last executing test programs: 46.073739164s ago: executing program 3 (id=722): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, 0x0, 0x0) 44.90431384s ago: executing program 3 (id=724): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x4b3c, 0x0) r5 = open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20020008) renameat2(r5, &(0x7f0000000140)='./file0/file0\x00', r5, &(0x7f00000002c0)='./file1\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[], 0x10132) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0x78) recvmmsg(r7, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) tkill(r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x80, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 43.758024094s ago: executing program 3 (id=726): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) 43.599032186s ago: executing program 3 (id=729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4}, 0x90) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 43.441385447s ago: executing program 3 (id=730): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 41.335539732s ago: executing program 3 (id=737): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x3) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x6f, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.events\x00', 0x275a, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000003fc0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "999aee", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0x5, 0x3, 0x1, 0x2, 0x1, 0x3}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x0, 0x2, 0x1, 0x3, 0x4, 0xe2}, 0x2, {0x4, 0x7, 0x3, 0x14, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) fchdir(r1) 9.402704359s ago: executing program 2 (id=823): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbb9bbbb2ac7fd5d244d86dd603f00e700113c00fe880000000000000000000000000001ff0200000000000000000000000000013a000101"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x64, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc7d3f727c244958fb87e81d08ddc418a76005df5cc3fde2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a9646e38cf729c0db5e942963856046c856f8e66cbe5b3f2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044081}, 0x4c000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601160000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r8 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback, 0x400}, 0x1c) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x27, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x800) 8.538429453s ago: executing program 0 (id=824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/127, 0x7f}], 0x1}, 0x120) shutdown(r0, 0x0) 8.248147114s ago: executing program 0 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000472000/0x1000)=nil, 0x1000, 0x2, 0xe1ea54d66d4ea3d, 0xffffffffffffffff, 0xe64e3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r3, 0x1, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x1ff, @empty, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006280)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x400000000000067, 0x40, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r4, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001200017600000000000000000c00070000000000000000"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 7.494574439s ago: executing program 2 (id=828): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "bb2c8897a2b66244"}, 0x28) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x1000000, 0x0, 0x0, 0x0) 7.34511847s ago: executing program 0 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.161174904s ago: executing program 0 (id=830): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x44}}, 0x0) 6.211925193s ago: executing program 2 (id=832): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="100000000000000000000000070000001100000000000000000000000100"], 0x28}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.158531777s ago: executing program 0 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0xfdef) 5.110990684s ago: executing program 2 (id=835): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5}, @IFLA_MACSEC_INC_SCI={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0) 4.912172789s ago: executing program 2 (id=836): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000005000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf25010000000c0006000100000001000000080001000600000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="9b1d46e5d60df16a924d6000dc9b94f9b86f5442aad1cde1694a13e23b72085e99f918dc0b169aa5add7a69c41169304c68d6dfbc091"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000ad15e4d41964eb441c00000000000000030000000900010073797a300000000020000000180a01020000000000000000020000010c00054000000000000000031400000011000100000067582b462da885a7369d014866105ad800"], 0x68}}, 0x4000000) socket$tipc(0x1e, 0x2, 0x0) 4.417308795s ago: executing program 4 (id=840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.262755627s ago: executing program 4 (id=841): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 4.128085936s ago: executing program 1 (id=842): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 4.054488632s ago: executing program 4 (id=843): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x44}}, 0x0) 3.986850277s ago: executing program 1 (id=844): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f0000000700), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="100000000000000000000000070000001100000000000000000000000100"], 0x28}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.239669735s ago: executing program 1 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) 2.17573017s ago: executing program 1 (id=846): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0700120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xffffffffffffff69, &(0x7f0000000ac0)={&(0x7f0000000400)={0xbc, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}}, 0x40050) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'lo\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @remote}}) 510.695912ms ago: executing program 2 (id=847): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xb8, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x3b}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) 490.989414ms ago: executing program 1 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbb9bbbb2ac7fd5d244d86dd603f00e700113c00fe880000000000000000000000000001ff0200000000000000000000000000013a000101"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x64, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bc7d3f727c244958fb87e81d08ddc418a76005df5cc3fde2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a9646e38cf729c0db5e942963856046c856f8e66cbe5b3f2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044081}, 0x4c000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601160000000000000000000000001c0007800500140007000400080012400005000008000840000000000900020073797a300000002005000100070000000c000300686173683a697000050005000a000000050004"], 0x60}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r8 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r8, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @loopback, 0x400}, 0x1c) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x27, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x800) 420.014879ms ago: executing program 0 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r5) syz_open_pts(0xffffffffffffffff, 0x40) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0xf, 0x2}]}, @union]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600b0e000014060000000000000000000000000000000000be8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES8=r6, @ANYRES16], 0x0) syz_emit_ethernet(0x8e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa1086dd608a9646005806fe000000000000020062c8458800000000fe80221000000080000000000000000000204e220000c372c6c4ff8674c5205ff948cbd3a7497426176c8971b65d9afbe5b12094f30a521e64bce2fc3dda33d66fef793dcd379d7e0c2a1c210f43f38adb18ebdc36e0291ebb26ef73f90a971de4c864a7d5e04cb4e98fc50700000000000000b8a6f0b248ff3fc4f20960c9303c9afc58b002b756b920dd878b49293cffd3551d5d44eb95f59d64a0f03d2c99638a125056ffe96640b3edaa4d498b15e97c81fd05554502756a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6004000090780000080a000000000000000f020407001312671ba9aa78736096aa263a4fb754f883d01080dfcb23c4bf81923d53c3e7451f012210f643df84df42b8fe92d5c3d2a9b9000000"], 0x0) 332.731736ms ago: executing program 4 (id=850): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 200.075595ms ago: executing program 4 (id=851): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x2, 0x0, &(0x7f00009b1ffc)) 345.86µs ago: executing program 1 (id=852): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed430000000000001090224000100000000090400000103000000092100000001090000090581030000000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_socket_connect_nvme_tcp() ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000180)={'macvlan1\x00', 0x100}) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 4 (id=853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b9674812", 0xc, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): : ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.685738][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.713077][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.751231][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.765906][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.773040][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.794063][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.803926][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 203.819507][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.830324][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.839882][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.851416][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.864008][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 203.873048][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.882585][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.891649][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.900949][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.910444][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.919832][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.936708][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.966766][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.001343][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.293691][ T5557] device veth1_vlan entered promiscuous mode [ 204.423825][ T5970] loop2: detected capacity change from 0 to 512 [ 204.425283][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 204.448935][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 204.470034][ T5557] device veth0_macvtap entered promiscuous mode [ 204.495640][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.505300][ T5970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 204.511422][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.514463][ T5970] ext4 filesystem being mounted at /120/bus supports timestamps until 2038 (0x7fffffff) [ 204.542668][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.636303][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.668337][ T5557] device veth1_macvtap entered promiscuous mode [ 205.713256][ T5987] loop3: detected capacity change from 0 to 128 [ 205.751454][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.872942][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.882878][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.893554][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.903531][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.914752][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.925350][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.945050][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.978374][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.999966][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 206.047151][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.646562][ T5995] loop2: detected capacity change from 0 to 128 [ 206.663447][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.673616][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.684550][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.699898][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.711057][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.718136][ T5995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 206.726572][ T5557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.744906][ T5995] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 206.751297][ T5557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.808268][ T5557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.825056][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.845113][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.862746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.873066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.997008][ T5557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.031707][ T5557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.056193][ T5557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.080476][ T5557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.252141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.627691][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.792415][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.938980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.967573][ T5760] device veth0_vlan entered promiscuous mode [ 207.983127][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 208.003206][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.022074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.158564][ T6018] loop2: detected capacity change from 0 to 512 [ 208.229268][ T5760] device veth1_vlan entered promiscuous mode [ 208.242677][ T6018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.275068][ T6018] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 208.332495][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.365370][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.408654][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.501195][ T6030] loop3: detected capacity change from 0 to 256 [ 208.509947][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.519121][ T5760] device veth0_macvtap entered promiscuous mode [ 208.551416][ T6030] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.573250][ T6030] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 208.614827][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.638243][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.659990][ T5760] device veth1_macvtap entered promiscuous mode [ 208.724138][ T6035] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.576: Directory hole found for htree leaf block 0 [ 208.760643][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.772555][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.822495][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.848607][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.897221][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.937238][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.977988][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.015293][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.042361][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.082843][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.104837][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.127313][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.137887][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.149014][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.161427][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.192703][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.211547][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.250713][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.275821][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.303178][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 209.303194][ T26] audit: type=1326 audit(1725582373.484:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.420577][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.444905][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.454759][ T26] audit: type=1326 audit(1725582373.494:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.454798][ T26] audit: type=1326 audit(1725582373.494:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.454825][ T26] audit: type=1326 audit(1725582373.494:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.454852][ T26] audit: type=1326 audit(1725582373.494:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.504901][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.581580][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.592747][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.613294][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.623749][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.641876][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.654157][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.685978][ T5760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.721183][ T26] audit: type=1326 audit(1725582373.494:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 209.746184][ T5760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.755239][ T5760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.767096][ T5760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.872551][ T6053] loop0: detected capacity change from 0 to 128 [ 209.893988][ T26] audit: type=1326 audit(1725582373.494:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 210.257225][ T26] audit: type=1326 audit(1725582373.494:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 210.474170][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.511186][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.523303][ T6053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 210.527188][ T6056] loop3: detected capacity change from 0 to 512 [ 210.532197][ T6053] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 210.539115][ T26] audit: type=1326 audit(1725582373.494:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 210.592951][ T6056] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.610502][ T26] audit: type=1326 audit(1725582373.494:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec8d7cef9 code=0x7ffc0000 [ 210.641456][ T6056] EXT4-fs (loop3): 1 truncate cleaned up [ 210.655079][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 210.838597][ T5557] EXT4-fs (loop0): unmounting filesystem. [ 210.847484][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.863345][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.903195][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.917493][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.954400][ T3636] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /127/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 210.974012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.985935][ T3636] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 211.035956][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.073973][ T3636] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /127/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.157274][ T3636] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 211.233367][ T3636] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /127/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.298508][ T3636] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 211.392211][ T3636] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /127/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.511873][ T3636] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 211.592374][ T3636] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /127/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 211.628219][ T3636] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 211.725908][ T6073] loop1: detected capacity change from 0 to 256 [ 212.298337][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 212.670921][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 212.683600][ T6081] device ip6gretap0 entered promiscuous mode [ 213.378957][ T6095] loop0: detected capacity change from 0 to 512 [ 213.408662][ T3636] EXT4-fs (loop3): unmounting filesystem. [ 213.449620][ T6095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 213.524482][ T6095] EXT4-fs (loop0): 1 truncate cleaned up [ 213.538942][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.540960][ T6095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.767665][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.862124][ T5557] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 213.906344][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.960147][ T5557] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 214.179146][ T5557] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 214.244368][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.407830][ T5557] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 214.853271][ T5557] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 214.902878][ T5557] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 214.962976][ T5557] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 215.077424][ T5557] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 215.163366][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.175293][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.184427][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.197143][ T33] tipc: Left network mode [ 215.201599][ T3651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.209193][ T5557] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /4/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 215.233087][ T3638] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.244812][ T3638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.276506][ T5557] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 215.784118][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.603'. [ 215.868595][ T6122] device batadv0 entered promiscuous mode [ 215.877124][ T6122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.938226][ T6122] device batadv0 left promiscuous mode [ 216.120923][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 217.241507][ T5557] EXT4-fs (loop0): unmounting filesystem. [ 217.244472][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 217.281371][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 217.296228][ T3647] Bluetooth: hci2: command tx timeout [ 217.348053][ T6156] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 217.442707][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 217.876469][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.903771][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.928947][ T6117] device bridge_slave_0 entered promiscuous mode [ 217.998674][ T6166] loop2: detected capacity change from 0 to 4096 [ 218.075643][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.082911][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.165066][ T6117] device bridge_slave_1 entered promiscuous mode [ 218.285605][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.311573][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.330674][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.340278][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.350084][ T3638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.359384][ T3638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.367343][ T6190] loop1: detected capacity change from 0 to 512 [ 218.384797][ T6190] ext2: Unknown parameter 'fsmagic' [ 218.431538][ T5032] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.541794][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.567490][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.613'. [ 218.579435][ T6166] EXT4-fs: Ignoring removed oldalloc option [ 218.593382][ T6166] EXT4-fs (loop2): Test dummy encryption mode enabled [ 218.631288][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.730859][ T6166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 219.047919][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.154677][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.163291][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.249781][ T33] device hsr_slave_0 left promiscuous mode [ 219.269431][ T33] device hsr_slave_1 left promiscuous mode [ 219.283949][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.305200][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.328253][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.342139][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.354354][ T33] device bridge_slave_1 left promiscuous mode [ 219.361133][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.364071][ T6206] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 219.379157][ T3647] Bluetooth: hci2: command tx timeout [ 219.387194][ T33] device bridge_slave_0 left promiscuous mode [ 219.395540][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.445161][ T33] device veth1_macvtap left promiscuous mode [ 219.462275][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 219.469423][ T33] device veth0_macvtap left promiscuous mode [ 219.482871][ T33] device veth1_vlan left promiscuous mode [ 219.512732][ T33] device veth0_vlan left promiscuous mode [ 219.996024][ T6229] loop2: detected capacity change from 0 to 1024 [ 220.006820][ T6229] EXT4-fs: Ignoring removed orlov option [ 220.037870][ T6229] EXT4-fs (loop2): Test dummy encryption mode enabled [ 220.115111][ T6229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.207777][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 220.207816][ T26] audit: type=1800 audit(1725582384.374:191): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.621" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 220.406257][ T3647] Bluetooth: hci1: command tx timeout [ 220.601553][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 220.790199][ T6236] loop2: detected capacity change from 0 to 512 [ 220.806403][ T6236] ext2: Unknown parameter 'fsmagic' [ 220.932686][ T6238] loop2: detected capacity change from 0 to 256 [ 220.957643][ T6238] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 221.030700][ T33] team0 (unregistering): Port device team_slave_1 removed [ 221.038707][ T26] audit: type=1800 audit(1725582385.224:192): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 221.168669][ T33] team0 (unregistering): Port device team_slave_0 removed [ 221.224344][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.257177][ T6239] syz.2.624: attempt to access beyond end of device [ 221.257177][ T6239] loop2: rw=0, sector=184, nr_sectors = 120 limit=256 [ 221.283557][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.448829][ T3647] Bluetooth: hci2: command tx timeout [ 221.847987][ T33] bond0 (unregistering): Released all slaves [ 221.966173][ T6117] team0: Port device team_slave_0 added [ 222.105834][ T6245] x_tables: duplicate underflow at hook 3 [ 222.181460][ T6117] team0: Port device team_slave_1 added [ 222.484796][ T3647] Bluetooth: hci1: command tx timeout [ 222.957024][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.964039][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.018839][ T6213] infiniband syz0: set active [ 223.025157][ T6213] infiniband syz0: added team0 [ 223.047727][ T6213] rdma_rxe: unable to create cq [ 223.052595][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.052669][ T6213] infiniband syz0: Couldn't create ib_mad CQ [ 223.100991][ T6213] infiniband syz0: Couldn't open port 1 [ 223.107272][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.135586][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.158257][ T6213] RDS/IB: syz0: added [ 223.179281][ T6213] smc: adding ib device syz0 with port count 1 [ 223.350994][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.524852][ T3638] Bluetooth: hci2: command tx timeout [ 223.876402][ T6213] smc: ib device syz0 port 1 has pnetid [ 223.981900][ T6117] device hsr_slave_0 entered promiscuous mode [ 224.019873][ T6117] device hsr_slave_1 entered promiscuous mode [ 224.468528][ T6180] chnl_net:caif_netlink_parms(): no params data found [ 224.564765][ T3638] Bluetooth: hci1: command tx timeout [ 224.717249][ T6276] loop1: detected capacity change from 0 to 512 [ 225.118607][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.127815][ T6276] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff) [ 225.346456][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 225.658093][ T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.758494][ T6180] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.802818][ T6180] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.811089][ T6180] device bridge_slave_0 entered promiscuous mode [ 225.821716][ T6180] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.829205][ T6180] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.837661][ T6180] device bridge_slave_1 entered promiscuous mode [ 225.838650][ T6299] x_tables: duplicate underflow at hook 3 [ 226.516525][ T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.540123][ T6180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.571302][ T6180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.646190][ T3638] Bluetooth: hci1: command tx timeout [ 226.671174][ T6180] team0: Port device team_slave_0 added [ 226.763837][ T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.804216][ T6180] team0: Port device team_slave_1 added [ 226.953424][ T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.997998][ T6117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.034971][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.042685][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.102687][ T6180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.136706][ T6180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.153860][ T6180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.204848][ T6180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.225928][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 227.248870][ T6117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.313055][ T6117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.374761][ T6117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.438027][ T6180] device hsr_slave_0 entered promiscuous mode [ 227.468003][ T6326] loop2: detected capacity change from 0 to 128 [ 227.495061][ T6180] device hsr_slave_1 entered promiscuous mode [ 227.509797][ T6180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.526536][ T6180] Cannot create hsr debugfs directory [ 227.535895][ T6326] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.594138][ T6326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.655575][ T6326] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038 (0x7fffffff) [ 228.307462][ T6326] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 228.375332][ T6340] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 228.666962][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 229.163693][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.222436][ T6366] Zero length message leads to an empty skb [ 229.267917][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.289425][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.293349][ T6364] loop4: detected capacity change from 0 to 512 [ 229.384148][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.414741][ T6364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 229.423777][ T6364] ext4 filesystem being mounted at /87/bus supports timestamps until 2038 (0x7fffffff) [ 229.654440][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.668872][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.687134][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.694302][ T3795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.710534][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.721016][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.737766][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.744973][ T3795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.759342][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.774142][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.786896][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.807517][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.834252][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.861955][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.553046][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.566667][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.627303][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.702594][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.735394][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.756452][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.866282][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.123505][ T6180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.147829][ T6180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.433311][ T6180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.450980][ T6398] rdma_rxe: rxe_register_device failed with error -23 [ 231.474909][ T6398] rdma_rxe: failed to add team0 [ 231.498542][ T6180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.561006][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.612166][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.620952][ T3841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.703336][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 232.012574][ T6410] loop1: detected capacity change from 0 to 512 [ 232.053156][ T6410] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.060897][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.082766][ T6410] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.652: inline data xattr refers to an external xattr inode [ 232.085581][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.211986][ T6410] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.652: couldn't read orphan inode 12 (err -117) [ 232.815851][ T6410] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.448680][ T6117] device veth0_vlan entered promiscuous mode [ 233.526850][ T6428] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.652: Directory hole found for htree leaf block 0 [ 233.574539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.602948][ T6430] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.652: Directory hole found for htree leaf block 0 [ 233.605648][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.669332][ T6428] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.652: Directory hole found for htree leaf block 0 [ 233.868163][ T33] device hsr_slave_0 left promiscuous mode [ 233.913950][ T33] device hsr_slave_1 left promiscuous mode [ 234.049497][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.070788][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.115150][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.306636][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.562676][ T33] device bridge_slave_1 left promiscuous mode [ 234.691427][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.820130][ T33] device bridge_slave_0 left promiscuous mode [ 234.842517][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.913262][ T33] device veth1_macvtap left promiscuous mode [ 234.927379][ T33] device veth0_macvtap left promiscuous mode [ 234.933901][ T33] device veth1_vlan left promiscuous mode [ 234.944588][ T33] device veth0_vlan left promiscuous mode [ 235.100776][ T6449] loop2: detected capacity change from 0 to 256 [ 235.438666][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 235.665939][ T6456] rdma_rxe: rxe_register_device failed with error -23 [ 235.667775][ T6455] loop2: detected capacity change from 0 to 128 [ 235.694303][ T6456] rdma_rxe: failed to add team0 [ 235.901559][ T6461] loop2: detected capacity change from 0 to 128 [ 235.918910][ T6461] EXT4-fs (loop2): Test dummy encryption mode enabled [ 235.948722][ T6461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.984827][ T6461] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038 (0x7fffffff) [ 236.276562][ T33] team0 (unregistering): Port device team_slave_1 removed [ 236.481046][ T6474] loop1: detected capacity change from 0 to 1024 [ 236.488995][ T6474] EXT4-fs: Ignoring removed orlov option [ 236.502075][ T6474] EXT4-fs (loop1): Test dummy encryption mode enabled [ 236.576775][ T6474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 236.593628][ T26] audit: type=1800 audit(1725582400.774:193): pid=6474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.665" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 236.636463][ T6461] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 236.884535][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 236.942435][ T33] team0 (unregistering): Port device team_slave_0 removed [ 237.065254][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.181008][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 237.285116][ T3647] Bluetooth: hci4: command 0x0406 tx timeout [ 237.547465][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.848276][ T33] bond0 (unregistering): Released all slaves [ 240.011552][ T6117] device veth1_vlan entered promiscuous mode [ 240.028470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.046358][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.101499][ T6490] loop2: detected capacity change from 0 to 256 [ 240.250632][ T26] audit: type=1804 audit(1725582404.414:194): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.668" name="/newroot/156/file1/file0" dev="loop2" ino=1048615 res=1 errno=0 [ 240.742342][ T6117] device veth0_macvtap entered promiscuous mode [ 240.754557][ T6117] device veth1_macvtap entered promiscuous mode [ 240.771965][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.782697][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.809519][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.831912][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.851861][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.878987][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.892571][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.911780][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.924547][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.998104][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 241.007560][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 241.016481][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 241.024420][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.036114][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.045402][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 241.326049][ T6495] tipc: Started in network mode [ 241.330971][ T6495] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 241.340951][ T6495] tipc: Enabling of bearer rejected, failed to enable media [ 241.422145][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.450318][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.460881][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.471873][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.483027][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.494163][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.532602][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.552509][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.588612][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.614212][ T6501] rdma_rxe: rxe_register_device failed with error -23 [ 241.624554][ T6501] rdma_rxe: failed to add team0 [ 241.632357][ T6502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 241.640237][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.654403][ T3680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.753775][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.843805][ T6117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.871236][ T6117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.880097][ T6509] loop1: detected capacity change from 0 to 16 [ 241.899901][ T6117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.963223][ T6509] erofs: (device loop1): mounted with root inode @ nid 36. [ 242.071533][ T6117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.120602][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.132256][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 242.149800][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 242.172984][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 242.279712][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.495853][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.596912][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 242.797936][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.811899][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.831552][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 242.841479][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 242.851338][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 242.884042][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 242.897769][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.905127][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.966011][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 242.977934][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.005630][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.014879][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 243.022079][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.036568][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.043510][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 243.043662][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.065563][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.095037][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 243.147539][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.172247][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.188662][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 243.209159][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.232501][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.240936][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 243.265116][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.297548][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.317775][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.340260][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.356187][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 243.362476][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.383832][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.400584][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.441516][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.474963][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 243.485363][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 243.500304][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.552430][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.574582][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.672412][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 243.683652][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 243.697422][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.708530][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 243.719234][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 243.729997][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 243.732917][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.747730][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 243.879272][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 243.990810][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 244.098428][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 244.219242][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 244.344771][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 244.385008][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 244.445473][ T6509] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 244.480761][ T6509] syz.1.674: attempt to access beyond end of device [ 244.480761][ T6509] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 244.515406][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 244.533062][ T6509] syz.1.674: attempt to access beyond end of device [ 244.533062][ T6509] loop1: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 244.627317][ T6509] syz.1.674: attempt to access beyond end of device [ 244.627317][ T6509] loop1: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 244.651539][ T6509] syz.1.674: attempt to access beyond end of device [ 244.651539][ T6509] loop1: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 244.672620][ T6539] rdma_rxe: rxe_register_device failed with error -23 [ 244.741380][ T6539] rdma_rxe: failed to add team0 [ 244.812377][ T6509] syz.1.674: attempt to access beyond end of device [ 244.812377][ T6509] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 244.884936][ T6509] syz.1.674: attempt to access beyond end of device [ 244.884936][ T6509] loop1: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 244.911899][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.932024][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.940543][ T6509] syz.1.674: attempt to access beyond end of device [ 244.940543][ T6509] loop1: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 244.962500][ T6509] syz.1.674: attempt to access beyond end of device [ 244.962500][ T6509] loop1: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 244.978563][ T6509] syz.1.674: attempt to access beyond end of device [ 244.978563][ T6509] loop1: rw=524288, sector=13478624032, nr_sectors = 16 limit=16 [ 244.982255][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.993934][ T6509] syz.1.674: attempt to access beyond end of device [ 244.993934][ T6509] loop1: rw=524288, sector=13478624040, nr_sectors = 16 limit=16 [ 245.164709][ T6419] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 245.615535][ T6419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.683542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.736033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.797153][ T6419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.824887][ T6419] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 245.833965][ T6419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.849407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.871229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.871788][ T6419] usb 4-1: config 0 descriptor?? [ 245.902236][ T6180] device veth0_vlan entered promiscuous mode [ 245.921257][ T6180] device veth1_vlan entered promiscuous mode [ 246.019696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.049569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.077052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.087178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 246.100335][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.109392][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.125771][ T6180] device veth0_macvtap entered promiscuous mode [ 246.127762][ T6561] loop2: detected capacity change from 0 to 8 [ 246.218846][ T6180] device veth1_macvtap entered promiscuous mode [ 246.473439][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.513911][ T6419] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 246.577971][ T6419] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 246.612111][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.646374][ T6419] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 246.690401][ T6419] lg-g15 0003:046D:C222.0003: unknown main item tag 0x0 [ 246.759797][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.792182][ T6419] lg-g15 0003:046D:C222.0003: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 246.813408][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.910894][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.946685][ T6419] usb 4-1: USB disconnect, device number 4 [ 246.957100][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.998997][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.032449][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.066527][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.080637][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.097030][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.112382][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.196672][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.227689][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.265593][ T3916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.473944][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.514829][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.527072][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.538506][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.572965][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.676149][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.834123][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.139613][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.196391][ T6180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.276523][ T6180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.338718][ T6585] rdma_rxe: rxe_register_device failed with error -23 [ 248.346714][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.412980][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.423893][ T6585] rdma_rxe: failed to add team0 [ 248.435584][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.472010][ T6180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.497769][ T6180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.521977][ T6180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.535772][ T6180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.342187][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 249.387513][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.700'. [ 249.542912][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.556235][ T6600] loop1: detected capacity change from 0 to 512 [ 249.576658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.613005][ T6600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.646987][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 249.857505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.862168][ T6606] loop2: detected capacity change from 0 to 736 [ 249.888867][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.907477][ T6607] loop4: detected capacity change from 0 to 256 [ 249.915764][ T6607] FAT-fs (loop4): Unrecognized mount option "ÿ" or missing value [ 250.096054][ T6607] loop4: detected capacity change from 0 to 8 [ 251.112282][ T6600] EXT4-fs (loop1): 1 truncate cleaned up [ 251.354799][ T6600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.604594][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.995557][ T3990] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 254.292210][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 254.334773][ T6606] rock: directory entry would overflow storage [ 254.342973][ T6606] rock: sig=0x3b10, size=4, remaining=3 [ 254.408228][ T6618] loop0: detected capacity change from 0 to 512 [ 254.455681][ T3990] usb 5-1: device descriptor read/all, error -71 [ 254.474504][ T6618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 254.533823][ T6618] EXT4-fs (loop0): 1 truncate cleaned up [ 254.540919][ T6618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.407283][ T6636] loop4: detected capacity change from 0 to 2048 [ 255.529215][ T6639] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.549665][ T6180] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 255.630846][ T6180] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 255.638692][ T6636] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 255.660805][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 255.670081][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.715'. [ 255.695468][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.701857][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.807907][ T6180] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.160992][ T6180] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.280989][ T6636] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 256.401142][ T6180] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.445637][ T6180] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.471314][ T6636] Remounting filesystem read-only [ 256.507075][ T6180] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.534775][ T6636] NILFS (loop4): error -5 truncating bmap (ino=16) [ 256.554397][ T6180] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 256.576683][ T6180] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 256.825280][ T6180] EXT4-fs error (device loop0): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.275760][ T6656] tipc: Started in network mode [ 257.280719][ T6656] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 257.289893][ T6656] tipc: Enabling of bearer rejected, failed to enable media [ 259.982890][ T6665] loop1: detected capacity change from 0 to 128 [ 260.002855][ T4526] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 260.026872][ T4526] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 260.035572][ T4526] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 260.044452][ T4526] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 260.076302][ T6665] EXT4-fs (loop1): Test dummy encryption mode enabled [ 260.125679][ T4526] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 260.147575][ T4526] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 260.165505][ T6665] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 260.174559][ T6665] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038 (0x7fffffff) [ 260.209530][ T4526] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 260.226773][ T4526] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 260.234189][ T4526] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 260.273121][ T4526] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 260.607695][ T4526] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 261.400012][ T6180] EXT4-fs (loop0): unmounting filesystem. [ 261.548287][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 261.874772][ T6686] loop3: detected capacity change from 0 to 512 [ 262.057412][ T6686] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.301860][ T6686] EXT4-fs (loop3): 1 truncate cleaned up [ 262.318475][ T6686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.451079][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.509972][ T6117] EXT4-fs (loop3): unmounting filesystem. [ 264.511877][ T6707] loop2: detected capacity change from 0 to 256 [ 264.603982][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.669386][ T6707] loop2: detected capacity change from 0 to 2048 [ 264.684604][ T6710] loop3: detected capacity change from 0 to 16 [ 264.767198][ T6710] erofs: (device loop3): mounted with root inode @ nid 36. [ 264.792278][ T6707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 264.934162][ T3638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.939218][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 264.944119][ T3638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.960894][ T3638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.971467][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.972487][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.005025][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.012368][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.041746][ T6716] bio_check_eod: 50 callbacks suppressed [ 265.041763][ T6716] syz.3.737: attempt to access beyond end of device [ 265.041763][ T6716] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 265.080147][ T6716] syz.3.737: attempt to access beyond end of device [ 265.080147][ T6716] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 265.087470][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 265.145667][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 197 @ nid 36 [ 265.215169][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 196 @ nid 36 [ 265.224485][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 192 @ nid 36 [ 265.255203][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 265.264482][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 265.352603][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 168 @ nid 36 [ 265.380072][ T6726] loop4: detected capacity change from 0 to 512 [ 265.390238][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 160 @ nid 36 [ 265.394342][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.452414][ T6726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.491325][ T6726] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 265.515377][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 265.542085][ T6726] EXT4-fs (loop4): orphan cleanup on readonly fs [ 265.575282][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 265.585029][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 265.594216][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 265.604041][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 265.614864][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 265.624005][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 265.635028][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 265.644085][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 265.654055][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 265.685848][ T6726] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 265.746912][ T6726] EXT4-fs warning (device loop4): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.784586][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 265.804162][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 265.825072][ T6729] loop1: detected capacity change from 0 to 764 [ 265.840152][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 265.841824][ T6726] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 265.855668][ T6726] EXT4-fs (loop4): 1 truncate cleaned up [ 265.861364][ T6726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.874863][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 265.910534][ T6729] rock: directory entry would overflow storage [ 265.928314][ T6729] rock: sig=0x4654, size=5, remaining=4 [ 265.987052][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 266.040803][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 266.133465][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 266.145008][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 266.235636][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 266.338439][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 266.351426][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 266.363972][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 266.383002][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 266.403422][ T6710] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 266.465294][ T6710] syz.3.737: attempt to access beyond end of device [ 266.465294][ T6710] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 266.515335][ T6744] tipc: Enabling of bearer rejected, failed to enable media [ 266.587295][ T6710] syz.3.737: attempt to access beyond end of device [ 266.587295][ T6710] loop3: rw=524288, sector=1049272, nr_sectors = 16 limit=16 [ 266.601654][ T6710] syz.3.737: attempt to access beyond end of device [ 266.601654][ T6710] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 266.620183][ T6710] syz.3.737: attempt to access beyond end of device [ 266.620183][ T6710] loop3: rw=524288, sector=384, nr_sectors = 16 limit=16 [ 266.678508][ T6710] syz.3.737: attempt to access beyond end of device [ 266.678508][ T6710] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 266.707464][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.755894][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.764878][ T6710] syz.3.737: attempt to access beyond end of device [ 266.764878][ T6710] loop3: rw=524288, sector=728, nr_sectors = 16 limit=16 [ 266.779023][ T6710] syz.3.737: attempt to access beyond end of device [ 266.779023][ T6710] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 266.793081][ T6710] syz.3.737: attempt to access beyond end of device [ 266.793081][ T6710] loop3: rw=524288, sector=525152, nr_sectors = 16 limit=16 [ 266.813024][ T6713] device bridge_slave_0 entered promiscuous mode [ 266.892693][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.904957][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.987652][ T6713] device bridge_slave_1 entered promiscuous mode [ 267.045019][ T3647] Bluetooth: hci1: command tx timeout [ 267.213759][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.240188][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.480491][ T6713] team0: Port device team_slave_0 added [ 267.509038][ T6713] team0: Port device team_slave_1 added [ 267.650404][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.679902][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.811805][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.928606][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.946748][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.003281][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.163082][ T6713] device hsr_slave_0 entered promiscuous mode [ 268.186733][ T6713] device hsr_slave_1 entered promiscuous mode [ 268.209212][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.219323][ T6713] Cannot create hsr debugfs directory [ 268.469644][ T3682] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 268.695852][ T6754] loop4: detected capacity change from 0 to 65536 [ 268.734849][ T3682] usb 2-1: Using ep0 maxpacket: 32 [ 268.854946][ T3682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.879645][ T6754] XFS (loop4): Mounting V5 Filesystem [ 268.915392][ T6795] loop2: detected capacity change from 0 to 128 [ 268.930785][ T102] device hsr_slave_0 left promiscuous mode [ 268.954289][ T102] device hsr_slave_1 left promiscuous mode [ 268.955573][ T6795] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 268.979155][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.997543][ T6754] XFS (loop4): Ending clean mount [ 269.005825][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.029538][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.046964][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.056619][ T3682] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 269.070087][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.080825][ T3682] usb 2-1: Product: syz [ 269.085755][ T3682] usb 2-1: Manufacturer: syz [ 269.091163][ T3682] usb 2-1: SerialNumber: syz [ 269.100679][ T102] device bridge_slave_1 left promiscuous mode [ 269.118370][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.126236][ T3651] Bluetooth: hci1: command tx timeout [ 269.141087][ T102] device bridge_slave_0 left promiscuous mode [ 269.151672][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.167864][ T4526] XFS (loop4): Unmounting Filesystem [ 269.258081][ T6801] loop2: detected capacity change from 0 to 164 [ 269.324479][ T6801] rock: directory entry would overflow storage [ 269.359522][ T6801] rock: sig=0x4f50, size=4, remaining=3 [ 269.375744][ T6801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 269.396640][ T102] device veth1_macvtap left promiscuous mode [ 269.403385][ T102] device veth0_macvtap left promiscuous mode [ 269.429775][ T102] device veth1_vlan left promiscuous mode [ 269.449454][ T102] device veth0_vlan left promiscuous mode [ 269.612935][ T6807] loop2: detected capacity change from 0 to 512 [ 269.651869][ T6807] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.758: casefold flag without casefold feature [ 269.685397][ T6807] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 269.701204][ T6807] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 269.743046][ T6807] System zones: 0-2, 18-18, 34-35 [ 269.787137][ T6807] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.904202][ T6807] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.758: path /179/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 270.175140][ T6814] loop4: detected capacity change from 0 to 1024 [ 270.185865][ T6814] EXT4-fs: Ignoring removed orlov option [ 270.202228][ T6814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 270.685282][ T3682] cdc_ncm 2-1:1.0: failed to get mac address [ 270.704965][ T3682] cdc_ncm 2-1:1.0: bind() failure [ 270.732813][ T6814] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 270.751426][ T26] audit: type=1800 audit(1725582434.934:195): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.756" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 270.774108][ T3682] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 270.787706][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 270.795259][ T3682] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 270.827657][ T3682] usbtest: probe of 2-1:1.1 failed with error -71 [ 270.858914][ T3682] usb 2-1: USB disconnect, device number 3 [ 270.984316][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 271.163014][ T6823] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 271.172539][ T6823] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 271.191173][ T6823] overlayfs: missing 'lowerdir' [ 271.214856][ T3651] Bluetooth: hci1: command tx timeout [ 271.383138][ T102] team0 (unregistering): Port device team_slave_1 removed [ 271.443892][ T102] team0 (unregistering): Port device team_slave_0 removed [ 271.516237][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.600265][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.480597][ T6836] loop1: detected capacity change from 0 to 512 [ 272.499752][ T6836] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.559212][ T6836] EXT4-fs (loop1): 1 truncate cleaned up [ 272.565756][ T6836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.634226][ T5760] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /55/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 272.659965][ T5760] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 272.689576][ T5760] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /55/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 272.713057][ T5760] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 272.741983][ T5760] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /55/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 272.774190][ T5760] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 272.804098][ T5760] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /55/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 272.835005][ T5760] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 272.866817][ T5760] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /55/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 272.889647][ T5760] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 273.261104][ T102] bond0 (unregistering): Released all slaves [ 273.294896][ T3651] Bluetooth: hci1: command tx timeout [ 273.639919][ T5760] EXT4-fs (loop1): unmounting filesystem. [ 274.133199][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.170137][ T3651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.183919][ T3651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.216780][ T3651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.224695][ T3651] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.245916][ T3651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.401553][ T3647] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.444915][ T3647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.471172][ T3647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.490311][ T3647] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.508614][ T3647] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.516052][ T3647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 276.329379][ T3651] Bluetooth: hci3: command tx timeout [ 276.564953][ T3651] Bluetooth: hci5: command tx timeout [ 276.793286][ T6713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.919338][ T102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.953399][ T6713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.996452][ T6713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.024127][ T6713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.083532][ T102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.250171][ T102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.386143][ T102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.469942][ T6853] chnl_net:caif_netlink_parms(): no params data found [ 277.539508][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.610018][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.625498][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.652628][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.793497][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.815178][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.826388][ T6853] device bridge_slave_0 entered promiscuous mode [ 277.871439][ T6851] chnl_net:caif_netlink_parms(): no params data found [ 278.062138][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.073601][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.081769][ T6872] overlayfs: failed to get redirect (-107) [ 278.092355][ T6853] device bridge_slave_1 entered promiscuous mode [ 278.116303][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.141468][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.176433][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.183565][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.214210][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.226438][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.236382][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.243505][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.252240][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.269237][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.288504][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.404793][ T3651] Bluetooth: hci3: command tx timeout [ 278.467723][ T6853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.512865][ T6853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.653271][ T3647] Bluetooth: hci5: command tx timeout [ 278.674824][ T6913] loop4: detected capacity change from 0 to 1024 [ 278.682109][ T6913] EXT4-fs: Ignoring removed orlov option [ 278.689071][ T6913] EXT4-fs (loop4): Test dummy encryption mode enabled [ 278.746142][ T6853] team0: Port device team_slave_0 added [ 278.768340][ T6913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 278.814280][ T6853] team0: Port device team_slave_1 added [ 279.028744][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 279.099491][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.160936][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.195678][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.221903][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.316451][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.323644][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.350405][ T6930] loop4: detected capacity change from 0 to 512 [ 279.418076][ T6930] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.418813][ T6853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.477048][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.486515][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.498312][ T6930] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 279.524279][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.555675][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.585239][ T3844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.597612][ T6713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.607265][ T6930] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.783: invalid indirect mapped block 2683928664 (level 1) [ 279.644445][ T102] tipc: Left network mode [ 279.644973][ T6853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.666197][ T6853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.676573][ T6930] EXT4-fs (loop4): Remounting filesystem read-only [ 279.723759][ T6853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.731883][ T6930] EXT4-fs (loop4): 1 truncate cleaned up [ 279.752052][ T6930] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 279.869916][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 279.910488][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.937275][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.960477][ T6851] device bridge_slave_0 entered promiscuous mode [ 279.979803][ T6851] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.987426][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.004122][ T6851] device bridge_slave_1 entered promiscuous mode [ 280.016690][ T6853] device hsr_slave_0 entered promiscuous mode [ 280.023698][ T6853] device hsr_slave_1 entered promiscuous mode [ 280.031066][ T6853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.040603][ T6853] Cannot create hsr debugfs directory [ 280.238067][ T6851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.316561][ T6851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.484849][ T3647] Bluetooth: hci3: command tx timeout [ 280.485475][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.521968][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.549485][ T6851] team0: Port device team_slave_0 added [ 280.623205][ T6958] loop4: detected capacity change from 0 to 128 [ 280.687739][ T6958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 280.700913][ T6958] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 280.742296][ T3647] Bluetooth: hci5: command tx timeout [ 280.872346][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.905497][ T6851] team0: Port device team_slave_1 added [ 281.291798][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.321031][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.352714][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.364809][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.424415][ T6851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.542268][ T6851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.553908][ T6851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.594362][ T6851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.747396][ T6851] device hsr_slave_0 entered promiscuous mode [ 281.784444][ T6851] device hsr_slave_1 entered promiscuous mode [ 281.814182][ T6851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.836496][ T6851] Cannot create hsr debugfs directory [ 282.012473][ T6976] loop2: detected capacity change from 0 to 512 [ 282.233281][ T6976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 282.242955][ T6976] ext4 filesystem being mounted at /190/bus supports timestamps until 2038 (0x7fffffff) [ 282.414411][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 282.460341][ T6713] device veth0_vlan entered promiscuous mode [ 282.632237][ T3647] Bluetooth: hci3: command tx timeout [ 282.633433][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 282.811576][ T3647] Bluetooth: hci5: command tx timeout [ 282.847044][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 282.874525][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 282.888125][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.897094][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.081054][ T6713] device veth1_vlan entered promiscuous mode [ 283.180535][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 283.212134][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.323544][ T6992] loop2: detected capacity change from 0 to 1024 [ 283.334819][ T6992] EXT4-fs: Ignoring removed orlov option [ 283.354450][ T6992] EXT4-fs (loop2): Test dummy encryption mode enabled [ 283.399025][ T6713] device veth0_macvtap entered promiscuous mode [ 283.479185][ T6992] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 283.545285][ T26] audit: type=1800 audit(1725582447.714:196): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.793" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 283.940041][ T3634] EXT4-fs (loop2): unmounting filesystem. [ 284.064567][ T6713] device veth1_macvtap entered promiscuous mode [ 284.081518][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.090457][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.180252][ T7000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.796'. [ 284.196960][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.208468][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.218583][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.229311][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.240512][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.244073][ T7000] loop2: detected capacity change from 0 to 190 [ 284.251822][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.272195][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.282985][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.293281][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.304306][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.316412][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.322478][ T7000] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 284.351445][ T7000] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 284.363685][ T7000] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 284.384466][ T7000] ntfs: volume version 0.0. [ 284.389560][ T7000] ntfs: (device loop2): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 284.403483][ T7000] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use! [ 284.412093][ T7000] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 284.412292][ T7002] device wireguard0 entered promiscuous mode [ 284.431471][ T7000] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 284.455162][ T7000] bio_check_eod: 27 callbacks suppressed [ 284.455181][ T7000] syz.2.796: attempt to access beyond end of device [ 284.455181][ T7000] loop2: rw=0, sector=552, nr_sectors = 8 limit=190 [ 284.481546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.490577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.490602][ T7000] ntfs: (device loop2): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45. [ 284.504191][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.520685][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.532235][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.543127][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.553462][ T7000] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5. [ 284.580108][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.600945][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.614513][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.632906][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.643116][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.661940][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.673399][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.706752][ T102] device hsr_slave_0 left promiscuous mode [ 284.713516][ T102] device hsr_slave_1 left promiscuous mode [ 284.722471][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.730900][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.739075][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.747038][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.754876][ T102] device bridge_slave_1 left promiscuous mode [ 284.761809][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.771375][ T102] device bridge_slave_0 left promiscuous mode [ 284.778162][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.804336][ T102] device veth1_macvtap left promiscuous mode [ 284.810659][ T102] device veth0_macvtap left promiscuous mode [ 284.817058][ T102] device veth1_vlan left promiscuous mode [ 284.822957][ T102] device veth0_vlan left promiscuous mode [ 285.226972][ T7007] loop4: detected capacity change from 0 to 128 [ 285.265070][ T7007] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 285.275407][ T7007] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 285.867949][ T102] team0 (unregistering): Port device team_slave_1 removed [ 285.930819][ T102] team0 (unregistering): Port device team_slave_0 removed [ 286.001483][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.063993][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.232637][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 287.405101][ T102] bond0 (unregistering): Released all slaves [ 287.516108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.527954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.557923][ T6713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.569656][ T6713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.578888][ T6713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.587935][ T6713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.615254][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 287.820431][ T6853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.939062][ T6851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.997808][ T6853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 288.017847][ T6853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 288.067761][ T7020] netlink: 'syz.2.799': attribute type 7 has an invalid length. [ 288.083898][ T7020] netlink: 'syz.2.799': attribute type 39 has an invalid length. [ 288.129412][ T7024] bridge2: port 1(gretap1) entered blocking state [ 288.151740][ T7024] bridge2: port 1(gretap1) entered disabled state [ 288.170027][ T7024] device gretap1 entered promiscuous mode [ 288.194463][ T7026] netlink: 'syz.2.799': attribute type 7 has an invalid length. [ 288.212439][ T7026] netlink: 'syz.2.799': attribute type 39 has an invalid length. [ 288.303780][ T6851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.342444][ T6853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 288.361834][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.372827][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.525755][ T6851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.569646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.686180][ T6851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.712492][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.734261][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.788180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.886647][ T6853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.912919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.931681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.971268][ T6853] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.042745][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.061742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.070948][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.078147][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.116401][ T6853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.127499][ T6853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.244720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 289.253319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.262310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.272073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.279252][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.641225][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 289.850059][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 290.037378][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.266612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.321771][ T7060] loop4: detected capacity change from 0 to 256 [ 290.482158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.749350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.820981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 290.829828][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 290.844085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 290.887851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.998179][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 292.118491][ T7067] loop4: detected capacity change from 0 to 512 [ 292.195870][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #3: comm syz.4.809: corrupted inode contents [ 292.235806][ T7067] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #3: comm syz.4.809: mark_inode_dirty error [ 292.269463][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.284129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.321436][ T7067] EXT4-fs error (device loop4): ext4_do_update_inode:5221: inode #3: comm syz.4.809: corrupted inode contents [ 292.349838][ T6851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.367219][ T6851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.373172][ T7067] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.809: mark_inode_dirty error [ 292.392452][ T7067] __quota_error: 2 callbacks suppressed [ 292.392471][ T7067] Quota error (device loop4): write_blk: dquota write failed [ 292.420201][ T7067] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 292.426845][ T6851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.436781][ T7067] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.809: Failed to acquire dquot type 0 [ 292.471737][ T6853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.495508][ T26] audit: type=1326 audit(1725582456.684:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.504473][ T7067] EXT4-fs (loop4): 1 orphan inode deleted [ 292.518825][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.533518][ T4674] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 292.542010][ T3821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.551833][ T4674] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:15: Failed to release dquot type 1 [ 292.562277][ T26] audit: type=1326 audit(1725582456.714:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.563695][ T6851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.593990][ T7067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 292.597739][ T26] audit: type=1326 audit(1725582456.724:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.640686][ T26] audit: type=1326 audit(1725582456.724:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.644937][ T7067] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 292.675209][ T26] audit: type=1326 audit(1725582456.724:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.701634][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.705298][ T26] audit: type=1326 audit(1725582456.724:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.736589][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 292.761447][ T26] audit: type=1326 audit(1725582456.724:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.2.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd092d7cef9 code=0x7ffc0000 [ 292.809473][ T6853] device veth0_vlan entered promiscuous mode [ 292.826992][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 292.880046][ T7079] loop2: detected capacity change from 0 to 4096 [ 292.891139][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 292.928407][ T6853] device veth1_vlan entered promiscuous mode [ 292.962048][ T7079] ntfs: volume version 3.1. [ 292.984825][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.012977][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.080923][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.241680][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.272509][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.292321][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.316285][ T6853] device veth0_macvtap entered promiscuous mode [ 293.343097][ T6851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.354011][ T6853] device veth1_macvtap entered promiscuous mode [ 293.386362][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.414590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.438755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.503201][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.535951][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.554840][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.584812][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.604960][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.624696][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.649278][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.670926][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.682940][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.694986][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.709470][ T4526] EXT4-fs (loop4): unmounting filesystem. [ 293.717259][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.725684][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.740956][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.758401][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.765834][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.827413][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.837739][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.847647][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.854894][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.862860][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.874293][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.884827][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.947881][ T6851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.990266][ T6851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.010133][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.038599][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.058035][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.078384][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.093154][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.110623][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.121330][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.133392][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.144117][ T6853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.155168][ T6853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.168446][ T6853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.243518][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.252620][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.263046][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.272528][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.282409][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.291902][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.301063][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.339154][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.507315][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.629897][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.980362][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.990576][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.034276][ T6853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.053522][ T6853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.076495][ T6853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.091142][ T6853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.105826][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'. [ 295.119008][ T7096] device ip6gretap0 entered promiscuous mode [ 295.224987][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.246157][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.482509][ T4674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.510630][ T4674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.522586][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.542893][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.358043][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.376256][ T4674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.453437][ T7117] rdma_rxe: rxe_register_device failed with error -23 [ 296.501606][ T7117] rdma_rxe: failed to add team0 [ 296.530782][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.559723][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.587033][ T6851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.181272][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.287968][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.595179][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.726677][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.737948][ T6851] device veth0_vlan entered promiscuous mode [ 297.955019][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.963029][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.243011][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 298.358777][ T6851] device veth1_vlan entered promiscuous mode [ 298.718148][ T7125] loop4: detected capacity change from 0 to 32768 [ 298.876959][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.902423][ T7125] XFS (loop4): Mounting V5 Filesystem [ 299.779442][ T7125] XFS (loop4): log mount failed [ 299.899431][ T7158] device syzkaller0 entered promiscuous mode [ 299.957483][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 299.969116][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.050685][ T7167] netlink: 80 bytes leftover after parsing attributes in process `syz.2.836'. [ 300.072324][ T7168] rdma_rxe: rxe_register_device failed with error -23 [ 300.080716][ T7168] rdma_rxe: failed to add team0 [ 300.260948][ T7172] loop1: detected capacity change from 0 to 256 [ 300.299085][ T7172] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 300.341958][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 300.341973][ T26] audit: type=1326 audit(1725582464.524:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.345178][ T7172] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 300.381134][ T26] audit: type=1326 audit(1725582464.524:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.394918][ T7172] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 300.403904][ T26] audit: type=1326 audit(1725582464.564:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.434798][ T7172] UDF-fs: Scanning with blocksize 512 failed [ 300.462252][ T26] audit: type=1326 audit(1725582464.564:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.497149][ T7172] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 300.504309][ T26] audit: type=1326 audit(1725582464.564:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.537956][ T7172] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 300.545309][ T26] audit: type=1326 audit(1725582464.564:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.634820][ T26] audit: type=1326 audit(1725582464.564:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.658795][ T26] audit: type=1326 audit(1725582464.564:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.696241][ T26] audit: type=1326 audit(1725582464.564:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 300.739775][ T26] audit: type=1326 audit(1725582464.564:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.4.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a45d7cef9 code=0x7ffc0000 [ 304.305885][ T6851] device veth0_macvtap entered promiscuous mode [ 304.314792][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.326644][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'. [ 304.386848][ T6851] device veth1_macvtap entered promiscuous mode [ 304.538015][ T7201] rdma_rxe: rxe_register_device failed with error -23 [ 304.545111][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.583171][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.607912][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.618894][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.624535][ T7201] rdma_rxe: failed to add team0 [ 304.647326][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.664830][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.686781][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.711329][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.723639][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.740241][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.753139][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.764172][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.778135][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.839568][ T6419] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 304.853257][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.887227][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.959575][ T7212] loop0: detected capacity change from 0 to 128 [ 305.007197][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.044105][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.102554][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.121105][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.132926][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.150696][ T6419] usb 3-1: Using ep0 maxpacket: 32 [ 305.173791][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.184342][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.200703][ T3682] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 305.208865][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.231258][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.253322][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.264838][ T6851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.265591][ T7212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 305.275355][ T6851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.276726][ T6851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.301433][ T7212] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 305.364922][ T6419] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.899366][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.948125][ T3818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.685819][ T3820] device hsr_slave_0 left promiscuous mode [ 307.727026][ T3820] device hsr_slave_1 left promiscuous mode [ 307.755335][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.762786][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.885403][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.892844][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.944875][ T3820] device bridge_slave_1 left promiscuous mode [ 307.951212][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.036172][ T3820] device bridge_slave_0 left promiscuous mode [ 308.042420][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.206804][ T3820] device veth1_macvtap left promiscuous mode [ 308.213439][ T3820] device veth0_macvtap left promiscuous mode [ 308.255442][ T3820] device veth1_vlan left promiscuous mode [ 308.261369][ T3820] device veth0_vlan left promiscuous mode [ 310.964795][ T6419] usb 3-1: string descriptor 0 read error: -32 [ 310.972148][ T6419] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.984809][ T3682] usb 2-1: device descriptor read/all, error -110 [ 311.024816][ T6419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.117157][ T6419] usb 3-1: can't set config #1, error -32 [ 311.134715][ T3682] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 311.758790][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 312.085135][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 312.417295][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.735100][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.344737][ T3682] usb 2-1: device descriptor read/64, error -110 [ 316.464901][ T3682] usb usb2-port1: attempt power cycle [ 316.577478][ T3820] bond0 (unregistering): Released all slaves [ 316.874898][ T3682] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 316.974782][ T3682] usb 2-1: device descriptor read/8, error -32 [ 317.134980][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.141401][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.244824][ T3682] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 317.314749][ T3682] usb 2-1: device descriptor read/8, error -32 [ 317.434887][ T3682] usb usb2-port1: unable to enumerate USB device [ 326.018667][ T4032] usb 3-1: USB disconnect, device number 5 [ 339.684714][ T3647] Bluetooth: hci2: command 0x0406 tx timeout [ 378.576080][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.582429][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.884693][ T3638] Bluetooth: hci1: command 0x0406 tx timeout [ 401.124889][ T3647] Bluetooth: hci3: command 0x0406 tx timeout [ 401.134693][ T3647] Bluetooth: hci5: command 0x0406 tx timeout [ 417.604901][ T27] INFO: task syz.3.737:6710 blocked for more than 143 seconds. [ 417.612873][ T27] Not tainted 6.1.108-syzkaller #0 [ 417.682721][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.774700][ T27] task:syz.3.737 state:D stack:25304 pid:6710 ppid:6117 flags:0x00004004 [ 417.864607][ T27] Call Trace: [ 417.867945][ T27] [ 417.870890][ T27] __schedule+0x143f/0x4570 [ 417.974729][ T27] ? release_firmware_map_entry+0x186/0x186 [ 417.981219][ T27] ? blk_check_plugged+0x250/0x250 [ 418.074613][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 418.079871][ T27] ? blk_check_plugged+0x250/0x250 [ 418.184922][ T27] schedule+0xbf/0x180 [ 418.189336][ T27] io_schedule+0x88/0x100 [ 418.193699][ T27] folio_wait_bit_common+0x878/0x1290 [ 418.314792][ T27] ? folio_wait_bit+0x20/0x20 [ 418.319537][ T27] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 418.434708][ T27] ? erofs_map_blocks+0x14d0/0x14d0 [ 418.439967][ T27] ? bio_add_page+0x47b/0x750 [ 418.524637][ T27] z_erofs_runqueue+0x993/0x1ca0 [ 418.529673][ T27] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 418.634812][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 418.640375][ T27] ? z_erofs_pcluster_readmore+0x413/0x450 [ 418.753547][ T27] z_erofs_readahead+0xc26/0x1030 [ 418.764864][ T27] ? z_erofs_read_folio+0x760/0x760 [ 418.770127][ T27] ? __lock_acquire+0x1f80/0x1f80 [ 418.865752][ T27] ? blk_start_plug+0x95/0x110 [ 418.870579][ T27] read_pages+0x17f/0x830 [ 418.974633][ T27] ? folio_add_lru+0x34d/0xd70 [ 418.979831][ T27] ? folio_add_lru+0x34d/0xd70 [ 419.084617][ T27] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 419.090395][ T27] ? __lock_acquire+0x125b/0x1f80 [ 419.184611][ T27] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 419.190143][ T27] page_cache_ra_unbounded+0x68b/0x7b0 [ 419.294644][ T27] force_page_cache_ra+0x2a3/0x300 [ 419.299842][ T27] generic_fadvise+0x553/0x7b0 [ 419.394626][ T27] ? dump_task+0x620/0x620 [ 419.399304][ T27] ? __fget_files+0x28/0x4a0 [ 419.403915][ T27] ? __fdget+0x182/0x210 [ 419.504627][ T27] __x64_sys_fadvise64+0x138/0x180 [ 419.509911][ T27] do_syscall_64+0x3b/0xb0 [ 419.514357][ T27] ? clear_bhb_loop+0x45/0xa0 [ 419.644738][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.650799][ T27] RIP: 0033:0x7f8150b7cef9 [ 419.754699][ T27] RSP: 002b:00007f8151a51038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 419.763693][ T27] RAX: ffffffffffffffda RBX: 00007f8150d35f80 RCX: 00007f8150b7cef9 [ 419.894618][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 419.902645][ T27] RBP: 00007f8150bef01e R08: 0000000000000000 R09: 0000000000000000 [ 420.034645][ T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 420.042665][ T27] R13: 0000000000000000 R14: 00007f8150d35f80 R15: 00007fff7e8ff378 [ 420.205930][ T27] [ 420.209036][ T27] [ 420.209036][ T27] Showing all locks held in the system: [ 420.315884][ T27] 2 locks held by kworker/u4:1/11: [ 420.321038][ T27] 1 lock held by rcu_tasks_kthre/12: [ 420.425822][ T27] #0: ffffffff8d32b190 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 420.524747][ T27] 1 lock held by rcu_tasks_trace/13: [ 420.530075][ T27] #0: ffffffff8d32b990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 420.704614][ T27] 1 lock held by khungtaskd/27: [ 420.709505][ T27] #0: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 420.814690][ T27] 2 locks held by getty/3393: [ 420.819411][ T27] #0: ffff88814b67e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 420.944657][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 421.034634][ T27] 1 lock held by syz.3.737/6710: [ 421.039618][ T27] #0: ffff888070528de8 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 421.184713][ T27] 1 lock held by syz.4.853/7215: [ 421.214626][ T27] [ 421.217005][ T27] ============================================= [ 421.217005][ T27] [ 421.314656][ T27] NMI backtrace for cpu 1 [ 421.319030][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.108-syzkaller #0 [ 421.326944][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 421.337012][ T27] Call Trace: [ 421.340390][ T27] [ 421.343320][ T27] dump_stack_lvl+0x1e3/0x2cb [ 421.348011][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 421.353472][ T27] ? panic+0x764/0x764 [ 421.357529][ T27] ? vprintk_emit+0x622/0x740 [ 421.362234][ T27] ? printk_sprint+0x490/0x490 [ 421.367017][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 421.372161][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 421.377139][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 421.383298][ T27] ? _printk+0xd1/0x111 [ 421.387450][ T27] ? panic+0x764/0x764 [ 421.392116][ T27] ? __wake_up_klogd+0xcc/0x100 [ 421.396954][ T27] ? panic+0x764/0x764 [ 421.401033][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 421.407165][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 421.413245][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 421.419324][ T27] watchdog+0xf88/0xfd0 [ 421.423487][ T27] ? watchdog+0x1f8/0xfd0 [ 421.427815][ T27] kthread+0x28d/0x320 [ 421.431891][ T27] ? hungtask_pm_notify+0x50/0x50 [ 421.436924][ T27] ? kthread_blkcg+0xd0/0xd0 [ 421.441530][ T27] ret_from_fork+0x1f/0x30 [ 421.445967][ T27] [ 421.449670][ T27] Sending NMI from CPU 1 to CPUs 0: [ 421.455212][ C0] NMI backtrace for cpu 0 [ 421.455222][ C0] CPU: 0 PID: 3634 Comm: syz-executor Not tainted 6.1.108-syzkaller #0 [ 421.455237][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 421.455245][ C0] RIP: 0010:lock_release+0xc/0xa20 [ 421.455269][ C0] Code: 07 80 c1 03 38 c1 0f 8c 73 fd ff ff 4c 89 ef e8 5a 86 77 00 e9 66 fd ff ff 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 <53> 48 83 e4 e0 48 81 ec 00 01 00 00 49 89 f5 48 89 7c 24 18 65 48 [ 421.455281][ C0] RSP: 0018:ffffc9000425fb00 EFLAGS: 00000086 [ 421.455294][ C0] RAX: ffffffff8156eb6a RBX: ffff8880796fef00 RCX: ffff88802d353b80 [ 421.455304][ C0] RDX: 0000000000000000 RSI: ffffffff8156edbb RDI: ffff8880796fef18 [ 421.455314][ C0] RBP: ffffc9000425fb20 R08: ffffffff8156eb5c R09: fffff5200084bfc0 [ 421.455324][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100f2dfe33 [ 421.455333][ C0] R13: 0000000004000000 R14: 0000000000000011 R15: ffff8880796ff198 [ 421.455343][ C0] FS: 0000555585879500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 421.455355][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.455365][ C0] CR2: 00007ffc79bdd368 CR3: 000000005e538000 CR4: 00000000003506f0 [ 421.455377][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 421.455385][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 421.455393][ C0] Call Trace: [ 421.455397][ C0] [ 421.455402][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 421.455423][ C0] ? read_lock_is_recursive+0x10/0x10 [ 421.455441][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 421.455460][ C0] ? nmi_handle+0x25/0x440 [ 421.455486][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 421.455504][ C0] ? nmi_handle+0x12e/0x440 [ 421.455521][ C0] ? nmi_handle+0x25/0x440 [ 421.455539][ C0] ? lock_release+0xc/0xa20 [ 421.455554][ C0] ? default_do_nmi+0x62/0x150 [ 421.455569][ C0] ? exc_nmi+0xa8/0x100 [ 421.455580][ C0] ? end_repeat_nmi+0x16/0x31 [ 421.455601][ C0] ? get_signal+0x12ec/0x17d0 [ 421.455617][ C0] ? get_signal+0x12fa/0x17d0 [ 421.455633][ C0] ? get_signal+0x154b/0x17d0 [ 421.455650][ C0] ? lock_release+0xc/0xa20 [ 421.455666][ C0] ? lock_release+0xc/0xa20 [ 421.455683][ C0] ? lock_release+0xc/0xa20 [ 421.455699][ C0] [ 421.455703][ C0] [ 421.455708][ C0] _raw_spin_unlock_irq+0x12/0x40 [ 421.455724][ C0] get_signal+0x154b/0x17d0 [ 421.455747][ C0] ? ptrace_notify+0x370/0x370 [ 421.455768][ C0] arch_do_signal_or_restart+0xb0/0x1a10 [ 421.455783][ C0] ? __might_fault+0xa1/0x110 [ 421.455800][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 421.455821][ C0] ? do_sigaltstack+0x3f3/0x610 [ 421.455856][ C0] ? get_sigframe_size+0x10/0x10 [ 421.455869][ C0] ? restore_altstack+0x107/0x150 [ 421.455883][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 421.455906][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 421.455921][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 421.455933][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 421.455946][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 421.455963][ C0] do_syscall_64+0x47/0xb0 [ 421.455979][ C0] ? clear_bhb_loop+0x45/0xa0 [ 421.455996][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.456011][ C0] RIP: 0033:0x7fd092d73157 [ 421.456028][ C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 55 16 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 a5 16 03 00 8b 44 [ 421.456039][ C0] RSP: 002b:00007ffce00f3910 EFLAGS: 00000293 [ 421.456049][ C0] RAX: 0000000000000000 RBX: 000000000000026e RCX: 00007fd092d73157 [ 421.456058][ C0] RDX: 0000000040000001 RSI: 00007ffce00f396c RDI: 00000000ffffffff [ 421.456067][ C0] RBP: 00007ffce00f396c R08: 0000000000000000 R09: 0000000000000010 [ 421.456076][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 421.456084][ C0] R13: 000000000004a517 R14: 000000000004a517 R15: 00007ffce00f39c0 [ 421.456101][ C0] [ 422.766566][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 422.774072][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.108-syzkaller #0 [ 422.782148][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 422.792914][ T27] Call Trace: [ 422.796217][ T27] [ 422.799154][ T27] dump_stack_lvl+0x1e3/0x2cb [ 422.803848][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 422.809325][ T27] ? panic+0x764/0x764 [ 422.813400][ T27] ? llist_add_batch+0x160/0x1d0 [ 422.818439][ T27] ? vscnprintf+0x59/0x80 [ 422.822773][ T27] panic+0x318/0x764 [ 422.826672][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 422.832838][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 422.838218][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 422.844393][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 422.850562][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 422.856738][ T27] watchdog+0xfc7/0xfd0 [ 422.860917][ T27] ? watchdog+0x1f8/0xfd0 [ 422.865351][ T27] kthread+0x28d/0x320 [ 422.869420][ T27] ? hungtask_pm_notify+0x50/0x50 [ 422.874534][ T27] ? kthread_blkcg+0xd0/0xd0 [ 422.879136][ T27] ret_from_fork+0x1f/0x30 [ 422.883606][ T27] [ 422.886913][ T27] Kernel Offset: disabled [ 422.891413][ T27] Rebooting in 86400 seconds..