T18629] REISERFS (device loop4): Using r5 hash to sort names [ 1411.373654][T18650] loop1: detected capacity change from 0 to 8 [ 1412.471246][T12385] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1413.824184][T18661] loop1: detected capacity change from 0 to 512 [ 1414.682200][T18661] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.2975: bad orphan inode 4 [ 1414.709101][T18661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1415.552691][T18669] loop4: detected capacity change from 0 to 128 [ 1415.620931][T18669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1415.651788][T18669] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1415.667387][T18657] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2975: Logical block already allocated [ 1415.740789][T18661] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.2975: Logical block already allocated [ 1415.761656][ T26] audit: type=1326 audit(1727541066.094:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1415.977753][ T26] audit: type=1326 audit(1727541066.114:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.034800][ T26] audit: type=1326 audit(1727541066.134:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.088054][ T26] audit: type=1326 audit(1727541066.134:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.158497][ T26] audit: type=1326 audit(1727541066.134:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.215785][ T26] audit: type=1326 audit(1727541066.134:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.264452][ T26] audit: type=1326 audit(1727541066.134:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.333848][ T26] audit: type=1326 audit(1727541066.134:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.395341][ T26] audit: type=1326 audit(1727541066.134:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.455060][ T26] audit: type=1326 audit(1727541066.134:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.3.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x7ffc0000 [ 1416.548117][T17848] EXT4-fs (loop4): unmounting filesystem. [ 1416.548681][ T4524] team0 (unregistering): Port device team_slave_1 removed [ 1416.772619][T17811] EXT4-fs (loop1): unmounting filesystem. [ 1417.025073][ T4524] team0 (unregistering): Port device team_slave_0 removed [ 1418.815265][ T4524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.884675][ T4524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.099735][ T3643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1420.217143][ T3643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1420.228106][ T3643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1420.445141][ T3643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1420.459290][ T3643] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1420.471685][ T3643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1422.830307][ T3643] Bluetooth: hci8: command tx timeout [ 1422.873734][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.880622][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.981145][T12385] Bluetooth: hci8: command tx timeout [ 1425.816611][ T4524] bond0 (unregistering): Released all slaves [ 1426.196013][T18638] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2970'. [ 1427.031457][ T3643] Bluetooth: hci8: command tx timeout [ 1428.819952][T18468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1428.846186][T18468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1428.866979][T18705] chnl_net:caif_netlink_parms(): no params data found [ 1428.879749][T18468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1429.046253][T18468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1429.111096][ T3643] Bluetooth: hci8: command tx timeout [ 1429.330287][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 1429.330302][ T26] audit: type=1326 audit(1727541079.654:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18764 comm="syz.3.3013" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ead7dff9 code=0x0 [ 1429.521221][ T3625] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1429.604550][ T4524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.681162][T18705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.689348][T18705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.732608][T18705] device bridge_slave_0 entered promiscuous mode [ 1429.771251][ T3625] usb 2-1: Using ep0 maxpacket: 8 [ 1429.829250][T18705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.847355][T18705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.872273][T18705] device bridge_slave_1 entered promiscuous mode [ 1429.891297][ T3625] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1429.911662][ T27] INFO: task syz.0.2766:17583 blocked for more than 145 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1429.923936][ T3625] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.946541][ T27] Not tainted 6.1.111-syzkaller #0 [ 1429.971588][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1429.997543][ T27] task:syz.0.2766 state:D stack:23960 pid:17583 ppid:15046 flags:0x00004004 [ 1430.041133][ T3625] usb 2-1: config 0 has no interface number 0 [ 1430.161081][ T3625] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1430.180272][ T27] Call Trace: [ 1430.202125][ T27] [ 1430.205419][ T27] __schedule+0x143f/0x4570 [ 1430.209978][ T27] ? __mutex_lock+0x6b4/0xd80 [ 1430.236080][ T3643] Bluetooth: hci7: command 0x0406 tx timeout [ 1430.243499][ T27] ? release_firmware_map_entry+0x186/0x186 [ 1430.249534][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 1430.282345][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1430.287651][ T27] schedule+0xbf/0x180 [ 1430.301056][ T27] schedule_preempt_disabled+0xf/0x20 [ 1430.306584][ T27] __mutex_lock+0x6b9/0xd80 [ 1430.311695][ T27] ? __mutex_lock+0x53c/0xd80 [ 1430.316460][ T27] ? exfat_sync_fs+0x67/0x100 [ 1430.341054][ T27] ? mutex_lock_nested+0x10/0x10 [ 1430.346714][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1430.370430][ T27] exfat_sync_fs+0x67/0x100 [ 1430.375270][ T27] iterate_supers+0x127/0x1e0 [ 1430.380028][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 1430.399499][ T27] ksys_sync+0xd7/0x1c0 [ 1430.411214][ T27] ? sync_filesystem+0x220/0x220 [ 1430.416245][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1430.431083][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1430.437159][ T27] __do_sys_sync+0xa/0x10 [ 1430.467213][ T27] do_syscall_64+0x3b/0xb0 [ 1430.472501][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1430.477201][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1430.486950][ T27] RIP: 0033:0x7ff9efb7dff9 [ 1430.500638][ T27] RSP: 002b:00007ff9f0a39038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1430.512385][ T27] RAX: ffffffffffffffda RBX: 00007ff9efd35f80 RCX: 00007ff9efb7dff9 [ 1430.541159][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1430.549320][ T27] RBP: 00007ff9efbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1430.601043][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1430.622361][ T27] R13: 0000000000000000 R14: 00007ff9efd35f80 R15: 00007ffffd8d05b8 [ 1430.630376][ T27] [ 1430.665652][ T27] [ 1430.665652][ T27] Showing all locks held in the system: [ 1430.975841][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1430.982474][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1431.001627][ T27] 1 lock held by rcu_tasks_trace/13: [ 1431.006902][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1431.033947][ T27] 1 lock held by khungtaskd/27: [ 1431.043877][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1431.066795][ T27] 1 lock held by dhcpcd/3304: [ 1431.071813][ T27] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6c0 [ 1431.091072][ T27] 2 locks held by getty/3394: [ 1431.095750][ T27] #0: ffff88814b776098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1431.111073][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1431.131127][ T27] 3 locks held by kworker/0:3/3625: [ 1431.136335][ T27] #0: ffff888141651538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.151136][ T27] #1: ffffc90003b7fd20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.173048][ T27] #2: ffff888028380190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 1431.201160][ T27] 2 locks held by kworker/0:7/3682: [ 1431.206568][ T27] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.231141][ T27] #1: ffffc9000435fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.251069][ T27] 6 locks held by kworker/u4:11/4524: [ 1431.261229][ T27] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.291151][ T27] #1: ffffc9000307fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.311066][ T27] #2: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1431.331053][ T27] #3: ffff88807367b2f8 (&devlink->lock_key#61){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2c0 [ 1431.351077][ T27] #4: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140 [ 1431.359993][ T27] #5: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1431.417439][ T27] 3 locks held by kworker/1:12/5308: [ 1431.428617][ T27] #0: ffff88814b4d7138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.471555][ T27] #1: ffffc90003a7fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.501033][ T27] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 1431.531112][ T27] 2 locks held by kworker/u4:5/14419: [ 1431.547397][ T27] 3 locks held by syz.3.2277/15213: [ 1431.558470][ T27] 1 lock held by syz-executor/16341: [ 1431.581037][ T27] 3 locks held by kworker/0:1/16950: [ 1431.596595][ T27] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.621044][ T27] #1: ffffc900031ffd20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1431.651191][ T27] #2: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1431.661941][ T27] 2 locks held by syz.0.2766/17583: [ 1431.691264][ T27] #0: ffff88807273c0e0 (&type->s_umount_key#77){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1431.705943][ T27] #1: ffff8880254820e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 1431.737808][ T27] 1 lock held by syz-executor/18468: [ 1431.747273][ T27] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1431.761198][ T27] 1 lock held by syz-executor/18705: [ 1431.769346][ T27] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1431.780453][ T27] 3 locks held by syz.1.3006/18769: [ 1431.788673][ T27] #0: ffff8880651210b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1ff/0x500 [ 1431.803448][ T27] #1: ffff888065120078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x48d/0x1020 [ 1431.819471][ T27] #2: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1431.859734][ T27] 1 lock held by syz.4.3007/18788: [ 1431.891136][ T27] #0: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 1431.927729][ T4524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1431.938550][ T27] [ 1431.940893][ T27] ============================================= [ 1431.940893][ T27] [ 1431.961127][ T27] NMI backtrace for cpu 0 [ 1431.965487][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1431.973387][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1431.983452][ T27] Call Trace: [ 1431.986733][ T27] [ 1431.989666][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1431.994365][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1431.999836][ T27] ? panic+0x764/0x764 [ 1432.003909][ T27] ? vprintk_emit+0x622/0x740 [ 1432.008601][ T27] ? printk_sprint+0x490/0x490 [ 1432.013376][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 1432.018502][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 1432.023457][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1432.029615][ T27] ? _printk+0xd1/0x111 [ 1432.033778][ T27] ? panic+0x764/0x764 [ 1432.037851][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1432.042707][ T27] ? panic+0x764/0x764 [ 1432.046781][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1432.052860][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1432.058933][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1432.064927][ T27] watchdog+0xf88/0xfd0 [ 1432.069092][ T27] ? watchdog+0x1f8/0xfd0 [ 1432.073428][ T27] kthread+0x28d/0x320 [ 1432.077496][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1432.082528][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1432.087121][ T27] ret_from_fork+0x1f/0x30 [ 1432.091569][ T27] [ 1432.095227][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1432.100450][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340 [ 1432.139510][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1432.146385][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1432.154277][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1432.164336][ T27] Call Trace: [ 1432.167619][ T27] [ 1432.170552][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1432.175251][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1432.180718][ T27] ? panic+0x764/0x764 [ 1432.184793][ T27] ? llist_add_batch+0x160/0x1d0 [ 1432.189747][ T27] ? vscnprintf+0x59/0x80 [ 1432.194091][ T27] panic+0x318/0x764 [ 1432.197994][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1432.204175][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 1432.209554][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1432.215716][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1432.221975][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1432.228136][ T27] watchdog+0xfc7/0xfd0 [ 1432.232304][ T27] ? watchdog+0x1f8/0xfd0 [ 1432.236647][ T27] kthread+0x28d/0x320 [ 1432.240713][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1432.245740][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1432.250331][ T27] ret_from_fork+0x1f/0x30 [ 1432.254757][ T27] [ 1432.257977][ T27] Kernel Offset: disabled [ 1432.262290][ T27] Rebooting in 86400 seconds..