last executing test programs: 11.173840633s ago: executing program 0 (id=3523): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 9.511216683s ago: executing program 0 (id=3532): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 7.429353895s ago: executing program 2 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_io_uring_setup(0x47a7, &(0x7f0000000fc0)={0x0, 0x10006f55, 0x1, 0x80002, 0x400200}, &(0x7f0000003400), &(0x7f0000000f80)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, 0x0, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 7.376396336s ago: executing program 1 (id=3548): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.919245314s ago: executing program 2 (id=3551): ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @private1, @multicast, @rand_addr=' \x01\x00'}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.916979565s ago: executing program 4 (id=3552): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 5.908749125s ago: executing program 1 (id=3553): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000001080)='smaps_rollup\x00') syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") read$FUSE(r1, &(0x7f00000010c0)={0x2020}, 0x2020) 5.855022935s ago: executing program 0 (id=3555): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) 4.98270556s ago: executing program 3 (id=3556): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x47a7, &(0x7f0000000fc0)={0x0, 0x10006f55, 0x1, 0x80002, 0x400200}, &(0x7f0000003400), &(0x7f0000000f80)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 4.92534644s ago: executing program 2 (id=3557): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x1, 0x8}]}) 4.531652093s ago: executing program 0 (id=3558): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204081, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) 4.521193643s ago: executing program 4 (id=3559): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x2, 0xc9b}, {0x1, 0x8}]}) 4.504998603s ago: executing program 1 (id=3560): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x2, 0xc9b}, {0x1800, 0x5}, {0x1, 0x8}]}) 2.831905683s ago: executing program 2 (id=3561): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204081, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) 2.830985063s ago: executing program 3 (id=3562): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204081, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) 2.830071113s ago: executing program 1 (id=3563): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x2, 0xc9b}, {0x1800, 0x5}, {0xfff9, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x2000}, {0x468c, 0xfffe}, {0x7fff, 0x5}]}) 1.52650656s ago: executing program 0 (id=3564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x2, 0xc9b}, {0x1800, 0x5}, {0xfff9, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x2000}, {0x468c, 0xfffe}, {0x7fff, 0x5}]}) 1.525458171s ago: executing program 1 (id=3565): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) 1.524539881s ago: executing program 3 (id=3566): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1204081, 0x0) r3 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r3, 0x0, 0xd, 0xfffffffffffffffe) 1.524281751s ago: executing program 4 (id=3567): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000380)={[{@fat=@dos1xfloppy}, {@fat=@errors_remount}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {}]}, 0x1, 0x22d, &(0x7f0000000680)="$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") openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x42, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 1.521562751s ago: executing program 2 (id=3568): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x3f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3}) 202.603608ms ago: executing program 0 (id=3569): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_io_uring_setup(0x47a7, &(0x7f0000000fc0)={0x0, 0x10006f55, 0x1, 0x80002, 0x400200}, &(0x7f0000003400), &(0x7f0000000f80)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 201.637509ms ago: executing program 1 (id=3570): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x29031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0)=r0, 0x12) 156.766599ms ago: executing program 4 (id=3571): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/72, 0x48) 155.426639ms ago: executing program 2 (id=3572): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, 0x0, &(0x7f0000000700)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4040) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x9, &(0x7f0000000180)=[{0x2, 0xc9b}, {0x1800, 0x5}, {0xfff9, 0x9}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x2000}, {0x468c, 0xfffe}, {0x7fff, 0x5}, {0x6, 0x3}]}) 125.819169ms ago: executing program 3 (id=3573): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) 86.555459ms ago: executing program 4 (id=3574): syz_emit_ethernet(0x3b3, &(0x7f0000000780)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x8, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x6, "ffffffffffff00000000000200fff500000000000001000000008879e66485201a0015ca837400"/52}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 56.65425ms ago: executing program 3 (id=3575): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940), 0x10, 0x1000}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) 29.258599ms ago: executing program 4 (id=3576): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 0s ago: executing program 3 (id=3577): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x47a7, &(0x7f0000000fc0)={0x0, 0x10006f55, 0x1, 0x80002, 0x400200}, &(0x7f0000003400), &(0x7f0000000f80)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) kernel console output (not intermixed with test programs): h. [ 319.824018][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 319.826555][T10817] bond5 (unregistering): Released all slaves [ 322.067447][T10857] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1973'. [ 322.070189][T10857] device ip6gre3 entered promiscuous mode [ 322.119848][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 322.122112][T10859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 324.003319][T10880] netlink: 'syz.2.1979': attribute type 1 has an invalid length. [ 324.087262][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 324.103518][T10880] bond7 (unregistering): Released all slaves [ 324.602439][T10891] netlink: 'syz.1.1984': attribute type 1 has an invalid length. [ 324.640319][T10896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 324.649000][T10896] bond4 (unregistering): Released all slaves [ 324.707648][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1985'. [ 325.739273][T10935] netlink: 'syz.4.1997': attribute type 1 has an invalid length. [ 325.770445][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'. [ 325.777234][T10935] bond8 (unregistering): Released all slaves [ 325.799668][T10940] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1998'. [ 325.805119][T10940] device ip6gre2 entered promiscuous mode [ 325.899319][T10950] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 326.271852][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'. [ 326.278074][T10950] bond8 (unregistering): Released all slaves [ 326.404263][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'. [ 326.410448][T10976] device ip6gre2 entered promiscuous mode [ 327.979895][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 328.063377][T11011] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 328.100273][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 328.113676][T11011] bond2 (unregistering): Released all slaves [ 328.226756][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'. [ 328.232907][T11022] device ip6gre4 entered promiscuous mode [ 330.106912][T11064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2038'. [ 330.109853][T11064] device ip6gre2 entered promiscuous mode [ 331.603741][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2044'. [ 331.611015][T11083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2044'. [ 332.656728][T11106] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 332.681632][T11106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.683340][T11106] bond5: (slave bond6): making interface the new active one [ 332.684584][T11106] bond5: (slave bond6): Enslaving as an active interface with an up link [ 333.645961][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 333.672059][T11115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2053'. [ 333.682456][T11117] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2054'. [ 333.735257][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2057'. [ 333.737327][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2057'. [ 334.245732][T11143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2061'. [ 334.644045][T11156] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2067'. [ 334.668069][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2068'. [ 334.694922][T11162] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 334.718789][T11162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 334.721498][T11162] bond4: (slave bond6): making interface the new active one [ 334.723036][T11162] bond4: (slave bond6): Enslaving as an active interface with an up link [ 334.753704][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'. [ 336.042010][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2080'. [ 339.809265][T11239] __nla_validate_parse: 2 callbacks suppressed [ 339.809277][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 339.827076][T11243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2095'. [ 343.228018][T11285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2107'. [ 349.406615][T11369] netlink: 'syz.1.2132': attribute type 1 has an invalid length. [ 349.884272][T11373] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.886118][T11373] bond7: (slave bond8): making interface the new active one [ 349.887545][T11373] bond7: (slave bond8): Enslaving as an active interface with an up link [ 356.139019][T11467] netlink: 'syz.4.2156': attribute type 1 has an invalid length. [ 356.170287][T11467] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.172036][T11467] bond8: (slave bond10): making interface the new active one [ 356.173435][T11467] bond8: (slave bond10): Enslaving as an active interface with an up link [ 363.949751][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 371.691144][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 374.766790][T11788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2251'. [ 374.768857][T11788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2251'. [ 375.983506][T11821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2262'. [ 375.985509][T11821] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2262'. [ 378.650286][T11869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2273'. [ 378.652311][T11869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2273'. [ 380.221069][T11890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2282'. [ 381.340919][T11911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2287'. [ 381.343059][T11911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2287'. [ 382.961891][T11930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2293'. [ 384.246227][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'. [ 384.247685][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2297'. [ 384.572280][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 384.573722][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 384.726335][T11953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2301'. [ 384.728880][T11953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2301'. [ 385.246150][T11963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2305'. [ 385.389264][T11967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2307'. [ 386.028157][T11984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2313'. [ 386.030334][T11984] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2313'. [ 386.124415][T11991] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2316'. [ 386.390030][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 386.391481][T11994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 386.904712][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 387.221586][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2324'. [ 387.610578][T12023] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2327'. [ 390.615060][T12100] __nla_validate_parse: 7 callbacks suppressed [ 390.615070][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2353'. [ 390.617602][T12100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2353'. [ 391.544994][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 391.547046][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 392.529774][T12138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2365'. [ 393.134983][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2372'. [ 393.137872][T12160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2372'. [ 393.880138][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2375'. [ 393.881644][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2375'. [ 394.868891][T12185] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2378'. [ 395.805238][T12220] __nla_validate_parse: 3 callbacks suppressed [ 395.805250][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2391'. [ 396.004632][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2392'. [ 396.006042][T12230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2392'. [ 397.261478][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2400'. [ 397.266190][T12241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2400'. [ 397.316830][T12251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2402'. [ 399.093056][T12291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2414'. [ 399.094434][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 399.096927][T12289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 401.091637][T12319] bridge0: port 1(gretap0) entered blocking state [ 401.092752][T12319] bridge0: port 1(gretap0) entered disabled state [ 401.094912][T12319] device gretap0 entered promiscuous mode [ 401.140855][T12318] bridge0: port 3(gretap0) entered blocking state [ 401.141890][T12318] bridge0: port 3(gretap0) entered disabled state [ 401.144500][T12318] device gretap0 entered promiscuous mode [ 401.824690][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2421'. [ 401.826178][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2421'. [ 406.605003][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 406.606597][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 407.179850][T12403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2459'. [ 407.182625][T12403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2459'. [ 409.252907][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2462'. [ 409.267279][T12442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2462'. [ 409.688305][T12446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2474'. [ 409.693942][T12446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2474'. [ 409.773001][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2463'. [ 409.774566][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2463'. [ 425.264783][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2535'. [ 425.266783][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2535'. [ 430.365379][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'. [ 430.366709][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2554'. [ 433.404762][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.579732][T12806] overlayfs: failed to resolve './file0': -2 [ 438.147487][T12863] overlayfs: failed to resolve './file0': -2 [ 443.144961][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'. [ 443.146478][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2604'. [ 443.718769][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2611'. [ 443.720170][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2611'. [ 447.275194][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2623'. [ 447.276668][T12999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2623'. [ 447.427406][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2626'. [ 447.428817][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2626'. [ 449.133860][T13029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2643'. [ 449.135360][T13029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2643'. [ 474.084173][T13417] netlink: 'syz.0.2734': attribute type 12 has an invalid length. [ 474.094642][T13418] netlink: 'syz.4.2736': attribute type 12 has an invalid length. [ 480.827261][T13508] netlink: 'syz.4.2762': attribute type 12 has an invalid length. [ 481.982086][T13564] netlink: 'syz.2.2786': attribute type 12 has an invalid length. [ 483.601685][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 485.257810][T13668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2820'. [ 494.102280][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.104942][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.106838][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.108446][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.110312][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 494.112094][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.589981][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 495.823398][T12574] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.922714][T12574] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.093868][T13798] chnl_net:caif_netlink_parms(): no params data found [ 496.188362][T13800] Bluetooth: hci5: command 0x0409 tx timeout [ 496.707089][T12574] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.482188][T12574] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.505881][T13798] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.507185][T13798] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.509004][T13798] device bridge_slave_0 entered promiscuous mode [ 497.516039][T13798] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.517261][T13798] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.519120][T13798] device bridge_slave_1 entered promiscuous mode [ 498.077397][T13798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.079746][T13798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.250819][T13800] Bluetooth: hci5: command 0x041b tx timeout [ 498.885827][T13798] team0: Port device team_slave_0 added [ 498.888357][T13798] team0: Port device team_slave_1 added [ 498.912383][T13798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.913487][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.917766][T13798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.920112][T13798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.921528][T13798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.925423][T13798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.566760][T13800] Bluetooth: hci5: command 0x040f tx timeout [ 501.353255][T13798] device hsr_slave_0 entered promiscuous mode [ 501.497846][T13798] device hsr_slave_1 entered promiscuous mode [ 502.571765][T13800] Bluetooth: hci5: command 0x0419 tx timeout [ 503.247458][T13798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.364763][T13798] Cannot create hsr debugfs directory [ 504.225074][T12574] bond7: (slave ip6gretap0): Releasing active interface [ 506.278506][T13972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2895'. [ 506.750419][T13798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 507.032274][T13798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 507.271715][T12574] bond4: (slave gretap0): Releasing active interface [ 507.929545][T13798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 507.952866][T13798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.958115][T14019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 508.989933][T14019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.275565][T14019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.093858][T13798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.098760][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.100334][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.104186][T13798] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.107225][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.108967][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.110412][ T4467] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.111541][ T4467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.115818][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.164745][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.166595][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.176043][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.177236][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.182230][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.185846][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.189480][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.192098][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.194043][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.197256][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.199301][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.206015][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.207547][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.212089][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.213751][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.885381][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 511.934837][T13798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.999537][T12574] device hsr_slave_0 left promiscuous mode [ 512.087808][T12574] device hsr_slave_1 left promiscuous mode [ 512.171511][T12574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.185279][T12574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.499013][T12574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.500188][T12574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.585668][T12574] device veth1_macvtap left promiscuous mode [ 512.586981][T12574] device veth0_macvtap left promiscuous mode [ 512.588396][T12574] device veth1_vlan left promiscuous mode [ 512.589969][T12574] device veth0_vlan left promiscuous mode [ 513.651354][T12574] bond8 (unregistering): (slave bond10): Releasing backup interface [ 513.692251][T12574] bond10 (unregistering): Released all slaves [ 513.695909][T12574] bond8 (unregistering): Released all slaves [ 513.699214][T12574] bond9 (unregistering): Released all slaves [ 514.372065][T12574] bond7 (unregistering): Released all slaves [ 515.032671][T12574] bond5 (unregistering): Released all slaves [ 515.703498][T12574] bond6 (unregistering): Released all slaves [ 516.361662][T12574] bond4 (unregistering): Released all slaves [ 517.042551][T12574] bond3 (unregistering): Released all slaves [ 517.046499][T12574] bond2 (unregistering): Released all slaves [ 517.049857][T12574] bond1 (unregistering): Released all slaves [ 518.732949][T12574] team0 (unregistering): Port device team_slave_1 removed [ 518.892550][T12574] team0 (unregistering): Port device team_slave_0 removed [ 519.071251][T12574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.281167][T12574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.691702][T12574] bond0 (unregistering): Released all slaves [ 521.778516][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.780526][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.782124][T14112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.794310][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.803103][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.804568][T14114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.886617][T14118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'. [ 522.082053][T14152] raw_sendmsg: syz.2.2929 forgot to set AF_INET. Fix it! [ 522.260958][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.262260][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.267825][T13798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.736640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.738356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.739869][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 522.752300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 522.753935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 522.755354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 522.757709][T13798] device veth0_vlan entered promiscuous mode [ 522.769689][T13798] device veth1_vlan entered promiscuous mode [ 522.781049][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.789518][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.795328][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.798570][T13798] device veth0_macvtap entered promiscuous mode [ 522.801780][T13798] device veth1_macvtap entered promiscuous mode [ 522.807922][T13798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.809684][T13798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.821792][T13798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.823735][T13798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.826229][T13798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.827672][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 522.829135][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 522.830642][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 522.835386][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.839135][T13798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.841685][T13798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.843332][T13798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.844995][T13798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.847240][T13798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.848590][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 522.853976][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.859437][T13798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.870673][T13798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.874226][T13798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.875725][T13798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.908997][ T4516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.910155][ T4516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.915096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.189259][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.190501][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.199113][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.950997][ T4331] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 525.968027][ T4331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 525.970154][ T4331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 525.972931][ T4331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 525.974562][ T4331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 525.976178][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.072016][T14212] chnl_net:caif_netlink_parms(): no params data found [ 526.173354][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.174628][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.178675][T14212] device bridge_slave_0 entered promiscuous mode [ 526.185601][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.188055][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.194567][T14212] device bridge_slave_1 entered promiscuous mode [ 526.226124][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.235878][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.322013][T14212] team0: Port device team_slave_0 added [ 526.324302][T14212] team0: Port device team_slave_1 added [ 526.339278][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.340406][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.375838][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.387644][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.391116][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.400436][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.733019][ T4439] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.792081][T14212] device hsr_slave_0 entered promiscuous mode [ 526.831143][T14212] device hsr_slave_1 entered promiscuous mode [ 526.871988][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.874383][T14212] Cannot create hsr debugfs directory [ 526.923479][ T4439] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.002119][ T4439] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.102085][ T4439] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.090881][ T4331] Bluetooth: hci4: command 0x0409 tx timeout [ 528.652952][ T4439] bond6: (slave ip6gretap0): Releasing active interface [ 529.807276][T14305] bridge0: port 1(gretap0) entered blocking state [ 529.808523][T14305] bridge0: port 1(gretap0) entered disabled state [ 529.813651][T14305] device gretap0 entered promiscuous mode [ 530.170986][T13800] Bluetooth: hci4: command 0x041b tx timeout [ 530.195920][T14212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 530.544896][T14212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 530.683864][T14212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.071993][T14212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.249836][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.091478][ T4439] bond4: (slave gretap0): Releasing active interface [ 532.250814][ T4331] Bluetooth: hci4: command 0x040f tx timeout [ 532.566597][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.602491][T14212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.606373][T14212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.666432][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.668071][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.669692][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.671958][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.673455][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.674615][T12156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.996482][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.998250][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.999714][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.000869][T12156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.028724][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.030430][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.039290][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.041138][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.042875][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.044927][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.073066][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.076928][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.085894][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.097037][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.106853][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.108368][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.109802][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.997127][T14366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.999337][T14366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.001354][T14366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.380878][ T4331] Bluetooth: hci4: command 0x0419 tx timeout [ 534.446603][T14368] loop4: detected capacity change from 0 to 32768 [ 534.448975][T14368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2974 (14368) [ 534.453635][T14368] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.455686][T14368] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 534.457126][T14368] BTRFS info (device loop4): metadata ratio 2 [ 534.457987][T14368] BTRFS info (device loop4): allowing degraded mounts [ 534.459059][T14368] BTRFS info (device loop4): force zlib compression, level 3 [ 534.460109][T14368] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 534.464168][T14368] BTRFS info (device loop4): use zstd compression, level 3 [ 534.465407][T14368] BTRFS info (device loop4): force clearing of disk cache [ 534.466629][T14368] BTRFS info (device loop4): max_inline at 0 [ 534.467511][T14368] BTRFS info (device loop4): using free space tree [ 534.476461][T14368] BTRFS info (device loop4): enabling ssd optimizations [ 534.477989][T14368] BTRFS info (device loop4): rebuilding free space tree [ 534.530869][T13798] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 534.597792][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.599249][T12156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.686062][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.959800][T14408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.972428][T14408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.974101][T14408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 536.047367][ T4439] device hsr_slave_0 left promiscuous mode [ 536.080845][ T4439] device hsr_slave_1 left promiscuous mode [ 536.161357][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.162705][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.164123][ T4439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.165423][ T4439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.241010][ T4439] device veth1_macvtap left promiscuous mode [ 536.242039][ T4439] device veth0_macvtap left promiscuous mode [ 536.243132][ T4439] device veth1_vlan left promiscuous mode [ 536.244005][ T4439] device veth0_vlan left promiscuous mode [ 537.132342][ T4439] bond6 (unregistering): Released all slaves [ 538.011872][ T4439] bond5 (unregistering): Released all slaves [ 538.661748][ T4439] bond4 (unregistering): Released all slaves [ 538.665180][ T4439] bond3 (unregistering): Released all slaves [ 538.668553][ T4439] bond1 (unregistering): Released all slaves [ 539.312324][ T4439] bond2 (unregistering): Released all slaves [ 540.922525][ T4439] team0 (unregistering): Port device team_slave_1 removed [ 541.102481][ T4439] team0 (unregistering): Port device team_slave_0 removed [ 541.281114][ T4439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.521964][ T4439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.032993][ T4439] bond0 (unregistering): Released all slaves [ 544.190347][T14212] device veth0_vlan entered promiscuous mode [ 544.193546][T14212] device veth1_vlan entered promiscuous mode [ 544.200344][T14212] device veth0_macvtap entered promiscuous mode [ 544.202990][T14212] device veth1_macvtap entered promiscuous mode [ 544.207640][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.209231][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.211524][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.213004][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.215013][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.217011][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.218551][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.219884][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.221768][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.223845][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.226122][T14212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.227469][T14212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.228722][T14212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.229939][T14212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.266682][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.268210][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.277460][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.278709][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.283846][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 544.285641][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.287211][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 544.288804][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.290372][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 544.920765][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 544.927961][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 544.933019][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.935813][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 544.938358][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 544.943606][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.945299][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.948071][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.960322][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 544.968638][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.971501][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.974175][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.976744][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 545.007680][T14456] bridge0: port 3(gretap0) entered blocking state [ 545.008833][T14456] bridge0: port 3(gretap0) entered disabled state [ 545.011427][T14456] device gretap0 entered promiscuous mode [ 545.012599][T14456] bridge0: port 3(gretap0) entered blocking state [ 545.013623][T14456] bridge0: port 3(gretap0) entered forwarding state [ 547.583312][T13800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.585823][T13800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.658252][T13800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.994437][T13800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.996127][T13800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 547.997624][T13800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.073252][T14499] chnl_net:caif_netlink_parms(): no params data found [ 548.097591][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.098926][T14499] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.100455][T14499] device bridge_slave_0 entered promiscuous mode [ 548.103049][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.104236][T14499] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.105975][T14499] device bridge_slave_1 entered promiscuous mode [ 548.120151][T14499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.123121][T14499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.141711][T14499] team0: Port device team_slave_0 added [ 548.144214][T14499] team0: Port device team_slave_1 added [ 548.156438][T14499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.157721][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.162545][T14499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.166562][T14499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.167617][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.180788][T14499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.281998][T14499] device hsr_slave_0 entered promiscuous mode [ 548.321092][T14499] device hsr_slave_1 entered promiscuous mode [ 548.360908][T14499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.362363][T14499] Cannot create hsr debugfs directory [ 548.969099][T14499] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.002357][T14499] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.042734][T14499] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.082121][T14499] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.129876][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.130988][T14499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.132139][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.133225][T14499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.137848][ T4530] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.139593][ T4530] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.159653][T14499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.165835][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.167437][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.170530][T14499] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.175276][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.177031][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.178416][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.179527][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.186093][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.187783][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.189245][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.190302][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.193781][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 549.196909][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 549.199992][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 549.205439][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 549.206966][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 549.209970][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 549.213425][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 549.216560][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 549.218039][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.221374][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.222860][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.226251][T14499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 549.286193][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 549.287609][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.292240][T14499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.299875][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.302160][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.310072][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.311982][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.313660][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.315090][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.317562][T14499] device veth0_vlan entered promiscuous mode [ 549.323311][T14499] device veth1_vlan entered promiscuous mode [ 549.330636][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 549.335511][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 549.336943][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.338467][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.342811][T14499] device veth0_macvtap entered promiscuous mode [ 549.346253][T14499] device veth1_macvtap entered promiscuous mode [ 549.351601][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.353347][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.354845][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.356418][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.357912][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.359473][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.362234][T14499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.363528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 549.365115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.366608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.368185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.370639][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.372967][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.374452][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.375952][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.377525][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.379111][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.381286][T14499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.382638][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.384366][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.387408][T14499] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.388681][T14499] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.397058][T14499] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.398645][T14499] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.426189][T13877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.430314][T13877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.435366][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.436603][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.436908][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.439384][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.597311][ T27] audit: type=1326 audit(549.580:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.602030][ T27] audit: type=1326 audit(549.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.611276][ T27] audit: type=1326 audit(549.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.614472][ T27] audit: type=1326 audit(549.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.623891][T13800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.626122][T13800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.627650][T13800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.629410][ T27] audit: type=1326 audit(549.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.635884][ T27] audit: type=1326 audit(549.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.639181][ T27] audit: type=1326 audit(549.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.642901][ T27] audit: type=1326 audit(549.590:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.646235][ T27] audit: type=1326 audit(549.590:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=203 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.649647][ T27] audit: type=1326 audit(549.590:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14533 comm="syz.4.3008" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8eb5b9e8 code=0x7ffc0000 [ 549.668262][T13800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.670170][T13800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 549.672001][ T4331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.037960][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'. [ 550.046642][T14542] bridge0: port 3(gretap0) entered blocking state [ 550.047811][T14542] bridge0: port 3(gretap0) entered disabled state [ 550.049136][T14542] device gretap0 entered promiscuous mode [ 550.050092][T14542] bridge0: port 3(gretap0) entered blocking state [ 550.050987][T14542] bridge0: port 3(gretap0) entered forwarding state [ 550.110984][ T4333] Bluetooth: hci2: command 0x0409 tx timeout [ 550.148070][T14536] chnl_net:caif_netlink_parms(): no params data found [ 550.164726][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.166056][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.167563][T14536] device bridge_slave_0 entered promiscuous mode [ 550.169582][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.171523][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.172984][T14536] device bridge_slave_1 entered promiscuous mode [ 550.517449][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.521411][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.538127][T14536] team0: Port device team_slave_0 added [ 550.539884][T14536] team0: Port device team_slave_1 added [ 550.546398][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.547418][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.554806][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.557205][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.558216][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.562253][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.612135][T14536] device hsr_slave_0 entered promiscuous mode [ 550.665320][T14536] device hsr_slave_1 entered promiscuous mode [ 550.690875][T14536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 550.692087][T14536] Cannot create hsr debugfs directory [ 551.086844][ T4727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.465579][ T4727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.542937][ T4727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.645348][ T4727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.691839][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 551.922272][ T4727] tipc: Disabling bearer [ 551.927287][ T4727] tipc: Left network mode [ 552.173985][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 552.832192][ T4727] device gretap0 left promiscuous mode [ 552.834099][ T4727] bridge0: port 1(gretap0) entered disabled state [ 552.900376][T14536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.942689][T14536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.023367][T14536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.096480][T14536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 553.491056][ T4727] IPVS: stopping backup sync thread 8775 ... [ 553.519616][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.758432][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.760092][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.765493][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.769359][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.771258][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 553.776332][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.778270][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.779452][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.812490][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.816553][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.818335][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.820178][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.821316][T12574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.834362][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.837039][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.865893][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.870847][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.873775][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.875833][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.250979][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 554.338876][T14536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 554.342290][T14536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.345011][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.346512][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.347954][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.349402][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.353515][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.356290][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.523382][ T4727] device hsr_slave_0 left promiscuous mode [ 554.541344][ T4727] device hsr_slave_1 left promiscuous mode [ 554.624120][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.625463][ T4727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.627775][ T4727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.629256][ T4727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.710874][ T4727] device veth1_macvtap left promiscuous mode [ 554.712118][ T4727] device veth0_macvtap left promiscuous mode [ 554.713111][ T4727] device veth1_vlan left promiscuous mode [ 554.714042][ T4727] device veth0_vlan left promiscuous mode [ 555.123476][ T4727] bond3 (unregistering): Released all slaves [ 555.126885][ T4727] bond1 (unregistering): Released all slaves [ 555.851338][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 556.011966][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.086232][T14692] loop2: detected capacity change from 0 to 7 [ 556.090868][T14692] Dev loop2: unable to read RDB block 7 [ 556.092288][T14692] loop2: unable to read partition table [ 556.097260][T14692] loop2: partition table beyond EOD, truncated [ 556.108767][T14692] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 556.113905][ T3935] Dev loop2: unable to read RDB block 7 [ 556.114829][ T3935] loop2: unable to read partition table [ 556.115772][ T3935] loop2: partition table beyond EOD, truncated [ 556.330744][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 556.723666][ T4727] team0 (unregistering): Port device team_slave_1 removed [ 556.883393][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'. [ 556.892595][ T4727] team0 (unregistering): Port device team_slave_0 removed [ 557.040368][T14711] loop2: detected capacity change from 0 to 7 [ 557.044139][T14587] Dev loop2: unable to read RDB block 7 [ 557.045127][T14587] loop2: unable to read partition table [ 557.046132][T14587] loop2: partition table beyond EOD, truncated [ 557.047450][T14711] Dev loop2: unable to read RDB block 7 [ 557.048503][T14711] loop2: unable to read partition table [ 557.049400][T14711] loop2: partition table beyond EOD, truncated [ 557.051856][ T4727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.053887][T14711] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.532316][ T4727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.931480][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 559.842711][ T4727] bond0 (unregistering): Released all slaves [ 559.912593][T14671] device syzkaller0 entered promiscuous mode [ 559.919622][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.921861][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.923200][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.966765][T14736] tipc: Started in network mode [ 559.967557][T14736] tipc: Node identity 4, cluster identity 4711 [ 559.968458][T14736] tipc: Node number set to 4 [ 559.988828][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 559.990865][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.992505][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 559.997455][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.000077][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.002991][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.005536][T14536] device veth0_vlan entered promiscuous mode [ 560.009537][T14536] device veth1_vlan entered promiscuous mode [ 560.036804][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.038369][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.039634][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.041909][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.048971][T14536] device veth0_macvtap entered promiscuous mode [ 560.052726][T14536] device veth1_macvtap entered promiscuous mode [ 560.066625][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.074981][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.080454][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.082077][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.083618][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.085172][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.087460][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.120415][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.122158][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.123529][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 560.125072][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.127382][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.129082][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.130500][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.139348][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.139885][T14756] loop2: detected capacity change from 0 to 7 [ 560.143074][T14536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.146918][T14536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.149321][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.149953][T14756] Dev loop2: unable to read RDB block 7 [ 560.151123][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.151913][T14756] loop2: unable to read partition table [ 560.152856][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.155229][T14756] loop2: partition table beyond EOD, truncated [ 560.156118][T14756] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.179071][T14536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.180430][T14536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.190051][T14536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.194893][T14536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.269703][T12574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.271245][T12574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.274593][T12574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.301672][T12574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.302925][T12574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.305549][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 561.121718][ T4331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.123825][ T4331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.125388][ T4331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.128017][ T4331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.129372][ T4331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 561.130475][ T4331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.313933][T14777] chnl_net:caif_netlink_parms(): no params data found [ 561.489033][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.528320][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.530179][T14777] device bridge_slave_0 entered promiscuous mode [ 561.542402][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.543521][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.559684][T14777] device bridge_slave_1 entered promiscuous mode [ 561.597890][T14787] tipc: Started in network mode [ 561.598716][T14787] tipc: Node identity 4, cluster identity 4711 [ 561.599618][T14787] tipc: Node number set to 4 [ 561.601933][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.614762][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.647776][T14777] team0: Port device team_slave_0 added [ 561.648228][T14791] loop4: detected capacity change from 0 to 128 [ 561.660287][T14777] team0: Port device team_slave_1 added [ 561.706183][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.707341][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.716911][T14791] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 561.748094][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.770286][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.772944][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.776619][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.857655][T13798] EXT4-fs (loop4): unmounting filesystem. [ 561.863590][ T3935] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.865205][ T3935] Buffer I/O error on dev loop2, logical block 0, async page read [ 561.866317][ T3935] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.867552][ T3935] Buffer I/O error on dev loop2, logical block 1, async page read [ 561.868658][ T3935] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.869933][ T3935] Buffer I/O error on dev loop2, logical block 2, async page read [ 561.877551][ T3935] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.879602][ T3935] Buffer I/O error on dev loop2, logical block 3, async page read [ 561.881687][ T3935] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.883271][ T3935] Buffer I/O error on dev loop2, logical block 4, async page read [ 561.884365][ T3935] I/O error, dev loop2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.885640][ T3935] Buffer I/O error on dev loop2, logical block 5, async page read [ 561.886760][ T3935] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 561.888096][ T3935] Buffer I/O error on dev loop2, logical block 6, async page read [ 562.192372][T14777] device hsr_slave_0 entered promiscuous mode [ 562.196404][ T3935] ldm_validate_partition_table(): Disk read failed. [ 562.199625][ T3935] Dev loop2: unable to read RDB block 0 [ 562.200502][ T3935] loop2: unable to read partition table [ 562.204325][ T3935] loop2: partition table beyond EOD, truncated [ 562.231144][T14777] device hsr_slave_1 entered promiscuous mode [ 562.441244][T14813] loop4: detected capacity change from 0 to 40427 [ 562.449641][T14813] F2FS-fs (loop4): invalid crc value [ 562.454717][T14813] F2FS-fs (loop4): Found nat_bits in checkpoint [ 562.462065][T14813] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 563.103552][T14777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 563.146698][T14777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 563.221995][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 563.242711][T14777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 563.275681][T13798] syz-executor: attempt to access beyond end of device [ 563.275681][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 563.624289][T14777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 564.090180][T14844] loop2: detected capacity change from 0 to 7 [ 564.096218][T14587] Dev loop2: unable to read RDB block 7 [ 564.097143][T14587] loop2: unable to read partition table [ 564.098121][T14587] loop2: partition table beyond EOD, truncated [ 564.108871][T14844] Dev loop2: unable to read RDB block 7 [ 564.109807][T14844] loop2: unable to read partition table [ 564.111364][T14844] loop2: partition table beyond EOD, truncated [ 564.112349][T14844] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 564.142280][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.160349][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.162249][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.165447][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.169061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.170609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.177612][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.178794][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.184023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 564.189456][T14846] loop2: detected capacity change from 0 to 4096 [ 564.201029][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.202652][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.203933][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.205052][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.207403][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.214206][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 564.230665][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 564.232806][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.234328][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 564.235848][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.237273][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 564.237617][T14848] loop0: detected capacity change from 0 to 4096 [ 564.238477][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.240612][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 564.251570][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.256176][T14777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 564.259611][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.377048][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.384620][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.385840][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.389008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 564.391236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.413835][T14777] device veth0_vlan entered promiscuous mode [ 564.416960][T14777] device veth1_vlan entered promiscuous mode [ 565.225571][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.227251][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.228688][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.235781][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.238719][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.281862][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.283650][T10628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.286888][T14777] device veth0_macvtap entered promiscuous mode [ 565.289664][T14777] device veth1_macvtap entered promiscuous mode [ 565.291386][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 565.298616][T14864] loop2: detected capacity change from 0 to 128 [ 565.305619][T14860] loop4: detected capacity change from 0 to 4096 [ 565.306403][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.308360][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.315798][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.320273][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.322255][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.324774][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.326458][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.328639][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.334663][T14864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 565.346401][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.348251][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 565.350095][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 565.355450][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 565.357768][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 565.362342][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.364094][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.365753][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.396402][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.398025][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.399563][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.402190][T14777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.403758][T14777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.414269][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.417026][T14777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.418543][T14777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.419794][T14777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.421113][T14777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.424049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.425713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.436091][T14212] EXT4-fs (loop2): unmounting filesystem. [ 565.524924][T14872] loop0: detected capacity change from 0 to 4096 [ 565.528078][T10718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.529632][T10718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.532932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.886213][ T4727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.887493][ T4727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.890675][ T4727] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 566.427439][T14885] loop3: detected capacity change from 0 to 128 [ 566.457310][T14885] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 566.533113][T14777] EXT4-fs (loop3): unmounting filesystem. [ 566.549919][T14891] loop2: detected capacity change from 0 to 7 [ 566.598893][T14891] Dev loop2: unable to read RDB block 7 [ 566.599832][T14891] loop2: unable to read partition table [ 566.607135][T14891] loop2: partition table beyond EOD, truncated [ 566.608245][T14891] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 566.619100][T14897] loop3: detected capacity change from 0 to 1024 [ 566.620450][T14897] EXT4-fs: inline encryption not supported [ 566.641397][T14897] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 566.682214][T14897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 567.044306][T14917] device syzkaller0 entered promiscuous mode [ 567.371235][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 567.379354][T14921] device syzkaller0 entered promiscuous mode [ 567.625206][T14930] device syzkaller0 entered promiscuous mode [ 567.726711][T14777] EXT4-fs (loop3): unmounting filesystem. [ 567.815795][T14938] loop2: detected capacity change from 0 to 7 [ 567.817621][T14587] Dev loop2: unable to read RDB block 7 [ 567.818494][T14587] loop2: AHDI p1 p2 p3 [ 567.819642][T14587] loop2: partition table partially beyond EOD, truncated [ 567.829764][T14587] loop2: p1 start 1601398130 is beyond EOD, truncated [ 567.837826][T14587] loop2: p2 start 1702059890 is beyond EOD, truncated [ 567.840416][T14938] Dev loop2: unable to read RDB block 7 [ 567.841685][T14938] loop2: AHDI p1 p2 p3 [ 567.842339][T14938] loop2: partition table partially beyond EOD, truncated [ 567.843473][T14938] loop2: p1 start 1601398130 is beyond EOD, truncated [ 567.844524][T14938] loop2: p2 start 1702059890 is beyond EOD, truncated [ 567.856962][ T3935] Dev loop2: unable to read RDB block 7 [ 567.857848][ T3935] loop2: AHDI p1 p2 p3 [ 567.858607][ T3935] loop2: partition table partially beyond EOD, truncated [ 567.859803][ T3935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 567.865168][ T3935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 568.130667][T14952] device syzkaller0 entered promiscuous mode [ 568.490490][T14958] loop0: detected capacity change from 0 to 1024 [ 568.526578][T14958] EXT4-fs: inline encryption not supported [ 568.545220][T14958] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 568.586490][T14958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 568.785417][T14963] device syzkaller0 entered promiscuous mode [ 569.024832][T14973] loop2: detected capacity change from 0 to 7 [ 569.027319][T14973] Dev loop2: unable to read RDB block 7 [ 569.028210][T14973] loop2: AHDI p1 p2 p3 [ 569.029000][T14973] loop2: partition table partially beyond EOD, truncated [ 569.031270][T14973] loop2: p1 start 1601398130 is beyond EOD, truncated [ 569.035272][T14973] loop2: p2 start 1702059890 is beyond EOD, truncated [ 569.050990][T14975] device syzkaller0 entered promiscuous mode [ 569.275713][T14979] netlink: 'syz.4.3120': attribute type 1 has an invalid length. [ 569.306629][T14982] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 569.402755][T14536] EXT4-fs (loop0): unmounting filesystem. [ 569.437709][T14981] loop2: detected capacity change from 0 to 40427 [ 569.452090][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 569.458809][T14981] F2FS-fs (loop2): invalid crc value [ 569.473711][T14981] F2FS-fs (loop2): Found nat_bits in checkpoint [ 569.485598][T14981] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 569.594301][T14979] device veth3 entered promiscuous mode [ 569.596528][T14979] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 570.236654][T14212] syz-executor: attempt to access beyond end of device [ 570.236654][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 570.432699][T15018] loop0: detected capacity change from 0 to 1024 [ 570.434069][T15018] EXT4-fs: inline encryption not supported [ 570.441758][T15018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.476940][T15018] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 571.304362][T14536] EXT4-fs (loop0): unmounting filesystem. [ 572.260270][T15042] loop0: detected capacity change from 0 to 40427 [ 572.270496][T15042] F2FS-fs (loop0): invalid crc value [ 572.277295][T15042] F2FS-fs (loop0): Found nat_bits in checkpoint [ 572.291558][T15042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 572.779508][T14536] syz-executor: attempt to access beyond end of device [ 572.779508][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 572.832747][T15086] loop4: detected capacity change from 0 to 4096 [ 573.080463][T15095] loop0: detected capacity change from 0 to 4096 [ 573.775360][T15117] loop2: detected capacity change from 0 to 4096 [ 574.860929][T15142] device syzkaller0 entered promiscuous mode [ 574.984068][T15151] loop4: detected capacity change from 0 to 4096 [ 575.058954][T15159] loop2: detected capacity change from 0 to 7 [ 575.068461][T15159] Dev loop2: unable to read RDB block 7 [ 575.069430][T15159] loop2: unable to read partition table [ 575.070475][T15159] loop2: partition table beyond EOD, truncated [ 575.076607][T15159] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 575.133692][ T3935] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.135191][ T3935] Buffer I/O error on dev loop2, logical block 0, async page read [ 575.139776][ T3935] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.141260][ T3935] Buffer I/O error on dev loop2, logical block 1, async page read [ 575.142455][ T3935] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.143803][ T3935] Buffer I/O error on dev loop2, logical block 2, async page read [ 575.145043][ T3935] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.146356][ T3935] Buffer I/O error on dev loop2, logical block 3, async page read [ 575.147687][ T3935] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.149175][ T3935] Buffer I/O error on dev loop2, logical block 4, async page read [ 575.150464][ T3935] I/O error, dev loop2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.154128][ T3935] Buffer I/O error on dev loop2, logical block 5, async page read [ 575.155381][ T3935] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 575.156884][ T3935] Buffer I/O error on dev loop2, logical block 6, async page read [ 575.158214][ T3935] ldm_validate_partition_table(): Disk read failed. [ 575.835511][ T3935] Dev loop2: unable to read RDB block 0 [ 575.836709][ T3935] loop2: unable to read partition table [ 575.838015][ T3935] loop2: partition table beyond EOD, truncated [ 575.902389][T15157] loop2: detected capacity change from 0 to 4096 [ 576.342585][T15180] loop1: detected capacity change from 0 to 4096 [ 576.500344][T15187] loop3: detected capacity change from 0 to 4096 [ 577.669076][T15201] device syzkaller0 entered promiscuous mode [ 577.669290][T15205] loop2: detected capacity change from 0 to 7 [ 577.692995][T15205] Dev loop2: unable to read RDB block 7 [ 577.693835][T15205] loop2: unable to read partition table [ 577.694812][T15205] loop2: partition table beyond EOD, truncated [ 577.695677][T15205] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 577.759717][ T3935] Dev loop2: unable to read RDB block 7 [ 577.760856][ T3935] loop2: unable to read partition table [ 577.761767][ T3935] loop2: partition table beyond EOD, truncated [ 577.917809][T15216] loop2: detected capacity change from 0 to 7 [ 577.922265][T15216] Dev loop2: unable to read RDB block 7 [ 577.924354][T15216] loop2: unable to read partition table [ 577.925364][T15216] loop2: partition table beyond EOD, truncated [ 577.927774][T15216] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.047269][T15220] loop0: detected capacity change from 0 to 4096 [ 578.820939][T15232] loop3: detected capacity change from 0 to 4096 [ 578.967152][ T3935] Dev loop2: unable to read RDB block 7 [ 578.968127][ T3935] loop2: unable to read partition table [ 578.969003][ T3935] loop2: partition table beyond EOD, truncated [ 579.453205][T15230] loop4: detected capacity change from 0 to 40427 [ 579.459550][T15230] F2FS-fs (loop4): invalid crc value [ 579.481939][T15230] F2FS-fs (loop4): Found nat_bits in checkpoint [ 579.498052][T15230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 579.586194][T15252] loop2: detected capacity change from 0 to 7 [ 579.591429][T15252] Dev loop2: unable to read RDB block 7 [ 579.593327][T15252] loop2: unable to read partition table [ 579.596164][T15252] loop2: partition table beyond EOD, truncated [ 579.598629][T15252] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 579.637698][T15253] device syzkaller0 entered promiscuous mode [ 580.023185][T13798] syz-executor: attempt to access beyond end of device [ 580.023185][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 580.108262][T15265] loop2: detected capacity change from 0 to 4096 [ 580.159203][T15266] loop3: detected capacity change from 0 to 4096 [ 580.200373][T15259] loop0: detected capacity change from 0 to 40427 [ 580.236650][T15259] F2FS-fs (loop0): invalid crc value [ 581.119356][T15259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 581.134781][T15259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 581.575290][T15290] loop2: detected capacity change from 0 to 4096 [ 581.582682][T14536] syz-executor: attempt to access beyond end of device [ 581.582682][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 581.788803][T15307] device syzkaller0 entered promiscuous mode [ 582.165691][T15311] loop4: detected capacity change from 0 to 4096 [ 582.781555][T15317] loop0: detected capacity change from 0 to 40427 [ 582.790065][T15317] F2FS-fs (loop0): invalid crc value [ 582.820097][T15317] F2FS-fs (loop0): Found nat_bits in checkpoint [ 582.835274][T15317] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 582.948239][T15329] loop3: detected capacity change from 0 to 4096 [ 583.425346][T14536] syz-executor: attempt to access beyond end of device [ 583.425346][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 583.451781][T15342] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 583.458752][T15336] loop2: detected capacity change from 0 to 40427 [ 583.804188][T15336] F2FS-fs (loop2): invalid crc value [ 583.847085][T15336] F2FS-fs (loop2): Found nat_bits in checkpoint [ 583.868762][T15336] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 584.015864][T15342] device veth3 entered promiscuous mode [ 584.018838][T15342] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 584.569857][T15370] device syzkaller0 entered promiscuous mode [ 584.587816][T14212] syz-executor: attempt to access beyond end of device [ 584.587816][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 584.721210][T15379] loop4: detected capacity change from 0 to 4096 [ 584.737116][T15381] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 584.757110][T15381] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 584.868005][T15381] device veth3 entered promiscuous mode [ 584.870536][T15381] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 584.899502][T15386] loop2: detected capacity change from 0 to 7 [ 584.901841][T14587] Dev loop2: unable to read RDB block 7 [ 584.902952][T14587] loop2: unable to read partition table [ 584.903931][T14587] loop2: partition table beyond EOD, truncated [ 584.920356][T15386] Dev loop2: unable to read RDB block 7 [ 584.928757][T15386] loop2: unable to read partition table [ 584.929720][T15386] loop2: partition table beyond EOD, truncated [ 584.935106][T15386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.141467][ T3935] Dev loop2: unable to read RDB block 7 [ 585.283640][ T3935] loop2: unable to read partition table [ 585.297099][ T3935] loop2: partition table beyond EOD, truncated [ 585.366761][T15399] loop1: detected capacity change from 0 to 4096 [ 586.123350][T15406] loop3: detected capacity change from 0 to 40427 [ 586.143389][T15406] F2FS-fs (loop3): invalid crc value [ 586.151064][T15412] loop2: detected capacity change from 0 to 7 [ 586.154517][T15406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 586.160214][T15412] Dev loop2: unable to read RDB block 7 [ 586.161983][T15412] loop2: unable to read partition table [ 586.163047][T15412] loop2: partition table beyond EOD, truncated [ 586.164235][T15412] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 586.233174][T15406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 586.264561][T15420] device syzkaller0 entered promiscuous mode [ 586.903390][T14777] syz-executor: attempt to access beyond end of device [ 586.903390][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 586.906652][T15431] loop4: detected capacity change from 0 to 40427 [ 586.927076][T15431] F2FS-fs (loop4): invalid crc value [ 587.014029][T15431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 587.028850][T15425] loop0: detected capacity change from 0 to 40427 [ 587.038822][T15425] F2FS-fs (loop0): invalid crc value [ 587.042220][T15431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 587.136591][T15425] F2FS-fs (loop0): Found nat_bits in checkpoint [ 587.149078][T15425] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 587.517556][T14536] syz-executor: attempt to access beyond end of device [ 587.517556][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 587.540929][T15461] loop2: detected capacity change from 0 to 7 [ 587.542650][T15461] Dev loop2: unable to read RDB block 7 [ 587.543528][T15461] loop2: unable to read partition table [ 587.544567][T15461] loop2: partition table beyond EOD, truncated [ 587.545556][T15461] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 587.669916][T15463] loop3: detected capacity change from 0 to 4096 [ 587.708088][ T3935] Dev loop2: unable to read RDB block 7 [ 587.712329][ T3935] loop2: unable to read partition table [ 587.719541][ T3935] loop2: partition table beyond EOD, truncated [ 588.164678][T15475] loop0: detected capacity change from 0 to 1024 [ 588.167380][T15475] EXT4-fs: inline encryption not supported [ 588.169736][T15475] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 588.180049][T15476] loop1: detected capacity change from 0 to 4096 [ 588.204542][T15475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 588.219144][T15481] loop2: detected capacity change from 0 to 7 [ 588.220741][T15481] Dev loop2: unable to read RDB block 7 [ 588.222591][T15481] loop2: AHDI p1 p2 p3 [ 588.223320][T15481] loop2: partition table partially beyond EOD, truncated [ 588.238453][T15481] loop2: p1 start 1601398130 is beyond EOD, truncated [ 588.253651][T15481] loop2: p2 start 1702059890 is beyond EOD, truncated [ 588.338781][T15472] loop4: detected capacity change from 0 to 40427 [ 588.350107][T15472] F2FS-fs (loop4): invalid crc value [ 588.365724][T15472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 588.855644][T15472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 588.976135][T15494] device syzkaller0 entered promiscuous mode [ 589.308474][T13798] syz-executor: attempt to access beyond end of device [ 589.308474][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 589.370051][T14536] EXT4-fs (loop0): unmounting filesystem. [ 589.384563][T15502] device syzkaller0 entered promiscuous mode [ 589.406987][T15504] loop1: detected capacity change from 0 to 40427 [ 589.417072][T15507] loop2: detected capacity change from 0 to 7 [ 589.438967][T15504] F2FS-fs (loop1): invalid crc value [ 589.446311][T15507] Dev loop2: unable to read RDB block 7 [ 589.447215][T15507] loop2: unable to read partition table [ 589.448159][T15507] loop2: partition table beyond EOD, truncated [ 589.462735][T15504] F2FS-fs (loop1): Found nat_bits in checkpoint [ 589.482314][T15507] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.484790][T15504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 589.702146][T14499] syz-executor: attempt to access beyond end of device [ 589.702146][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 590.616206][T15542] loop2: detected capacity change from 0 to 7 [ 590.617963][T15542] Dev loop2: unable to read RDB block 7 [ 590.618969][T15542] loop2: AHDI p1 p2 p3 [ 590.619602][T15542] loop2: partition table partially beyond EOD, truncated [ 590.621229][T15542] loop2: p1 start 1601398130 is beyond EOD, truncated [ 590.622276][T15542] loop2: p2 start 1702059890 is beyond EOD, truncated [ 590.624660][ T3935] Dev loop2: unable to read RDB block 7 [ 590.625634][ T3935] loop2: AHDI p1 p2 p3 [ 590.626303][ T3935] loop2: partition table partially beyond EOD, truncated [ 590.627499][ T3935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 590.628667][ T3935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 590.705788][T15547] device syzkaller0 entered promiscuous mode [ 590.976814][T15550] loop1: detected capacity change from 0 to 1024 [ 590.978218][T15550] EXT4-fs: inline encryption not supported [ 590.983641][T15550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 591.003816][T15551] loop0: detected capacity change from 0 to 4096 [ 591.013352][T15550] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 591.191647][ T3935] Dev loop2: unable to read RDB block 7 [ 591.192581][ T3935] loop2: AHDI p1 p2 p3 [ 591.193372][ T3935] loop2: partition table partially beyond EOD, truncated [ 591.194652][ T3935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 591.195695][ T3935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 591.792031][T14499] EXT4-fs (loop1): unmounting filesystem. [ 591.857426][T15565] loop0: detected capacity change from 0 to 4096 [ 591.857512][T15571] loop3: detected capacity change from 0 to 4096 [ 591.860274][T14879] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.021273][T15563] loop4: detected capacity change from 0 to 40427 [ 592.036344][T15563] F2FS-fs (loop4): invalid crc value [ 592.384404][T15563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 592.408093][T15563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 592.592738][T13798] syz-executor: attempt to access beyond end of device [ 592.592738][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 592.783374][T15591] netlink: 'syz.4.3312': attribute type 1 has an invalid length. [ 592.895880][T15591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 592.912816][T15594] loop2: detected capacity change from 0 to 4096 [ 592.966514][T15591] device veth5 entered promiscuous mode [ 593.300573][T15591] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 593.335617][T15599] netlink: 'syz.1.3316': attribute type 1 has an invalid length. [ 593.429179][T15599] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 593.756612][T12574] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 593.766701][T15599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.829566][T15599] device veth5 entered promiscuous mode [ 593.835498][T15599] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 593.861394][T12156] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 593.950536][T15602] loop4: detected capacity change from 0 to 40427 [ 593.963734][T15602] F2FS-fs (loop4): invalid crc value [ 593.986901][T15602] F2FS-fs (loop4): Found nat_bits in checkpoint [ 594.035166][T15602] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 594.037606][T15614] loop2: detected capacity change from 0 to 40427 [ 594.050435][T15614] F2FS-fs (loop2): invalid crc value [ 594.086628][T15623] loop1: detected capacity change from 0 to 1024 [ 594.090581][T15623] EXT4-fs: inline encryption not supported [ 594.105630][T15623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 594.139751][T15614] F2FS-fs (loop2): Found nat_bits in checkpoint [ 594.157257][T15614] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 594.187414][T15623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 595.165068][T15647] device syzkaller0 entered promiscuous mode [ 595.276289][T15654] loop3: detected capacity change from 0 to 4096 [ 595.837601][T15659] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 595.890603][T15664] loop4: detected capacity change from 0 to 4096 [ 595.976046][T15659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 595.983654][T15667] loop2: detected capacity change from 0 to 7 [ 595.988325][T15667] Dev loop2: unable to read RDB block 7 [ 595.989761][T15659] device veth3 entered promiscuous mode [ 595.992509][T15659] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 595.995173][T15667] loop2: unable to read partition table [ 595.999301][T15667] loop2: partition table beyond EOD, truncated [ 596.003144][T15667] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 596.131854][ T3935] Dev loop2: unable to read RDB block 7 [ 596.132756][ T3935] loop2: unable to read partition table [ 596.133762][ T3935] loop2: partition table beyond EOD, truncated [ 596.148764][T15670] netlink: 'syz.3.3333': attribute type 1 has an invalid length. [ 596.165637][T14499] EXT4-fs (loop1): unmounting filesystem. [ 596.210891][T14879] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 596.305213][T15670] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 596.424693][T15679] loop0: detected capacity change from 0 to 40427 [ 596.438314][T15679] F2FS-fs (loop0): invalid crc value [ 596.548024][ T4530] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 596.552235][T15675] loop2: detected capacity change from 0 to 40427 [ 596.555376][T15679] F2FS-fs (loop0): Found nat_bits in checkpoint [ 596.559892][T15670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 596.566205][T15675] F2FS-fs (loop2): invalid crc value [ 596.575830][T15679] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 596.579189][T15670] device veth3 entered promiscuous mode [ 596.581576][T15670] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 596.581790][T15675] F2FS-fs (loop2): Found nat_bits in checkpoint [ 596.608757][T15675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 596.661413][ T4439] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 596.910943][T14212] syz-executor: attempt to access beyond end of device [ 596.910943][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 597.107895][T15708] loop2: detected capacity change from 0 to 7 [ 597.109161][T15708] Dev loop2: unable to read RDB block 7 [ 597.109983][T15708] loop2: unable to read partition table [ 597.123011][T15708] loop2: partition table beyond EOD, truncated [ 597.123982][T15708] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 597.159061][T15707] loop4: detected capacity change from 0 to 4096 [ 598.435866][T15727] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 598.522260][T15732] tipc: Enabled bearer , priority 0 [ 598.540408][T15732] device syzkaller0 entered promiscuous mode [ 598.577678][T15730] loop3: detected capacity change from 0 to 40427 [ 598.584853][T15730] F2FS-fs (loop3): invalid crc value [ 598.601619][T15735] loop1: detected capacity change from 0 to 4096 [ 598.642061][T15730] F2FS-fs (loop3): Found nat_bits in checkpoint [ 598.662169][T15732] tipc: Resetting bearer [ 598.670874][T15730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 598.687457][T15731] tipc: Resetting bearer [ 598.901985][T15731] tipc: Disabling bearer [ 598.904718][T15727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.921217][T15742] device veth5 entered promiscuous mode [ 598.927829][T15742] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 598.929453][T15746] netlink: 'syz.3.3351': attribute type 1 has an invalid length. [ 599.011635][T15746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.027655][T15746] device veth5 entered promiscuous mode [ 599.030542][T15746] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 599.552073][T15761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3355'. [ 599.603022][T15764] loop1: detected capacity change from 0 to 256 [ 599.657269][T15757] loop2: detected capacity change from 0 to 40427 [ 599.659861][T15757] F2FS-fs (loop2): invalid crc value [ 599.668162][T15757] F2FS-fs (loop2): Found nat_bits in checkpoint [ 599.680479][T15757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 599.773361][T15770] tipc: Enabled bearer , priority 0 [ 599.775235][T15770] device syzkaller0 entered promiscuous mode [ 599.829695][T15770] tipc: Resetting bearer [ 599.835971][T15769] tipc: Resetting bearer [ 600.218256][T14212] syz-executor: attempt to access beyond end of device [ 600.218256][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 600.225479][T15774] loop4: detected capacity change from 0 to 4096 [ 600.233505][T15769] tipc: Disabling bearer [ 600.322912][T15776] loop1: detected capacity change from 0 to 4096 [ 601.738363][T15791] loop4: detected capacity change from 0 to 4096 [ 601.922067][T15780] loop2: detected capacity change from 0 to 40427 [ 601.933684][T15780] F2FS-fs (loop2): invalid crc value [ 602.347955][T15780] F2FS-fs (loop2): Found nat_bits in checkpoint [ 602.366647][T15780] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 602.827537][T15796] loop1: detected capacity change from 0 to 40427 [ 602.831827][T15796] F2FS-fs (loop1): invalid crc value [ 602.837181][T14212] syz-executor: attempt to access beyond end of device [ 602.837181][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 602.907383][T15808] loop0: detected capacity change from 0 to 40427 [ 602.932974][T15808] F2FS-fs (loop0): invalid crc value [ 602.934321][T15796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 602.956255][T15808] F2FS-fs (loop0): Found nat_bits in checkpoint [ 602.969866][T15808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 602.972424][T15796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 603.407153][T15829] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3371'. [ 603.418311][T14499] syz-executor: attempt to access beyond end of device [ 603.418311][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 603.467948][T14536] syz-executor: attempt to access beyond end of device [ 603.467948][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 603.569538][T15832] loop2: detected capacity change from 0 to 4096 [ 603.649098][T15834] loop0: detected capacity change from 0 to 256 [ 604.319196][T15844] loop0: detected capacity change from 0 to 4096 [ 604.369996][T15846] loop3: detected capacity change from 0 to 4096 [ 604.548414][T15851] loop2: detected capacity change from 0 to 256 [ 605.518329][T15859] device syzkaller0 entered promiscuous mode [ 605.725083][T15848] loop4: detected capacity change from 0 to 40427 [ 605.738300][T15848] F2FS-fs (loop4): invalid crc value [ 605.751889][T15870] loop0: detected capacity change from 0 to 256 [ 605.860149][T15848] F2FS-fs (loop4): Found nat_bits in checkpoint [ 605.889492][T15848] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 606.316744][T15865] loop3: detected capacity change from 0 to 40427 [ 606.322835][T15865] F2FS-fs (loop3): invalid crc value [ 606.325174][T15865] F2FS-fs (loop3): Found nat_bits in checkpoint [ 606.592494][T15865] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 606.665808][T13798] syz-executor: attempt to access beyond end of device [ 606.665808][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 607.094907][T15895] tipc: Enabled bearer , priority 0 [ 607.096420][T15895] device syzkaller0 entered promiscuous mode [ 607.200231][T15896] tipc: Resetting bearer [ 607.201456][T14777] syz-executor: attempt to access beyond end of device [ 607.201456][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 607.210210][T15894] tipc: Resetting bearer [ 607.261433][T15894] tipc: Disabling bearer [ 607.307131][T15900] tipc: Started in network mode [ 607.308117][T15900] tipc: Node identity d697d6d43943, cluster identity 4711 [ 607.309345][T15900] tipc: Enabled bearer , priority 0 [ 607.311714][T15900] device syzkaller0 entered promiscuous mode [ 607.357381][T15898] loop0: detected capacity change from 0 to 40427 [ 607.370568][T15898] F2FS-fs (loop0): invalid crc value [ 607.388013][T15898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 607.390482][T15900] tipc: Resetting bearer [ 607.414267][T15898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 607.423119][T15899] tipc: Resetting bearer [ 607.456721][T15902] loop4: detected capacity change from 0 to 40427 [ 607.473260][T15902] F2FS-fs (loop4): invalid crc value [ 607.615883][T15902] F2FS-fs (loop4): Found nat_bits in checkpoint [ 607.625357][T15915] loop1: detected capacity change from 0 to 4096 [ 607.626849][T14536] syz-executor: attempt to access beyond end of device [ 607.626849][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 607.651769][T15899] tipc: Disabling bearer [ 607.661958][T15902] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 607.735178][T15912] loop2: detected capacity change from 0 to 40427 [ 607.768937][T15912] F2FS-fs (loop2): invalid crc value [ 608.196826][T15912] F2FS-fs (loop2): Found nat_bits in checkpoint [ 608.219616][T15912] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 608.223430][T15920] device syzkaller0 entered promiscuous mode [ 608.264504][T13798] syz-executor: attempt to access beyond end of device [ 608.264504][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 608.459091][T14212] syz-executor: attempt to access beyond end of device [ 608.459091][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 609.059779][T15939] loop4: detected capacity change from 0 to 40427 [ 609.073576][T15939] F2FS-fs (loop4): invalid crc value [ 609.083196][T15939] F2FS-fs (loop4): Found nat_bits in checkpoint [ 609.097793][T15939] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 609.716192][T15950] loop3: detected capacity change from 0 to 1024 [ 609.729751][T15950] EXT4-fs: inline encryption not supported [ 609.737560][T15950] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 609.745981][T15953] tipc: Started in network mode [ 609.746855][T15953] tipc: Node identity 9224837226c8, cluster identity 4711 [ 609.748011][T15953] tipc: Enabled bearer , priority 0 [ 609.749293][T15953] device syzkaller0 entered promiscuous mode [ 609.764356][T15950] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 609.832237][T15958] tipc: Resetting bearer [ 609.837266][T13798] syz-executor: attempt to access beyond end of device [ 609.837266][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 609.882908][T15954] loop0: detected capacity change from 0 to 40427 [ 609.885314][T15954] F2FS-fs (loop0): invalid crc value [ 609.897214][T15952] tipc: Resetting bearer [ 609.971110][T15954] F2FS-fs (loop0): Found nat_bits in checkpoint [ 609.985725][T15952] tipc: Disabling bearer [ 609.990567][T15954] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 610.865952][T14536] syz-executor: attempt to access beyond end of device [ 610.865952][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 610.871876][T14777] EXT4-fs (loop3): unmounting filesystem. [ 610.949784][T15984] loop2: detected capacity change from 0 to 7 [ 610.953120][T15984] Dev loop2: unable to read RDB block 7 [ 610.954162][T15984] loop2: unable to read partition table [ 610.955038][T15984] loop2: partition table beyond EOD, truncated [ 610.956055][T15984] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 611.043073][T15982] loop2: detected capacity change from 0 to 4096 [ 611.568300][T15986] loop3: detected capacity change from 0 to 40427 [ 611.577831][T15986] F2FS-fs (loop3): invalid crc value [ 611.594524][T15986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 611.610308][T15986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 612.155228][T14777] syz-executor: attempt to access beyond end of device [ 612.155228][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 612.174734][T16016] loop2: detected capacity change from 0 to 7 [ 612.178983][T16014] tipc: Enabled bearer , priority 0 [ 612.180244][T16014] device syzkaller0 entered promiscuous mode [ 612.190572][T16016] Dev loop2: unable to read RDB block 7 [ 612.191987][T16016] loop2: unable to read partition table [ 612.192964][T16016] loop2: partition table beyond EOD, truncated [ 612.193911][T16016] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 612.203847][T16017] loop4: detected capacity change from 0 to 256 [ 612.235051][T16014] tipc: Resetting bearer [ 612.239992][T16013] tipc: Resetting bearer [ 612.304759][T16013] tipc: Disabling bearer [ 612.482582][T16012] loop2: detected capacity change from 0 to 40427 [ 612.488239][T16012] F2FS-fs (loop2): invalid crc value [ 612.508988][T16012] F2FS-fs (loop2): Found nat_bits in checkpoint [ 612.538362][T16012] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 612.554867][T16021] loop3: detected capacity change from 0 to 40427 [ 612.564828][T16021] F2FS-fs (loop3): invalid crc value [ 612.572968][T16019] loop1: detected capacity change from 0 to 40427 [ 612.641629][T16019] F2FS-fs (loop1): invalid crc value [ 612.649315][T16021] F2FS-fs (loop3): Found nat_bits in checkpoint [ 612.659774][T16021] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 612.675362][T16019] F2FS-fs (loop1): Found nat_bits in checkpoint [ 613.015005][T16019] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 613.415695][T14212] syz-executor: attempt to access beyond end of device [ 613.415695][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.418543][T14499] syz-executor: attempt to access beyond end of device [ 613.418543][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.463728][T14777] syz-executor: attempt to access beyond end of device [ 613.463728][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.662089][T16062] device syzkaller0 entered promiscuous mode [ 613.763668][T16067] device syzkaller0 entered promiscuous mode [ 613.787048][T16055] loop2: detected capacity change from 0 to 40427 [ 613.796012][T16055] F2FS-fs (loop2): invalid crc value [ 613.805196][T16055] F2FS-fs (loop2): Found nat_bits in checkpoint [ 613.819079][T16055] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 613.951964][T16077] loop3: detected capacity change from 0 to 4096 [ 614.442952][T14212] syz-executor: attempt to access beyond end of device [ 614.442952][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 614.587865][T16085] device syzkaller0 entered promiscuous mode [ 614.615467][T16083] loop0: detected capacity change from 0 to 40427 [ 614.629943][T16083] F2FS-fs (loop0): invalid crc value [ 614.634599][T16083] F2FS-fs (loop0): Found nat_bits in checkpoint [ 614.653307][T16083] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 614.769489][T16095] loop1: detected capacity change from 0 to 256 [ 615.085353][T16100] loop2: detected capacity change from 0 to 7 [ 615.100875][T16100] Dev loop2: unable to read RDB block 7 [ 615.101785][T16100] loop2: unable to read partition table [ 615.102705][T16100] loop2: partition table beyond EOD, truncated [ 615.103658][T16100] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.131931][T16104] device syzkaller0 entered promiscuous mode [ 615.254825][T16110] loop2: detected capacity change from 0 to 7 [ 615.256309][T16110] Dev loop2: unable to read RDB block 7 [ 615.257295][T16110] loop2: unable to read partition table [ 615.258249][T16110] loop2: partition table beyond EOD, truncated [ 615.259786][T16110] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 615.348896][T14536] syz-executor: attempt to access beyond end of device [ 615.348896][T14536] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 616.030232][T16121] loop1: detected capacity change from 0 to 40427 [ 616.040135][T16121] F2FS-fs (loop1): invalid crc value [ 616.059087][T16121] F2FS-fs (loop1): Found nat_bits in checkpoint [ 616.078389][T16121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 616.267862][T16133] loop4: detected capacity change from 0 to 4096 [ 616.360934][T16123] loop2: detected capacity change from 0 to 40427 [ 616.401402][T16123] F2FS-fs (loop2): invalid crc value [ 616.418611][T16123] F2FS-fs (loop2): Found nat_bits in checkpoint [ 616.442400][T16123] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 616.901790][T14212] syz-executor: attempt to access beyond end of device [ 616.901790][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 616.904307][T14499] syz-executor: attempt to access beyond end of device [ 616.904307][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 617.136476][T16149] device syzkaller0 entered promiscuous mode [ 617.166797][T16151] loop2: detected capacity change from 0 to 7 [ 617.173502][T16151] Dev loop2: unable to read RDB block 7 [ 617.174595][T16151] loop2: unable to read partition table [ 617.175496][T16151] loop2: partition table beyond EOD, truncated [ 617.187016][T16151] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 617.219064][ T3935] Dev loop2: unable to read RDB block 7 [ 617.223922][ T3935] loop2: unable to read partition table [ 617.224805][ T3935] loop2: partition table beyond EOD, truncated [ 617.225079][T16153] device syzkaller0 entered promiscuous mode [ 617.453515][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.685955][T16158] loop2: detected capacity change from 0 to 40427 [ 617.707881][T16158] F2FS-fs (loop2): invalid crc value [ 617.721930][T16158] F2FS-fs (loop2): Found nat_bits in checkpoint [ 617.736976][T16161] netlink: 'syz.4.3465': attribute type 1 has an invalid length. [ 617.739145][T16158] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 617.865265][T16161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 617.898460][T16161] device veth7 entered promiscuous mode [ 617.905222][T16161] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 617.908179][T14212] syz-executor: attempt to access beyond end of device [ 617.908179][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 617.962949][T16170] loop3: detected capacity change from 0 to 40427 [ 618.018472][T16170] F2FS-fs (loop3): invalid crc value [ 618.018758][T16182] loop2: detected capacity change from 0 to 7 [ 618.021866][T16182] Dev loop2: unable to read RDB block 7 [ 618.022857][T16182] loop2: unable to read partition table [ 618.023771][T16182] loop2: partition table beyond EOD, truncated [ 618.024850][T16182] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 618.042752][T16170] F2FS-fs (loop3): Found nat_bits in checkpoint [ 618.060850][T16170] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 618.223480][T14879] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 618.529561][T16198] device syzkaller0 entered promiscuous mode [ 618.635390][T14777] syz-executor: attempt to access beyond end of device [ 618.635390][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 618.749441][T16206] device syzkaller0 entered promiscuous mode [ 618.837248][T16195] loop2: detected capacity change from 0 to 40427 [ 618.843411][T16195] F2FS-fs (loop2): invalid crc value [ 618.858669][T16195] F2FS-fs (loop2): Found nat_bits in checkpoint [ 618.882140][T16195] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 618.917373][T16214] loop0: detected capacity change from 0 to 4096 [ 619.347763][T14212] syz-executor: attempt to access beyond end of device [ 619.347763][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 619.502332][T16230] loop2: detected capacity change from 0 to 7 [ 619.503691][T16230] Dev loop2: unable to read RDB block 7 [ 619.504654][T16230] loop2: unable to read partition table [ 619.505600][T16230] loop2: partition table beyond EOD, truncated [ 619.506474][T16230] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 619.530804][ T4331] Bluetooth: hci5: command 0x0406 tx timeout [ 619.555008][ T3935] Dev loop2: unable to read RDB block 7 [ 619.556050][ T3935] loop2: unable to read partition table [ 619.558398][ T3935] loop2: partition table beyond EOD, truncated [ 619.605504][T14587] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 619.642752][T16236] loop2: detected capacity change from 0 to 7 [ 619.646086][T16236] Dev loop2: unable to read RDB block 7 [ 619.647018][T16236] loop2: unable to read partition table [ 619.647855][T16236] loop2: partition table beyond EOD, truncated [ 619.648779][T16236] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 619.670163][ T3935] Dev loop2: unable to read RDB block 7 [ 619.671315][ T3935] loop2: unable to read partition table [ 619.672287][ T3935] loop2: partition table beyond EOD, truncated [ 619.907029][T16238] loop4: detected capacity change from 0 to 40427 [ 619.938142][T16238] F2FS-fs (loop4): invalid crc value [ 619.956008][T16238] F2FS-fs (loop4): Found nat_bits in checkpoint [ 619.971750][T16238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 620.142321][T13798] syz-executor: attempt to access beyond end of device [ 620.142321][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 620.162726][T16244] loop2: detected capacity change from 0 to 40427 [ 620.215723][T16244] F2FS-fs (loop2): invalid crc value [ 620.226175][T16244] F2FS-fs (loop2): Found nat_bits in checkpoint [ 620.234606][T16244] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 620.755775][T14212] syz-executor: attempt to access beyond end of device [ 620.755775][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 620.970570][T16281] loop2: detected capacity change from 0 to 40427 [ 620.987618][T16281] F2FS-fs (loop2): invalid crc value [ 620.992848][T16281] F2FS-fs (loop2): Found nat_bits in checkpoint [ 621.006001][T16281] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 621.719517][T14212] syz-executor: attempt to access beyond end of device [ 621.719517][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 621.806182][T16291] loop2: detected capacity change from 0 to 7 [ 621.808077][T16291] Dev loop2: unable to read RDB block 7 [ 621.808968][T16291] loop2: unable to read partition table [ 621.809908][T16291] loop2: partition table beyond EOD, truncated [ 621.817006][T16291] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 621.873985][T16293] loop2: detected capacity change from 0 to 7 [ 621.875275][T16293] Dev loop2: unable to read RDB block 7 [ 621.876093][T16293] loop2: unable to read partition table [ 621.877024][T16293] loop2: partition table beyond EOD, truncated [ 621.877868][T16293] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 630.750260][T16228] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 630.758494][T16234] device veth7 entered promiscuous mode [ 631.412757][T16307] loop1: detected capacity change from 0 to 40427 [ 631.436093][T16311] loop4: detected capacity change from 0 to 40427 [ 631.437741][T16307] F2FS-fs (loop1): invalid crc value [ 631.446295][T16311] F2FS-fs (loop4): invalid crc value [ 631.447015][T16322] loop2: detected capacity change from 0 to 7 [ 631.452476][T16322] Dev loop2: unable to read RDB block 7 [ 631.454429][T16322] loop2: unable to read partition table [ 631.456580][T16322] loop2: partition table beyond EOD, truncated [ 631.457582][T16322] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 631.462025][T16307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 631.484069][T16311] F2FS-fs (loop4): Found nat_bits in checkpoint [ 631.491513][T16307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 631.503081][T16311] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 632.109680][T16314] loop3: detected capacity change from 0 to 40427 [ 632.124610][T14499] syz-executor: attempt to access beyond end of device [ 632.124610][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 632.437427][T16314] F2FS-fs (loop3): invalid crc value [ 632.468981][T13798] syz-executor: attempt to access beyond end of device [ 632.468981][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 632.483740][T16314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 632.507173][T16314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 632.925670][T16342] loop2: detected capacity change from 0 to 40427 [ 632.970226][T16342] F2FS-fs (loop2): invalid crc value [ 633.051910][T14777] syz-executor: attempt to access beyond end of device [ 633.051910][T14777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 633.073047][T16342] F2FS-fs (loop2): Found nat_bits in checkpoint [ 633.077062][T16350] loop1: detected capacity change from 0 to 40427 [ 633.087941][T16350] F2FS-fs (loop1): invalid crc value [ 633.282312][T16342] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 633.489763][T16350] F2FS-fs (loop1): Found nat_bits in checkpoint [ 633.510917][T16350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 634.169554][T14212] syz-executor: attempt to access beyond end of device [ 634.169554][T14212] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 634.186769][T16355] loop4: detected capacity change from 0 to 40427 [ 634.188911][T16355] F2FS-fs (loop4): invalid crc value [ 634.210913][T14499] syz-executor: attempt to access beyond end of device [ 634.210913][T14499] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 634.235141][T16355] F2FS-fs (loop4): Found nat_bits in checkpoint [ 634.266688][T16355] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 634.344048][T16394] tipc: Enabled bearer , priority 0 [ 634.345424][T16394] device syzkaller0 entered promiscuous mode [ 634.356877][T16394] tipc: Resetting bearer [ 634.389349][T16393] tipc: Resetting bearer [ 634.852335][T16393] tipc: Disabling bearer [ 634.854349][T13798] syz-executor: attempt to access beyond end of device [ 634.854349][T13798] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 636.564354][T16429] Driver unsupported XDP return value 0 on prog (id 161) dev N/A, expect packet loss! [ 638.723515][T16473] overlayfs: failed to clone upperpath [ 641.115243][T16492] loop1: detected capacity change from 0 to 8192 [ 641.518211][T16492] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 641.519093][T16492] loop1: partition table partially beyond EOD, truncated [ 641.520251][T16492] loop1: p1 start 100663296 is beyond EOD, truncated [ 641.521629][T16492] loop1: p2 size 134217732 extends beyond EOD, truncated [ 641.524391][T16492] loop1: p4 size 14876672 extends beyond EOD, truncated [ 641.525898][T16492] loop1: p5 size 134217732 extends beyond EOD, truncated [ 641.529540][T16492] loop1: p6 size 14876672 extends beyond EOD, truncated [ 643.303609][T16300] udevd[16300]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 643.303892][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 643.306990][T16327] udevd[16327]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 643.310388][T16338] udevd[16338]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 644.572593][T16540] loop4: detected capacity change from 0 to 512 [ 644.585956][T16548] udevd[16548]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 646.257589][ C1] ------------[ cut here ]------------ [ 646.258543][ C1] WARNING: CPU: 1 PID: 16582 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x148c/0x19cc [ 646.259899][ C1] Modules linked in: [ 646.260438][ C1] CPU: 1 PID: 16582 Comm: syz.3.3577 Not tainted syzkaller #0 [ 646.261443][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 646.262849][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 646.263913][ C1] pc : __ieee80211_beacon_get+0x148c/0x19cc [ 646.264700][ C1] lr : __ieee80211_beacon_get+0x148c/0x19cc [ 646.265589][ C1] sp : ffff800008017920 [ 646.266176][ C1] x29: ffff800008017ad0 x28: ffff800008017b3c x27: ffff0000d26dd258 [ 646.267282][ C1] x26: ffff0000d9450ea0 x25: ffff0000d26dd600 x24: ffff0000fe9ccc80 [ 646.268432][ C1] x23: 0000000000000000 x22: 0000000000000001 x21: ffff700001002f34 [ 646.269632][ C1] x20: ffff0000fe9ce790 x19: dfff800000000000 x18: ffff800011abbcc0 [ 646.270731][ C1] x17: 00000000ffff0000 x16: ffff8000082d10fc x15: 0000000000000000 [ 646.271869][ C1] x14: 0000000000000007 x13: 0000000000ff0100 x12: 0000000000ff0100 [ 646.272987][ C1] x11: ff00800011252b54 x10: 0000000000000000 x9 : ffff800011252b54 [ 646.274148][ C1] x8 : ffff0000cfd90000 x7 : 0000000000000000 x6 : 0000000000000000 [ 646.275282][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800011251970 [ 646.276376][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 646.277537][ C1] Call trace: [ 646.278023][ C1] __ieee80211_beacon_get+0x148c/0x19cc [ 646.278821][ C1] ieee80211_beacon_get_tim+0x68/0x444 [ 646.279614][ C1] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 646.280392][ C1] __iterate_interfaces+0x204/0x484 [ 646.281064][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 646.282051][ C1] mac80211_hwsim_beacon+0xc8/0x1b8 [ 646.282801][ C1] __hrtimer_run_queues+0x44c/0xc64 [ 646.283513][ C1] hrtimer_run_softirq+0x160/0x400 [ 646.284246][ C1] handle_softirqs+0x318/0xc6c [ 646.284882][ C1] __do_softirq+0x14/0x20 [ 646.285500][ C1] ____do_softirq+0x14/0x20 [ 646.286098][ C1] call_on_irq_stack+0x30/0x48 [ 646.286781][ C1] do_softirq_own_stack+0x20/0x2c [ 646.287449][ C1] __irq_exit_rcu+0x23c/0x43c [ 646.288150][ C1] irq_exit_rcu+0x14/0x84 [ 646.288764][ C1] el1_interrupt+0x38/0x54 [ 646.289382][ C1] el1h_64_irq_handler+0x18/0x24 [ 646.290085][ C1] el1h_64_irq+0x64/0x68 [ 646.290704][ C1] check_preemption_disabled+0x10/0x104 [ 646.291501][ C1] rcu_is_watching+0x50/0x134 [ 646.292171][ C1] rcu_read_lock_held+0x18/0x50 [ 646.292879][ C1] get_mem_cgroup_from_mm+0xc8/0x33c [ 646.293657][ C1] __mem_cgroup_charge+0x24/0xb0 [ 646.294372][ C1] wp_page_copy+0x25c/0x1888 [ 646.295015][ C1] do_wp_page+0xb04/0xef0 [ 646.295619][ C1] handle_mm_fault+0x133c/0x2ff0 [ 646.296353][ C1] do_page_fault+0x310/0x99c [ 646.296998][ C1] do_mem_abort+0x70/0x194 [ 646.297642][ C1] el1_abort+0x3c/0x5c [ 646.298213][ C1] el1h_64_sync_handler+0x80/0xcc [ 646.298916][ C1] el1h_64_sync+0x64/0x68 [ 646.299531][ C1] ____sys_recvmsg+0x3a4/0x71c [ 646.300182][ C1] do_recvmmsg+0x364/0x96c [ 646.300799][ C1] __arm64_sys_recvmmsg+0x17c/0x238 [ 646.301569][ C1] invoke_syscall+0x98/0x2bc [ 646.302207][ C1] el0_svc_common+0x138/0x258 [ 646.302881][ C1] do_el0_svc+0x58/0x13c [ 646.303462][ C1] el0_svc+0x58/0x138 [ 646.304052][ C1] el0t_64_sync_handler+0x84/0xf0 [ 646.304721][ C1] el0t_64_sync+0x18c/0x190 [ 646.305336][ C1] irq event stamp: 57165 [ 646.305974][ C1] hardirqs last enabled at (57164): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 646.307494][ C1] hardirqs last disabled at (57165): [] el1_dbg+0x24/0x80 [ 646.308677][ C1] softirqs last enabled at (53638): [] handle_softirqs+0xaf8/0xc6c [ 646.309937][ C1] softirqs last disabled at (57071): [] __do_softirq+0x14/0x20 [ 646.311224][ C1] ---[ end trace 0000000000000000 ]--- [ 650.250759][ T4331] Bluetooth: hci4: command 0x0406 tx timeout