last executing test programs: 7.41337574s ago: executing program 4 (id=981): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800000, &(0x7f0000000280)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@noload}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x14b442, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRES8, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) shutdown(r4, 0x1) 5.701120359s ago: executing program 1 (id=983): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) fanotify_mark(r2, 0x4a, 0x20, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) ioctl$NBD_DISCONNECT(r5, 0xab08) 4.81219235s ago: executing program 2 (id=988): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800000, &(0x7f0000000280)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@noload}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x14b442, 0x82) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) 4.665478253s ago: executing program 3 (id=989): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 4.551754586s ago: executing program 4 (id=991): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.781075283s ago: executing program 3 (id=992): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 3.762502853s ago: executing program 0 (id=993): setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x650b, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x4) connect$vsock_stream(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom$inet_nvme(r4, 0x0, 0x0, 0x40000002, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.720085805s ago: executing program 1 (id=994): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x32ab60b1caec533c, 0xffffffffffffffff, 0x3000) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000380)) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f0000000000)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.667035626s ago: executing program 2 (id=995): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) syz_open_dev$dri(&(0x7f00000000c0), 0xfadf, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.512782932s ago: executing program 1 (id=996): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78306901}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 2.512021982s ago: executing program 4 (id=997): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "0500000000000000"}], 0x18}, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=[{0x18, 0x110, 0x1, "060000"}], 0x18}, 0x0) nanosleep(0x0, 0x0) recvmsg(r0, 0x0, 0x40) sendmsg(r0, 0x0, 0x0) nanosleep(0x0, 0x0) recvmsg(r1, 0x0, 0x40) nanosleep(0x0, 0x0) recvmsg(r0, 0x0, 0x40) sendmsg(r0, 0x0, 0x0) nanosleep(0x0, 0x0) recvmsg(r0, 0x0, 0x40) nanosleep(&(0x7f0000000f00)={0x0, 0x5f5e100}, 0x0) recvmsg(r1, 0x0, 0x40) 2.511766642s ago: executing program 2 (id=998): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syslog(0x3, &(0x7f0000000080)=""/206, 0xce) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0x4, 0x4, 0x200, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x20, 0x2, 0x7, "f35051b9"}, 0x0, 0x2, {0x0}, 0x3}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x50ab414e71f8e31f, 0xdd9f83, 0x5, 0x2f, 0x2, 0x22, 0xc, 0x722, 0x6, 0x40, 0x7e, 0x27, 0x1c, {0x10000001, 0x6fd8e849}, 0x8, 0x9}}) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x41, 0x107, 0xfffff7fe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000018c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00\x00', &(0x7f0000000080)='\xa4\x93\xaatH\x98\xb7\x8c\xc6L\xff\xdf{c\xdd\xba\xe5\xa8\x85\x1e\x1c\xb9\xc1\xec\xfbg\xcaTA\xa4\xeek\x05\\_\xed<]\xcd\xfbX\xbfK\xf4g)\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80j\xf4\xac\x01\x1a\xf3{\xe3I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9\x0f\xdc\x05\nZ\xa5\xe0\xeb2\x10\xb7V\xf4\xcc\xce~\x16\xfb\xd7\xab\x06\x8d\xeb\xc8\xfb\x1e\x00\xf0F\xc5\x87\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) tkill(r2, 0xb) syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2.405016605s ago: executing program 3 (id=999): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.323128436s ago: executing program 2 (id=1000): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r3, 0xfffffffc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 2.199751219s ago: executing program 3 (id=1001): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800000, &(0x7f0000000280)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@noload}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x14b442, 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRES8, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() connect$llc(r1, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3fffffffffffd75, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00) sendto$inet6(r4, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0) shutdown(r4, 0x1) 1.875738667s ago: executing program 4 (id=1002): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.417694038s ago: executing program 0 (id=1003): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.406703358s ago: executing program 2 (id=1004): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) fanotify_mark(r2, 0x4a, 0x20, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) ioctl$NBD_DISCONNECT(r5, 0xab08) 1.396690048s ago: executing program 1 (id=1005): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x800000, &(0x7f0000000280)={[{@nodelalloc}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@i_version}, {@noload}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x14b442, 0x82) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x30d, 0xf7, 0x0, 0x6b, 0x0, @local}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) 945.293998ms ago: executing program 4 (id=1006): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 916.393729ms ago: executing program 4 (id=1007): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$kcm(0x11, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x80040, 0x54) fsetxattr$system_posix_acl(r5, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 460.215149ms ago: executing program 0 (id=1008): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(r0, 0xfffffffc) 428.88674ms ago: executing program 0 (id=1009): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) syz_open_dev$dri(&(0x7f00000000c0), 0xfadf, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 287.136313ms ago: executing program 1 (id=1010): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syslog(0x3, &(0x7f0000000080)=""/206, 0xce) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x5, 0x4, 0x4, 0x200, 0x5, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x20, 0x2, 0x7, "f35051b9"}, 0x0, 0x2, {0x0}, 0x3}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x50ab414e71f8e31f, 0xdd9f83, 0x5, 0x2f, 0x2, 0x22, 0xc, 0x722, 0x6, 0x40, 0x7e, 0x27, 0x1c, {0x10000001, 0x6fd8e849}, 0x8, 0x9}}) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x41, 0x107, 0xfffff7fe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000018c0)='\xf5\xfc\xd2S?\x10s{\x84\x11\n\xaen|\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\x11\xfb\xde\x93\xbe\x7f\xb7\x12\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00\x00\x00', &(0x7f0000000080)='\xa4\x93\xaatH\x98\xb7\x8c\xc6L\xff\xdf{c\xdd\xba\xe5\xa8\x85\x1e\x1c\xb9\xc1\xec\xfbg\xcaTA\xa4\xeek\x05\\_\xed<]\xcd\xfbX\xbfK\xf4g)\xce\xe8\xc0\xb5S\x13\x9f\x9b\x18\xb3U\xb4>\"\xf9 \xf0\x80j\xf4\xac\x01\x1a\xf3{\xe3I\x0f\x98\xd1\fF\xe53\xa2\xb9\xc0\xbe\xfa\xe9\x0f\xdc\x05\nZ\xa5\xe0\xeb2\x10\xb7V\xf4\xcc\xce~\x16\xfb\xd7\xab\x06\x8d\xeb\xc8\xfb\x1e\x00\xf0F\xc5\x87\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) tkill(r2, 0xb) syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 248.499154ms ago: executing program 0 (id=1011): set_mempolicy(0x3, &(0x7f0000000040)=0xef, 0xd) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44055) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="95875a7786da", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'x:\x00', 0x10, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r2, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r4, &(0x7f00000003c0)=@in={0x2, 0x4e21, @multicast1}, 0x80) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYBLOB="010029bd7000fddbdf25010000001400020077673100000000000000000000000000500008804c000080240001000000000000000000000000000000000000000000000000000000000000000000240009801c000080060001000200000008000200e0000001050003000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000880}, 0x48000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x51060, 0x42c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB, @ANYBLOB="0100000000", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4040000) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "ffffff000000000c00"}}}}}}}, 0x0) recvfrom(r1, 0x0, 0x9400, 0x10132, 0x0, 0x0) 112.637927ms ago: executing program 1 (id=1012): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) fanotify_mark(0xffffffffffffffff, 0x4a, 0x20, r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) ioctl$NBD_DISCONNECT(r3, 0xab08) 73.491908ms ago: executing program 0 (id=1013): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 72.837558ms ago: executing program 3 (id=1014): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 24.808529ms ago: executing program 2 (id=1015): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78306901}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 0s ago: executing program 3 (id=1016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200000000000000000000000040000000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) kernel console output (not intermixed with test programs): TDEV_CHANGE): macsec0: link becomes ready [ 33.768414][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.770011][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.798018][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.799869][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.813349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.815667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.818189][ T4328] device veth0_macvtap entered promiscuous mode [ 33.821470][ T4329] device veth1_vlan entered promiscuous mode [ 33.826006][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.827370][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.832841][ T4328] device veth1_macvtap entered promiscuous mode [ 33.837470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.839160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.840677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.842195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.847165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.848767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.850286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.851827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.857033][ T4340] device veth0_vlan entered promiscuous mode [ 33.866428][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.868128][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.870320][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.871625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.873280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.875914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.879788][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.880982][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.887718][ T4340] device veth1_vlan entered promiscuous mode [ 33.892699][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.894685][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.897673][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.899473][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.901195][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.903198][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.906370][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.910867][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.912707][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.917858][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.919517][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.921317][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.923021][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.926376][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.927752][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.929573][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.940033][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.941861][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.944228][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.946044][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.948581][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.950051][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.951680][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.953211][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.957381][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.959141][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.962194][ T4340] device veth0_macvtap entered promiscuous mode [ 33.964164][ T4329] device veth0_macvtap entered promiscuous mode [ 33.966582][ T4340] device veth1_macvtap entered promiscuous mode [ 33.968854][ T4339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.970342][ T4339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.971869][ T4339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.973746][ T4339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.980536][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.982000][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.983954][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.985499][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.997114][ T4329] device veth1_macvtap entered promiscuous mode [ 34.002352][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.005461][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.007301][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.009172][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.011063][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.012714][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.016343][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.052165][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.056748][ T1577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.058164][ T1577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.059577][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.060879][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.070228][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.072561][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.089822][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.091510][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.093339][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.096046][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.097648][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.105379][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.107316][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.109107][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.111004][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.113231][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.115191][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.117655][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.118951][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.120689][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.129988][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.132000][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.134103][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.136004][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.137850][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.139701][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.141546][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.169061][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.421446][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.428148][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.429799][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.431404][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.433094][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.436542][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.438693][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.440584][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.442365][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.445648][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.447576][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.449633][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.451544][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.453289][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.474790][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.476958][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.479402][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.482155][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.490370][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.492173][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.494275][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.495758][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.538320][ T4416] loop3: detected capacity change from 0 to 512 [ 34.550746][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.556075][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.563100][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.565230][ T4416] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.4: invalid indirect mapped block 256 (level 2) [ 34.572594][ T4416] EXT4-fs (loop3): 2 truncates cleaned up [ 34.575620][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.577004][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.585908][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.588767][ T4416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 34.598496][ T4416] EXT4-fs (loop3): unmounting filesystem. [ 34.612147][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.613792][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.615668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.628324][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.629714][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.631606][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.632843][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.637400][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.639699][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.647843][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.649470][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.650927][ T78] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.875017][ T4426] loop3: detected capacity change from 0 to 8 [ 35.217613][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 35.227164][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 35.234243][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 35.241391][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 35.248256][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 35.441066][ T4431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 35.449211][ T27] audit: type=1107 audit(35.350:2): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 35.550161][ T4419] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 35.579307][ T4419] SQUASHFS error: lzo decompression failed, data probably corrupt [ 35.580800][ T4419] SQUASHFS error: Failed to read block 0x0: -5 [ 35.583044][ T4419] SQUASHFS error: lzo decompression failed, data probably corrupt [ 35.584498][ T4419] SQUASHFS error: Failed to read block 0x0: -5 [ 35.837213][ T4432] device veth1_macvtap left promiscuous mode [ 35.990148][ T4424] loop1: detected capacity change from 0 to 40427 [ 36.052509][ T4442] loop0: detected capacity change from 0 to 256 [ 36.973363][ C0] sched: RT throttling activated [ 37.004146][ T4424] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 37.005519][ T4424] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 37.008522][ T4424] F2FS-fs (loop1): invalid crc value [ 37.258630][ T4424] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.293629][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.294757][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.295809][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 37.296871][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 37.337696][ T4424] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 37.339148][ T4424] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 37.676979][ T4454] loop3: detected capacity change from 0 to 131072 [ 37.680720][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 37.682197][ T4454] F2FS-fs (loop3): invalid crc value [ 37.755691][ T4454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.762985][ T4454] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 37.765231][ T4454] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 38.239773][ T4464] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 38.518393][ T4467] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 38.524583][ T4467] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 39.582145][ T4486] loop3: detected capacity change from 0 to 2048 [ 39.694589][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 39.694614][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 39.696930][ T4341] Bluetooth: hci1: command 0x0419 tx timeout [ 39.698120][ T4337] Bluetooth: hci2: command 0x0419 tx timeout [ 39.699581][ T4341] Bluetooth: hci0: command 0x0419 tx timeout [ 39.787006][ T4486] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 39.827405][ T4487] mmap: syz.4.15 (4487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.831740][ T4491] loop0: detected capacity change from 0 to 128 [ 39.849193][ T4491] ======================================================= [ 39.849193][ T4491] WARNING: The mand mount option has been deprecated and [ 39.849193][ T4491] and is ignored by this kernel. Remove the mand [ 39.849193][ T4491] option from the mount to silence this warning. [ 39.849193][ T4491] ======================================================= [ 39.900753][ T4491] EXT4-fs (loop0): Test dummy encryption mode enabled [ 39.922910][ T4491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.016766][ T4496] loop1: detected capacity change from 0 to 32768 [ 40.042771][ T4501] Bluetooth: MGMT ver 1.22 [ 40.117251][ T4496] XFS (loop1): Mounting V5 Filesystem [ 40.167309][ T4496] XFS (loop1): Ending clean mount [ 40.171789][ T4496] XFS (loop1): Quotacheck needed: Please wait. [ 40.186821][ T4496] XFS (loop1): Quotacheck: Done. [ 40.257574][ T4513] loop4: detected capacity change from 0 to 32768 [ 40.259189][ T4513] xfs: Unknown parameter 'appraise' [ 40.267827][ T4514] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 40.592772][ T4519] loop3: detected capacity change from 0 to 4096 [ 41.127938][ T4520] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.641566][ T4329] XFS (loop1): Unmounting Filesystem [ 42.004224][ T4345] Bluetooth: hci4: ACL packet for unknown connection handle 1211 [ 42.343102][ T4532] binder: 4528:4532 ioctl c0306201 0 returned -14 [ 42.688307][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 42.966697][ T4345] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 43.123460][ T4345] Bluetooth: hci1: unexpected event 0x03 length: 12 > 11 [ 43.257674][ T4551] Illegal XDP return value 32768 on prog (id 8) dev syz_tun, expect packet loss! [ 43.387990][ T4553] input: syz1 as /devices/virtual/input/input3 [ 43.959365][ T27] audit: type=1326 audit(43.930:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 43.965721][ T27] audit: type=1326 audit(43.930:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.064384][ T27] audit: type=1326 audit(43.930:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.141443][ T27] audit: type=1326 audit(43.930:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.145521][ T27] audit: type=1326 audit(43.930:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.149505][ T27] audit: type=1326 audit(43.930:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.188687][ T27] audit: type=1326 audit(43.930:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.196297][ T27] audit: type=1326 audit(43.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4555 comm="syz.4.28" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e97a168 code=0x7ffc0000 [ 44.206758][ T4564] loop1: detected capacity change from 0 to 512 [ 44.446674][ T4568] loop0: detected capacity change from 0 to 4096 [ 44.539489][ T4568] ntfs3: loop0: failed to replay log file. Can't mount rw! [ 44.576787][ T4572] loop2: detected capacity change from 0 to 512 [ 44.599785][ T4572] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 44.601706][ T4320] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.687900][ T4572] EXT2-fs (loop2): error: ext2_valid_block_bitmap: Invalid block bitmap - block_group = 0, block = 252 [ 44.703230][ T4564] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.719454][ T4564] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.30: inode has both inline data and extents flags [ 44.722280][ T4564] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.30: couldn't read orphan inode 15 (err -117) [ 44.725159][ T4564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.211280][ T4587] loop0: detected capacity change from 0 to 2048 [ 46.321085][ T4592] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 46.865913][ T4587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 47.057338][ T4602] loop2: detected capacity change from 0 to 128 [ 47.280085][ T4604] capability: warning: `syz.4.36' uses deprecated v2 capabilities in a way that may be insecure [ 47.289871][ T4604] loop4: detected capacity change from 0 to 8 [ 47.343905][ T4602] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 47.358268][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 48.475287][ T4345] Bluetooth: hci0: failed to read key size for handle 200 [ 48.587501][ T4414] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 50.145749][ T4648] loop2: detected capacity change from 0 to 512 [ 50.178891][ T4650] loop3: detected capacity change from 0 to 32768 [ 50.486916][ T4650] XFS (loop3): Mounting V5 Filesystem [ 50.497341][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.500879][ T4665] device bridge1 entered promiscuous mode [ 50.505577][ T4665] team0: Port device bridge1 added [ 50.517197][ T4650] XFS (loop3): Ending clean mount [ 50.519705][ T4650] XFS (loop3): Quotacheck needed: Please wait. [ 50.560095][ T4665] bridge0: port 3(team0) entered blocking state [ 50.561493][ T4665] bridge0: port 3(team0) entered disabled state [ 50.567513][ T4665] device team0 entered promiscuous mode [ 50.569141][ T4665] device team_slave_0 entered promiscuous mode [ 50.573244][ T4665] device team_slave_1 entered promiscuous mode [ 50.577891][ T4665] bridge0: port 3(team0) entered blocking state [ 50.579195][ T4665] bridge0: port 3(team0) entered forwarding state [ 50.607954][ T4650] XFS (loop3): Quotacheck: Done. [ 52.080813][ T4670] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.49: iget: bad i_size value: 2533274857506816 [ 52.193346][ T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 52.199798][ T4328] XFS (loop3): Unmounting Filesystem [ 52.256363][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 52.635014][ T4683] loop2: detected capacity change from 0 to 256 [ 52.647355][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.650452][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 52.651996][ T4683] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 52.655962][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.657680][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.661585][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 52.663081][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.674977][ T7] usb 1-1: Product: syz [ 52.675924][ T7] usb 1-1: Manufacturer: syz [ 52.676848][ T7] usb 1-1: SerialNumber: syz [ 53.750347][ T4698] NILFS (nullb0): couldn't find nilfs on the device [ 54.130380][ T4702] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 54.224919][ T4707] loop4: detected capacity change from 0 to 2048 [ 54.257231][ T4708] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.650518][ T4707] sctp: failed to load transform for md5: -2 [ 55.853440][ T4733] loop1: detected capacity change from 0 to 512 [ 55.856847][ T4733] ext4: Unknown parameter 'nouser_xattr' [ 56.147744][ T4734] loop2: detected capacity change from 0 to 16 [ 57.008394][ T7] usb 1-1: 0:1 : does not exist [ 57.016704][ T4734] erofs: (device loop2): mounted with root inode @ nid 36. [ 57.380579][ T7] usb 1-1: USB disconnect, device number 2 [ 58.353289][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.360379][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.362070][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.547433][ T4749] Zero length message leads to an empty skb [ 58.671543][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 58.994037][ T4760] loop4: detected capacity change from 0 to 512 [ 59.015962][ T4766] loop2: detected capacity change from 0 to 512 [ 59.017498][ T4760] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.022050][ T4766] EXT4-fs (loop2): Test dummy encryption mode enabled [ 59.026914][ T4760] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.70: inode has both inline data and extents flags [ 59.029851][ T4760] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.70: couldn't read orphan inode 15 (err -117) [ 59.036688][ T4760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.040739][ T4766] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.72: inode has both inline data and extents flags [ 59.044511][ T4766] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.72: couldn't read orphan inode 15 (err -117) [ 59.052788][ T4766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 59.611775][ T4775] overlayfs: failed to resolve './file0': -2 [ 60.833679][ T4780] overlayfs: missing 'workdir' [ 60.933671][ T4781] overlayfs: missing 'lowerdir' [ 61.512543][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 61.528770][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 64.272508][ T27] audit: type=1326 audit(64.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.479393][ T27] audit: type=1326 audit(64.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.508090][ T27] audit: type=1326 audit(64.230:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.511947][ T27] audit: type=1326 audit(64.230:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.669701][ T4800] Set syz1 is full, maxelem 65536 reached [ 64.809252][ T27] audit: type=1326 audit(64.230:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.813186][ T27] audit: type=1326 audit(64.240:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.817722][ T27] audit: type=1326 audit(64.240:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.822296][ T27] audit: type=1326 audit(64.240:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.830033][ T27] audit: type=1326 audit(64.240:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.835047][ T27] audit: type=1326 audit(64.240:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4815 comm="syz.0.81" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb7a168 code=0x7ffc0000 [ 64.844931][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.846107][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.211595][ T4832] loop2: detected capacity change from 0 to 1764 [ 65.222588][ T4832] isofs_fill_super: bread failed, dev=loop2, iso_blknum=4055, block=4055 [ 65.896856][ T4842] Soft offlining pfn 0x13c9f9 at process virtual address 0x20ff9000 [ 66.549413][ T4846] loop0: detected capacity change from 0 to 17 [ 66.754109][ T4846] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 66.836418][ T4842] Memory failure: 0x13c9f9: unhandlable page. [ 66.857798][ T4318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.179879][ T4320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.618458][ T3435] cfg80211: failed to load regulatory.db [ 70.003526][ T4861] UDC core: g1: couldn't find an available UDC or it's busy [ 71.743157][ T4886] loop4: detected capacity change from 0 to 512 [ 71.867429][ T4886] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.98: Unrecognised inode hash code 255 [ 71.869755][ T4886] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.98: Corrupt directory, running e2fsck is recommended [ 71.882371][ T4886] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 71.890468][ T4886] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.98: corrupted in-inode xattr [ 71.902691][ T4886] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.98: couldn't read orphan inode 15 (err -117) [ 71.906495][ T4886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.105305][ T4906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.159117][ T4907] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.98: Unrecognised inode hash code 255 [ 73.161098][ T4907] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.98: Corrupt directory, running e2fsck is recommended [ 73.164929][ T4907] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.98: path /24/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 73.783651][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 75.051728][ T4924] netlink: 592 bytes leftover after parsing attributes in process `syz.3.107'. [ 75.647062][ T4929] loop3: detected capacity change from 0 to 1024 [ 75.850705][ T4937] overlayfs: failed to clone upperpath [ 76.267334][ T4929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.894708][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 77.408043][ T4951] infiniband syz2: set down [ 77.408886][ T4951] infiniband syz2: added ipvlan0 [ 77.972225][ T4951] RDS/IB: syz2: added [ 77.973138][ T4951] smc: adding ib device syz2 with port count 1 [ 77.974298][ T4951] smc: ib device syz2 port 1 has pnetid [ 78.698498][ T4964] loop3: detected capacity change from 0 to 256 [ 78.717854][ T4964] FAT-fs (loop3): Directory bread(block 64) failed [ 78.719645][ T4964] FAT-fs (loop3): Directory bread(block 65) failed [ 78.720912][ T4964] FAT-fs (loop3): Directory bread(block 66) failed [ 78.722153][ T4964] FAT-fs (loop3): Directory bread(block 67) failed [ 78.723329][ T4964] FAT-fs (loop3): Directory bread(block 68) failed [ 78.727922][ T4964] FAT-fs (loop3): Directory bread(block 69) failed [ 78.729321][ T4964] FAT-fs (loop3): Directory bread(block 70) failed [ 78.730539][ T4964] FAT-fs (loop3): Directory bread(block 71) failed [ 78.731926][ T4964] FAT-fs (loop3): Directory bread(block 72) failed [ 78.733201][ T4964] FAT-fs (loop3): Directory bread(block 73) failed [ 80.492941][ T4974] sctp: failed to load transform for md5: -2 [ 80.668538][ T4986] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 81.849030][ T5004] loop0: detected capacity change from 0 to 512 [ 81.861462][ T5004] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 81.890580][ T5004] EXT2-fs (loop0): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 82.205799][ T5010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.216258][ T5009] overlayfs: failed to clone upperpath [ 82.236976][ T5009] Soft offlining pfn 0x13c9f9 at process virtual address 0x20ff9000 [ 82.240075][ T5009] Memory failure: 0x13c9f9: unhandlable page. [ 82.984980][ T5021] loop0: detected capacity change from 0 to 32768 [ 83.032512][ T27] kauditd_printk_skb: 99 callbacks suppressed [ 83.032561][ T27] audit: type=1326 audit(82.990:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.045879][ T27] audit: type=1326 audit(83.000:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.108941][ T27] audit: type=1326 audit(83.000:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.221507][ T27] audit: type=1326 audit(83.000:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.246015][ T27] audit: type=1326 audit(83.000:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.252374][ T27] audit: type=1326 audit(83.000:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.254924][ T5025] loop4: detected capacity change from 0 to 2048 [ 83.266342][ T5021] read_mapping_page failed! [ 83.267221][ T5021] ERROR: (device loop0): txAbort: [ 83.267221][ T5021] [ 83.276403][ T27] audit: type=1326 audit(83.000:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.290767][ T27] audit: type=1326 audit(83.000:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.303515][ T27] audit: type=1326 audit(83.000:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.313524][ T27] audit: type=1326 audit(83.000:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5017 comm="syz.1.129" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9157a168 code=0x7ffc0000 [ 83.345365][ T5025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.485646][ T5030] syz.0.139 uses obsolete (PF_INET,SOCK_PACKET) [ 83.785555][ T5030] jfs_strtoUCS: char2uni returned -22. [ 83.796642][ T5030] charset = iso8859-3, char = 0xbe [ 85.614773][ T5041] loop4: detected capacity change from 0 to 4096 [ 85.622693][ T5041] ntfs3: loop4: failed to replay log file. Can't mount rw! [ 85.759664][ T4320] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.591063][ T5058] loop3: detected capacity change from 0 to 8192 [ 89.191893][ T5087] loop0: detected capacity change from 0 to 1024 [ 89.193568][ T5087] EXT4-fs: Ignoring removed bh option [ 89.194598][ T5087] EXT4-fs: Ignoring removed oldalloc option [ 89.195682][ T5087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.217905][ T5058] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 89.239061][ T5058] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 89.275259][ T5087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.291624][ T5058] REISERFS (device loop3): using ordered data mode [ 89.293284][ T5058] reiserfs: using flush barriers [ 89.488001][ T5087] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 89.489798][ T5087] System zones: 0-1, 3-36 [ 89.603097][ T5087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 90.007503][ T5058] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.031962][ T5058] REISERFS (device loop3): checking transaction log (loop3) [ 90.134594][ T5058] REISERFS (device loop3): Using r5 hash to sort names [ 90.136808][ T5058] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 90.434940][ T5101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 90.946659][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 91.089098][ T5107] loop4: detected capacity change from 0 to 32768 [ 91.109979][ T5108] loop0: detected capacity change from 0 to 256 [ 91.136758][ T5107] read_mapping_page failed! [ 91.137518][ T5107] ERROR: (device loop4): txAbort: [ 91.137518][ T5107] [ 91.479435][ T5114] jfs_strtoUCS: char2uni returned -22. [ 91.480506][ T5114] charset = iso8859-3, char = 0xbe [ 91.772996][ T5108] FAT-fs (loop0): Directory bread(block 64) failed [ 91.780754][ T5108] FAT-fs (loop0): Directory bread(block 65) failed [ 91.783196][ T5108] FAT-fs (loop0): Directory bread(block 66) failed [ 91.787260][ T5108] FAT-fs (loop0): Directory bread(block 67) failed [ 91.788461][ T5108] FAT-fs (loop0): Directory bread(block 68) failed [ 91.790866][ T5108] FAT-fs (loop0): Directory bread(block 69) failed [ 91.793266][ T5108] FAT-fs (loop0): Directory bread(block 70) failed [ 91.797145][ T5108] FAT-fs (loop0): Directory bread(block 71) failed [ 91.798406][ T5108] FAT-fs (loop0): Directory bread(block 72) failed [ 91.800487][ T5108] FAT-fs (loop0): Directory bread(block 73) failed [ 93.805508][ T5138] loop3: detected capacity change from 0 to 512 [ 93.809009][ T5138] ext4: Unknown parameter 'nouser_xattr' [ 95.123315][ T5150] loop4: detected capacity change from 0 to 1024 [ 95.125203][ T5150] EXT4-fs: Ignoring removed i_version option [ 96.016221][ T5150] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.017948][ T5150] EXT4-fs (loop4): Test dummy encryption mode enabled [ 96.702655][ T5150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.122258][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 98.023744][ T4345] Bluetooth: hci3: failed to read key size for handle 200 [ 98.130291][ T5178] loop4: detected capacity change from 0 to 1024 [ 98.131937][ T5178] EXT4-fs: Ignoring removed bh option [ 98.133004][ T5178] EXT4-fs: Ignoring removed oldalloc option [ 98.134231][ T5178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.148078][ T5178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 98.504993][ T5178] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 98.506630][ T5178] System zones: 0-1, 3-36 [ 98.512083][ T5178] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.880914][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 101.309211][ T5224] loop0: detected capacity change from 0 to 512 [ 101.312842][ T5224] ext4: Unknown parameter 'nouser_xattr' [ 101.547147][ T5223] loop3: detected capacity change from 0 to 1024 [ 101.548839][ T5223] EXT4-fs: Ignoring removed i_version option [ 102.183573][ T5223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.185240][ T5223] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.960451][ T5223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.776719][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 107.072420][ T5283] loop4: detected capacity change from 0 to 128 [ 107.657614][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.736902][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.742234][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.746637][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.748264][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 107.750030][ T4853] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.081161][ T5305] loop3: detected capacity change from 0 to 256 [ 109.399086][ T4341] Bluetooth: hci5: command 0x1003 tx timeout [ 109.400778][ T4345] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.768390][ T5320] loop0: detected capacity change from 0 to 512 [ 110.807385][ T5320] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.199: inode has both inline data and extents flags [ 110.812525][ T5320] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 110.815455][ T5320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.546967][ T5332] loop3: detected capacity change from 0 to 2048 [ 112.604086][ T5332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.607127][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 116.463254][ T5389] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 116.469077][ T5389] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.645522][ T5406] loop4: detected capacity change from 0 to 256 [ 117.029684][ T5406] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 117.637126][ T5424] block nbd4: NBD_DISCONNECT [ 119.387751][ T5438] loop3: detected capacity change from 0 to 32768 [ 119.661698][ T5438] XFS (loop3): Mounting V5 Filesystem [ 119.728724][ T5438] XFS (loop3): Ending clean mount [ 119.731257][ T5438] XFS (loop3): Quotacheck needed: Please wait. [ 119.742772][ T5442] loop0: detected capacity change from 0 to 2048 [ 119.797287][ T5442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.827935][ T5438] XFS (loop3): Quotacheck: Done. [ 121.836173][ T4328] XFS (loop3): Unmounting Filesystem [ 121.887056][ T5482] 9pnet_fd: Insufficient options for proto=fd [ 122.148819][ T5485] kAFS: unable to lookup cell '.yz1' [ 122.573623][ T5489] loop4: detected capacity change from 0 to 256 [ 122.611325][ T5489] FAT-fs (loop4): Directory bread(block 64) failed [ 122.616020][ T5489] FAT-fs (loop4): Directory bread(block 65) failed [ 122.619628][ T5489] FAT-fs (loop4): Directory bread(block 66) failed [ 122.620984][ T5489] FAT-fs (loop4): Directory bread(block 67) failed [ 122.631736][ T5489] FAT-fs (loop4): Directory bread(block 68) failed [ 122.637254][ T5489] FAT-fs (loop4): Directory bread(block 69) failed [ 122.640691][ T5489] FAT-fs (loop4): Directory bread(block 70) failed [ 122.644857][ T5481] loop0: detected capacity change from 0 to 32768 [ 122.650461][ T5489] FAT-fs (loop4): Directory bread(block 71) failed [ 122.653305][ T5489] FAT-fs (loop4): Directory bread(block 72) failed [ 122.662358][ T5489] FAT-fs (loop4): Directory bread(block 73) failed [ 122.740839][ T5496] loop3: detected capacity change from 0 to 256 [ 122.782686][ T5496] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 122.827762][ T5481] XFS (loop0): Mounting V5 Filesystem [ 123.179306][ T5481] XFS (loop0): Ending clean mount [ 123.192352][ T5481] XFS (loop0): Quotacheck needed: Please wait. [ 123.922944][ T5481] XFS (loop0): Quotacheck: Done. [ 124.903439][ T5534] rdma_rxe: rxe_register_device failed with error -23 [ 124.906032][ T5534] rdma_rxe: failed to add ipvlan0 [ 126.336511][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.342092][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.853233][ T5545] loop4: detected capacity change from 0 to 4096 [ 126.872727][ T5545] EXT4-fs: inline encryption not supported [ 126.990521][ T5545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.992167][ T5545] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.111249][ T5545] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 127.112830][ T5545] System zones: 0-5 [ 127.147068][ T5545] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.250333][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 127.332130][ T5558] loop3: detected capacity change from 0 to 2048 [ 127.348731][ T5558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.378343][ T5557] loop4: detected capacity change from 0 to 4096 [ 127.389038][ T5557] __ntfs_warning: 164 callbacks suppressed [ 127.389047][ T5557] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 127.422193][ T5557] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 127.433907][ T5557] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 127.435481][ T5557] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 127.439073][ T5557] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 127.440481][ T5557] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 127.457622][ T5557] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 127.459350][ T5557] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 127.463061][ T5557] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 127.465361][ T5557] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 127.848846][ T5557] ntfs: volume version 3.1. [ 127.877458][ T4333] XFS (loop0): Unmounting Filesystem [ 128.491874][ T5580] Invalid ELF header magic: != ELF [ 128.811261][ T5582] loop4: detected capacity change from 0 to 32768 [ 128.903702][ T5582] XFS (loop4): Mounting V5 Filesystem [ 128.921750][ T5582] XFS (loop4): Ending clean mount [ 129.191862][ T5603] futex_wake_op: syz.2.269 tries to shift op by 144; fix this program [ 129.507535][ T5582] XFS (loop4): Quotacheck needed: Please wait. [ 129.587878][ T5599] loop0: detected capacity change from 0 to 2048 [ 129.608484][ T5582] XFS (loop4): Quotacheck: Done. [ 129.706557][ T5599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.036381][ T4340] XFS (loop4): Unmounting Filesystem [ 130.483678][ T5624] loop4: detected capacity change from 0 to 2048 [ 130.508433][ T5624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.276865][ T5643] loop4: detected capacity change from 0 to 1024 [ 132.301550][ T5643] EXT4-fs: Ignoring removed i_version option [ 132.309700][ T5643] EXT4-fs: Ignoring removed bh option [ 132.376646][ T5643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.727662][ T5643] 9pnet_fd: Insufficient options for proto=fd [ 133.477310][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 133.552752][ T5658] loop4: detected capacity change from 0 to 2048 [ 133.565321][ T5658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.396756][ T5663] loop3: detected capacity change from 0 to 2048 [ 134.440223][ T5663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.795725][ T5680] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 134.840663][ T5679] loop4: detected capacity change from 0 to 512 [ 134.866789][ T5680] capability: warning: `syz.1.290' uses 32-bit capabilities (legacy support in use) [ 134.888721][ T5679] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.289: inode has both inline data and extents flags [ 134.891629][ T5679] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.289: couldn't read orphan inode 15 (err -117) [ 134.916111][ T5679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.389632][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 136.673739][ T5708] loop0: detected capacity change from 0 to 4096 [ 136.818892][ T5708] __ntfs_error: 9 callbacks suppressed [ 136.818910][ T5708] ntfs: (device loop0): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 136.821871][ T5708] ntfs: (device loop0): ntfs_fill_super(): Unsupported NTFS filesystem. [ 136.886037][ T5714] loop3: detected capacity change from 0 to 2048 [ 136.891759][ T5714] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.923669][ T5704] 9pnet_fd: Insufficient options for proto=fd [ 137.389245][ T5725] futex_wake_op: syz.0.298 tries to shift op by 144; fix this program [ 137.743115][ T5712] loop4: detected capacity change from 0 to 32768 [ 137.871031][ T5732] loop3: detected capacity change from 0 to 2048 [ 137.893165][ T5712] XFS (loop4): Mounting V5 Filesystem [ 137.920178][ T5712] XFS (loop4): Ending clean mount [ 137.922675][ T5712] XFS (loop4): Quotacheck needed: Please wait. [ 137.954297][ T5732] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.966323][ T5712] XFS (loop4): Quotacheck: Done. [ 139.797574][ T5764] block nbd0: NBD_DISCONNECT [ 141.396448][ T4340] XFS (loop4): Unmounting Filesystem [ 142.349081][ T5807] loop3: detected capacity change from 0 to 512 [ 142.363813][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.319: inode has both inline data and extents flags [ 142.373548][ T5807] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.319: couldn't read orphan inode 15 (err -117) [ 142.375835][ T5807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.605436][ T5815] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 142.614229][ T27] audit: type=1107 audit(142.580:294): pid=5808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 143.887696][ T5816] device veth1_macvtap left promiscuous mode [ 143.925167][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 143.951122][ T5830] loop0: detected capacity change from 0 to 2048 [ 144.090081][ T5833] Invalid ELF header magic: != ELF [ 144.385618][ T5830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.445303][ T5837] loop3: detected capacity change from 0 to 32768 [ 144.465204][ T5837] XFS (loop3): Mounting V5 Filesystem [ 144.486358][ T5837] XFS (loop3): Ending clean mount [ 144.489928][ T5837] XFS (loop3): Quotacheck needed: Please wait. [ 144.826499][ T5837] XFS (loop3): Quotacheck: Done. [ 144.931776][ T5854] 9pnet_fd: Insufficient options for proto=fd [ 145.446304][ T4328] XFS (loop3): Unmounting Filesystem [ 145.889576][ T5868] loop0: detected capacity change from 0 to 1024 [ 145.901880][ T5868] EXT4-fs: Ignoring removed i_version option [ 145.915980][ T5868] EXT4-fs: Ignoring removed bh option [ 146.012846][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 146.047577][ T5868] 9pnet_fd: Insufficient options for proto=fd [ 146.391776][ T5885] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 146.649109][ T5892] loop3: detected capacity change from 0 to 2048 [ 146.668718][ T5892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.860849][ T5895] block nbd4: NBD_DISCONNECT [ 147.173206][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 147.221814][ T5899] loop0: detected capacity change from 0 to 2048 [ 147.227930][ T5899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.228360][ T5917] futex_wake_op: syz.4.344 tries to shift op by 144; fix this program [ 148.808858][ T5921] 9pnet_fd: Insufficient options for proto=fd [ 149.230137][ T5934] loop0: detected capacity change from 0 to 1024 [ 149.231835][ T5934] EXT4-fs: Ignoring removed i_version option [ 149.233056][ T5934] EXT4-fs: Ignoring removed bh option [ 149.252102][ T5934] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 149.258031][ T5934] 9pnet_fd: Insufficient options for proto=fd [ 149.449905][ T5939] block nbd3: NBD_DISCONNECT [ 149.488853][ T5935] loop4: detected capacity change from 0 to 4096 [ 149.514847][ T5935] ntfs: (device loop4): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 149.516916][ T5935] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem. [ 149.617003][ T4320] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.618037][ T5946] 9pnet_fd: Insufficient options for proto=fd [ 150.087294][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 150.118854][ T5954] loop4: detected capacity change from 0 to 2048 [ 150.122663][ T5954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.146624][ T5972] fuse: Unknown parameter '00000000000000000000' [ 151.692486][ T4379] libceph: connect (1)[c::]:6789 error -101 [ 151.694429][ T4379] libceph: mon0 (1)[c::]:6789 connect error [ 151.735210][ T5970] ceph: No mds server is up or the cluster is laggy [ 152.086054][ T5985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 152.178624][ T27] audit: type=1107 audit(151.960:295): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 152.297424][ T5987] device veth1_macvtap left promiscuous mode [ 152.548084][ T4409] libceph: connect (1)[c::]:6789 error -101 [ 152.550462][ T4409] libceph: mon0 (1)[c::]:6789 connect error [ 152.989374][ T5994] loop3: detected capacity change from 0 to 2048 [ 152.993321][ T5994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.780399][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 153.781906][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 153.783017][ T4345] Bluetooth: hci3: command 0x0406 tx timeout [ 153.783032][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 153.852649][ T6011] block nbd0: NBD_DISCONNECT [ 154.201255][ T6020] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 154.412483][ T6026] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 154.977763][ T6036] block nbd0: NBD_DISCONNECT [ 155.681470][ T6049] loop0: detected capacity change from 0 to 256 [ 155.682976][ T6049] exfat: Deprecated parameter 'utf8' [ 155.988915][ T6052] device veth1_macvtap left promiscuous mode [ 156.237295][ T6049] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 157.962570][ T6077] loop3: detected capacity change from 0 to 8 [ 157.978953][ T6077] SQUASHFS error: xz decompression failed, data probably corrupt [ 157.980515][ T6077] SQUASHFS error: Failed to read block 0x108: -5 [ 157.981558][ T6077] SQUASHFS error: Unable to read metadata cache entry [106] [ 157.982788][ T6077] SQUASHFS error: Unable to read inode 0x11f [ 158.037026][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.305581][ T6085] 9pnet_fd: Insufficient options for proto=fd [ 158.610085][ T6096] block nbd3: NBD_DISCONNECT [ 158.701299][ T6099] fuse: Unknown parameter '00000000000000000000' [ 158.796566][ T4409] libceph: connect (1)[c::]:6789 error -101 [ 158.798160][ T4409] libceph: mon0 (1)[c::]:6789 connect error [ 159.055544][ T4409] libceph: connect (1)[c::]:6789 error -101 [ 159.057215][ T4409] libceph: mon0 (1)[c::]:6789 connect error [ 159.089370][ T6097] ceph: No mds server is up or the cluster is laggy [ 159.374832][ T6109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.400'. [ 160.441053][ T6112] loop4: detected capacity change from 0 to 256 [ 161.013267][ T6116] loop3: detected capacity change from 0 to 128 [ 162.512018][ T6116] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.527946][ T6116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 162.529476][ T6116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 162.829171][ T6127] usb usb8: usbfs: process 6127 (syz.3.391) did not claim interface 0 before use [ 163.727216][ T6136] autofs4:pid:6136:autofs_fill_super: called with bogus options [ 163.742558][ T6131] 9pnet_fd: Insufficient options for proto=fd [ 163.824054][ T6136] loop0: detected capacity change from 0 to 32768 [ 163.847441][ T6136] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.407 (6136) [ 164.039341][ T6136] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 164.041441][ T6136] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 164.042898][ T6136] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 164.044575][ T6136] BTRFS info (device loop0): use zstd compression, level 3 [ 164.045670][ T6136] BTRFS info (device loop0): force clearing of disk cache [ 164.046835][ T6136] BTRFS info (device loop0): enabling disk space caching [ 164.047993][ T6136] BTRFS info (device loop0): disk space caching is enabled [ 164.189385][ T6155] futex_wake_op: syz.3.395 tries to shift op by 144; fix this program [ 164.479620][ T6136] BTRFS info (device loop0): enabling ssd optimizations [ 164.482915][ T6136] BTRFS info (device loop0): rebuilding free space tree [ 164.497562][ T6136] BTRFS info (device loop0): disabling free space tree [ 164.498949][ T6136] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.500599][ T6136] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.833737][ T6173] block nbd4: NBD_DISCONNECT [ 164.966193][ T6169] 9pnet_fd: Insufficient options for proto=fd [ 165.066300][ T4333] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 165.727741][ T6178] overlayfs: failed to clone upperpath [ 168.933515][ T6210] fuse: Unknown parameter '00000000000000000000' [ 169.229867][ T6213] 9pnet_fd: Insufficient options for proto=fd [ 169.235128][ T6217] loop4: detected capacity change from 0 to 2048 [ 169.242740][ T6217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.337650][ T6237] loop0: detected capacity change from 0 to 512 [ 170.676376][ T6237] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.419: inode has both inline data and extents flags [ 170.679343][ T6237] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.419: couldn't read orphan inode 15 (err -117) [ 170.681996][ T6237] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 171.075579][ T6250] loop4: detected capacity change from 0 to 2048 [ 171.088068][ T6250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.971476][ T6270] tmpfs: Bad value for 'nr_inodes' [ 173.003799][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 173.502250][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.098345][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.100660][ T6280] loop3: detected capacity change from 0 to 1024 [ 174.103338][ T6280] EXT4-fs: Ignoring removed i_version option [ 174.105060][ T6280] EXT4-fs: Ignoring removed bh option [ 174.179022][ T6280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.196092][ T6283] 9pnet_fd: Insufficient options for proto=fd [ 174.206278][ T6280] 9pnet_fd: Insufficient options for proto=fd [ 174.787334][ T6298] loop4: detected capacity change from 0 to 2048 [ 174.832845][ T6298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.232187][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 176.073680][ T6317] xt_hashlimit: size too large, truncated to 1048576 [ 177.886685][ T4345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 177.888422][ T4345] CPU: 0 PID: 4345 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 177.889494][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 177.890996][ T4345] Workqueue: hci1 hci_rx_work [ 177.891826][ T4345] Call trace: [ 177.892406][ T4345] dump_backtrace+0x1c4/0x1f0 [ 177.893147][ T4345] show_stack+0x2c/0x3c [ 177.893845][ T4345] __dump_stack+0x30/0x40 [ 177.894666][ T4345] dump_stack_lvl+0xf4/0x15c [ 177.895491][ T4345] dump_stack+0x1c/0x5c [ 177.896234][ T4345] sysfs_create_dir_ns+0x244/0x264 [ 177.897135][ T4345] kobject_add_internal+0x5a8/0xb18 [ 177.898025][ T4345] kobject_add+0x144/0x20c [ 177.898812][ T4345] device_add+0x3dc/0xe4c [ 177.899588][ T4345] hci_conn_add_sysfs+0xb8/0x1bc [ 177.900469][ T4345] le_conn_complete_evt+0xd3c/0x1300 [ 177.901409][ T4345] hci_le_conn_complete_evt+0x114/0x3b8 [ 177.902401][ T4345] hci_le_meta_evt+0x2c0/0x4a8 [ 177.903264][ T4345] hci_event_packet+0x64c/0xe60 [ 177.904099][ T4345] hci_rx_work+0x320/0xa94 [ 177.904886][ T4345] process_one_work+0x7e4/0x13bc [ 177.905779][ T4345] worker_thread+0x8cc/0xfe8 [ 177.906817][ T4345] kthread+0x254/0x2e0 [ 177.907574][ T4345] ret_from_fork+0x10/0x20 [ 177.911135][ T4345] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 177.913279][ T4345] Bluetooth: hci1: failed to register connection device [ 178.198464][ T6343] loop3: detected capacity change from 0 to 1024 [ 178.199996][ T6343] EXT4-fs: Ignoring removed i_version option [ 178.201051][ T6343] EXT4-fs: Ignoring removed bh option [ 178.208754][ T6346] loop4: detected capacity change from 0 to 1024 [ 178.210664][ T6346] EXT4-fs: Ignoring removed i_version option [ 178.212038][ T6346] EXT4-fs: Ignoring removed bh option [ 178.220018][ T6343] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 178.239227][ T6343] 9pnet_fd: Insufficient options for proto=fd [ 179.234109][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 179.262399][ T6360] loop0: detected capacity change from 0 to 1024 [ 179.285278][ T6360] EXT4-fs: Ignoring removed i_version option [ 179.286400][ T6360] EXT4-fs: Ignoring removed bh option [ 179.296411][ T6346] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.308191][ T6346] 9pnet_fd: Insufficient options for proto=fd [ 180.348401][ T6360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 180.351209][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 180.385340][ T6360] 9pnet_fd: Insufficient options for proto=fd [ 180.965145][ T6393] autofs4:pid:6393:autofs_fill_super: called with bogus options [ 181.051199][ T6393] loop4: detected capacity change from 0 to 32768 [ 181.058499][ T6393] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.450 (6393) [ 181.063135][ T6393] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 181.065158][ T6393] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 181.066651][ T6393] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 181.068134][ T6393] BTRFS info (device loop4): use zstd compression, level 3 [ 181.069533][ T6393] BTRFS info (device loop4): force clearing of disk cache [ 181.070759][ T6393] BTRFS info (device loop4): enabling disk space caching [ 181.071953][ T6393] BTRFS info (device loop4): disk space caching is enabled [ 182.007865][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 182.278175][ T6403] fuse: Unknown parameter '00000000000000000000' [ 182.475867][ T6412] tmpfs: Bad value for 'nr_inodes' [ 182.483115][ T6412] loop3: detected capacity change from 0 to 1024 [ 182.811362][ T6412] EXT4-fs: Ignoring removed nobh option [ 182.814431][ T6412] EXT4-fs: Ignoring removed orlov option [ 182.816392][ T6412] ext4: Unknown parameter 'measure' [ 183.247723][ T6432] overlayfs: failed to clone upperpath [ 184.057461][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 184.859610][ T6393] BTRFS error (device loop4): open_ctree failed: -12 [ 185.197758][ T6454] block nbd0: NBD_DISCONNECT [ 185.227787][ T4345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 185.229935][ T4345] CPU: 1 PID: 4345 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 185.231220][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 185.232920][ T4345] Workqueue: hci2 hci_rx_work [ 185.233763][ T4345] Call trace: [ 185.234301][ T4345] dump_backtrace+0x1c4/0x1f0 [ 185.235081][ T4345] show_stack+0x2c/0x3c [ 185.235823][ T4345] __dump_stack+0x30/0x40 [ 185.236606][ T4345] dump_stack_lvl+0xf4/0x15c [ 185.237447][ T4345] dump_stack+0x1c/0x5c [ 185.238207][ T4345] sysfs_create_dir_ns+0x244/0x264 [ 185.239128][ T4345] kobject_add_internal+0x5a8/0xb18 [ 185.240044][ T4345] kobject_add+0x144/0x20c [ 185.240820][ T4345] device_add+0x3dc/0xe4c [ 185.241599][ T4345] hci_conn_add_sysfs+0xb8/0x1bc [ 185.242469][ T4345] le_conn_complete_evt+0xd3c/0x1300 [ 185.243384][ T4345] hci_le_conn_complete_evt+0x114/0x3b8 [ 185.244435][ T4345] hci_le_meta_evt+0x2c0/0x4a8 [ 185.245277][ T4345] hci_event_packet+0x64c/0xe60 [ 185.246077][ T4345] hci_rx_work+0x320/0xa94 [ 185.246863][ T4345] process_one_work+0x7e4/0x13bc [ 185.247721][ T4345] worker_thread+0x8cc/0xfe8 [ 185.248530][ T4345] kthread+0x254/0x2e0 [ 185.249284][ T4345] ret_from_fork+0x10/0x20 [ 185.254079][ T4345] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 185.257355][ T4345] Bluetooth: hci2: failed to register connection device [ 185.391030][ T6463] loop3: detected capacity change from 0 to 1024 [ 185.391833][ T6460] loop4: detected capacity change from 0 to 2048 [ 185.399937][ T6460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.406272][ T6463] EXT4-fs: Ignoring removed i_version option [ 185.407470][ T6463] EXT4-fs: Ignoring removed bh option [ 185.837025][ T6463] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.842815][ T6463] 9pnet_fd: Insufficient options for proto=fd [ 186.508723][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 186.539255][ T6480] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 186.588545][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 186.922668][ T6484] 9pnet_fd: Insufficient options for proto=fd [ 186.926328][ T6484] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 186.927756][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.468'. [ 187.535235][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.536971][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.799254][ T6484] team0: Port device geneve0 added [ 188.139848][ T6514] loop0: detected capacity change from 0 to 1024 [ 188.144341][ T6514] EXT4-fs: Ignoring removed i_version option [ 188.145413][ T6514] EXT4-fs: Ignoring removed bh option [ 188.552765][ T4345] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 188.554766][ T4345] CPU: 1 PID: 4345 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 188.556028][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 188.557757][ T4345] Workqueue: hci4 hci_rx_work [ 188.558596][ T4345] Call trace: [ 188.559154][ T4345] dump_backtrace+0x1c4/0x1f0 [ 188.559976][ T4345] show_stack+0x2c/0x3c [ 188.560686][ T4345] __dump_stack+0x30/0x40 [ 188.561455][ T4345] dump_stack_lvl+0xf4/0x15c [ 188.562260][ T4345] dump_stack+0x1c/0x5c [ 188.562986][ T4345] sysfs_create_dir_ns+0x244/0x264 [ 188.563864][ T4345] kobject_add_internal+0x5a8/0xb18 [ 188.564754][ T4345] kobject_add+0x144/0x20c [ 188.565539][ T4345] device_add+0x3dc/0xe4c [ 188.566284][ T4345] hci_conn_add_sysfs+0xb8/0x1bc [ 188.567147][ T4345] le_conn_complete_evt+0xd3c/0x1300 [ 188.568079][ T4345] hci_le_conn_complete_evt+0x114/0x3b8 [ 188.569063][ T4345] hci_le_meta_evt+0x2c0/0x4a8 [ 188.569876][ T4345] hci_event_packet+0x64c/0xe60 [ 188.570690][ T4345] hci_rx_work+0x320/0xa94 [ 188.571399][ T4345] process_one_work+0x7e4/0x13bc [ 188.572216][ T4345] worker_thread+0x8cc/0xfe8 [ 188.572992][ T4345] kthread+0x254/0x2e0 [ 188.573708][ T4345] ret_from_fork+0x10/0x20 [ 188.577091][ T4345] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 188.579912][ T4345] Bluetooth: hci4: failed to register connection device [ 188.795550][ T6514] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 188.804917][ T6514] 9pnet_fd: Insufficient options for proto=fd [ 189.237886][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 189.246022][ T6536] loop4: detected capacity change from 0 to 1024 [ 189.247502][ T6536] EXT4-fs: Ignoring removed i_version option [ 189.248948][ T6536] EXT4-fs: Ignoring removed bh option [ 189.259818][ T6534] loop3: detected capacity change from 0 to 2048 [ 189.275812][ T6534] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.375736][ T6542] netlink: 68 bytes leftover after parsing attributes in process `syz.1.482'. [ 190.254457][ T6550] tmpfs: Bad value for 'nr_inodes' [ 190.287581][ T6536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.655585][ T6557] 9pnet_fd: Insufficient options for proto=fd [ 191.144984][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 191.247239][ T6570] loop4: detected capacity change from 0 to 2048 [ 191.517414][ T6570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.353197][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 192.671668][ T6595] block nbd4: NBD_DISCONNECT [ 192.973332][ T6601] xt_hashlimit: size too large, truncated to 1048576 [ 194.973409][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 194.996784][ T6610] 9pnet_fd: Insufficient options for proto=fd [ 195.377719][ T6614] zram0: detected capacity change from 0 to 8 [ 197.348438][ T6633] loop0: detected capacity change from 0 to 2048 [ 197.365756][ T6633] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.536840][ T6645] block nbd3: NBD_DISCONNECT [ 197.819647][ T6647] 9pnet_fd: Insufficient options for proto=fd [ 199.949014][ T6682] loop3: detected capacity change from 0 to 2048 [ 199.955417][ T6684] loop0: detected capacity change from 0 to 1024 [ 199.957417][ T6684] EXT4-fs: Ignoring removed i_version option [ 199.959749][ T6684] EXT4-fs: Ignoring removed bh option [ 199.967430][ T6682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.066065][ T6684] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.070846][ T6684] 9pnet_fd: Insufficient options for proto=fd [ 201.115332][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 201.702141][ T6679] Set syz1 is full, maxelem 65536 reached [ 202.000722][ T6717] loop4: detected capacity change from 0 to 40427 [ 202.065618][ T6722] 9pnet_fd: Insufficient options for proto=fd [ 202.125306][ T6717] F2FS-fs (loop4): invalid crc value [ 202.128023][ T6717] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.139609][ T6717] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 202.359846][ T6728] block nbd3: NBD_DISCONNECT [ 203.706272][ T4340] syz-executor: attempt to access beyond end of device [ 203.706272][ T4340] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.726663][ T6745] loop3: detected capacity change from 0 to 1024 [ 203.728229][ T6745] EXT4-fs: Ignoring removed i_version option [ 203.729342][ T6745] EXT4-fs: Ignoring removed bh option [ 203.783621][ T6745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.869132][ T6745] 9pnet_fd: Insufficient options for proto=fd [ 204.177282][ T6759] loop0: detected capacity change from 0 to 1024 [ 204.185269][ T6759] EXT4-fs: Ignoring removed bh option [ 204.186744][ T6759] EXT4-fs: Ignoring removed oldalloc option [ 204.188059][ T6759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.204495][ T6759] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.265762][ T6759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 204.267408][ T6759] System zones: 0-1, 3-36 [ 204.270337][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.717446][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 205.403042][ T6770] loop4: detected capacity change from 0 to 32768 [ 205.878947][ T6770] XFS (loop4): Mounting V5 Filesystem [ 205.883082][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 206.208254][ T6770] XFS (loop4): Ending clean mount [ 206.211006][ T6770] XFS (loop4): Quotacheck needed: Please wait. [ 206.237595][ T6770] XFS (loop4): Quotacheck: Done. [ 206.385338][ T6800] netlink: 68 bytes leftover after parsing attributes in process `syz.3.540'. [ 206.818568][ T6804] 9pnet_fd: Insufficient options for proto=fd [ 206.827742][ T4340] XFS (loop4): Unmounting Filesystem [ 208.767696][ T6828] loop0: detected capacity change from 0 to 2048 [ 208.788980][ T6828] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.430496][ T6842] loop3: detected capacity change from 0 to 2048 [ 210.447707][ T6842] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.729246][ T6848] loop4: detected capacity change from 0 to 32768 [ 210.776988][ T6848] XFS (loop4): Mounting V5 Filesystem [ 211.078137][ T6848] XFS (loop4): Ending clean mount [ 211.080015][ T6848] XFS (loop4): Quotacheck needed: Please wait. [ 211.100257][ T6848] XFS (loop4): Quotacheck: Done. [ 211.522823][ T4340] XFS (loop4): Unmounting Filesystem [ 211.848894][ T6875] block nbd3: NBD_DISCONNECT [ 212.838077][ T6886] loop3: detected capacity change from 0 to 2048 [ 212.853016][ T6886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.102269][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 213.105704][ T6893] loop4: detected capacity change from 0 to 164 [ 213.107315][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 213.108642][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 213.110347][ T4330] Workqueue: hci4 hci_rx_work [ 213.111176][ T4330] Call trace: [ 213.111765][ T4330] dump_backtrace+0x1c4/0x1f0 [ 213.112565][ T4330] show_stack+0x2c/0x3c [ 213.113306][ T4330] __dump_stack+0x30/0x40 [ 213.114060][ T4330] dump_stack_lvl+0xf4/0x15c [ 213.114831][ T4330] dump_stack+0x1c/0x5c [ 213.115527][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 213.116434][ T4330] kobject_add_internal+0x5a8/0xb18 [ 213.117350][ T4330] kobject_add+0x144/0x20c [ 213.118134][ T4330] device_add+0x3dc/0xe4c [ 213.118914][ T4330] hci_conn_add_sysfs+0xb8/0x1bc [ 213.119768][ T4330] le_conn_complete_evt+0xd3c/0x1300 [ 213.120687][ T4330] hci_le_conn_complete_evt+0x114/0x3b8 [ 213.121683][ T4330] hci_le_meta_evt+0x2c0/0x4a8 [ 213.122564][ T4330] hci_event_packet+0x64c/0xe60 [ 213.123456][ T4330] hci_rx_work+0x320/0xa94 [ 213.124251][ T4330] process_one_work+0x7e4/0x13bc [ 213.125113][ T4330] worker_thread+0x8cc/0xfe8 [ 213.125932][ T4330] kthread+0x254/0x2e0 [ 213.126631][ T4330] ret_from_fork+0x10/0x20 [ 213.128060][ T4330] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 213.130480][ T4330] Bluetooth: hci4: failed to register connection device [ 213.985009][ T6911] loop3: detected capacity change from 0 to 2048 [ 214.249763][ T6911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.857562][ T6933] loop3: detected capacity change from 0 to 512 [ 214.960118][ T6933] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.571: inode has both inline data and extents flags [ 214.962892][ T6933] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 214.967796][ T6933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 215.134679][ T4330] Bluetooth: hci4: command 0x2016 tx timeout [ 215.196365][ T6944] block nbd4: NBD_DISCONNECT [ 216.488738][ T6958] loop0: detected capacity change from 0 to 2048 [ 216.517890][ T6958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.567981][ T6978] loop4: detected capacity change from 0 to 2048 [ 218.603260][ T6978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.084432][ T4345] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 221.192841][ T7018] netlink: 68 bytes leftover after parsing attributes in process `syz.1.593'. [ 221.769174][ T7027] 9pnet_fd: Insufficient options for proto=fd [ 222.250128][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 222.788111][ T7040] loop3: detected capacity change from 0 to 32768 [ 222.833540][ T7048] loop4: detected capacity change from 0 to 2048 [ 222.842625][ T7048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.851212][ T7040] XFS (loop3): Mounting V5 Filesystem [ 223.112103][ T7040] XFS (loop3): Ending clean mount [ 223.116024][ T7040] XFS (loop3): Quotacheck needed: Please wait. [ 223.159805][ T7040] XFS (loop3): Quotacheck: Done. [ 223.587522][ T4328] XFS (loop3): Unmounting Filesystem [ 224.574209][ T7086] 9pnet_fd: Insufficient options for proto=fd [ 225.021816][ T7098] loop0: detected capacity change from 0 to 32768 [ 225.263026][ T7098] XFS (loop0): Mounting V5 Filesystem [ 225.276558][ T7098] XFS (loop0): Ending clean mount [ 225.278437][ T7098] XFS (loop0): Quotacheck needed: Please wait. [ 225.338579][ T7098] XFS (loop0): Quotacheck: Done. [ 225.737770][ T7122] loop4: detected capacity change from 0 to 2048 [ 225.741976][ T7122] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.746940][ T7119] loop3: detected capacity change from 0 to 1024 [ 226.646114][ T4333] XFS (loop0): Unmounting Filesystem [ 227.073244][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 227.075265][ T4330] CPU: 0 PID: 4330 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 227.076506][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 227.078326][ T4330] Workqueue: hci3 hci_rx_work [ 227.079110][ T4330] Call trace: [ 227.079661][ T4330] dump_backtrace+0x1c4/0x1f0 [ 227.080560][ T4330] show_stack+0x2c/0x3c [ 227.081377][ T4330] __dump_stack+0x30/0x40 [ 227.082204][ T4330] dump_stack_lvl+0xf4/0x15c [ 227.083064][ T4330] dump_stack+0x1c/0x5c [ 227.083859][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 227.084838][ T4330] kobject_add_internal+0x5a8/0xb18 [ 227.085855][ T4330] kobject_add+0x144/0x20c [ 227.086711][ T4330] device_add+0x3dc/0xe4c [ 227.087466][ T4330] hci_conn_add_sysfs+0xb8/0x1bc [ 227.088342][ T4330] le_conn_complete_evt+0xd3c/0x1300 [ 227.089229][ T4330] hci_le_conn_complete_evt+0x114/0x3b8 [ 227.090154][ T4330] hci_le_meta_evt+0x2c0/0x4a8 [ 227.090988][ T4330] hci_event_packet+0x64c/0xe60 [ 227.091813][ T4330] hci_rx_work+0x320/0xa94 [ 227.092573][ T4330] process_one_work+0x7e4/0x13bc [ 227.093441][ T4330] worker_thread+0x8cc/0xfe8 [ 227.094253][ T4330] kthread+0x254/0x2e0 [ 227.094943][ T4330] ret_from_fork+0x10/0x20 [ 227.095716][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.098951][ T4330] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.101297][ T4330] Bluetooth: hci3: failed to register connection device [ 227.586359][ T7144] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 227.742886][ T7150] loop4: detected capacity change from 0 to 1024 [ 227.750014][ T7150] EXT4-fs: Ignoring removed i_version option [ 227.753559][ T7150] EXT4-fs: Ignoring removed bh option [ 227.802568][ T7150] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 227.814976][ T7150] 9pnet_fd: Insufficient options for proto=fd [ 228.140355][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 229.288119][ T4345] Bluetooth: hci3: command 0x2016 tx timeout [ 230.031252][ T7191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.636'. [ 232.010072][ T7193] loop4: detected capacity change from 0 to 1024 [ 232.010451][ T7193] EXT4-fs: Ignoring removed i_version option [ 232.010475][ T7193] EXT4-fs: Ignoring removed bh option [ 232.788890][ T7193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 232.799846][ T7193] 9pnet_fd: Insufficient options for proto=fd [ 233.009373][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 233.366164][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 234.014074][ T7235] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 238.324890][ T7282] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 240.161893][ T7307] netlink: 830 bytes leftover after parsing attributes in process `syz.4.664'. [ 240.190324][ T7308] loop3: detected capacity change from 0 to 164 [ 240.204219][ T4330] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 240.205786][ T4330] CPU: 1 PID: 4330 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 240.207024][ T4330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 240.208666][ T4330] Workqueue: hci2 hci_rx_work [ 240.209411][ T4330] Call trace: [ 240.209911][ T4330] dump_backtrace+0x1c4/0x1f0 [ 240.210613][ T4330] show_stack+0x2c/0x3c [ 240.211251][ T4330] __dump_stack+0x30/0x40 [ 240.211937][ T4330] dump_stack_lvl+0xf4/0x15c [ 240.212697][ T4330] dump_stack+0x1c/0x5c [ 240.213362][ T4330] sysfs_create_dir_ns+0x244/0x264 [ 240.214231][ T4330] kobject_add_internal+0x5a8/0xb18 [ 240.215147][ T4330] kobject_add+0x144/0x20c [ 240.215905][ T4330] device_add+0x3dc/0xe4c [ 240.216655][ T4330] hci_conn_add_sysfs+0xb8/0x1bc [ 240.217515][ T4330] le_conn_complete_evt+0xd3c/0x1300 [ 240.218375][ T4330] hci_le_conn_complete_evt+0x114/0x3b8 [ 240.219241][ T4330] hci_le_meta_evt+0x2c0/0x4a8 [ 240.220011][ T4330] hci_event_packet+0x64c/0xe60 [ 240.220819][ T4330] hci_rx_work+0x320/0xa94 [ 240.221533][ T4330] process_one_work+0x7e4/0x13bc [ 240.222362][ T4330] worker_thread+0x8cc/0xfe8 [ 240.223181][ T4330] kthread+0x254/0x2e0 [ 240.223893][ T4330] ret_from_fork+0x10/0x20 [ 240.226474][ T4330] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 240.228635][ T4330] Bluetooth: hci2: failed to register connection device [ 240.302930][ T7314] loop0: detected capacity change from 0 to 2048 [ 240.317186][ T7314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.419936][ T7318] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 240.626017][ T4318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.881581][ T7332] loop3: detected capacity change from 0 to 2048 [ 240.895231][ T7332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.109695][ T7334] block nbd4: NBD_DISCONNECT [ 241.882960][ T7348] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 241.891361][ T4330] Bluetooth: hci3: failed to read key size for handle 200 [ 242.331137][ T4330] Bluetooth: hci2: command 0x2016 tx timeout [ 242.782202][ T7371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.679'. [ 242.946326][ T7374] lo speed is unknown, defaulting to 1000 [ 242.948063][ T7374] lo speed is unknown, defaulting to 1000 [ 242.956149][ T7374] lo speed is unknown, defaulting to 1000 [ 242.966601][ T7374] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 242.981842][ T7374] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.157946][ T7374] lo speed is unknown, defaulting to 1000 [ 243.161373][ T7374] lo speed is unknown, defaulting to 1000 [ 243.164105][ T7374] lo speed is unknown, defaulting to 1000 [ 243.166062][ T7374] lo speed is unknown, defaulting to 1000 [ 243.168718][ T7374] lo speed is unknown, defaulting to 1000 [ 243.439594][ T7380] loop4: detected capacity change from 0 to 2048 [ 243.511994][ T7387] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 243.647177][ T7389] block nbd0: NBD_DISCONNECT [ 243.802756][ T7380] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.803169][ T7392] loop3: detected capacity change from 0 to 512 [ 243.818373][ T7392] EXT4-fs (loop3): Test dummy encryption mode enabled [ 243.909113][ T7392] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.688: inode has both inline data and extents flags [ 243.912246][ T7392] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.688: couldn't read orphan inode 15 (err -117) [ 244.036262][ T7392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.126305][ T7401] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 245.085585][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 246.599463][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 246.797580][ T7440] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 246.979149][ T7439] loop4: detected capacity change from 0 to 2048 [ 247.007314][ T7443] loop0: detected capacity change from 0 to 2048 [ 247.016096][ T7439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.093271][ T7443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 247.591173][ T7457] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 248.354811][ T7466] netlink: 830 bytes leftover after parsing attributes in process `syz.0.706'. [ 248.853348][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.855838][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.057746][ T7487] loop0: detected capacity change from 0 to 512 [ 249.086502][ T7487] EXT4-fs (loop0): Test dummy encryption mode enabled [ 249.390577][ T7498] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 249.499014][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 249.718043][ T7487] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.713: inode has both inline data and extents flags [ 249.771491][ T7487] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.713: couldn't read orphan inode 15 (err -117) [ 249.773872][ T7487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 250.103638][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 250.105604][ T7511] netlink: 288 bytes leftover after parsing attributes in process `syz.4.720'. [ 251.225803][ T7522] loop4: detected capacity change from 0 to 1024 [ 251.302089][ T7522] EXT4-fs: Ignoring removed i_version option [ 251.305753][ T7522] EXT4-fs: Ignoring removed bh option [ 251.330523][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 251.692849][ T7522] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 251.706299][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 252.101631][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 252.102314][ T7529] loop3: detected capacity change from 0 to 32768 [ 252.160475][ T7546] loop4: detected capacity change from 0 to 2048 [ 252.165823][ T7546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.553046][ T7550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.727'. [ 252.671963][ T7559] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 253.950295][ T7575] block nbd4: NBD_DISCONNECT [ 254.194858][ T7529] XFS (loop3): Mounting V5 Filesystem [ 254.261563][ T7529] XFS (loop3): Ending clean mount [ 254.264543][ T7529] XFS (loop3): Quotacheck needed: Please wait. [ 254.288031][ T7529] XFS (loop3): Quotacheck: Done. [ 254.494699][ T7579] loop0: detected capacity change from 0 to 32768 [ 254.892336][ T7593] loop4: detected capacity change from 0 to 512 [ 254.901597][ T7593] EXT4-fs (loop4): Test dummy encryption mode enabled [ 254.990741][ T7579] XFS (loop0): Mounting V5 Filesystem [ 255.013180][ T7593] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.738: inode has both inline data and extents flags [ 255.014364][ T4328] XFS (loop3): Unmounting Filesystem [ 255.027889][ T7593] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.738: couldn't read orphan inode 15 (err -117) [ 255.036372][ T7579] XFS (loop0): Ending clean mount [ 255.041832][ T7593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 255.318712][ T7606] 9pnet_fd: Insufficient options for proto=fd [ 255.955950][ T4333] XFS (loop0): Unmounting Filesystem [ 256.835886][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 257.700936][ T7618] loop4: detected capacity change from 0 to 2048 [ 257.717026][ T7618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.187715][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.188974][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.190231][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.194241][ T7628] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 258.355947][ T4345] Bluetooth: hci4: failed to read key size for handle 200 [ 258.461337][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.462737][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.464735][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.466022][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.467384][ T7628] virt_wifi0 speed is unknown, defaulting to 1000 [ 258.593195][ T7638] block nbd3: NBD_DISCONNECT [ 259.683045][ T7647] block nbd0: NBD_DISCONNECT [ 260.390036][ T7646] loop4: detected capacity change from 0 to 32768 [ 260.526849][ T7646] XFS (loop4): Mounting V5 Filesystem [ 260.549099][ T7646] XFS (loop4): Ending clean mount [ 260.554020][ T7646] XFS (loop4): Quotacheck needed: Please wait. [ 260.569242][ T7646] XFS (loop4): Quotacheck: Done. [ 261.026763][ T7682] loop3: detected capacity change from 0 to 4096 [ 261.396813][ T4318] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.409693][ T7688] loop0: detected capacity change from 0 to 256 [ 261.511024][ T7688] FAT-fs (loop0): Directory bread(block 64) failed [ 261.513562][ T7688] FAT-fs (loop0): Directory bread(block 65) failed [ 261.516178][ T7688] FAT-fs (loop0): Directory bread(block 66) failed [ 261.517304][ T7688] FAT-fs (loop0): Directory bread(block 67) failed [ 261.518661][ T7688] FAT-fs (loop0): Directory bread(block 68) failed [ 261.519876][ T7688] FAT-fs (loop0): Directory bread(block 69) failed [ 261.521117][ T7688] FAT-fs (loop0): Directory bread(block 70) failed [ 261.522262][ T7688] FAT-fs (loop0): Directory bread(block 71) failed [ 261.533539][ T7688] FAT-fs (loop0): Directory bread(block 72) failed [ 261.534689][ T7688] FAT-fs (loop0): Directory bread(block 73) failed [ 261.853591][ T4340] XFS (loop4): Unmounting Filesystem [ 262.504941][ T7697] loop3: detected capacity change from 0 to 512 [ 263.153395][ T7697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 263.749313][ T7706] block nbd0: NBD_DISCONNECT [ 264.646089][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 264.786047][ T7723] loop3: detected capacity change from 0 to 2048 [ 264.793995][ T7723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 265.007793][ T7725] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 265.042703][ T7732] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 265.400858][ T7736] loop0: detected capacity change from 0 to 32768 [ 265.407201][ T7736] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.769 (7736) [ 265.413806][ T7736] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 265.415736][ T7736] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 265.417255][ T7736] BTRFS info (device loop0): turning on sync discard [ 265.418364][ T7736] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 265.420153][ T7736] BTRFS info (device loop0): use zstd compression, level 3 [ 265.421448][ T7736] BTRFS info (device loop0): turning on async discard [ 265.422697][ T7736] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 265.424530][ T7736] BTRFS info (device loop0): trying to use backup root at mount time [ 265.425868][ T7736] BTRFS info (device loop0): enabling auto defrag [ 265.426960][ T7736] BTRFS info (device loop0): using free space tree [ 265.941352][ T4703] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 265.944134][ T7736] BTRFS error (device loop0): failed to load root extent [ 265.945302][ T7736] BTRFS warning (device loop0): try to load backup roots slot 1 [ 265.948081][ T9] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 265.950324][ T7736] BTRFS warning (device loop0): couldn't read tree root [ 265.951342][ T7736] BTRFS warning (device loop0): try to load backup roots slot 2 [ 265.952769][ T7736] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 265.954955][ T7736] BTRFS warning (device loop0): couldn't read tree root [ 265.956042][ T7736] BTRFS warning (device loop0): try to load backup roots slot 3 [ 265.976904][ T7736] BTRFS info (device loop0): enabling ssd optimizations [ 265.978770][ T7736] BTRFS info (device loop0): rebuilding free space tree [ 265.987986][ T7736] BTRFS info (device loop0): checking UUID tree [ 265.993086][ T7770] loop4: detected capacity change from 0 to 512 [ 267.678100][ T4333] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 269.534583][ T7807] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 270.120945][ T7822] loop0: detected capacity change from 0 to 512 [ 270.475002][ T7822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.805905][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.808160][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.825160][ T27] audit: type=1326 audit(271.695:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.204396][ T7839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.215489][ T27] audit: type=1326 audit(271.695:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.219749][ T27] audit: type=1326 audit(271.695:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.263172][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 272.319911][ T27] audit: type=1326 audit(271.695:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.332461][ T27] audit: type=1326 audit(271.695:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.341637][ T27] audit: type=1326 audit(271.695:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.354348][ T27] audit: type=1326 audit(271.695:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.380834][ T27] audit: type=1326 audit(271.695:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.410641][ T27] audit: type=1326 audit(271.695:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.416600][ T7852] block nbd0: NBD_DISCONNECT [ 272.426730][ T7854] 9pnet_fd: Insufficient options for proto=fd [ 272.512111][ T27] audit: type=1326 audit(271.705:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7826 comm="syz.2.787" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8df7a168 code=0x7ffc0000 [ 272.596564][ T7859] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 272.894104][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 272.895831][ T7860] device bridge_slave_1 left promiscuous mode [ 272.897205][ T7860] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.048559][ T7860] device bridge_slave_0 left promiscuous mode [ 273.049780][ T7860] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.444656][ T7865] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 274.009960][ T7883] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 274.885985][ T7893] 9pnet_fd: Insufficient options for proto=fd [ 274.960093][ T7899] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 275.195953][ T7897] loop4: detected capacity change from 0 to 2048 [ 275.199468][ T7897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.318987][ T7904] loop0: detected capacity change from 0 to 512 [ 275.322221][ T7904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 275.347784][ T7904] EXT4-fs (loop0): 1 orphan inode deleted [ 275.349022][ T7904] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 275.426100][ T4703] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 276.226391][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 276.486142][ T7929] loop0: detected capacity change from 0 to 2048 [ 276.500057][ T7929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.631913][ T7932] siw: device registration error -23 [ 276.823202][ T4330] Bluetooth: hci4: command 0x0406 tx timeout [ 277.178124][ T7941] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 277.501318][ T7947] loop3: detected capacity change from 0 to 128 [ 277.513553][ T7947] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.538462][ T7947] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 277.858929][ T7958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 278.053010][ T7963] 9pnet_fd: Insufficient options for proto=fd [ 278.138987][ T7965] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 278.464930][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 278.551696][ T7972] loop4: detected capacity change from 0 to 16 [ 278.564987][ T7972] erofs: (device loop4): mounted with root inode @ nid 36. [ 279.210344][ T7975] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 279.217427][ T7980] block nbd0: NBD_DISCONNECT [ 279.260857][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.262892][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.545019][ T7985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.479607][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 281.481305][ T8000] device bridge_slave_1 left promiscuous mode [ 281.482805][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.626921][ T8000] device bridge_slave_0 left promiscuous mode [ 281.628317][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.646069][ T8004] 9pnet_fd: Insufficient options for proto=fd [ 282.134824][ T8011] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 282.136740][ T8013] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 282.200347][ T8018] loop0: detected capacity change from 0 to 512 [ 282.210036][ T8016] loop4: detected capacity change from 0 to 2048 [ 282.217362][ T8016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.249398][ T8021] loop3: detected capacity change from 0 to 1024 [ 282.250845][ T8021] EXT4-fs: Ignoring removed i_version option [ 282.251894][ T8021] EXT4-fs: Ignoring removed bh option [ 282.628133][ T8021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.638784][ T8021] 9pnet_fd: Insufficient options for proto=fd [ 283.106035][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 283.486488][ T8037] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 283.671361][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.743687][ T8048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.977205][ T8050] loop0: detected capacity change from 0 to 32768 [ 284.053009][ T8050] XFS (loop0): Mounting V5 Filesystem [ 284.121706][ T8050] XFS (loop0): Ending clean mount [ 284.123646][ T8050] XFS (loop0): Quotacheck needed: Please wait. [ 284.164804][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 284.182474][ T8050] XFS (loop0): Quotacheck: Done. [ 284.458508][ T8067] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 284.813504][ T8073] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 284.826925][ T4345] Bluetooth: hci2: unexpected subevent 0x0e length: 32 > 15 [ 284.832382][ T4333] XFS (loop0): Unmounting Filesystem [ 284.878798][ T8078] loop4: detected capacity change from 0 to 1024 [ 284.885211][ T8078] EXT4-fs: Ignoring removed i_version option [ 284.886684][ T8078] EXT4-fs: Ignoring removed bh option [ 284.934968][ T8078] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.980924][ T8078] 9pnet_fd: Insufficient options for proto=fd [ 285.389380][ T8086] loop3: detected capacity change from 0 to 1024 [ 285.393946][ T8086] EXT4-fs: Ignoring removed i_version option [ 285.395055][ T8086] EXT4-fs: Ignoring removed bh option [ 285.463897][ T8086] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 285.470353][ T8086] 9pnet_fd: Insufficient options for proto=fd [ 285.878531][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 285.957192][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 285.993989][ T8101] loop4: detected capacity change from 0 to 8192 [ 286.002011][ T8101] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 286.004950][ T8101] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 286.006746][ T8101] REISERFS (device loop4): using ordered data mode [ 286.008060][ T8101] reiserfs: using flush barriers [ 286.009456][ T8101] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 286.012363][ T8101] REISERFS (device loop4): checking transaction log (loop4) [ 286.216707][ T8101] REISERFS (device loop4): Using r5 hash to sort names [ 286.222044][ T8101] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 287.094231][ T8118] 9pnet_fd: Insufficient options for proto=fd [ 287.153085][ T8116] loop0: detected capacity change from 0 to 32768 [ 287.202770][ T8120] block nbd3: NBD_DISCONNECT [ 287.440251][ T8116] XFS (loop0): Mounting V5 Filesystem [ 287.457599][ T8116] XFS (loop0): Ending clean mount [ 287.459542][ T8116] XFS (loop0): Quotacheck needed: Please wait. [ 287.479754][ T8116] XFS (loop0): Quotacheck: Done. [ 287.705280][ T8136] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 287.983258][ T4333] XFS (loop0): Unmounting Filesystem [ 287.993841][ T8140] loop4: detected capacity change from 0 to 1024 [ 287.997077][ T8140] EXT4-fs: Ignoring removed i_version option [ 287.998078][ T8140] EXT4-fs: Ignoring removed bh option [ 288.061621][ T8142] loop3: detected capacity change from 0 to 2048 [ 288.082455][ T8142] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 288.084564][ T8140] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.168941][ T8147] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 288.321008][ T8140] 9pnet_fd: Insufficient options for proto=fd [ 288.407558][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 289.910306][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'. [ 289.911912][ T8172] device bridge_slave_1 left promiscuous mode [ 289.913218][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.914631][ T8171] loop3: detected capacity change from 0 to 4096 [ 289.995943][ T8171] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 290.208559][ T8172] device bridge_slave_0 left promiscuous mode [ 290.209803][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.795967][ T8179] block nbd0: NBD_DISCONNECT [ 290.834986][ T8184] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 290.917400][ T8189] loop0: detected capacity change from 0 to 1024 [ 290.924014][ T8189] EXT4-fs: Ignoring removed i_version option [ 290.925172][ T8189] EXT4-fs: Ignoring removed bh option [ 290.940950][ T8189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 290.950670][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 290.974021][ T8187] loop3: detected capacity change from 0 to 32768 [ 291.254019][ T8202] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 291.393251][ T8187] XFS (loop3): Mounting V5 Filesystem [ 291.431704][ T8206] 9pnet_fd: Insufficient options for proto=fd [ 291.433602][ T8187] XFS (loop3): Ending clean mount [ 291.436781][ T8187] XFS (loop3): Quotacheck needed: Please wait. [ 291.555355][ T8187] XFS (loop3): Quotacheck: Done. [ 291.747105][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 292.107660][ T4328] XFS (loop3): Unmounting Filesystem [ 292.292560][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.874'. [ 292.317972][ T8222] loop0: detected capacity change from 0 to 8 [ 293.193980][ T8226] siw: device registration error -23 [ 294.079320][ T4345] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 294.274192][ T8242] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 294.552674][ T8248] 9pnet_fd: Insufficient options for proto=fd [ 294.567156][ T8250] loop3: detected capacity change from 0 to 512 [ 294.569365][ T8246] loop4: detected capacity change from 0 to 128 [ 294.571336][ T8246] EXT4-fs (loop4): Test dummy encryption mode enabled [ 294.587342][ T8252] loop0: detected capacity change from 0 to 1024 [ 294.592772][ T8252] EXT4-fs: Ignoring removed i_version option [ 294.596101][ T8252] EXT4-fs: Ignoring removed bh option [ 294.676326][ T8252] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 294.678217][ T8246] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 294.705665][ T8252] 9pnet_fd: Insufficient options for proto=fd [ 295.445963][ T8268] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 295.599993][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 295.608038][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 295.757048][ T8283] loop4: detected capacity change from 0 to 2048 [ 295.760092][ T8283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.059236][ T8286] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 296.247263][ T8281] loop0: detected capacity change from 0 to 2048 [ 296.251509][ T8281] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 296.258300][ T8281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.817220][ T8293] tipc: Can't bind to reserved service type 0 [ 297.013047][ T8303] loop3: detected capacity change from 0 to 1024 [ 297.026578][ T8303] EXT4-fs: Ignoring removed i_version option [ 297.027800][ T8303] EXT4-fs: Ignoring removed bh option [ 297.337986][ T8306] 9pnet_fd: Insufficient options for proto=fd [ 297.397580][ T8303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 297.455820][ T8303] 9pnet_fd: Insufficient options for proto=fd [ 297.475978][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 297.594517][ T8320] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 297.993921][ T8319] loop3: detected capacity change from 0 to 32768 [ 298.007098][ T8329] loop4: detected capacity change from 0 to 1024 [ 298.008594][ T8329] EXT4-fs: Ignoring removed i_version option [ 298.012768][ T8329] EXT4-fs: Ignoring removed bh option [ 298.062286][ T8319] XFS (loop3): Mounting V5 Filesystem [ 298.207066][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 298.208705][ T8337] device team0 left promiscuous mode [ 298.209660][ T8337] device team_slave_0 left promiscuous mode [ 298.211010][ T8337] device team_slave_1 left promiscuous mode [ 298.212848][ T8337] bridge0: port 3(team0) entered disabled state [ 298.395567][ T8329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 298.419052][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 298.535185][ T8337] device bridge_slave_1 left promiscuous mode [ 298.536566][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.540634][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 298.573035][ T8319] XFS (loop3): Ending clean mount [ 298.578422][ T8319] XFS (loop3): Quotacheck needed: Please wait. [ 298.605640][ T8337] device bridge_slave_0 left promiscuous mode [ 298.607099][ T8337] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.672363][ T8319] XFS (loop3): Quotacheck: Done. [ 299.131893][ T4328] XFS (loop3): Unmounting Filesystem [ 299.570522][ T8364] loop0: detected capacity change from 0 to 1024 [ 299.582732][ T8364] EXT4-fs: Ignoring removed i_version option [ 299.587172][ T8364] EXT4-fs: Ignoring removed bh option [ 300.094925][ T8364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 300.219191][ T8364] 9pnet_fd: Insufficient options for proto=fd [ 300.307871][ T8373] loop4: detected capacity change from 0 to 1024 [ 300.319850][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 300.332000][ T8373] EXT4-fs: Ignoring removed i_version option [ 300.345806][ T8373] EXT4-fs: Ignoring removed bh option [ 300.413820][ T8375] loop0: detected capacity change from 0 to 128 [ 300.420423][ T8375] EXT4-fs (loop0): Test dummy encryption mode enabled [ 300.521029][ T8373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 300.529688][ T8373] 9pnet_fd: Insufficient options for proto=fd [ 300.735332][ T8383] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 300.767902][ T8388] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 301.039729][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 301.042177][ T8375] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 301.236938][ T8392] loop3: detected capacity change from 0 to 32768 [ 301.291915][ T8396] xt_connbytes: Forcing CT accounting to be enabled [ 301.293189][ T8396] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 301.295536][ T8396] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 301.527268][ T8403] loop4: detected capacity change from 0 to 1024 [ 301.580482][ T8403] EXT4-fs: Ignoring removed i_version option [ 301.582206][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 301.583681][ T8403] EXT4-fs: Ignoring removed bh option [ 302.071124][ T8403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 302.082367][ T8392] XFS (loop3): Mounting V5 Filesystem [ 302.088215][ T8403] 9pnet_fd: Insufficient options for proto=fd [ 302.127511][ T8392] XFS (loop3): Ending clean mount [ 302.129625][ T8392] XFS (loop3): Quotacheck needed: Please wait. [ 302.157755][ T8392] XFS (loop3): Quotacheck: Done. [ 302.222737][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 302.714180][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 302.748181][ T8433] loop0: detected capacity change from 0 to 1024 [ 302.749761][ T8433] EXT4-fs: Ignoring removed i_version option [ 302.750907][ T8433] EXT4-fs: Ignoring removed bh option [ 302.765159][ T4328] XFS (loop3): Unmounting Filesystem [ 303.484572][ T8433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 304.139457][ T8449] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 304.314636][ T8451] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 304.391637][ T8433] 9pnet_fd: Insufficient options for proto=fd [ 305.084990][ T8465] 9pnet_fd: Insufficient options for proto=fd [ 305.155814][ T8467] loop3: detected capacity change from 0 to 1024 [ 305.158127][ T8467] EXT4-fs: Ignoring removed i_version option [ 305.159423][ T8467] EXT4-fs: Ignoring removed bh option [ 305.197818][ T8467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 305.200036][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 305.208667][ T8467] 9pnet_fd: Insufficient options for proto=fd [ 305.286102][ T8475] loop0: detected capacity change from 0 to 512 [ 305.288306][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 305.292388][ T8475] EXT4-fs (loop0): Test dummy encryption mode enabled [ 305.319001][ T8475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0022] [ 305.320644][ T8475] System zones: 1-2, 4-12, 8-8 [ 305.322107][ T8475] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.933: iget: bad i_size value: 38620345925642 [ 305.402551][ T8477] loop4: detected capacity change from 0 to 32768 [ 305.604277][ T8475] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.933: couldn't read orphan inode 15 (err -117) [ 305.607423][ T8475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 305.887734][ T8490] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 305.923803][ T8485] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.933: bg 0: block 5: invalid block bitmap [ 305.930231][ T8485] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 305.932336][ T8485] EXT4-fs (loop0): This should not happen!! Data will be lost [ 305.932336][ T8485] [ 305.933879][ T8485] EXT4-fs (loop0): Total free blocks count 0 [ 305.934817][ T8485] EXT4-fs (loop0): Free/Dirty block details [ 305.935742][ T8485] EXT4-fs (loop0): free_blocks=0 [ 305.936580][ T8485] EXT4-fs (loop0): dirty_blocks=2 [ 305.937425][ T8485] EXT4-fs (loop0): Block reservation details [ 305.938420][ T8485] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 305.948286][ T8477] XFS (loop4): Mounting V5 Filesystem [ 306.149836][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 306.190721][ T8477] XFS (loop4): Ending clean mount [ 306.193662][ T8477] XFS (loop4): Quotacheck needed: Please wait. [ 306.219544][ T8477] XFS (loop4): Quotacheck: Done. [ 306.343701][ T8504] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 306.657864][ T4340] XFS (loop4): Unmounting Filesystem [ 306.769943][ T8508] 9pnet_fd: Insufficient options for proto=fd [ 306.987871][ T8510] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 307.039112][ T8517] 9pnet_fd: Insufficient options for proto=fd [ 307.058976][ T8521] loop0: detected capacity change from 0 to 1024 [ 307.060659][ T8521] EXT4-fs: Ignoring removed i_version option [ 307.061888][ T8521] EXT4-fs: Ignoring removed bh option [ 307.106668][ T8521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 307.132804][ T8521] 9pnet_fd: Insufficient options for proto=fd [ 307.247212][ T8527] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 309.437787][ T8543] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 309.908419][ T8557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 310.053211][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 310.102358][ T8554] loop3: detected capacity change from 0 to 32768 [ 310.169889][ T8564] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 310.296504][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.298030][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.379156][ T8554] XFS (loop3): Mounting V5 Filesystem [ 310.421014][ T8554] XFS (loop3): Ending clean mount [ 310.426800][ T8573] 9pnet_fd: Insufficient options for proto=fd [ 311.256623][ T8593] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 311.536807][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.962'. [ 311.722268][ T8605] loop4: detected capacity change from 0 to 8 [ 312.416982][ T8611] 9pnet_fd: Insufficient options for proto=fd [ 312.492613][ T8612] ALSA: mixer_oss: invalid OSS volume '' [ 312.958787][ T8617] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 313.322712][ T8622] loop4: detected capacity change from 0 to 1024 [ 313.348801][ T8622] EXT4-fs: Ignoring removed i_version option [ 313.357346][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 313.379460][ T8622] EXT4-fs: Ignoring removed bh option [ 313.423468][ T8622] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 313.988664][ T4328] XFS (loop3): Unmounting Filesystem [ 314.095531][ T8637] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 314.183099][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 314.503813][ T8652] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 314.946709][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 314.948405][ T8656] device bridge_slave_1 left promiscuous mode [ 314.949737][ T8656] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.206701][ T8656] device bridge_slave_0 left promiscuous mode [ 315.208026][ T8656] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.283083][ T8659] loop4: detected capacity change from 0 to 1024 [ 315.284981][ T8659] EXT4-fs: Ignoring removed i_version option [ 315.286143][ T8659] EXT4-fs: Ignoring removed bh option [ 315.327995][ T8659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 316.206201][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 316.211166][ T8659] 9pnet_fd: Insufficient options for proto=fd [ 316.553664][ T8676] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 316.978817][ T8681] loop0: detected capacity change from 0 to 1024 [ 316.980485][ T8681] EXT4-fs: Ignoring removed i_version option [ 316.981609][ T8681] EXT4-fs: Ignoring removed bh option [ 317.047059][ T8681] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 317.058744][ T8681] 9pnet_fd: Insufficient options for proto=fd [ 317.651335][ T8696] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 318.056162][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 318.852153][ T4333] EXT4-fs (loop0): unmounting filesystem. [ 319.399020][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 319.992762][ T8728] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 320.862328][ T8747] loop3: detected capacity change from 0 to 1024 [ 320.868397][ T8747] EXT4-fs: Ignoring removed i_version option [ 320.871597][ T8747] EXT4-fs: Ignoring removed bh option [ 321.327637][ T8747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.334780][ T8747] 9pnet_fd: Insufficient options for proto=fd [ 321.427353][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1003'. [ 322.329324][ T8777] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 322.390186][ T8782] kernel profiling enabled (shift: 5) [ 322.483232][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 322.880868][ C0] ------------[ cut here ]------------ [ 322.882097][ C0] WARNING: CPU: 0 PID: 8798 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0xf78/0x12fc [ 322.883827][ C0] Modules linked in: [ 322.884549][ C0] CPU: 0 PID: 8798 Comm: syz.3.1016 Not tainted syzkaller #0 [ 322.885892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 322.887790][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 322.889297][ C0] pc : __ieee80211_beacon_get+0xf78/0x12fc [ 322.890384][ C0] lr : __ieee80211_beacon_get+0xf78/0x12fc [ 322.891448][ C0] sp : ffff800008007ae0 [ 322.892218][ C0] x29: ffff800008007b20 x28: ffff0000f6808e80 x27: ffffffffffffe520 [ 322.893602][ C0] x26: 00000000ffffffff x25: ffff0000f5584800 x24: ffff0000ca2c2a58 [ 322.895029][ C0] x23: dfff800000000000 x22: ffff800008007b8c x21: ffff0000f672e228 [ 322.896471][ C0] x20: 0000000000000000 x19: ffff0000f672e760 x18: 0000000000000000 [ 322.897890][ C0] x17: 00000000ffff0000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 322.899354][ C0] x14: 0000000000000007 x13: 0000000000ff0100 x12: ffff800017c5d008 [ 322.900793][ C0] x11: ff00800011462380 x10: 0000000000000000 x9 : ffff800011462380 [ 322.902203][ C0] x8 : ffff0000fea58000 x7 : 0000000000000000 x6 : 0000000000000000 [ 322.903546][ C0] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001146165c [ 322.904920][ C0] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 322.906274][ C0] Call trace: [ 322.906822][ C0] __ieee80211_beacon_get+0xf78/0x12fc [ 322.907719][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 322.908660][ C0] mac80211_hwsim_beacon_tx+0x1e4/0x8fc [ 322.909603][ C0] __iterate_interfaces+0x200/0x47c [ 322.910429][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 322.911585][ C0] mac80211_hwsim_beacon+0xc8/0x1b0 [ 322.912457][ C0] __hrtimer_run_queues+0x444/0xc58 [ 322.913310][ C0] hrtimer_run_softirq+0x164/0x408 [ 322.914199][ C0] handle_softirqs+0x318/0xc90 [ 322.915009][ C0] __do_softirq+0x14/0x20 [ 322.915868][ C0] ____do_softirq+0x14/0x20 [ 322.916695][ C0] call_on_irq_stack+0x30/0x48 [ 322.917543][ C0] do_softirq_own_stack+0x20/0x2c [ 322.918409][ C0] __irq_exit_rcu+0x23c/0x430 [ 322.919217][ C0] irq_exit_rcu+0x14/0x84 [ 322.920009][ C0] el1_interrupt+0x38/0x54 [ 322.920778][ C0] el1h_64_irq_handler+0x18/0x24 [ 322.921673][ C0] el1h_64_irq+0x64/0x68 [ 322.922407][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 322.923392][ C0] __skb_try_recv_datagram+0x148/0x40c [ 322.924383][ C0] __unix_dgram_recvmsg+0x238/0xb20 [ 322.925298][ C0] unix_dgram_recvmsg+0xd0/0xe8 [ 322.926162][ C0] ____sys_recvmsg+0x270/0x754 [ 322.926969][ C0] do_recvmmsg+0x36c/0x9d8 [ 322.927734][ C0] __arm64_sys_recvmmsg+0x184/0x244 [ 322.928684][ C0] invoke_syscall+0x98/0x290 [ 322.929518][ C0] el0_svc_common+0x13c/0x258 [ 322.930402][ C0] do_el0_svc+0x5c/0x134 [ 322.931153][ C0] el0_svc+0x58/0x128 [ 322.931870][ C0] el0t_64_sync_handler+0x84/0xf0 [ 322.932752][ C0] el0t_64_sync+0x18c/0x190 [ 322.933517][ C0] irq event stamp: 72621 [ 322.934231][ C0] hardirqs last enabled at (72620): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 322.935981][ C0] hardirqs last disabled at (72621): [] el1_dbg+0x24/0x80 [ 322.937426][ C0] softirqs last enabled at (51546): [] handle_softirqs+0xb1c/0xc90 [ 322.939044][ C0] softirqs last disabled at (72559): [] __do_softirq+0x14/0x20 [ 322.940661][ C0] ---[ end trace 0000000000000000 ]--- [ 322.941620][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 324.156734][ T4443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.247185][ T4443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.335116][ T4443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.424648][ T4443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.276604][ T4443] bond0: (slave wlan1): Releasing backup interface [ 326.878025][ T4443] device hsr_slave_0 left promiscuous mode [ 326.903804][ T4443] device hsr_slave_1 left promiscuous mode [ 326.983611][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.985097][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.987597][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.988929][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.073805][ T4443] device veth0_macvtap left promiscuous mode [ 327.075116][ T4443] device veth1_vlan left promiscuous mode [ 327.076233][ T4443] device veth0_vlan left promiscuous mode [ 327.610158][ T4384] smc: removing ib device syz2 [ 329.197113][ T4443] team0 (unregistering): Port device team_slave_1 removed [ 329.386973][ T4443] team0 (unregistering): Port device team_slave_0 removed [ 329.584290][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.784010][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.355477][ T4443] bond0 (unregistering): Released all slaves