last executing test programs: 1m8.468996032s ago: executing program 0 (id=38): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) 1m7.171180021s ago: executing program 0 (id=43): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00'}, 0x2c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioperm(0x0, 0x12e, 0x8000000000008) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m4.211008062s ago: executing program 0 (id=44): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 1m3.39548686s ago: executing program 0 (id=46): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@resgid}, {@data_journal}, {@nombcache}, {@block_validity}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x0, @desc3}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20083, 0x2) 1m1.361677381s ago: executing program 0 (id=52): ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@nouser_xattr}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@err_cont}, {@data_writeback}, {@err_ro}, {@noacl}]}, 0x1, 0x4431, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xe4ff, 0xffffff6a) r1 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x2, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]}) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r2) 54.108488828s ago: executing program 0 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8000}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 52.811603047s ago: executing program 32 (id=68): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8000}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12.66015814s ago: executing program 2 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 10.648502303s ago: executing program 4 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 10.418344958s ago: executing program 2 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0xfffffffe, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) 10.125025034s ago: executing program 3 (id=140): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) memfd_create(&(0x7f0000000040)='\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) 8.964425477s ago: executing program 2 (id=142): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 8.707583233s ago: executing program 1 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0xa, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x200, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38) 7.691135316s ago: executing program 1 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='svcrdma_decode_wseg\x00', r0, 0x0, 0x7}, 0x18) 7.642561721s ago: executing program 4 (id=145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.923099575s ago: executing program 1 (id=146): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 6.853358974s ago: executing program 4 (id=147): socket$kcm(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x9e, 0xd, 0x1, 0x33, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x8, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000000a40)="$eJzs3U2MW0cBAOCxd73JtilxSkKXNLQJhbb8dNPsLuEngqRKhETUVIhLpQgOUZqWiBAkigRUlUhy4karKkic+BGnXqqCkOgFRT1xqUQjVUg9FQ4ciIKIxAECidHuznjtid1n74+fvf4+aTx+b97zzDw/P7/fmQCMrerS68LCTCWEy2+8cuzvD/9tenHM4eYU9aXXyZahWgihEocns897b2I5vnXjxdOd4kqYW3pNw+Gp68157w4hXAh7w5VQD7svX335rbknT1w8fmnf268eurYxtQcAgPHy1SuHFnb95U/377j52gNHwpY0evHN0v55PY7YFvf7j8Qd/7T/Xw3tw5WW0Goqm24yhup0+3QTHaZrzaeWTTfZJf+pLP9al+m2hPfPf6JlXKd6wyhL63E9VKqzbcPV6uzs8jF5WDqun6rMnj977tnnSyoosO7+9WAIYW9LOHqpfXi14Rtxy7Een9UaDm/AZ64x1HqsZ2MIyjqS4cjg8rrZWFZ6nQcUGttL3gABRPn1wjtcyM8srE3z0yZ7y//6E9XO88M6GPT631f+UyXnH+T/64u2OKyfzbo2pXql39G2OJxfR8jvX+r++8uvdLSPza9H1HosZ7frCKNyfaFbOScGXI7V6lb+fL3YrL4Y47QcvpSlt/5+8u90VL5joLN/5+f/BUEY7hDahmtr+axGydsfYHjl98010vXRKL+vL0/fUpC+tSB9uiD9roL0uwvSYZz99ns/CS9VVo7z82P6fs+Hp/Ns98T4A32WJz8f2W/++X2//Vpr/vn9xDDMfn/q6TOfe+bk1eX7/yvN9f92XN/T4UY9/rauxAnS+cL8vHrz3v96ez7VLtPdm5Xnng7TL73f2T5dZefK54SW7cwd5Zhpn297t+n2tE9Xz6abjmFrVt58/+SubL60/5G2q2l5TWb1rWX1mMrKkbYrO2KclwNWI62P3e7/T+vnTKhVnj177szjcTitp3+cqG1ZHH9gwOUG1q7X539mQvvzP9ua42vV1u3C9pXxleXtwuvx89rHzzXzaR8/H4fT/9w3J6aXxs+e/s65Z9a/+jDWnv/hC986de7cme+W/mZ+OoQhKMYq3nx5OIrRz5t02DIs5Vn1m8WKDEExNuGbkjdMwIbb/6PlnYDHzn771HNnnjtzfv7gwfm5uYOfn1/Yv7Rfv791777VhRJKC6ynlT/9sksCAAAAAAAAAAAA9Or7x49dfefNz767/Pz/yvN/6fn/dOdvev7/x9nz//lz8uk5+PQc4I4O6UvTZA2sTmXT1WL4YFbenVk+u7L5PhTjZj9+8fn/lF3ermsqz33Z+FqXwaw5gTvaS5nK2iDJ+wv8aIwvxfhXAUpUme48OsZF7VundT21T9HSLkVD+8CjI31vaW1I7Zik5787tuvU8mXvGEAZWX+DeJyw7DoCnf1jrNr//udKxUsvi9A9TA42v5+N7zrR6LqX3msPNgDro+z+P9N5zxSf/8NXti6GNNn1J9q3l3n7pdCPP7/TPjzs/U9udP55v32Dzr/s+g+6/89m/3c9b/+yHvPqq8v3Pz+/9m5LtmF3r/nn9U/tQO/sL/+bMf9Um0dCb/k3fpnln18Q6tF/s/zv6jH/O+q/Z3X5/y/mnxbbow/1mn91+ZpZtb0c+XnjdP0vP2+c3Mrqn9r2fJ/8v/ZCp/qvsqPG2zF/GGej0s9sv7L9iOZO++r7/40urG//v83CZpu1/D6Mz8QxaUOc7nPI+zvpt/zp/or0P7Ar+/xKwf+b/n9H2xdiXPR7SP3/3r6xfDmvHv/y0/pZj8syDdc6LNvNuq2BUfXeWF3/W4dwcsPz2Fp6HYc+HBmCMjRDY2IV8zX7iSu5/I1GY2NPaBUoNXNKX/5lHyeUnX/Zy79I3v9vvg+f9/+bp+f9/+bpef+/efp0/Ia6pef9/+bLM+//N0+/L/vcvH/gmYL0Dxek7+6c3jxsv79g/j0F6R8pSN/XTD/cNkVKf6Bg/gcL0u9tT9+Spz9UMP/HCtI/XpD+cEH6oy3prX1Ap/RPFMy/2aXnUca1/jDO8ufz/P5hfKTrP91+/zsL0oHR9dPXDhw9+Zuv15ef/59qng9J1/GOxOFaPH76QRzOr3uHluHFtDfj8F+z9GE/3wHjJG8/I/9/f6QgHRhd6T4vv28YQ5WtnUfHuKjdqm77+YyWT8b4UzH+dIwfi/FsjPfH+ECM5wZUPjbG0dd/d+ilysrx/vYsvdf7yfPngdraiQohzPdYnvz8QL/3s+ft+PVrrfmv8nEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSXXhcWZiohXH7jlWNPnzi7f3HM4eYU9aXXyZahWnO+EB6P8USMfxHf3Lrx4unW+HaMK2EuVEKlOT48db2Z090hhAthb7gS6mH35asvvzX35ImLxy/te/vVQ9c2bgkAAADA5vf/AAAA//9LWAnF") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 6.33850085s ago: executing program 3 (id=148): socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x6}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000000000)=""/15, 0xf, 0x7fff) 5.235339091s ago: executing program 1 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000007c0)={0x0, 0x989680}, 0x0) 4.834171217s ago: executing program 3 (id=150): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioperm(0x0, 0x12e, 0x8000000000008) syz_clone(0x20003000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.627204371s ago: executing program 5 (id=69): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000000)='./file2\x00', 0x210008, &(0x7f0000000140)=ANY=[@ANYBLOB="4a61636b67726f756efdff636f6d7072653373696f6e3d6c7a342c7265636f6e7374727563745f616c6c6f632c6e6f636f772c6e6f6578636c2c62747265655f6e6f64655f70726566657463682c6e6f7265636f766572792c73686172645f696e6f64655f6e746d626572c36e4279466a7c76926e3755f657df732c6e6f5f646174615f696f2c655661737572655f636f6465faffffff2c6669785f6572726f72733d61736b2c646973636172642c696e6f6465735f7573655f6b65795b63616368652c6572726f72733d636f6e74696e75652c6572"], 0x1, 0x59a9, &(0x7f000000b280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) 4.575033532s ago: executing program 4 (id=151): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x852dd6c070cd7e4d, 0xfffffffe, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x4, 0x700000000000000, 0x0, 0x40}, 0x0) 3.449656965s ago: executing program 3 (id=152): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd"], 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2ba17629f7be7ddd) r2 = syz_io_uring_setup(0x24fb, &(0x7f0000000200)={0x0, 0x400, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x1453, 0x0, 0x0, 0x0) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)) msgsnd(r5, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={0x0, 0xbe8}, 0x1, 0x0, 0x0, 0x40c0}, 0x4) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.333303314s ago: executing program 2 (id=153): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0xd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x0) 2.305000491s ago: executing program 1 (id=154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pselect6(0xf0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={[0x1]}, 0x8}) 1.181123006s ago: executing program 4 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 1.002504095s ago: executing program 2 (id=156): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vimc0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) dup3(r0, r1, 0x0) 714.781149ms ago: executing program 3 (id=157): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r1, r0, 0x8f5, 0x2) 454.030186ms ago: executing program 1 (id=158): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0x0, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 246.574477ms ago: executing program 4 (id=159): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080)={0x2a, 0x0, 0x1}, 0xc) read(r5, &(0x7f0000000180)=""/52, 0xfffffdef) 69.886092ms ago: executing program 3 (id=160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 0s ago: executing program 2 (id=161): socket$kcm(0x2, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x9e, 0xd, 0x1, 0x33, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7, 0x8, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 172.966670][ T5765] cgroup: Unknown subsys name 'net' [ 173.096817][ T5765] cgroup: Unknown subsys name 'cpuset' [ 173.112248][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 217.316447][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.238277][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.244774][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.076280][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.107376][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.115327][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.125516][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.133936][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.142819][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.155362][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.166411][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.171941][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.175418][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.184924][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 221.199388][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.274582][ T5079] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.319242][ T5079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.328947][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.329358][ T5079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.347718][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.348161][ T5079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.375209][ T5079] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.386626][ T5079] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.396456][ T5079] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.481818][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.527114][ T5079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.545526][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.553726][ T5079] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.562906][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.577727][ T5079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.597756][ T5079] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.647732][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.696790][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.363443][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 222.676939][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 223.143808][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 223.228958][ T5786] Bluetooth: hci1: command tx timeout [ 223.254155][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.264368][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.272150][ T5785] bridge_slave_0: entered allmulticast mode [ 223.281159][ T5785] bridge_slave_0: entered promiscuous mode [ 223.306375][ T5786] Bluetooth: hci0: command tx timeout [ 223.356697][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 223.375039][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.382768][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.391024][ T5785] bridge_slave_1: entered allmulticast mode [ 223.399883][ T5785] bridge_slave_1: entered promiscuous mode [ 223.556485][ T5786] Bluetooth: hci3: command tx timeout [ 223.628868][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 223.707065][ T5786] Bluetooth: hci2: command tx timeout [ 223.737709][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.789599][ T5786] Bluetooth: hci4: command tx timeout [ 223.834627][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.857014][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.864690][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.872732][ T5790] bridge_slave_0: entered allmulticast mode [ 223.881852][ T5790] bridge_slave_0: entered promiscuous mode [ 224.010260][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.018344][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.026003][ T5790] bridge_slave_1: entered allmulticast mode [ 224.037461][ T5790] bridge_slave_1: entered promiscuous mode [ 224.234182][ T5785] team0: Port device team_slave_0 added [ 224.243320][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.251223][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.258974][ T5782] bridge_slave_0: entered allmulticast mode [ 224.269848][ T5782] bridge_slave_0: entered promiscuous mode [ 224.365516][ T5785] team0: Port device team_slave_1 added [ 224.373739][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.381576][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.389333][ T5782] bridge_slave_1: entered allmulticast mode [ 224.398258][ T5782] bridge_slave_1: entered promiscuous mode [ 224.444707][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.528687][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.535856][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.564652][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.649051][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.656861][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.664362][ T5791] bridge_slave_0: entered allmulticast mode [ 224.673834][ T5791] bridge_slave_0: entered promiscuous mode [ 224.691128][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.700939][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.708920][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.716835][ T5791] bridge_slave_1: entered allmulticast mode [ 224.725598][ T5791] bridge_slave_1: entered promiscuous mode [ 224.739341][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.746572][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.772891][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.819698][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.957200][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.966972][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.974607][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.983837][ T5795] bridge_slave_0: entered allmulticast mode [ 224.992718][ T5795] bridge_slave_0: entered promiscuous mode [ 225.010141][ T5790] team0: Port device team_slave_0 added [ 225.059814][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.203923][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.211728][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.219629][ T5795] bridge_slave_1: entered allmulticast mode [ 225.230201][ T5795] bridge_slave_1: entered promiscuous mode [ 225.294156][ T5790] team0: Port device team_slave_1 added [ 225.306372][ T5786] Bluetooth: hci1: command tx timeout [ 225.309734][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.385876][ T5782] team0: Port device team_slave_0 added [ 225.386355][ T5786] Bluetooth: hci0: command tx timeout [ 225.513916][ T5782] team0: Port device team_slave_1 added [ 225.531920][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.600509][ T5791] team0: Port device team_slave_0 added [ 225.620705][ T5785] hsr_slave_0: entered promiscuous mode [ 225.626835][ T5786] Bluetooth: hci3: command tx timeout [ 225.637597][ T5785] hsr_slave_1: entered promiscuous mode [ 225.681427][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.723868][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.731207][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.758158][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.777259][ T5791] team0: Port device team_slave_1 added [ 225.786597][ T5786] Bluetooth: hci2: command tx timeout [ 225.866269][ T5786] Bluetooth: hci4: command tx timeout [ 225.884895][ T5795] team0: Port device team_slave_0 added [ 225.894042][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.901332][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.927658][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.945708][ T5795] team0: Port device team_slave_1 added [ 226.019882][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.028376][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.054722][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.133603][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.141216][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.167787][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.182969][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.191578][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.218925][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.267036][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.274214][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.300550][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.314441][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.321776][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.348233][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.452651][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.460143][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.486530][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.574042][ T5790] hsr_slave_0: entered promiscuous mode [ 226.583580][ T5790] hsr_slave_1: entered promiscuous mode [ 226.592235][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.600191][ T5790] Cannot create hsr debugfs directory [ 226.800705][ T5782] hsr_slave_0: entered promiscuous mode [ 226.811113][ T5782] hsr_slave_1: entered promiscuous mode [ 226.819932][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.828978][ T5782] Cannot create hsr debugfs directory [ 226.899872][ T5795] hsr_slave_0: entered promiscuous mode [ 226.910787][ T5795] hsr_slave_1: entered promiscuous mode [ 226.920245][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.929513][ T5795] Cannot create hsr debugfs directory [ 227.074396][ T5791] hsr_slave_0: entered promiscuous mode [ 227.084244][ T5791] hsr_slave_1: entered promiscuous mode [ 227.093271][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.101161][ T5791] Cannot create hsr debugfs directory [ 227.418807][ T5786] Bluetooth: hci1: command tx timeout [ 227.473440][ T5786] Bluetooth: hci0: command tx timeout [ 227.716624][ T5786] Bluetooth: hci3: command tx timeout [ 227.796716][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.866454][ T5786] Bluetooth: hci2: command tx timeout [ 227.915391][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.953456][ T5786] Bluetooth: hci4: command tx timeout [ 227.989202][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.022189][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.254843][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.321288][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.339745][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.408054][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.429996][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.559791][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.582263][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.644980][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.664530][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.689618][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.722985][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.747108][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.016203][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.065036][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 229.093606][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 229.156866][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.467187][ T5786] Bluetooth: hci1: command tx timeout [ 229.554651][ T5786] Bluetooth: hci0: command tx timeout [ 229.595276][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.667964][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.790813][ T5786] Bluetooth: hci3: command tx timeout [ 229.827515][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.870855][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.901074][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.908790][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.969445][ T5786] Bluetooth: hci2: command tx timeout [ 229.993275][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.001039][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.026416][ T5786] Bluetooth: hci4: command tx timeout [ 230.126288][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.133944][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.149377][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.157102][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.207812][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.304334][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.504196][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.553243][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.619351][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.627085][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.647763][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.655394][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.749050][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.834902][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.842793][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.864664][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.872379][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.981851][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.215512][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.373388][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.478137][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.485812][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.585314][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.593104][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.463420][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.664348][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.160306][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.224516][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.238423][ T5782] veth0_vlan: entered promiscuous mode [ 233.327888][ T5782] veth1_vlan: entered promiscuous mode [ 233.801117][ T5782] veth0_macvtap: entered promiscuous mode [ 233.839068][ T5790] veth0_vlan: entered promiscuous mode [ 233.852936][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.897401][ T5795] veth0_vlan: entered promiscuous mode [ 233.916807][ T5782] veth1_macvtap: entered promiscuous mode [ 234.002707][ T5790] veth1_vlan: entered promiscuous mode [ 234.038574][ T5795] veth1_vlan: entered promiscuous mode [ 234.154276][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.304040][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.399605][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.410907][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.421461][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.430799][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.465142][ T5791] veth0_vlan: entered promiscuous mode [ 234.474752][ T5790] veth0_macvtap: entered promiscuous mode [ 234.513539][ T5795] veth0_macvtap: entered promiscuous mode [ 234.527953][ T5790] veth1_macvtap: entered promiscuous mode [ 234.634749][ T5795] veth1_macvtap: entered promiscuous mode [ 234.653504][ T5791] veth1_vlan: entered promiscuous mode [ 234.750613][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.762896][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.779101][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.822308][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.834514][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.845732][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.856496][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.870851][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.924358][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.935245][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.949535][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.043882][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.056328][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.068020][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.078844][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.093031][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.125026][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.134380][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.144198][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.153377][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.209905][ T5795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.219142][ T5795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.233133][ T5795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.244005][ T5795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.315137][ T5791] veth0_macvtap: entered promiscuous mode [ 235.408248][ T5791] veth1_macvtap: entered promiscuous mode [ 235.607716][ T5785] veth0_vlan: entered promiscuous mode [ 235.645758][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.658140][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.668366][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.679179][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.689341][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.701041][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.715447][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.768909][ T5785] veth1_vlan: entered promiscuous mode [ 235.917772][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.928691][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.938927][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.950415][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.961063][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.971857][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.988457][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.088705][ T5785] veth0_macvtap: entered promiscuous mode [ 236.144499][ T5785] veth1_macvtap: entered promiscuous mode [ 236.271550][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.282362][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.292582][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.303418][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.313660][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.324430][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.334594][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.345536][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.360872][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.492672][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.501990][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.512943][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.522517][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.641067][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.652030][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.664491][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.676475][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.688899][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.699674][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.709866][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.720654][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.734756][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.972301][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.983117][ T5785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.993415][ T5785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.002642][ T5785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.773787][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.781899][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.062759][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.071866][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.445037][ T5782] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.471676][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.479847][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.625722][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.732481][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.745235][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.753459][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.097714][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.105875][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.803384][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 242.812802][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 242.821999][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 242.832194][ T5968] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 243.334958][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.344985][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.933855][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.974086][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.255529][ T5959] loop2: detected capacity change from 0 to 32768 [ 244.300967][ T5959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3 (5959) [ 244.375734][ T5959] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.386497][ T5959] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 244.396768][ T5959] BTRFS info (device loop2): using free-space-tree [ 244.424211][ T5966] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.435865][ T5966] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.445879][ T5966] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.455228][ T5966] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.889549][ T1844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.897857][ T1844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.330567][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.339484][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.446716][ T5782] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.575180][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.582087][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.583353][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.591218][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.904962][ T5990] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 247.127734][ T5997] bridge1: entered promiscuous mode [ 247.133217][ T5997] bridge1: entered allmulticast mode [ 247.227013][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 249.890588][ T6006] loop0: detected capacity change from 0 to 4096 [ 250.453245][ T6006] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 250.497526][ T6006] ntfs3(loop0): Failed to load $Extend (-22). [ 250.503905][ T6006] ntfs3(loop0): Failed to initialize $Extend. [ 251.524083][ T6016] loop2: detected capacity change from 0 to 128 [ 252.012124][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.018653][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.025613][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.043188][ T6022] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 252.080707][ T6022] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 252.163356][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.172170][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.180943][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.189585][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.198033][ T6022] hsr0 speed is unknown, defaulting to 1000 [ 252.988514][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 252.997785][ T6027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 253.007489][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 253.016644][ T6027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17'. [ 255.733331][ T6013] Set syz1 is full, maxelem 65536 reached [ 256.755192][ T6040] bridge_slave_0: left allmulticast mode [ 256.761320][ T6040] bridge_slave_0: left promiscuous mode [ 256.768329][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.002121][ T6040] bridge_slave_1: left allmulticast mode [ 257.008554][ T6040] bridge_slave_1: left promiscuous mode [ 257.015258][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.214829][ T6034] loop2: detected capacity change from 0 to 32768 [ 257.422244][ T6034] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR [ 257.516404][ T6040] bond0: (slave bond_slave_0): Releasing backup interface [ 258.548393][ T6038] loop1: detected capacity change from 0 to 32768 [ 258.619955][ T6040] bond0: (slave bond_slave_1): Releasing backup interface [ 258.836759][ T6040] team0: Port device team_slave_0 removed [ 258.871686][ T6040] team0: Port device team_slave_1 removed [ 258.882208][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.890079][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.939035][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.950910][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.004102][ T6038] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.164698][ T6038] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop1": -EINTR [ 259.182620][ T6038] XFS (loop1): log mount failed [ 261.408240][ T6057] loop2: detected capacity change from 0 to 32768 [ 266.420820][ T4976] bond0: (slave bond_slave_0): interface is now down [ 266.428096][ T4976] bond0: (slave bond_slave_1): interface is now down [ 266.437033][ T4976] bond0: now running without any active interface! [ 266.728008][ T6237] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 266.777874][ T6237] syz_tun: entered promiscuous mode [ 266.806482][ T6237] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 266.849041][ T6210] bond0: (slave syz_tun): interface is now down [ 266.883314][ T6210] bond0: (slave syz_tun): interface is now down [ 266.929404][ T1821] bond0: (slave syz_tun): interface is now down [ 266.971598][ T6210] bond0: (slave syz_tun): interface is now down [ 267.011947][ T6210] bond0: (slave syz_tun): interface is now down [ 267.139890][ T6248] loop3: detected capacity change from 0 to 2048 [ 267.177084][ T6210] bond0: (slave syz_tun): interface is now down [ 267.213459][ T6210] bond0: (slave syz_tun): interface is now down [ 267.243042][ T1821] bond0: (slave syz_tun): interface is now down [ 267.272201][ T1821] bond0: (slave syz_tun): interface is now down [ 267.380406][ T1821] bond0: (slave syz_tun): interface is now down [ 267.461492][ T1821] bond0: (slave syz_tun): interface is now down [ 267.544185][ T6248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.646564][ T1821] bond0: (slave syz_tun): interface is now down [ 267.666755][ T4976] bond0: (slave syz_tun): interface is now down [ 267.761731][ T4976] bond0: (slave syz_tun): interface is now down [ 267.797390][ T29] audit: type=1800 audit(1736045787.228:2): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.41" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 267.855677][ T4976] bond0: (slave syz_tun): interface is now down [ 267.969006][ T4976] bond0: (slave syz_tun): interface is now down [ 268.056424][ T4976] bond0: (slave syz_tun): interface is now down [ 268.147726][ T73] bond0: (slave syz_tun): interface is now down [ 268.210069][ T73] bond0: (slave syz_tun): interface is now down [ 268.245547][ T73] bond0: (slave syz_tun): interface is now down [ 268.271856][ T73] bond0: (slave syz_tun): interface is now down [ 268.750307][ T4976] bond0: (slave syz_tun): interface is now down [ 268.767303][ T5842] IPVS: starting estimator thread 0... [ 268.843255][ T73] bond0: (slave syz_tun): interface is now down [ 268.857362][ T6268] IPVS: using max 240 ests per chain, 12000 per kthread [ 269.032085][ T73] bond0: (slave syz_tun): interface is now down [ 269.154376][ T73] bond0: (slave syz_tun): interface is now down [ 269.271117][ T73] bond0: (slave syz_tun): interface is now down [ 269.361633][ T73] bond0: (slave syz_tun): interface is now down [ 269.404335][ T73] bond0: (slave syz_tun): interface is now down [ 269.464096][ T73] bond0: (slave syz_tun): interface is now down [ 269.534360][ T59] bond0: (slave syz_tun): interface is now down [ 269.597395][ T59] bond0: (slave syz_tun): interface is now down [ 269.663167][ T59] bond0: (slave syz_tun): interface is now down [ 269.715630][ T59] bond0: (slave syz_tun): interface is now down [ 269.765028][ T59] bond0: (slave syz_tun): interface is now down [ 269.820845][ T73] bond0: (slave syz_tun): interface is now down [ 269.901618][ T73] bond0: (slave syz_tun): interface is now down [ 269.962418][ T73] bond0: (slave syz_tun): interface is now down [ 270.014433][ T73] bond0: (slave syz_tun): interface is now down [ 270.090901][ T29] audit: type=1800 audit(1736045789.548:3): pid=6248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.41" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 270.095210][ T73] bond0: (slave syz_tun): interface is now down [ 270.212560][ T73] bond0: (slave syz_tun): interface is now down [ 270.273367][ T73] bond0: (slave syz_tun): interface is now down [ 270.327493][ T73] bond0: (slave syz_tun): interface is now down [ 270.347838][ T6257] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 270.404717][ T73] bond0: (slave syz_tun): interface is now down [ 270.507012][ T73] bond0: (slave syz_tun): interface is now down [ 270.555127][ T73] bond0: (slave syz_tun): interface is now down [ 270.583755][ T73] bond0: (slave syz_tun): interface is now down [ 270.623046][ T73] bond0: (slave syz_tun): interface is now down [ 270.667317][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.695045][ T73] bond0: (slave syz_tun): interface is now down [ 270.716532][ T6210] bond0: (slave syz_tun): interface is now down [ 270.749345][ T58] bond0: (slave syz_tun): interface is now down [ 270.766637][ T58] bond0: (slave syz_tun): interface is now down [ 270.786463][ T73] bond0: (slave syz_tun): interface is now down [ 270.793176][ T6245] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.802714][ T6245] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.812184][ T6245] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.821583][ T6245] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.961316][ T6210] bond0: (slave syz_tun): interface is now down [ 270.987765][ T6210] bond0: (slave syz_tun): interface is now down [ 271.007708][ T6210] bond0: (slave syz_tun): interface is now down [ 271.027979][ T59] bond0: (slave syz_tun): interface is now down [ 271.046658][ T6210] bond0: (slave syz_tun): interface is now down [ 271.087342][ T6210] bond0: (slave syz_tun): interface is now down [ 271.118947][ T6210] bond0: (slave syz_tun): interface is now down [ 271.143593][ T6210] bond0: (slave syz_tun): interface is now down [ 271.189465][ T6210] bond0: (slave syz_tun): interface is now down [ 271.217792][ T59] bond0: (slave syz_tun): interface is now down [ 271.237021][ T58] bond0: (slave syz_tun): interface is now down [ 271.309238][ T59] bond0: (slave syz_tun): interface is now down [ 271.337329][ T1844] bond0: (slave syz_tun): interface is now down [ 271.357041][ T59] bond0: (slave syz_tun): interface is now down [ 271.434819][ T1821] bond0: (slave syz_tun): interface is now down [ 271.488223][ T1821] bond0: (slave syz_tun): interface is now down [ 271.508528][ T1821] bond0: (slave syz_tun): interface is now down [ 271.533106][ T1821] bond0: (slave syz_tun): interface is now down [ 271.559494][ T1821] bond0: (slave syz_tun): interface is now down [ 271.623537][ T6279] binder: BINDER_SET_CONTEXT_MGR already set [ 271.630021][ T6279] binder: 6278:6279 ioctl 4018620d 20000040 returned -16 [ 271.633499][ T6277] loop0: detected capacity change from 0 to 512 [ 271.704124][ T1821] bond0: (slave syz_tun): interface is now down [ 271.735344][ T73] bond0: (slave syz_tun): interface is now down [ 271.803447][ T73] bond0: (slave syz_tun): interface is now down [ 271.818115][ T6277] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 271.832534][ T6277] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 271.845112][ T73] bond0: (slave syz_tun): interface is now down [ 271.952129][ T1821] bond0: (slave syz_tun): interface is now down [ 271.979011][ T4976] bond0: (slave syz_tun): interface is now down [ 271.986730][ T4976] bond0: now running without any active interface! [ 272.144964][ T6277] EXT4-fs (loop0): 1 truncate cleaned up [ 272.152781][ T6277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.649700][ T6277] syz.0.46 (pid 6277) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 272.932675][ T29] audit: type=1800 audit(1736045792.358:4): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="file0" dev="overlay" ino=23 res=0 errno=0 [ 272.993943][ T6279] syz.2.48 (6279): drop_caches: 2 [ 273.179674][ T6292] team0: Mode changed to "loadbalance" [ 273.276811][ T6292] team0: Mode changed to "activebackup" [ 273.342563][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 273.436815][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 273.555946][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 273.664571][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 273.738538][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 273.907712][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 273.988990][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 274.091742][ T6298] mkiss: ax0: crc mode is auto. [ 274.092052][ T6290] loop1: detected capacity change from 0 to 32768 [ 274.213232][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 274.243362][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 274.311015][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 274.339321][ T6290] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 275.475400][ T25] IPVS: starting estimator thread 0... [ 275.570756][ T6319] IPVS: using max 240 ests per chain, 12000 per kthread [ 275.780794][ T6290] XFS (loop1): Ending clean mount [ 275.834508][ T6290] XFS (loop1): Quotacheck needed: Please wait. [ 276.143993][ T6290] XFS (loop1): Quotacheck: Done. [ 276.505432][ T5795] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.392819][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.419224][ T6327] bond0: (slave rose0): Enslaving as an active interface with an up link [ 277.696374][ T6330] fuse: root generation should be zero [ 278.253054][ T6338] Zero length message leads to an empty skb [ 278.346733][ T5791] EXT4-fs error: 177 callbacks suppressed [ 278.346809][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 278.491283][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 278.518785][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 278.531003][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 278.609182][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 278.724623][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 278.795929][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.808423][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.818645][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.831929][ T25] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 278.843555][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.889738][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 278.915181][ T25] usb 2-1: config 0 descriptor?? [ 279.157429][ T6323] loop2: detected capacity change from 0 to 32768 [ 279.268744][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 279.333350][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 279.387405][ T6323] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop2": -EINTR [ 279.391538][ T5791] EXT4-fs error (device loop0): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 279.438581][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.445787][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.456989][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.464163][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.472403][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.479660][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.486931][ T25] wacom 0003:056A:0043.0001: unknown main item tag 0x0 [ 279.521740][ T25] wacom 0003:056A:0043.0001: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 279.540264][ T25] wacom 0003:056A:0043.0001: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 279.561834][ T25] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.0001/input/input5 [ 279.582929][ T5767] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 279.617910][ T5791] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 279.823140][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.837812][ T5767] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.848732][ T5767] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 279.860834][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.979455][ T5767] usb 4-1: config 0 descriptor?? [ 280.377006][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.381096][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.606457][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.646641][ T5767] usbhid 4-1:0.0: can't add hid device: -71 [ 280.653445][ T5767] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.694188][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.701217][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.838125][ T5767] usb 4-1: USB disconnect, device number 2 [ 280.851051][ T25] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 280.867590][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.212274][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.780267][ T59] bridge_slave_1: left allmulticast mode [ 281.786390][ T59] bridge_slave_1: left promiscuous mode [ 281.793451][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.877461][ T59] bridge_slave_0: left allmulticast mode [ 281.883388][ T59] bridge_slave_0: left promiscuous mode [ 281.890300][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.833350][ T6367] Bluetooth: MGMT ver 1.23 [ 282.860567][ T6367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 282.867286][ T6367] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 282.885155][ T6372] netlink: 'syz.4.70': attribute type 4 has an invalid length. [ 283.190138][ T6370] loop2: detected capacity change from 0 to 32768 [ 283.252356][ T6370] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.66 (6370) [ 283.378715][ T6367] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 283.397820][ T6370] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.408649][ T6370] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 283.419995][ T6370] BTRFS info (device loop2): using free-space-tree [ 283.437701][ T6367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.446992][ T6367] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.500302][ T6367] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 283.520134][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.535101][ T6367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.542824][ T6367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 283.628351][ T6367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 283.644557][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.676948][ T59] bond0 (unregistering): Released all slaves [ 283.758933][ T6367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 283.765905][ T6367] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 283.892756][ T6367] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 284.005917][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.016861][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.032630][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.071633][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.110443][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.120107][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.289750][ T2227] usb 2-1: USB disconnect, device number 2 [ 284.329431][ T6370] BTRFS info (device loop2): rebuilding free space tree [ 284.790079][ T6374] hsr0 speed is unknown, defaulting to 1000 [ 284.986871][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 285.023849][ T5842] IPVS: starting estimator thread 0... [ 285.126577][ T6397] IPVS: using max 240 ests per chain, 12000 per kthread [ 285.273560][ T6367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.521341][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.631535][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.868909][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.266534][ T5786] Bluetooth: hci2: command tx timeout [ 286.283532][ T59] hsr_slave_0: left promiscuous mode [ 286.642563][ T5782] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.700081][ T59] hsr_slave_1: left promiscuous mode [ 286.791551][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.800728][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.935499][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.944678][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.092896][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 287.952612][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 287.959086][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.965326][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.971834][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.954247][ T6409] loop3: detected capacity change from 0 to 32768 [ 289.450564][ T51] Bluetooth: hci2: command tx timeout [ 290.036202][ T59] veth1_macvtap: left promiscuous mode [ 290.042106][ T59] veth0_macvtap: left promiscuous mode [ 290.047978][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.048300][ T59] veth1_vlan: left promiscuous mode [ 290.054126][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.059788][ T59] veth0_vlan: left promiscuous mode [ 290.066210][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.077442][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 292.047371][ T5786] Bluetooth: hci2: command tx timeout [ 293.106424][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 294.156893][ T5786] Bluetooth: hci2: command tx timeout [ 294.214555][ T6427] binder: 6425:6427 ioctl c0306201 0 returned -14 [ 294.278885][ T6428] loop4: detected capacity change from 0 to 128 [ 294.337403][ T6428] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 294.677086][ T6428] overlayfs: missing 'lowerdir' [ 294.699975][ T59] team0 (unregistering): Port device team_slave_1 removed [ 294.788462][ T59] team0 (unregistering): Port device team_slave_0 removed [ 295.182432][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 295.657470][ T2227] hsr0 speed is unknown, defaulting to 1000 [ 295.663645][ T2227] infiniband syz2: ib_query_port failed (-19) [ 296.434926][ T6443] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 296.509702][ T6439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.516798][ T6439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.523482][ T6439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.530394][ T6439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.537198][ T6439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.543531][ T6439] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 296.728959][ T6439] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 296.791661][ T59] IPVS: stop unused estimator thread 0... [ 297.441619][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 298.104637][ T51] Bluetooth: hci0: command 0x0401 tx timeout [ 298.124588][ T6439] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 298.670489][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.677550][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.683790][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.693159][ T5786] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.223876][ T5079] Bluetooth: hci0: command 0x0401 tx timeout [ 300.363022][ T6480] loop4: detected capacity change from 0 to 64 [ 300.365252][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.378055][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.385765][ T6374] bridge_slave_0: entered allmulticast mode [ 300.394856][ T6374] bridge_slave_0: entered promiscuous mode [ 300.486448][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.495359][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.504618][ T6374] bridge_slave_1: entered allmulticast mode [ 300.522596][ T6374] bridge_slave_1: entered promiscuous mode [ 300.596963][ T29] audit: type=1800 audit(1736045820.018:5): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 300.617955][ T29] audit: type=1800 audit(1736045820.048:6): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 300.754353][ T5079] Bluetooth: hci2: command 0x0c1a tx timeout [ 301.062682][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.091406][ T6484] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 301.277749][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.507682][ T6476] syz.3.93 (6476): drop_caches: 2 [ 301.693455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 301.715656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 301.877945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 301.916839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 302.397257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 302.523659][ T6374] team0: Port device team_slave_0 added [ 302.587255][ T6374] team0: Port device team_slave_1 added [ 302.793246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 302.802971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 302.898541][ T5079] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.915547][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.923396][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.949968][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.973105][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.980441][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.007678][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.777247][ T6498] loop1: detected capacity change from 0 to 32768 [ 303.837425][ T6496] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 303.844167][ T6496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.851142][ T6496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.857919][ T6496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.864629][ T6496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.125250][ T6374] hsr_slave_0: entered promiscuous mode [ 304.166691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 304.172013][ T6498] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 304.183491][ T6498] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 304.292925][ T6498] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 1ms [ 304.307693][ T6374] hsr_slave_1: entered promiscuous mode [ 304.308228][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 304.320543][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 304.378343][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.386348][ T6374] Cannot create hsr debugfs directory [ 304.669938][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 304.678602][ T6496] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 304.850319][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 529ms [ 304.858857][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 304.864632][ T6498] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 305.903946][ T5786] Bluetooth: hci4: command 0x0c1a tx timeout [ 305.912044][ T5786] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.921003][ T5079] Bluetooth: hci1: command 0x0c1a tx timeout [ 305.946564][ T5786] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.089183][ T6498] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 306.765694][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 307.581899][ T6522] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 307.845296][ T6374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.938041][ T6374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.968121][ T6374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.046624][ T6374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.288255][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 308.498058][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 308.548160][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 308.561314][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.572868][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 308.582983][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 308.596557][ T25] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 308.605893][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.825668][ T6535] loop2: detected capacity change from 0 to 1024 [ 308.849279][ T25] usb 4-1: config 0 descriptor?? [ 308.865722][ T6535] ======================================================= [ 308.865722][ T6535] WARNING: The mand mount option has been deprecated and [ 308.865722][ T6535] and is ignored by this kernel. Remove the mand [ 308.865722][ T6535] option from the mount to silence this warning. [ 308.865722][ T6535] ======================================================= [ 308.902500][ T6535] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.943476][ T25] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 308.959176][ T5127] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 309.004236][ T5127] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 309.073004][ T5127] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 309.115425][ T5127] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 309.178286][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.249470][ T6525] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 309.298522][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.339967][ T6542] netlink: 32 bytes leftover after parsing attributes in process `syz.1.103'. [ 309.342394][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.464588][ T6374] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.470846][ T25] usb 4-1: USB disconnect, device number 3 [ 309.475318][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.547241][ T6533] syz.4.106 (6533): drop_caches: 2 [ 309.612979][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.620732][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.635711][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.643445][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.802276][ T6535] EXT4-fs: Ignoring sb option on remount [ 309.808643][ T6535] EXT4-fs: Cannot specify journal on remount [ 310.215292][ T5782] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /22/file1: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 310.390877][ T5782] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 310.551616][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 311.226944][ T6550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 311.233695][ T6550] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.242117][ T6550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.250475][ T6550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 311.257990][ T6550] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.427635][ T5079] Bluetooth: hci0: command 0x0401 tx timeout [ 312.434045][ T6550] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 312.880202][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.360750][ T5079] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.367369][ T5079] Bluetooth: hci4: command 0x0c1a tx timeout [ 313.373925][ T5079] Bluetooth: hci3: command 0x0c1a tx timeout [ 313.382701][ T5079] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.415667][ T6585] loop4: detected capacity change from 0 to 1024 [ 314.486479][ T2227] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 314.507764][ T5786] Bluetooth: hci0: command 0x0401 tx timeout [ 314.574674][ T6585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.646294][ T2227] usb 4-1: Using ep0 maxpacket: 8 [ 314.678942][ T2227] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 314.687700][ T2227] usb 4-1: config 179 has no interface number 0 [ 314.694239][ T2227] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 314.705753][ T2227] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 314.717486][ T2227] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 314.729288][ T2227] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 314.743044][ T2227] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 314.753803][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.928890][ T29] audit: type=1800 audit(1736045834.358:7): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.117" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 314.965591][ T6578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 315.228530][ T2227] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9 [ 315.470822][ T5835] usb 4-1: USB disconnect, device number 4 [ 315.470893][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 315.486003][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 315.514521][ T5835] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 315.844167][ T6374] veth0_vlan: entered promiscuous mode [ 315.906644][ T6598] netlink: 'syz.1.120': attribute type 2 has an invalid length. [ 315.940030][ T6374] veth1_vlan: entered promiscuous mode [ 316.276566][ T6374] veth0_macvtap: entered promiscuous mode [ 316.321598][ T6374] veth1_macvtap: entered promiscuous mode [ 316.487368][ T6605] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 316.566861][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.577810][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.588016][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.598909][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.613249][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.196831][ T6605] loop3: detected capacity change from 0 to 2048 [ 317.449655][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.460513][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.470806][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.481578][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.495851][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.536347][ T6609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.585828][ T6374] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.594979][ T6374] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.604209][ T6374] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.614146][ T6374] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.377474][ T6609] NILFS (loop3): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 319.390443][ T6609] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=2) [ 319.565710][ T6616] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 319.575423][ T6616] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.584841][ T6616] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.594853][ T6616] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.603386][ T6616] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.683140][ T6609] Remounting filesystem read-only [ 319.740705][ T5790] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 321.188599][ T2227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 321.532305][ T2227] usb 4-1: Using ep0 maxpacket: 32 [ 321.583928][ T2227] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 321.592696][ T2227] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 321.602042][ T2227] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 321.611383][ T2227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 321.621425][ T2227] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 321.633589][ T2227] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 321.640382][ T5079] Bluetooth: hci2: command 0x0c1a tx timeout [ 321.648881][ T2227] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 321.653663][ T5079] Bluetooth: hci4: command 0x0c1a tx timeout [ 321.663499][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.669214][ T5079] Bluetooth: hci3: command 0x0c1a tx timeout [ 321.685377][ T5079] Bluetooth: hci1: command 0x0c1a tx timeout [ 321.695855][ T2227] usb 4-1: config 0 descriptor?? [ 321.699181][ T5079] Bluetooth: hci0: command 0x0401 tx timeout [ 321.711481][ T6615] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 321.948459][ T2227] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 322.222146][ T6650] netlink: 'syz.1.134': attribute type 2 has an invalid length. [ 323.918415][ T5079] Bluetooth: hci0: command 0x0401 tx timeout [ 324.502393][ T5835] usb 4-1: USB disconnect, device number 5 [ 324.561379][ T5835] usblp0: removed [ 326.101232][ T6690] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 326.109232][ T6690] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 326.117244][ T6690] veth0_virt_wifi: entered allmulticast mode [ 326.126247][ T6690] veth0_virt_wifi: entered promiscuous mode [ 326.763805][ T6694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.772217][ T6694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.780679][ T6694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.788913][ T6694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.797125][ T6694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 328.061845][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.070189][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.227102][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.235328][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.055691][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.064286][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 329.071697][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.078836][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 329.083562][ T5079] Bluetooth: hci0: command 0x0401 tx timeout [ 329.366240][ T6693] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 331.306751][ T29] audit: type=1326 audit(1736045850.648:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.5.69" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05a5f85d29 code=0x0 [ 332.125727][ T6725] loop5: detected capacity change from 0 to 32768 [ 332.137756][ T5796] Bluetooth: hci0: command 0x0401 tx timeout [ 332.596486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 332.696811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 332.803731][ T6725] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,noexcl,reconstruct_alloc,nocow,no_data_io [ 332.827266][ T6725] bcachefs (loop5): recovering from clean shutdown, journal seq 3338 [ 332.836734][ T6725] bcachefs (loop5): Version upgrade required: [ 332.836734][ T6725] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 332.836734][ T6725] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 332.836734][ T6725] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 332.977969][ T6725] bcachefs (loop5): dropping and reconstructing all alloc info [ 333.041890][ T6725] bcachefs (loop5): error validating btree node on loop5 at btree inodes level 0/0 [ 333.041989][ T6725] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 333.042097][ T6725] node offset 0/24 bset u64s 0: incorrect max key 18446462598732840960:14872293344460931071:U32_MAX [ 333.077311][ T6725] bcachefs (loop5): flagging btree inodes lost data [ 333.110884][ T6725] error reading btree root inodes l=0: btree_node_read_error, fixing [ 333.119502][ T6725] bcachefs (loop5): will run btree node scan [ 333.136407][ T6725] bcachefs (loop5): error validating btree node on loop5 at btree dirents level 0/0 [ 333.136471][ T6725] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 333.136536][ T6725] node offset 0/24 bset u64s 0: incorrect max key U64_MAX:18446744073709486080:524287 [ 333.170181][ T6725] bcachefs (loop5): flagging btree dirents lost data [ 333.239910][ T6725] error reading btree root dirents l=0: btree_node_read_error, fixing [ 333.262547][ T6725] invalid bkey u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.: [ 333.262640][ T6725] xattr name has invalid characters: delete?, fixing [ 333.334006][ T6725] bcachefs (loop5): error validating btree node on loop5 at btree snapshots level 0/0 [ 333.334080][ T6725] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 333.334144][ T6725] node offset 0/16 bset u64s 0: unknown checksum type 9, fixing [ 333.366738][ T6725] bcachefs (loop5): error validating btree node on loop5 at btree snapshots level 0/0 [ 333.366802][ T6725] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 333.366866][ T6725] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 333.400591][ T6725] bcachefs (loop5): btree_node_read_work: rewriting btree node at btree=snapshots level=0 SPOS_MAX due to error [ 333.471996][ T6725] bcachefs (loop5): error validating btree node on loop5 at btree deleted_inodes level 0/0 [ 333.472097][ T6725] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 333.472197][ T6725] node offset 0/8 bset u64s 0: incorrect max key 1125899906842623:U64_MAX:U32_MAX [ 333.509857][ T6725] bcachefs (loop5): flagging btree deleted_inodes lost data [ 333.530731][ T6725] error reading btree root deleted_inodes l=0: btree_node_read_error, fixing [ 333.540902][ T6725] bcachefs (loop5): scan_for_btree_nodes... [ 334.201670][ T6725] bch2_scan_for_btree_nodes: nodes found after overwrites: [ 334.201803][ T6725] extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0 [ 334.201902][ T6725] inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-18446462598732840960:14872293344460931071:U32_MAX ptr: 0:38:0 gen 0 [ 334.202009][ T6725] dirents l=0 seq=1 journal_seq=3458764513820540929 cookie=9aa2895aefce4bdf POS_MIN-U64_MAX:18446744073709486080:524287 ptr: 0:41:0 gen 0 [ 334.202113][ T6725] xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0 [ 334.202202][ T6725] subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0 [ 334.202293][ T6725] snapshots l=0 seq=1 journal_seq=0 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0 [ 334.202382][ T6725] lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0 [ 334.202473][ T6725] deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-1125899906842623:U64_MAX:U32_MAX ptr: 0:42:0 gen 0 [ 334.202562][ T6725] [ 334.329152][ T6725] done [ 334.332132][ T6725] bcachefs (loop5): check_topology... [ 334.332270][ T6725] bcachefs (loop5): btree root inodes unreadable, must recover from scan [ 334.349373][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering inodes l=0 POS_MIN - SPOS_MAX [ 334.360354][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 18446462598732840960:14872293344460931071:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 334.405828][ T6011] bcachefs (loop5): error validating btree node at btree inodes level 0/0 [ 334.405926][ T6011] u64s 11 type btree_ptr_v2 18446462598732840960:14872293344460931071:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 334.406286][ T6011] node offset 16/24 bset u64s 110 bset byte offset 152: keys out of order: u64s 16 type inode_v3 0:4096:U32_MAX len 0 ver 0 > u64s 18 type inode_v3 0:0:117440511 len 0 ver 0, fixing [ 334.466291][ T6011] bcachefs (loop5): btree_node_read_work: rewriting btree node at btree=inodes level=0 18446462598732840960:14872293344460931071:U32_MAX due to error [ 334.484748][ T6725] btree node with incorrect max_keyat btree inodes level 1: [ 334.484833][ T6725] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 334.484918][ T6725] child: u64s 11 type btree_ptr_v2 18446462598732840960:14872293344460931071:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 334.519677][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering inodes l=0 18446462598732840960:14872293344460931072:0 - SPOS_MAX [ 334.534030][ T6725] btree node with incorrect max_keyat btree inodes level 1: [ 334.534111][ T6725] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 334.534198][ T6725] child: u64s 11 type btree_ptr_v2 18446462598732840960:14872293344460931071:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 334.571413][ T6725] bcachefs (loop5): set_node_max(): u64s 11 type btree_ptr_v2 18446462598732840960:14872293344460931071:U32_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 -> SPOS_MAX [ 334.599029][ T6725] bcachefs (loop5): btree root dirents unreadable, must recover from scan [ 334.608451][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering dirents l=0 POS_MIN - SPOS_MAX [ 334.619450][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 U64_MAX:18446744073709486080:524287 len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 334.653586][ T6725] btree node with incorrect max_keyat btree dirents level 1: [ 334.653671][ T6725] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 334.653757][ T6725] child: u64s 11 type btree_ptr_v2 U64_MAX:18446744073709486080:524287 len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 334.692861][ T6725] bcachefs (loop5): set_node_max(): u64s 11 type btree_ptr_v2 U64_MAX:18446744073709486080:524287 len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 -> SPOS_MAX [ 334.714038][ T6725] bcachefs (loop5): btree root deleted_inodes unreadable, must recover from scan [ 334.724371][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering deleted_inodes l=0 POS_MIN - SPOS_MAX [ 334.736088][ T6725] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 1125899906842623:U64_MAX:U32_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 334.782578][ T6725] btree node with incorrect max_keyat btree deleted_inodes level 1: [ 334.782665][ T6725] parent: u64s 5 type btree_ptr SPOS_MAX len 0 ver 0 [ 334.782750][ T6725] child: u64s 11 type btree_ptr_v2 1125899906842623:U64_MAX:U32_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 334.816506][ T6725] bcachefs (loop5): set_node_max(): u64s 11 type btree_ptr_v2 1125899906842623:U64_MAX:U32_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 -> SPOS_MAX [ 334.837055][ T6725] done [ 334.840009][ T6725] bcachefs (loop5): accounting_read... done [ 334.849239][ T6725] bcachefs (loop5): alloc_read... done [ 334.855129][ T6725] bcachefs (loop5): stripes_read... done [ 334.861335][ T6725] bcachefs (loop5): snapshots_read... done [ 334.867840][ T6725] bcachefs (loop5): check_allocations... done [ 335.016563][ T6725] bcachefs (loop5): going read-write [ 335.069339][ T73] ===================================================== [ 335.076903][ T73] BUG: KMSAN: uninit-value in bch2_btree_node_check_topology+0xf5f/0x2db0 [ 335.085645][ T73] bch2_btree_node_check_topology+0xf5f/0x2db0 [ 335.092272][ T73] btree_split_insert_keys+0x4fd/0x630 [ 335.098073][ T73] btree_split+0xd9f/0x9c20 [ 335.102779][ T73] bch2_btree_insert_node+0xaba/0x2810 [ 335.108561][ T73] bch2_btree_node_rewrite+0x10f8/0x1930 [ 335.114411][ T73] async_btree_node_rewrite_work+0x485/0x1710 [ 335.120810][ T73] process_scheduled_works+0xae0/0x1c40 [ 335.126672][ T73] worker_thread+0xea7/0x14f0 [ 335.131568][ T73] kthread+0x3e2/0x540 [ 335.135808][ T73] ret_from_fork+0x6d/0x90 [ 335.140524][ T73] ret_from_fork_asm+0x1a/0x30 [ 335.145504][ T73] [ 335.148640][ T73] Uninit was created at: [ 335.156967][ T73] ___kmalloc_large_node+0x22c/0x370 [ 335.162465][ T73] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 335.169729][ T73] __kmalloc_node_noprof+0xc96/0x1250 [ 335.175315][ T73] __kvmalloc_node_noprof+0xc0/0x2d0 [ 335.180878][ T73] bch2_btree_node_mem_alloc+0xa72/0x2ee0 [ 335.186881][ T73] bch2_btree_reserve_get+0x37f/0x2290 [ 335.192522][ T73] bch2_btree_update_start+0x1af9/0x2d60 [ 335.198449][ T73] bch2_btree_node_rewrite+0x1da/0x1930 [ 335.204222][ T73] async_btree_node_rewrite_work+0x485/0x1710 [ 335.211201][ T73] process_scheduled_works+0xae0/0x1c40 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.217036][ T73] worker_thread+0xea7/0x14f0 [ 335.221925][ T73] kthread+0x3e2/0x540 [ 335.226340][ T73] ret_from_fork+0x6d/0x90 [ 335.230936][ T73] ret_from_fork_asm+0x1a/0x30 [ 335.235902][ T73] [ 335.238815][ T73] CPU: 0 UID: 0 PID: 73 Comm: kworker/u8:5 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 335.249786][ T73] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.263466][ T73] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 335.272581][ T73] ===================================================== [ 335.279712][ T73] Disabling lock debugging due to kernel taint [ 335.285981][ T73] Kernel panic - not syncing: kmsan.panic set ... [ 335.292542][ T73] CPU: 0 UID: 0 PID: 73 Comm: kworker/u8:5 Tainted: G B 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 335.304896][ T73] Tainted: [B]=BAD_PAGE [ 335.309142][ T73] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 335.319340][ T73] Workqueue: btree_node_rewrite async_btree_node_rewrite_work [ 335.327060][ T73] Call Trace: [ 335.330441][ T73] [ 335.333510][ T73] dump_stack_lvl+0x216/0x2d0 [ 335.338381][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.344373][ T73] dump_stack+0x1e/0x24 [ 335.348885][ T73] panic+0x4e2/0xcf0 [ 335.352957][ T73] ? kmsan_get_metadata+0xb1/0x1c0 [ 335.358257][ T73] kmsan_report+0x2c7/0x2d0 [ 335.362923][ T73] ? bch2_btree_and_journal_iter_peek+0x395b/0x3ab0 [ 335.369734][ T73] ? __msan_warning+0x95/0x120 [ 335.374693][ T73] ? bch2_btree_node_check_topology+0xf5f/0x2db0 [ 335.381228][ T73] ? btree_split_insert_keys+0x4fd/0x630 [ 335.387024][ T73] ? btree_split+0xd9f/0x9c20 [ 335.391882][ T73] ? bch2_btree_insert_node+0xaba/0x2810 [ 335.397720][ T73] ? bch2_btree_node_rewrite+0x10f8/0x1930 [ 335.403726][ T73] ? async_btree_node_rewrite_work+0x485/0x1710 [ 335.410172][ T73] ? process_scheduled_works+0xae0/0x1c40 [ 335.416094][ T73] ? worker_thread+0xea7/0x14f0 [ 335.421138][ T73] ? kthread+0x3e2/0x540 [ 335.425531][ T73] ? ret_from_fork+0x6d/0x90 [ 335.430289][ T73] ? ret_from_fork_asm+0x1a/0x30 [ 335.435438][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.440832][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.446187][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.452161][ T73] __msan_warning+0x95/0x120 [ 335.456949][ T73] bch2_btree_node_check_topology+0xf5f/0x2db0 [ 335.463330][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.469316][ T73] ? bch2_btree_insert_keys_interior+0x1bf6/0x1ca0 [ 335.476048][ T73] btree_split_insert_keys+0x4fd/0x630 [ 335.481699][ T73] btree_split+0xd9f/0x9c20 [ 335.486390][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.492366][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.497729][ T73] ? __bch2_bkey_cmp_packed_format_checked+0x57/0x960 [ 335.504708][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.510079][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.516056][ T73] ? __bkey_unpack_pos+0x760/0x8e0 [ 335.521352][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.526712][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.532689][ T73] ? __bch2_bkey_cmp_packed_format_checked+0x91c/0x960 [ 335.539751][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.545107][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.550472][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.556452][ T73] ? six_unlock_ip+0x40e/0x460 [ 335.561474][ T73] ? bch2_btree_node_unlock_write+0x71b/0x740 [ 335.567722][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.573083][ T73] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 335.579073][ T73] bch2_btree_insert_node+0xaba/0x2810 [ 335.584759][ T73] ? bch2_btree_insert_node+0x55e/0x2810 [ 335.590612][ T73] bch2_btree_node_rewrite+0x10f8/0x1930 [ 335.596459][ T73] ? bch2_btree_node_rewrite+0x32e/0x1930 [ 335.602410][ T73] async_btree_node_rewrite_work+0x485/0x1710 [ 335.608704][ T73] ? async_btree_node_rewrite_work+0x282/0x1710 [ 335.615154][ T73] ? kmsan_get_metadata+0x13e/0x1c0 [ 335.620557][ T73] ? __pfx_async_btree_node_rewrite_work+0x10/0x10 [ 335.627290][ T73] process_scheduled_works+0xae0/0x1c40 [ 335.633089][ T73] worker_thread+0xea7/0x14f0 [ 335.637994][ T73] kthread+0x3e2/0x540 [ 335.642222][ T73] ? __pfx_worker_thread+0x10/0x10 [ 335.647552][ T73] ? __pfx_kthread+0x10/0x10 [ 335.652305][ T73] ret_from_fork+0x6d/0x90 [ 335.656893][ T73] ? __pfx_kthread+0x10/0x10 [ 335.661652][ T73] ret_from_fork_asm+0x1a/0x30 [ 335.666630][ T73] [ 335.670025][ T73] Kernel Offset: disabled [ 335.674404][ T73] Rebooting in 86400 seconds..