last executing test programs: 1m27.642308149s ago: executing program 2 (id=2506): socket(0x1d, 0x2, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x193042, 0x41) readv(r1, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500010026bd7000ffdbdf25050000000c00010002"], 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe4f, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file1\x00', 0xa00086, &(0x7f00000002c0)={[{@largeio}, {@norecovery}, {@bsdgroups}, {@dax_never}, {@nogrpid}, {@nouuid}]}, 0x1, 0x9759, &(0x7f000001c600)="$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") connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) 1m24.155341877s ago: executing program 2 (id=2509): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) sendto$inet(r3, &(0x7f0000001600), 0x0, 0x20004050, &(0x7f0000002600)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x22464b075f221b38, r2}) 1m23.606493787s ago: executing program 2 (id=2512): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaeb, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m23.427145836s ago: executing program 2 (id=2513): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 1m22.964652781s ago: executing program 2 (id=2514): unshare(0x60000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) 1m20.790012836s ago: executing program 2 (id=2521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m20.227228597s ago: executing program 32 (id=2521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 8.027417022s ago: executing program 4 (id=2686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2040600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.002410749s ago: executing program 4 (id=2687): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x120, 0x408, 0x338, 0x0, 0x338, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@length={{0x28}, {0x758, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x50, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x7fff], 0x8, 0x0, 0x2}}, @common=@icmp6={{0x28}, {0x3, '\\J'}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38, 0x1}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0x0, 0xffffffff, 0x0, 0xffffffff], 'vcan0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x8, 0x0, 0x6c}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$setownex(r4, 0xf, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) personality(0x400000a) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000500)}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x4c232c33}, {0x2, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) 4.142436055s ago: executing program 1 (id=2691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f5", 0x24}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) 3.687518809s ago: executing program 4 (id=2692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000240)=""/242, 0xf2, 0x0, 0x0, 0x0) 3.590367425s ago: executing program 1 (id=2693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0xffff, 0x0) read$msr(r4, &(0x7f0000000280)=""/130, 0x82) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 2.180064605s ago: executing program 1 (id=2695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000ffb000/0x3000)=nil) 2.128953984s ago: executing program 4 (id=2696): syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x502) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) syz_open_procfs(0x0, &(0x7f00000025c0)='fd/3\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x20, 0x24, 0x6, 0x2, 0x1, 0xffffd7c1, &(0x7f0000000040)="03"}) 2.003586884s ago: executing program 3 (id=2697): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001800348014"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.897183141s ago: executing program 3 (id=2698): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000bc0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f300", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0xffff, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1.796868758s ago: executing program 0 (id=2699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.755523584s ago: executing program 1 (id=2700): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) pipe2(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.676266268s ago: executing program 3 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f5", 0x24}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) 1.570686945s ago: executing program 0 (id=2702): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x24, 0x0, &(0x7f0000000040)) 1.547447359s ago: executing program 4 (id=2703): r0 = gettid() sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x10448) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0x7, 0x509, &(0x7f0000000180), 0x0, 0x0) io_destroy(r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r2, 0x3) accept4(r2, 0x0, 0x0, 0x0) 1.307273868s ago: executing program 3 (id=2704): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0xffff, 0x0) read$msr(r4, &(0x7f0000000280)=""/130, 0x82) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 1.29202427s ago: executing program 0 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(r0, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x40000) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000240)=""/242, 0xf2, 0x0, 0x0, 0x0) 1.273210213s ago: executing program 1 (id=2706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1101, 0x3}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xa}], 0x7, 0x0, 0x0) ppoll(&(0x7f0000000580)=[{r3, 0x400}, {r1, 0x2180}, {r1, 0x40}], 0x3, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") pwritev2(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37af}, 0x50) 1.020080574s ago: executing program 0 (id=2707): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r0, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 347.566764ms ago: executing program 1 (id=2708): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0x20fca3, 0x0, 0x2000003, 0x122f}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x13, &(0x7f0000001bc0), 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) 324.007218ms ago: executing program 3 (id=2709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c755b2713612558) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 237.236772ms ago: executing program 0 (id=2710): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 220.128315ms ago: executing program 4 (id=2711): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x3}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") 115.554792ms ago: executing program 0 (id=2712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)="c295c5ab29caa299c7583dd996ddbf29991706a1232e6ed9cdb1d830cf103989202512f5", 0x24}], 0x1, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x40}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc0}], 0x1, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)}, 0x10000) 0s ago: executing program 3 (id=2713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x800) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x10002, 0x100, 0x1c00}) kernel console output (not intermixed with test programs): f_netlink_parms(): no params data found [ 67.194194][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.277955][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 67.345705][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.353145][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.361016][ T5771] bridge_slave_0: entered allmulticast mode [ 67.368164][ T5771] bridge_slave_0: entered promiscuous mode [ 67.405996][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.413318][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.421135][ T5771] bridge_slave_1: entered allmulticast mode [ 67.427947][ T5771] bridge_slave_1: entered promiscuous mode [ 67.495520][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.503103][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.511075][ T5769] bridge_slave_0: entered allmulticast mode [ 67.517820][ T5769] bridge_slave_0: entered promiscuous mode [ 67.526077][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.533837][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.542236][ T5769] bridge_slave_1: entered allmulticast mode [ 67.548947][ T5769] bridge_slave_1: entered promiscuous mode [ 67.560725][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.571003][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.578514][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.588692][ T5770] bridge_slave_0: entered allmulticast mode [ 67.595833][ T5770] bridge_slave_0: entered promiscuous mode [ 67.604724][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.612193][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.619999][ T5770] bridge_slave_1: entered allmulticast mode [ 67.626807][ T5770] bridge_slave_1: entered promiscuous mode [ 67.663106][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.733311][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.746145][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.755799][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.763617][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.771354][ T5768] bridge_slave_0: entered allmulticast mode [ 67.778333][ T5768] bridge_slave_0: entered promiscuous mode [ 67.790254][ T5771] team0: Port device team_slave_0 added [ 67.799238][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.815888][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.826800][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.834408][ T5768] bridge_slave_1: entered allmulticast mode [ 67.842512][ T5768] bridge_slave_1: entered promiscuous mode [ 67.851793][ T5771] team0: Port device team_slave_1 added [ 67.860816][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.922978][ T5769] team0: Port device team_slave_0 added [ 67.945286][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.966580][ T5770] team0: Port device team_slave_0 added [ 67.976893][ T5769] team0: Port device team_slave_1 added [ 67.985127][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.997610][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.005810][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.032653][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.049023][ T5770] team0: Port device team_slave_1 added [ 68.094260][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.101444][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.128663][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.162304][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.169322][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.196132][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.228467][ T5768] team0: Port device team_slave_0 added [ 68.236947][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.244727][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.279367][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.300770][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.308028][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.338379][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.352486][ T5768] team0: Port device team_slave_1 added [ 68.385575][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.392894][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.419901][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.436755][ T5771] hsr_slave_0: entered promiscuous mode [ 68.444137][ T5771] hsr_slave_1: entered promiscuous mode [ 68.477628][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.485041][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.512686][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.526177][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.533424][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.560551][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.612647][ T5769] hsr_slave_0: entered promiscuous mode [ 68.620648][ T5769] hsr_slave_1: entered promiscuous mode [ 68.627456][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.636359][ T5769] Cannot create hsr debugfs directory [ 68.676635][ T5770] hsr_slave_0: entered promiscuous mode [ 68.683416][ T5770] hsr_slave_1: entered promiscuous mode [ 68.689601][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.697360][ T5770] Cannot create hsr debugfs directory [ 68.731259][ T51] Bluetooth: hci3: command tx timeout [ 68.735117][ T5773] Bluetooth: hci1: command tx timeout [ 68.737337][ T51] Bluetooth: hci2: command tx timeout [ 68.743066][ T5773] Bluetooth: hci0: command tx timeout [ 68.785506][ T5768] hsr_slave_0: entered promiscuous mode [ 68.792404][ T5768] hsr_slave_1: entered promiscuous mode [ 68.798779][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.806524][ T5768] Cannot create hsr debugfs directory [ 69.173538][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.205053][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.223379][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.234599][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.278824][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.289120][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.307257][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.317535][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.427932][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.439602][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.452257][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.465677][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.550928][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.571060][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.582840][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.593678][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.663015][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.691461][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.726617][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.761871][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.769210][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.795151][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.802393][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.813780][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.843030][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.850631][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.865642][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.872920][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.944501][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.998494][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.042421][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.049623][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.075184][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.082842][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.106748][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.164102][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.194419][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.201622][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.224917][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.232422][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.445475][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.458087][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.572986][ T5771] veth0_vlan: entered promiscuous mode [ 70.613971][ T5771] veth1_vlan: entered promiscuous mode [ 70.639374][ T5770] veth0_vlan: entered promiscuous mode [ 70.663790][ T5770] veth1_vlan: entered promiscuous mode [ 70.778415][ T5771] veth0_macvtap: entered promiscuous mode [ 70.797731][ T5770] veth0_macvtap: entered promiscuous mode [ 70.809432][ T5771] veth1_macvtap: entered promiscuous mode [ 70.812394][ T5773] Bluetooth: hci0: command tx timeout [ 70.816176][ T5085] Bluetooth: hci2: command tx timeout [ 70.820693][ T5773] Bluetooth: hci1: command tx timeout [ 70.820728][ T5773] Bluetooth: hci3: command tx timeout [ 70.843526][ T5770] veth1_macvtap: entered promiscuous mode [ 70.866039][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.882478][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.906495][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.919210][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.963635][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.975783][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.984716][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.994140][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.006298][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.018143][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.030402][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.055721][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.066902][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.079272][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.124382][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.134712][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.144944][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.154666][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.195913][ T5768] veth0_vlan: entered promiscuous mode [ 71.295715][ T5769] veth0_vlan: entered promiscuous mode [ 71.314966][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.323728][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.341613][ T5768] veth1_vlan: entered promiscuous mode [ 71.378668][ T5769] veth1_vlan: entered promiscuous mode [ 71.434803][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.467458][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.482113][ T5768] veth0_macvtap: entered promiscuous mode [ 71.496893][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.502689][ T5768] veth1_macvtap: entered promiscuous mode [ 71.515302][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.555466][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.564306][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.572574][ T5769] veth0_macvtap: entered promiscuous mode [ 71.612925][ T5769] veth1_macvtap: entered promiscuous mode [ 71.645888][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.657415][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.667678][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.679546][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.694226][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.734436][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.748472][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.767996][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.783676][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.799937][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.841461][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.858220][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.869150][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.885681][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.898211][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.924815][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.944743][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.960290][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.970409][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.979421][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.989572][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.031727][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.051526][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.076674][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.088480][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.103424][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.125029][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.148885][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.175878][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.199206][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.239060][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.279424][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.292892][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.304318][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.463591][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.533621][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.789958][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.826781][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.896505][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.911120][ T5085] Bluetooth: hci3: command tx timeout [ 72.917293][ T5085] Bluetooth: hci1: command tx timeout [ 72.923646][ T5085] Bluetooth: hci0: command tx timeout [ 72.930904][ T5085] Bluetooth: hci2: command tx timeout [ 72.986823][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.122917][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.170363][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.680510][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 74.707028][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12'. [ 74.769069][ T5853] syz.1.2[5853]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.969947][ T51] Bluetooth: hci2: command tx timeout [ 74.975587][ T51] Bluetooth: hci1: command tx timeout [ 74.981342][ T5773] Bluetooth: hci3: command tx timeout [ 74.987255][ T5085] Bluetooth: hci0: command tx timeout [ 74.995874][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.022973][ T5864] Zero length message leads to an empty skb [ 75.357291][ T5853] loop1: detected capacity change from 0 to 128 [ 76.568692][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 76.797904][ T5891] team0: Port device team_slave_0 removed [ 77.380691][ T5903] syzkaller0: entered promiscuous mode [ 77.397933][ T5903] syzkaller0: entered allmulticast mode [ 78.171035][ T5920] loop2: detected capacity change from 0 to 512 [ 78.209971][ T5920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.291430][ T5920] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.36: iget: bad i_size value: 38620345925642 [ 78.326279][ T5920] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.36: couldn't read orphan inode 15 (err -117) [ 78.362131][ T5920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.766758][ T5941] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.36: bg 0: block 5: invalid block bitmap [ 78.818138][ T5941] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 140 with error 28 [ 78.836236][ T5941] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.836236][ T5941] [ 78.846512][ T5941] EXT4-fs (loop2): Total free blocks count 0 [ 78.856804][ T5941] EXT4-fs (loop2): Free/Dirty block details [ 78.864119][ T5941] EXT4-fs (loop2): free_blocks=0 [ 78.869289][ T5941] EXT4-fs (loop2): dirty_blocks=140 [ 78.878073][ T5941] EXT4-fs (loop2): Block reservation details [ 78.884415][ T5941] EXT4-fs (loop2): i_reserved_data_blocks=140 [ 79.166096][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.156308][ T5943] batadv_slave_1: entered promiscuous mode [ 80.167382][ T5945] batadv_slave_1: left promiscuous mode [ 80.319409][ T5949] netlink: 'syz.3.41': attribute type 5 has an invalid length. [ 80.408954][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 80.570222][ T5960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.45'. [ 80.609242][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 80.677347][ T5962] loop3: detected capacity change from 0 to 512 [ 80.701699][ T5962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.743023][ T5962] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.46: iget: bad i_size value: 38620345925642 [ 80.764785][ T5962] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.46: couldn't read orphan inode 15 (err -117) [ 80.815801][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.620950][ T5981] syzkaller0: entered promiscuous mode [ 81.659420][ T5981] syzkaller0: entered allmulticast mode [ 81.734457][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.133273][ T6006] loop1: detected capacity change from 0 to 256 [ 85.541900][ T6022] loop3: detected capacity change from 0 to 1024 [ 85.573487][ T6022] ======================================================= [ 85.573487][ T6022] WARNING: The mand mount option has been deprecated and [ 85.573487][ T6022] and is ignored by this kernel. Remove the mand [ 85.573487][ T6022] option from the mount to silence this warning. [ 85.573487][ T6022] ======================================================= [ 85.794737][ T6022] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.870733][ T6022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.929334][ T6022] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.645196][ T6022] EXT4-fs error (device loop3): ext4_ext_check_inode:530: inode #11: comm syz.3.63: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 86.669269][ T6022] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.63: couldn't read orphan inode 11 (err -117) [ 86.684007][ T6022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.840141][ T6019] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.868455][ T6043] fuse: Unknown parameter 'user_i00000000000000000000' [ 86.875685][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 86.875730][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 87.584015][ T27] cfg80211: failed to load regulatory.db [ 88.146699][ T6075] loop1: detected capacity change from 0 to 1024 [ 88.208897][ T6075] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.228239][ T6075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.257010][ T6075] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.270274][ T6079] fuse: Unknown parameter 'user_id00000000000000000000' [ 88.295590][ T6075] EXT4-fs error (device loop1): ext4_ext_check_inode:530: inode #11: comm syz.1.82: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 88.352866][ T6075] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.82: couldn't read orphan inode 11 (err -117) [ 88.409077][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 88.411729][ T6075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.093042][ T6072] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.294802][ T6091] syzkaller0: entered promiscuous mode [ 89.320451][ T6091] syzkaller0: entered allmulticast mode [ 89.387981][ T6100] tipc: Started in network mode [ 89.393490][ T6100] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 89.421164][ T6100] tipc: Enabled bearer , priority 10 [ 90.218744][ T6121] netlink: 44 bytes leftover after parsing attributes in process `syz.2.100'. [ 90.255769][ T6118] loop0: detected capacity change from 0 to 1024 [ 90.273277][ T6118] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.297634][ T6118] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.334490][ T6118] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.361355][ T6118] EXT4-fs error (device loop0): ext4_ext_check_inode:530: inode #11: comm syz.0.98: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 90.401194][ T6118] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.98: couldn't read orphan inode 11 (err -117) [ 90.530610][ T6118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.558565][ T8] tipc: Node number set to 9611946 [ 90.655510][ T6118] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.098162][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 94.522438][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 94.545818][ T6155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 95.047817][ T6174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.216666][ T6174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.392674][ T6174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.917167][ T6174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.077659][ T6174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.104622][ T6174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.126197][ T6174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.158026][ T6174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.199921][ T6194] netlink: 1904 bytes leftover after parsing attributes in process `syz.1.128'. [ 96.220015][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 97.541666][ T6216] syz.0.135 (6216) used greatest stack depth: 17480 bytes left [ 98.524211][ T6225] fuse: Unknown parameter '0x0000000000000003' [ 99.087140][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.140219][ T6253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.166312][ T6253] macvlan2: entered promiscuous mode [ 99.172324][ T6253] macvlan2: entered allmulticast mode [ 99.965108][ T6270] batadv_slave_1: entered promiscuous mode [ 100.089140][ T6264] batadv_slave_1: left promiscuous mode [ 100.117294][ T6275] tipc: Enabling of bearer rejected, failed to enable media [ 100.674897][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 101.289381][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 101.306132][ T6312] ip6gre1: entered promiscuous mode [ 101.316301][ T6312] ip6gre1: entered allmulticast mode [ 101.500051][ T6318] wireguard0: entered promiscuous mode [ 101.521264][ T6318] wireguard0: entered allmulticast mode [ 102.021622][ T6339] tipc: Started in network mode [ 102.035859][ T6339] tipc: Node identity 9a6f74a7d59c, cluster identity 4711 [ 102.057786][ T6339] tipc: Enabled bearer , priority 0 [ 102.104547][ T6337] tipc: Disabling bearer [ 103.380821][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 104.924413][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 104.943916][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 106.324620][ T6441] Illegal XDP return value 4291371008 on prog (id 8) dev syz_tun, expect packet loss! [ 106.351020][ T6443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'. [ 107.619769][ C0] sched: RT throttling activated [ 107.999223][ T6473] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.195229][ T6537] netlink: 'syz.1.251': attribute type 4 has an invalid length. [ 115.151084][ T6601] fuse: Bad value for 'fd' [ 115.214517][ T6608] loop2: detected capacity change from 0 to 1024 [ 115.265180][ T6608] EXT4-fs: Ignoring removed bh option [ 115.333752][ T6608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.409236][ T28] audit: type=1326 audit(1776243081.262:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6618 comm="syz.0.281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27c7d9c819 code=0x0 [ 115.443635][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.831640][ T6639] fuse: Bad value for 'fd' [ 116.227318][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.295'. [ 116.938698][ T6683] loop2: detected capacity change from 0 to 1024 [ 116.954092][ T6683] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.993522][ T6683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.012477][ T6683] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.053351][ T6683] EXT4-fs error (device loop2): ext4_ext_check_inode:530: inode #11: comm syz.2.305: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 117.110597][ T6683] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.305: couldn't read orphan inode 11 (err -117) [ 117.125023][ T6683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.251680][ T6679] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.672413][ T6730] capability: warning: `syz.0.323' uses deprecated v2 capabilities in a way that may be insecure [ 120.868337][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.326'. [ 122.207522][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 122.254497][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'. [ 123.166528][ T6788] netlink: 348 bytes leftover after parsing attributes in process `syz.3.346'. [ 125.447094][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 125.557021][ T6856] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 125.600717][ T6856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 125.618491][ T6856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.533841][ T6931] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.030231][ T6950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.151578][ T6992] tipc: Enabling of bearer rejected, failed to enable media [ 130.372090][ T7043] fuse: Bad value for 'fd' [ 130.397893][ T7046] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 130.717974][ T7057] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.234649][ T7076] fuse: Bad value for 'fd' [ 131.704911][ T7095] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.739455][ T7095] netlink: 84 bytes leftover after parsing attributes in process `syz.3.473'. [ 131.756636][ T7095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.800654][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 131.811971][ T7097] ksmbd: Unknown IPC event: 0, ignore. [ 131.931670][ T7102] fuse: Bad value for 'fd' [ 133.650782][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.664127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.945333][ T7185] fuse: Bad value for 'fd' [ 135.311276][ T7205] batadv0: entered allmulticast mode [ 135.316936][ T7205] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 135.326186][ T7210] netlink: 277 bytes leftover after parsing attributes in process `syz.0.519'. [ 136.778868][ T28] audit: type=1326 audit(1776243102.642:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 136.837510][ T28] audit: type=1326 audit(1776243102.642:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 136.885768][ T28] audit: type=1326 audit(1776243102.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 136.963067][ T28] audit: type=1326 audit(1776243102.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.007912][ T28] audit: type=1326 audit(1776243102.682:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.071154][ T28] audit: type=1326 audit(1776243102.692:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.149736][ T28] audit: type=1326 audit(1776243102.692:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.176641][ T28] audit: type=1326 audit(1776243102.692:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.389401][ T28] audit: type=1326 audit(1776243102.692:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd35179c819 code=0x7ffc0000 [ 137.866240][ T7343] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 138.623355][ T7360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.560'. [ 140.886005][ T7425] netlink: 540 bytes leftover after parsing attributes in process `syz.1.584'. [ 141.154224][ T7436] netlink: 996 bytes leftover after parsing attributes in process `syz.1.589'. [ 143.892707][ T7496] xt_connbytes: Forcing CT accounting to be enabled [ 145.469744][ T7536] syz.3.623 uses obsolete (PF_INET,SOCK_PACKET) [ 146.796793][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 146.836455][ T7575] bridge1: port 1(veth3) entered blocking state [ 146.851587][ T7575] bridge1: port 1(veth3) entered disabled state [ 146.866212][ T7575] veth3: entered allmulticast mode [ 146.883619][ T7575] veth3: entered promiscuous mode [ 146.924024][ T7578] vlan2: entered allmulticast mode [ 146.938638][ T7578] vlan0: entered allmulticast mode [ 146.976334][ T7578] veth0_vlan: entered allmulticast mode [ 146.989829][ T7578] bridge1: port 2(vlan2) entered blocking state [ 147.006865][ T7578] bridge1: port 2(vlan2) entered disabled state [ 147.021142][ T7578] vlan2: entered promiscuous mode [ 147.026449][ T7578] vlan0: entered promiscuous mode [ 147.361780][ T7604] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.649'. [ 147.388604][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 147.497305][ T28] audit: type=1326 audit(1776243113.362:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 147.544870][ T28] audit: type=1326 audit(1776243113.362:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 147.596643][ T28] audit: type=1326 audit(1776243113.362:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 147.637971][ T28] audit: type=1326 audit(1776243113.362:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 147.678589][ T28] audit: type=1326 audit(1776243113.362:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 147.711853][ T28] audit: type=1326 audit(1776243113.362:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.1.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d919c819 code=0x7ffc0000 [ 149.713752][ T7665] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.672'. [ 149.745031][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 153.954234][ T7820] netlink: 'syz.1.737': attribute type 1 has an invalid length. [ 154.050396][ T7820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.153307][ T7822] vlan2: entered allmulticast mode [ 154.195651][ T7822] bond2: entered allmulticast mode [ 154.295377][ T7820] bond2: (slave geneve2): making interface the new active one [ 154.326479][ T7820] geneve2: entered allmulticast mode [ 154.350989][ T7820] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 156.286203][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.753'. [ 158.385205][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.076013][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.773'. [ 159.191783][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.263718][ T7909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.744681][ T7909] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.758071][ T7909] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.772005][ T7909] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.783000][ T7909] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.928231][ T7914] netlink: 'syz.2.767': attribute type 13 has an invalid length. [ 159.937630][ T7914] netlink: 'syz.2.767': attribute type 17 has an invalid length. [ 160.004999][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.014263][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.026432][ T7914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.267324][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.778'. [ 160.299634][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.394789][ T7946] bridge_slave_1 (unregistering): left allmulticast mode [ 160.407628][ T7946] bridge_slave_1 (unregistering): left promiscuous mode [ 160.415580][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.814077][ T7968] netlink: 'syz.2.784': attribute type 17 has an invalid length. [ 160.826117][ T7968] netlink: 148 bytes leftover after parsing attributes in process `syz.2.784'. [ 160.885715][ T7968] batman_adv: batadv0: Adding interface: gretap1 [ 160.899892][ T7968] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.929692][ T7968] batman_adv: batadv0: Interface activated: gretap1 [ 161.803735][ T8003] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.790'. [ 164.214039][ T8064] 9pnet_fd: Insufficient options for proto=fd [ 164.450664][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'. [ 165.783103][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 166.593885][ T8156] netlink: 1904 bytes leftover after parsing attributes in process `syz.3.834'. [ 166.622928][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'. [ 166.628468][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'. [ 167.764298][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 168.500877][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 171.916349][ T8272] fuse: Bad value for 'fd' [ 175.391083][ T8316] fuse: Bad value for 'fd' [ 179.455306][ T8364] fuse: Bad value for 'fd' [ 182.175132][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 185.650147][ T8421] fuse: Bad value for 'fd' [ 191.406585][ T8469] ceph: No mds server is up or the cluster is laggy [ 191.757131][ T8479] fuse: Bad value for 'fd' [ 192.023379][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 192.030069][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 192.037335][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 192.043979][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 192.804921][ T8486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.060631][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.067235][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.347070][ T8517] syz_tun: entered allmulticast mode [ 197.087986][ T8529] fuse: Bad value for 'fd' [ 198.137140][ T8542] process 'syz.0.957' launched '/dev/fd/4' with NULL argv: empty string added [ 201.736916][ T8577] fuse: Bad value for 'fd' [ 203.488486][ T8605] fuse: Bad value for 'fd' [ 203.494662][ T5778] Bluetooth: hci1: unexpected event for opcode 0x0803 [ 210.518237][ T8711] bridge1: entered promiscuous mode [ 210.536046][ T8711] bridge1: entered allmulticast mode [ 210.548878][ T8711] team0: Port device bridge1 added [ 210.581245][ T8711] bridge0: port 3(team0) entered blocking state [ 210.589845][ T8711] bridge0: port 3(team0) entered disabled state [ 210.611755][ T8711] team0: entered allmulticast mode [ 210.624412][ T8711] team_slave_1: entered allmulticast mode [ 210.692073][ T8711] team0: entered promiscuous mode [ 210.715225][ T8711] team_slave_1: entered promiscuous mode [ 210.753690][ T8711] bridge0: port 3(team0) entered blocking state [ 210.761972][ T8711] bridge0: port 3(team0) entered forwarding state [ 212.433309][ T8732] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 212.997907][ T8749] warning: `syz.3.1020' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 214.282569][ T8745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.255065][ T8797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1032'. [ 216.174208][ T8797] Process accounting resumed [ 217.701039][ T5778] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 222.112237][ T5778] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 222.121199][ T5778] Bluetooth: hci0: Injecting HCI hardware error event [ 222.131544][ T5773] Bluetooth: hci0: hardware error 0x00 [ 222.340034][ T8840] fuse: Bad value for 'fd' [ 224.701543][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 224.770055][ T8845] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.368491][ T8846] bond_slave_0: entered promiscuous mode [ 226.374793][ T8846] bond_slave_1: entered promiscuous mode [ 227.235591][ T8888] fuse: Bad value for 'fd' [ 229.048938][ T8846] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.251217][ T8846] bond3: (slave macvlan3): Enslaving as a backup interface with an up link [ 230.786394][ T8939] fuse: Bad value for 'fd' [ 233.019654][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1079'. [ 233.781316][ T5773] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 234.046928][ T8968] mmap: syz.3.1087 (8968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.784639][ T8976] fuse: Bad value for 'fd' [ 240.400681][ T9033] fuse: Bad value for 'fd' [ 241.962783][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 242.119255][ T5773] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 244.340368][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1126'. [ 246.289229][ T5773] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 247.029031][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 248.588494][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 248.893311][ T5773] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 256.284570][ T9260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1182'. [ 256.633975][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.641830][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.390932][ T9276] capability: warning: `syz.3.1186' uses 32-bit capabilities (legacy support in use) [ 261.341666][ T9319] tipc: Enabling of bearer rejected, failed to enable media [ 262.592023][ T9337] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1206'. [ 263.184882][ T9348] tipc: Enabling of bearer rejected, failed to enable media [ 264.920700][ T9385] tipc: Enabling of bearer rejected, failed to enable media [ 267.268717][ T9412] bond0: (slave bond_slave_1): Releasing backup interface [ 267.651031][ T9424] tipc: Enabling of bearer rejected, failed to enable media [ 269.193690][ T9437] fuse: Bad value for 'fd' [ 269.697978][ T9444] overlayfs: failed to clone lowerpath [ 274.291706][ T28] audit: type=1326 audit(1776243240.159:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 274.446482][ T28] audit: type=1326 audit(1776243240.159:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.167882][ T28] audit: type=1326 audit(1776243240.189:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.212204][ T28] audit: type=1326 audit(1776243240.189:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.318805][ T28] audit: type=1326 audit(1776243240.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.351736][ T28] audit: type=1326 audit(1776243240.199:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.386128][ T28] audit: type=1326 audit(1776243240.199:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.428030][ T28] audit: type=1326 audit(1776243240.199:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.457063][ T28] audit: type=1326 audit(1776243240.199:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 275.496036][ T28] audit: type=1326 audit(1776243240.249:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9511 comm="syz.3.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d1a35d04e code=0x7ffc0000 [ 279.717436][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 282.904084][ T1073] wlan1: Trigger new scan to find an IBSS to join [ 284.499625][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 285.173850][ T7323] wlan1: Creating new IBSS network, BSSID 4a:d9:af:54:c4:79 [ 285.523477][ T5773] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 286.596807][ T9660] netlink: 'syz.3.1312': attribute type 33 has an invalid length. [ 286.641652][ T9660] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1312'. [ 287.031964][ T9672] tipc: Enabling of bearer rejected, failed to enable media [ 289.601260][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 289.610083][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 289.619882][ T5778] Bluetooth: hci1: hardware error 0x00 [ 290.944639][ T9704] tipc: Enabling of bearer rejected, failed to enable media [ 291.832412][ T5778] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 292.682564][ T9724] overlayfs: failed to resolve './file0': -2 [ 294.326419][ T5778] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 294.416249][ T9748] tipc: Enabling of bearer rejected, failed to enable media [ 294.561948][ T9750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1339'. [ 295.351241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 295.760822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 297.132963][ T5778] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 297.457481][ T9787] tipc: Enabling of bearer rejected, failed to enable media [ 300.293046][ T9804] fuse: Bad value for 'fd' [ 301.200807][ T5778] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 301.211796][ T5778] Bluetooth: hci3: Injecting HCI hardware error event [ 301.222001][ T5773] Bluetooth: hci3: hardware error 0x00 [ 301.852771][ T9822] tipc: Enabling of bearer rejected, failed to enable media [ 303.280743][ T5773] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 304.255673][ T9854] fuse: Bad value for 'fd' [ 310.885394][ T9888] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 311.321102][ T9888] team0 (unregistering): Port device team_slave_0 removed [ 311.362602][ T9888] team0 (unregistering): Port device team_slave_1 removed [ 313.911522][ T9899] fuse: Invalid rootmode [ 315.216556][ T1092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.960806][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.967199][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.218375][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1402'. [ 323.425092][ T5773] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 323.659620][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.666979][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 323.693147][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.291379][T10006] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 324.480809][T10006] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.551681][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.562650][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.572266][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.581638][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.589929][T10006] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.028686][T10018] syz.0.1417 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.393667][T10030] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.689372][T10039] netlink: set zone limit has 8 unknown bytes [ 325.720824][T10039] netlink: set zone limit has 8 unknown bytes [ 327.511041][ T5773] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 327.522625][ T5773] Bluetooth: hci2: Injecting HCI hardware error event [ 327.532450][ T5773] Bluetooth: hci2: hardware error 0x00 [ 328.228036][T10068] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.679615][ T5773] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 330.459490][T10099] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 331.297587][T10110] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.034857][T10136] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 333.655158][T10144] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.834341][T10174] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.309047][T10199] virt_wifi0 speed is unknown, defaulting to 1000 [ 340.105802][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 340.128610][T10231] netlink: 580 bytes leftover after parsing attributes in process `syz.3.1484'. [ 346.242909][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 347.489564][T10305] tipc: Enabling of bearer rejected, failed to enable media [ 355.540139][T10372] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 355.937737][T10381] virt_wifi0 speed is unknown, defaulting to 1000 [ 357.965100][T10413] virt_wifi0 speed is unknown, defaulting to 1000 [ 358.625043][T10437] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1555'. [ 359.888494][T10440] overlayfs: failed to clone upperpath [ 360.687335][T10447] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.001701][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.24 [ 363.428105][T10516] fuse: Unknown parameter 'user_i00000000000000000000' [ 366.439141][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'. [ 367.402423][T10572] fuse: Unknown parameter 'user_i00000000000000000000' [ 368.601256][T10577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 368.687396][T10581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1600'. [ 369.068303][T10581] bond_slave_0: left promiscuous mode [ 369.143447][T10581] bond_slave_1: left promiscuous mode [ 369.575279][T10581] bond3: (slave macvlan3): Removing an active aggregator [ 369.583745][ T1073] bond3: Warning: Found an uninitialized port [ 369.591557][T10581] bond3: (slave macvlan3): Releasing backup interface [ 369.630351][T10581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.664779][T10581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.690819][T10581] bond0 (unregistering): Released all slaves [ 370.535954][T10606] overlayfs: failed to clone upperpath [ 374.827530][T10635] netlink: 1904 bytes leftover after parsing attributes in process `syz.1.1621'. [ 374.846673][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 374.856152][T10635] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 375.026710][T10626] overlayfs: failed to clone upperpath [ 378.283215][T10683] netlink: 1904 bytes leftover after parsing attributes in process `syz.1.1637'. [ 378.314030][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 378.338818][T10683] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 379.110104][ T3439] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 379.451784][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.464434][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.876530][T10773] virt_wifi0 speed is unknown, defaulting to 1000 [ 387.984634][T10812] overlayfs: failed to clone upperpath [ 388.005099][T10812] overlayfs: failed to clone upperpath [ 389.835137][T10832] virt_wifi0 speed is unknown, defaulting to 1000 [ 391.140922][T10857] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 395.068322][T10893] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 397.479419][T10921] virt_wifi0 speed is unknown, defaulting to 1000 [ 397.606988][T10925] netlink: 1904 bytes leftover after parsing attributes in process `syz.3.1724'. [ 397.634096][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 398.088840][T10932] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 400.258895][T10962] fuse: Unknown parameter '0x0000000000000007' [ 401.555988][T10969] netlink: 1904 bytes leftover after parsing attributes in process `syz.0.1736'. [ 401.604893][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1736'. [ 403.751259][T11000] fuse: Unknown parameter '0x0000000000000007' [ 408.475853][T11036] fuse: Unknown parameter '0x0000000000000007' [ 411.786555][ T7318] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 413.544499][T11070] fuse: Unknown parameter '0x0000000000000007' [ 415.886365][T11083] overlayfs: failed to clone upperpath [ 417.105914][T11091] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 417.952383][T11101] fuse: Unknown parameter '0xffffffffffffffff' [ 419.998076][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1784'. [ 422.652063][T11128] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 425.517476][T11138] overlayfs: failed to resolve './file0': -2 [ 427.212749][T11170] fuse: Unknown parameter 'fd0x0000000000000007' [ 429.548189][T11192] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 431.635325][T11216] fuse: Unknown parameter 'fd0x0000000000000007' [ 432.326236][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 440.797270][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.803911][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.079972][T11370] overlayfs: failed to resolve './file0': -2 [ 445.451514][T11381] netlink: 2088 bytes leftover after parsing attributes in process `syz.2.1877'. [ 445.873427][ T7327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 448.376962][T11426] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1893'. [ 449.476235][T11434] overlayfs: failed to clone lowerpath [ 449.557966][T11432] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.211146][T11462] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1906'. [ 451.478875][T11464] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 451.835634][T11469] virt_wifi0 speed is unknown, defaulting to 1000 [ 453.427732][T11500] netlink: 1832 bytes leftover after parsing attributes in process `syz.2.1921'. [ 453.807350][T11507] overlayfs: failed to clone upperpath [ 454.086956][T11510] overlayfs: failed to resolve './cgroup': -2 [ 454.131468][T11512] overlay: ./file0 is not a directory [ 457.168528][T11548] netlink: 1832 bytes leftover after parsing attributes in process `syz.3.1939'. [ 458.317270][T11559] virt_wifi0 speed is unknown, defaulting to 1000 [ 459.540129][T11583] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 460.677918][T11596] virt_wifi0 speed is unknown, defaulting to 1000 [ 462.230411][T11605] overlayfs: failed to clone lowerpath [ 463.769223][T11626] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.340607][T11642] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1968'. [ 464.988909][T11657] virt_wifi0 speed is unknown, defaulting to 1000 [ 467.542398][T11690] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.1987'. [ 471.290053][T11728] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.2000'. [ 471.636763][T11731] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 477.355057][ T7329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 489.892037][T11935] bridge0: port 3(syz_tun) entered blocking state [ 489.899538][T11935] bridge0: port 3(syz_tun) entered disabled state [ 489.910442][T11935] syz_tun: entered allmulticast mode [ 489.926684][T11935] syz_tun: entered promiscuous mode [ 489.935662][T11935] bridge0: port 3(syz_tun) entered blocking state [ 489.943215][T11935] bridge0: port 3(syz_tun) entered forwarding state [ 493.945116][T11980] fuse: Bad value for 'fd' [ 495.319795][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2092'. [ 496.657198][T12011] overlayfs: failed to clone upperpath [ 497.869560][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 497.869576][ T28] audit: type=1326 audit(1776243463.742:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 497.949980][ T28] audit: type=1326 audit(1776243463.742:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 497.973418][ T28] audit: type=1326 audit(1776243463.742:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 498.013211][ T28] audit: type=1326 audit(1776243463.742:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 498.037644][ T28] audit: type=1326 audit(1776243463.742:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 498.061608][T12028] overlayfs: conflicting options: userxattr,redirect_dir=on [ 498.090301][ T28] audit: type=1326 audit(1776243463.752:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 498.138468][ T28] audit: type=1326 audit(1776243463.752:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12025 comm="syz.3.2104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d1a39c819 code=0x7ffc0000 [ 502.245560][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.252630][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.343988][T12120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 508.720280][T12123] bridge0: port 4(syz_tun) entered blocking state [ 508.727755][T12123] bridge0: port 4(syz_tun) entered disabled state [ 508.744825][T12123] syz_tun: entered promiscuous mode [ 508.754124][T12123] bridge0: port 4(syz_tun) entered blocking state [ 508.760839][T12123] bridge0: port 4(syz_tun) entered forwarding state [ 508.894303][ T3439] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 510.942388][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 515.508537][T12208] virt_wifi0 speed is unknown, defaulting to 1000 [ 518.040689][T12241] overlayfs: failed to clone upperpath [ 521.434716][T12272] tipc: Started in network mode [ 521.448763][T12272] tipc: Node identity ac14140f, cluster identity 4711 [ 521.473693][T12272] tipc: New replicast peer: 255.255.255.255 [ 521.491964][T12272] tipc: Enabled bearer , priority 10 [ 522.165414][T12287] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 522.611245][ T5810] tipc: Node number set to 2886997007 [ 528.370788][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 529.547920][T12337] fuse: Bad value for 'fd' [ 536.308153][T12428] fuse: Bad value for 'fd' [ 540.288606][ T7325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 543.793616][T12535] xt_hashlimit: size too large, truncated to 1048576 [ 543.865732][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 543.900479][T12537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 544.127770][T12544] overlayfs: failed to clone upperpath [ 545.389557][T12558] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2284'. [ 545.724367][T12564] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.741404][T12566] bridge0: port 3(syz_tun) entered disabled state [ 546.330240][T12566] syz_tun (unregistering): left allmulticast mode [ 546.445430][T12566] syz_tun (unregistering): left promiscuous mode [ 546.468177][T12566] bridge0: port 3(syz_tun) entered disabled state [ 546.684306][T12572] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 550.801107][T12614] xt_hashlimit: size too large, truncated to 1048576 [ 552.789957][T12630] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 554.200316][T12644] 9pnet_fd: Insufficient options for proto=fd [ 556.682613][T12680] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 559.755878][T12723] xt_hashlimit: size too large, truncated to 1048576 [ 560.146430][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 561.255387][T12739] virt_wifi0 speed is unknown, defaulting to 1000 [ 563.492449][T12751] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 563.696466][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.702837][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.393047][T12762] virt_wifi0 speed is unknown, defaulting to 1000 [ 567.444632][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.751678][T12792] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 569.036289][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.146364][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.786258][T12782] tipc: Resetting bearer [ 569.881523][T12782] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.905520][T12782] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.925638][T12782] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.934664][T12782] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.364965][ T7329] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.107364][T12830] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 573.581837][T12836] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 573.701400][T12840] x_tables: unsorted underflow at hook 4 [ 576.090205][T12851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2370'. [ 580.821731][T12875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.833193][T12875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.842648][T12875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.861577][T12875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.869836][T12875] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 580.879070][T12875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.987908][T12879] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 581.046865][T12874] virt_wifi0 speed is unknown, defaulting to 1000 [ 581.530151][T12874] chnl_net:caif_netlink_parms(): no params data found [ 581.713783][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.745043][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.764957][T12874] bridge_slave_0: entered allmulticast mode [ 581.797679][T12874] bridge_slave_0: entered promiscuous mode [ 581.823084][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.845315][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.862820][T12874] bridge_slave_1: entered allmulticast mode [ 581.958585][T12874] bridge_slave_1: entered promiscuous mode [ 582.517907][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.590551][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.862961][T12874] team0: Port device team_slave_0 added [ 582.886402][T12874] team0: Port device team_slave_1 added [ 582.966215][ T5773] Bluetooth: hci4: command tx timeout [ 585.510983][ T5773] Bluetooth: hci4: command tx timeout [ 585.895630][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.919833][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.952530][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.986979][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.995368][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.826842][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.047284][T12874] hsr_slave_0: entered promiscuous mode [ 587.062455][T12874] hsr_slave_1: entered promiscuous mode [ 587.082533][T12874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.109540][T12874] Cannot create hsr debugfs directory [ 587.584870][ T5773] Bluetooth: hci4: command tx timeout [ 587.659112][T12874] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 589.645708][T12931] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 589.674642][ T5773] Bluetooth: hci4: command tx timeout [ 589.846467][T12874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.888196][T12874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.938692][T12874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.992638][T12874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.091914][T12938] overlayfs: conflicting options: userxattr,redirect_dir=on [ 590.208535][T12874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.239355][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.277062][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.284393][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.320040][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.327414][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.811014][T12944] virt_wifi0 speed is unknown, defaulting to 1000 [ 591.058839][T12874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.822836][T12874] veth0_vlan: entered promiscuous mode [ 591.939230][T12874] veth1_vlan: entered promiscuous mode [ 592.034745][T12874] veth0_macvtap: entered promiscuous mode [ 592.058014][T12874] veth1_macvtap: entered promiscuous mode [ 592.241172][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.253371][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.293294][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.342805][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.976027][T12874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.019884][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.050532][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.082528][T12874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.124050][T12874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.150223][T12874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.193587][T12874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.216537][T12874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.247361][T12874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.278930][T12874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.492050][T12966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2399'. [ 593.700085][ T7320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 593.717260][ T7320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.997363][ T7329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.015786][ T7329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.092661][T12973] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 594.842183][T12979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.440471][ T6094] bridge0: port 4(syz_tun) entered disabled state [ 595.526469][ T6094] syz_tun (unregistering): left allmulticast mode [ 595.543582][ T6094] syz_tun (unregistering): left promiscuous mode [ 595.553791][ T6094] bridge0: port 4(syz_tun) entered disabled state [ 595.605010][T12875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.615105][T12875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.625093][T12875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.636204][T12875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.664245][T12875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 595.672148][T12875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.789532][ T7323] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.973600][ T7323] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.013892][T12982] virt_wifi0 speed is unknown, defaulting to 1000 [ 596.074774][ T7323] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.095947][T12987] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 596.105263][T12987] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 596.113666][T12987] overlayfs: missing 'lowerdir' [ 597.924397][T12875] Bluetooth: hci0: command tx timeout [ 598.976901][ T7323] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.001111][T12875] Bluetooth: hci0: command tx timeout [ 600.551328][T12982] chnl_net:caif_netlink_parms(): no params data found [ 600.724004][ T7323] tipc: Disabling bearer [ 600.735613][ T7323] tipc: Left network mode [ 601.876944][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.885705][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.893108][T12982] bridge_slave_0: entered allmulticast mode [ 601.901945][T12982] bridge_slave_0: entered promiscuous mode [ 602.058112][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.065818][T12875] Bluetooth: hci0: command tx timeout [ 602.091695][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.110769][T12982] bridge_slave_1: entered allmulticast mode [ 602.120451][T12982] bridge_slave_1: entered promiscuous mode [ 602.356221][T12982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.011343][T12982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.133052][T12982] team0: Port device team_slave_0 added [ 603.201258][T12982] team0: Port device team_slave_1 added [ 603.304482][T12982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.311494][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.339170][T12982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.372366][T12982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.380678][T12982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.407915][T12982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.458969][ T7325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 603.721303][T13053] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 603.733191][T12982] hsr_slave_0: entered promiscuous mode [ 603.770883][T13057] loop2: detected capacity change from 0 to 512 [ 603.807209][T12982] hsr_slave_1: entered promiscuous mode [ 603.874413][T12982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.897108][T13057] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 603.923844][T12982] Cannot create hsr debugfs directory [ 603.934984][T13057] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 604.004224][T13057] EXT4-fs (loop2): 1 truncate cleaned up [ 604.011493][T13057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.143761][T12875] Bluetooth: hci0: command tx timeout [ 604.184964][T13057] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 604.896318][T12874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.540854][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 605.583007][ T7323] hsr_slave_0: left promiscuous mode [ 605.592748][ T7323] hsr_slave_1: left promiscuous mode [ 605.602938][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.624951][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.636227][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.644850][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.664593][ T7323] team0: left allmulticast mode [ 605.674120][ T7323] team_slave_1: left allmulticast mode [ 605.690449][ T7323] team0: left promiscuous mode [ 605.696014][ T7323] team_slave_1: left promiscuous mode [ 605.713294][ T7323] bridge0: port 3(team0) entered disabled state [ 605.735311][ T7323] bridge_slave_1: left allmulticast mode [ 605.741116][ T7323] bridge_slave_1: left promiscuous mode [ 605.757316][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.780454][ T7323] bridge_slave_0: left allmulticast mode [ 605.786683][ T7323] bridge_slave_0: left promiscuous mode [ 605.812835][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.820849][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.843889][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 605.862184][ T5809] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.887599][ T7323] veth1_macvtap: left promiscuous mode [ 605.888225][ T5809] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.893882][ T7323] veth0_macvtap: left promiscuous mode [ 605.894113][ T7323] veth1_vlan: left promiscuous mode [ 605.913467][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.922565][ T5809] usb 3-1: Product: syz [ 605.927489][ T5809] usb 3-1: Manufacturer: syz [ 605.932154][ T5809] usb 3-1: SerialNumber: syz [ 605.955635][ T7323] veth0_vlan: left promiscuous mode [ 605.967079][ T5809] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 605.976176][ T5809] cdc_ncm 3-1:1.0: bind() failure [ 606.190911][ T5810] usb 3-1: USB disconnect, device number 2 [ 606.248927][ T7323] team0 (unregistering): Port device bridge1 removed [ 607.126583][ T7323] team0 (unregistering): Port device team_slave_1 removed [ 608.172742][ T7323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.039890][ T7323] bond0 (unregistering): Released all slaves [ 609.158282][T13101] loop2: detected capacity change from 0 to 128 [ 609.202448][T13101] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.215758][T13101] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 609.253335][T13101] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 609.426568][T12874] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.621949][T13116] 9pnet_fd: Insufficient options for proto=fd [ 613.593191][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2432'. [ 613.833736][T13126] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 614.914938][T13142] loop2: detected capacity change from 0 to 128 [ 615.326082][T12982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.359800][T12982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.385594][T12982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.406354][T12982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.507026][T12982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.562677][T12982] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.659398][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.666713][ T7331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.927937][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.935321][ T7331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.874998][T12982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.887284][T13168] loop2: detected capacity change from 0 to 32768 [ 617.897163][T13168] XFS (loop2): no-recovery mounts must be read-only. [ 618.447138][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.674255][T12982] veth0_vlan: entered promiscuous mode [ 618.725594][T12982] veth1_vlan: entered promiscuous mode [ 619.125126][T12982] veth0_macvtap: entered promiscuous mode [ 619.148061][T12982] veth1_macvtap: entered promiscuous mode [ 620.806273][T13207] loop2: detected capacity change from 0 to 32768 [ 620.814624][T13207] XFS (loop2): no-recovery mounts must be read-only. [ 620.921234][T12982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.452994][T12982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.483875][T13139] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 621.512730][T12982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.577194][T12982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.645848][T12982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.682032][T12982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.736864][T12982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.806603][T12982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.858308][T12982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.939629][T12982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.129790][T12982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.187132][T12982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.301766][T12982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.346870][T12982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.742024][ T7331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.783788][ T7331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.842214][ T7318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.271867][ T7318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.424728][T13247] loop2: detected capacity change from 0 to 512 [ 624.798969][T13247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.916641][T13247] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.119238][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.125953][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.242691][T12874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.371800][ T1073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.454268][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 625.465825][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 625.476638][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 625.494236][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 625.505040][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 625.524988][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 625.685012][ T1073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.820867][T13257] virt_wifi0 speed is unknown, defaulting to 1000 [ 626.422076][ T1073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.447966][ T1073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.602399][ T5773] Bluetooth: hci2: command tx timeout [ 628.249293][T13284] loop0: detected capacity change from 0 to 512 [ 628.318050][T13284] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 628.396038][T13284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 628.462210][T13284] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2467: Invalid inode bitmap blk 4 in block_group 0 [ 628.529888][T13284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.642968][T13284] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 628.787865][T12982] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.096630][T13257] chnl_net:caif_netlink_parms(): no params data found [ 629.672229][ T5773] Bluetooth: hci2: command tx timeout [ 630.173665][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.195390][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.220266][T13257] bridge_slave_0: entered allmulticast mode [ 630.272235][T13257] bridge_slave_0: entered promiscuous mode [ 630.401766][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.421381][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.445095][T13257] bridge_slave_1: entered allmulticast mode [ 630.465587][T13257] bridge_slave_1: entered promiscuous mode [ 630.637822][T13257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.654956][T13257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.745687][T13257] team0: Port device team_slave_0 added [ 630.808183][T13257] team0: Port device team_slave_1 added [ 630.888135][ T1073] hsr_slave_0: left promiscuous mode [ 630.904476][ T1073] hsr_slave_1: left promiscuous mode [ 630.916171][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.928839][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.939629][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.955755][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.967551][ T1073] bridge_slave_1: left allmulticast mode [ 630.976940][ T1073] bridge_slave_1: left promiscuous mode [ 630.986758][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.001194][ T1073] bridge_slave_0: left allmulticast mode [ 631.017237][ T1073] bridge_slave_0: left promiscuous mode [ 631.025883][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.079879][ T1073] veth1_macvtap: left promiscuous mode [ 631.088770][ T1073] veth0_macvtap: left promiscuous mode [ 631.100243][ T1073] veth1_vlan: left promiscuous mode [ 631.110443][ T1073] veth0_vlan: left promiscuous mode [ 631.500828][ T1073] bond3 (unregistering): Released all slaves [ 631.541137][ T1073] bond2 (unregistering): (slave geneve2): Releasing active interface [ 631.559837][ T1073] geneve2 (unregistering): left allmulticast mode [ 631.749189][ T5773] Bluetooth: hci2: command tx timeout [ 631.819843][ T1073] bond2 (unregistering): Released all slaves [ 632.156932][ T1073] bond1 (unregistering): Released all slaves [ 633.752841][T13387] loop2: detected capacity change from 0 to 128 [ 633.822222][T13387] FAT-fs (loop2): Unrecognized mount option "184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#" or missing value [ 633.850504][ T5773] Bluetooth: hci2: command tx timeout [ 634.412221][ T2129] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 634.458054][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 634.613735][ T2129] usb 3-1: Using ep0 maxpacket: 16 [ 634.624664][ T2129] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 634.638756][ T2129] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.674749][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 634.686312][ T2129] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 634.711633][ T2129] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 634.741819][ T2129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.760463][ T2129] usb 3-1: Product: syz [ 634.769951][ T2129] usb 3-1: Manufacturer: syz [ 634.801622][ T2129] usb 3-1: SerialNumber: syz [ 636.398643][T13257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.411713][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.461814][T13257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.563599][T13257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.581742][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.607861][T12742] usb 3-1: USB disconnect, device number 3 [ 636.631890][T13257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.807486][T13257] hsr_slave_0: entered promiscuous mode [ 636.850625][T13257] hsr_slave_1: entered promiscuous mode [ 636.866759][T13257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.901901][T13257] Cannot create hsr debugfs directory [ 642.139806][T13257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 642.175654][T13257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 642.255376][T13257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 642.283321][T13257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 642.309659][T13460] loop2: detected capacity change from 0 to 1024 [ 642.348926][T13460] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 642.416320][T13460] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.486680][T13460] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 642.513935][T13460] EXT4-fs (loop2): orphan cleanup on readonly fs [ 642.553721][T13460] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.2501: Inode bitmap for bg 0 marked uninitialized [ 642.619968][T13257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.633239][T13460] EXT4-fs (loop2): Remounting filesystem read-only [ 642.660108][T13460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.710799][T13257] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.730138][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.737980][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.762328][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.770741][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.924848][T12874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.933258][T13257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.019721][T13488] loop2: detected capacity change from 0 to 32768 [ 645.028234][T13488] XFS (loop2): no-recovery mounts must be read-only. [ 645.330577][T13257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.410045][T13257] veth0_vlan: entered promiscuous mode [ 645.435333][T13257] veth1_vlan: entered promiscuous mode [ 645.497526][T13257] veth0_macvtap: entered promiscuous mode [ 645.517272][T13257] veth1_macvtap: entered promiscuous mode [ 645.549087][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.566688][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.578214][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.596076][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.610911][T13257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.636989][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.654931][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.668617][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.685232][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.699067][T13257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.725340][T13257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.738114][T13257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.754736][T13257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.765918][T13257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.903713][ T7323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.931540][ T7323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.990607][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.999488][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.532196][T13139] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 647.534201][T13510] loop2: detected capacity change from 0 to 512 [ 647.615768][T13510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.680049][T13510] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.011466][T12874] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 648.054607][T12874] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 650.003163][T13515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.160305][ T7323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.341161][ T7323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.491198][ T7323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.664653][ T7323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.578060][T12875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 651.596097][T12875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 651.605732][T12875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 651.614700][T12875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 651.622383][T13546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 651.634532][T12875] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 651.642193][T12875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 652.908459][T13564] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 652.926790][T13550] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.421311][T13550] chnl_net:caif_netlink_parms(): no params data found [ 653.747303][ T5773] Bluetooth: hci3: command tx timeout [ 654.039802][T13550] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.072987][T13550] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.095933][T13550] bridge_slave_0: entered allmulticast mode [ 654.118914][T13550] bridge_slave_0: entered promiscuous mode [ 654.156324][T13550] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.167085][T13550] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.181846][T13550] bridge_slave_1: entered allmulticast mode [ 654.199550][T13550] bridge_slave_1: entered promiscuous mode [ 654.236876][ T7323] hsr_slave_0: left promiscuous mode [ 654.260404][ T7323] hsr_slave_1: left promiscuous mode [ 654.294552][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.312621][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.327475][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.335382][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.346425][ T7323] bridge_slave_1: left allmulticast mode [ 654.352635][ T7323] bridge_slave_1: left promiscuous mode [ 654.377666][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.406217][ T7323] bridge_slave_0: left allmulticast mode [ 654.426940][ T7323] bridge_slave_0: left promiscuous mode [ 654.441158][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.521382][ T7323] veth1_macvtap: left promiscuous mode [ 654.532649][ T7323] veth0_macvtap: left promiscuous mode [ 654.546146][ T7323] veth1_vlan: left promiscuous mode [ 654.566430][ T7323] veth0_vlan: left promiscuous mode [ 655.871507][ T5773] Bluetooth: hci3: command tx timeout [ 655.903677][T13621] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 657.926292][ T5773] Bluetooth: hci3: command tx timeout [ 660.240643][ T5773] Bluetooth: hci3: command tx timeout [ 660.665475][T13656] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 660.711109][ T7323] team0 (unregistering): Port device team_slave_1 removed [ 661.185421][ T7323] team0 (unregistering): Port device team_slave_0 removed [ 661.262874][ T7323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.391275][ T7323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.006500][ T7323] bond0 (unregistering): Released all slaves [ 662.184242][T13550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.225700][T13550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.392379][T13550] team0: Port device team_slave_0 added [ 662.431516][T13550] team0: Port device team_slave_1 added [ 662.519726][T13550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.527398][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.563094][T13550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.580015][T13550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.630469][T13550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.719855][T13550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.155956][T13550] hsr_slave_0: entered promiscuous mode [ 665.191150][T13550] hsr_slave_1: entered promiscuous mode [ 665.324242][T13550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.333274][T13550] Cannot create hsr debugfs directory [ 666.174567][T13696] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2555'. [ 666.660291][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 666.782131][T13550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 666.843300][T13550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 666.880891][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 666.900213][T13550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 666.907186][ T5809] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 666.919504][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.931425][ T5809] usb 2-1: config 0 descriptor?? [ 666.937705][T13701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 666.949766][T13550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 667.146053][T13550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.217302][T13550] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.254491][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.261829][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.276301][ T7318] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.283536][ T7318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.425066][ T5809] hid (null): report_id 41546 is invalid [ 667.455912][ T5809] hid (null): unknown global tag 0xc [ 667.466134][ T5809] hid (null): unknown global tag 0x7c [ 667.482370][ T28] audit: type=1800 audit(1776243633.371:42): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2562" name="/" dev="fuse" ino=1 res=0 errno=0 [ 667.518255][ T5809] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 667.718470][ T2129] usb 2-1: USB disconnect, device number 2 [ 667.874753][T13550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.947251][T13550] veth0_vlan: entered promiscuous mode [ 669.964616][T13550] veth1_vlan: entered promiscuous mode [ 669.991944][T13550] veth0_macvtap: entered promiscuous mode [ 670.002808][T13550] veth1_macvtap: entered promiscuous mode [ 670.074750][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.087436][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.102806][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.116003][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.140965][T13550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.178308][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.199441][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.213102][T13550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.227806][T13550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.247027][T13550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.271654][T13550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.285355][T13550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.296469][T13550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.311449][T13550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.525850][ T7325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.572372][ T7325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.690441][ T7325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.698600][ T7325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.071553][T13811] loop1: detected capacity change from 0 to 512 [ 673.105170][T13811] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 673.118487][T13811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 673.465270][T13811] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2575: corrupted xattr entries [ 673.487732][T13811] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 673.553212][T13811] EXT4-fs (loop1): 1 truncate cleaned up [ 673.574618][T13811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.027565][T13257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.842029][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2580'. [ 676.665366][T13835] virt_wifi0 speed is unknown, defaulting to 1000 [ 677.435069][T12875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.449093][T12875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.460848][T12875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.479484][T12875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.488839][T12875] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.498178][T12875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.741544][T13847] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.414349][ T7329] tipc: Disabling bearer [ 678.423176][ T7329] tipc: Left network mode [ 679.085844][ T7329] bond1: (slave ip6gretap1): Releasing backup interface [ 679.218258][T13847] chnl_net:caif_netlink_parms(): no params data found [ 679.751665][ T5773] Bluetooth: hci1: command tx timeout [ 681.291822][ T2129] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 682.239271][ T5773] Bluetooth: hci1: command tx timeout [ 682.891860][ T2129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 682.930848][ T2129] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 682.941112][ T2129] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.949705][ T2129] usb 5-1: Product: syz [ 682.955045][ T2129] usb 5-1: Manufacturer: syz [ 682.961945][ T2129] usb 5-1: SerialNumber: syz [ 683.199373][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.217463][T13847] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.251361][T13847] bridge_slave_0: entered allmulticast mode [ 683.274440][T13847] bridge_slave_0: entered promiscuous mode [ 683.933453][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.972871][T13847] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.014932][T13847] bridge_slave_1: entered allmulticast mode [ 684.060977][T13847] bridge_slave_1: entered promiscuous mode [ 684.187879][ T2129] usb_set_interface error [ 684.195178][ T2129] snd-usb-us122l: probe of 5-1:1.1 failed with error -22 [ 684.277172][ T2129] usb 5-1: USB disconnect, device number 2 [ 684.641531][T13847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.711575][T13847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.939581][ T5773] Bluetooth: hci1: command tx timeout [ 685.228387][T13847] team0: Port device team_slave_0 added [ 685.256969][T13847] team0: Port device team_slave_1 added [ 685.556477][T13847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.582713][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.628758][T13847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.667451][T13847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.674992][T13847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.739408][ T2129] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 685.796006][T13847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.010832][ T2129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.168006][ T2129] usb 2-1: not running at top speed; connect to a high speed hub [ 686.251999][ T7329] hsr_slave_0: left promiscuous mode [ 686.381401][ T2129] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.412931][ T7329] hsr_slave_1: left promiscuous mode [ 686.432900][ T2129] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.466628][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.503001][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.518749][ T2129] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 686.559826][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.569113][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.588974][ T2129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.621014][ T7329] bridge_slave_0: left allmulticast mode [ 686.627252][ T7329] bridge_slave_0: left promiscuous mode [ 686.643689][ T2129] usb 2-1: Product: syz [ 686.648484][ T2129] usb 2-1: Manufacturer: syz [ 686.679145][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.711840][ T2129] usb 2-1: SerialNumber: syz [ 687.026038][ T5773] Bluetooth: hci1: command tx timeout [ 688.257452][ T2129] usb 2-1: USB disconnect, device number 3 [ 688.304359][T13540] udevd[13540]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.291819][ T7329] bond1 (unregistering): Released all slaves [ 691.495400][ T7329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.557713][ T7329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.876319][ T7329] bond0 (unregistering): Released all slaves [ 691.994150][T13945] bridge0: entered promiscuous mode [ 691.999898][T13945] bridge0: left promiscuous mode [ 692.236888][T13847] hsr_slave_0: entered promiscuous mode [ 692.277528][T13847] hsr_slave_1: entered promiscuous mode [ 692.767821][T13974] loop1: detected capacity change from 0 to 128 [ 692.934890][T13974] FAT-fs (loop1): bogus number of reserved sectors [ 692.943161][T13974] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 692.952993][T13974] FAT-fs (loop1): Can't find a valid FAT filesystem [ 693.912253][T13984] loop1: detected capacity change from 0 to 512 [ 695.289202][T14003] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 696.242363][T13847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 696.322601][T13847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 696.342270][T13847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 697.698588][T13847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 698.724199][T13847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.897168][T13847] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.606175][ T7318] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.614062][ T7318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.678006][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.685457][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.091718][T14047] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.777590][T13847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.914025][T14044] loop1: detected capacity change from 0 to 40427 [ 700.964281][T13847] veth0_vlan: entered promiscuous mode [ 701.031693][T14044] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 701.050724][T14044] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 701.803020][T13847] veth1_vlan: entered promiscuous mode [ 701.861703][T14044] F2FS-fs (loop1): invalid crc value [ 702.127049][T13847] veth0_macvtap: entered promiscuous mode [ 702.167107][T13847] veth1_macvtap: entered promiscuous mode [ 702.345234][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.888407][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.956549][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.011441][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.045790][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.089017][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.145340][T13847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.227296][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.309337][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.367514][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.423962][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.470906][T13847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.508057][T13847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.548850][T13847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.669996][T13847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.727963][T13847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.777576][T13847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.818826][T13847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.116752][T14088] loop1: detected capacity change from 0 to 128 [ 704.305127][T14088] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.382656][T14088] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 704.503468][ T7329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.539921][ T7329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.650377][T14081] loop4: detected capacity change from 0 to 40427 [ 704.754435][ T7331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.765809][ T7331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.224911][T14093] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 18: comm syz.1.2624: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 705.768231][T14081] F2FS-fs (loop4): Image doesn't support compression [ 705.805394][T14093] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 705.883950][T14081] F2FS-fs (loop4): invalid crc value [ 705.941810][T14081] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 705.973756][T14100] loop3: detected capacity change from 0 to 512 [ 705.981740][T14100] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.990119][T13257] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 706.009718][T14100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 706.022230][T14100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 706.093721][T14100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.118521][T14100] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 706.384707][T13847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.443069][T14111] fuse: Bad value for 'fd' [ 707.277265][T14130] bridge0: port 3(syz_tun) entered blocking state [ 707.285108][T14130] bridge0: port 3(syz_tun) entered disabled state [ 707.293059][T14130] syz_tun: entered allmulticast mode [ 707.305071][T14130] syz_tun: entered promiscuous mode [ 707.312296][T14130] bridge0: port 3(syz_tun) entered blocking state [ 707.319351][T14130] bridge0: port 3(syz_tun) entered forwarding state [ 708.998395][T14128] loop3: detected capacity change from 0 to 40427 [ 709.045723][T14128] F2FS-fs (loop3): invalid crc value [ 709.076869][T14128] F2FS-fs (loop3): Found nat_bits in checkpoint [ 709.263884][T14128] F2FS-fs (loop3): Start checkpoint disabled! [ 709.367931][T14128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 711.170130][ T7327] kworker/u4:17: attempt to access beyond end of device [ 711.170130][ T7327] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 711.240976][ T7327] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 711.884531][T14208] loop3: detected capacity change from 0 to 512 [ 711.934395][T14208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 711.973761][T14208] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2648: iget: bad extra_isize 58 (inode size 256) [ 712.001316][T14208] EXT4-fs (loop3): Remounting filesystem read-only [ 712.011443][T14208] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -5) [ 712.024669][T14208] EXT4-fs (loop3): 1 orphan inode deleted [ 712.032057][T14208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.120823][T13847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.539060][T14218] loop1: detected capacity change from 0 to 512 [ 712.852764][T14218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 712.866802][T14218] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 714.598884][T13257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 715.484830][T14238] loop4: detected capacity change from 0 to 32768 [ 715.492577][T14238] XFS (loop4): no-recovery mounts must be read-only. [ 715.940822][T13540] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 719.348122][T12875] Bluetooth: hci0: command 0x0406 tx timeout [ 719.372345][T14282] loop1: detected capacity change from 0 to 32768 [ 719.381220][T14282] XFS (loop1): no-recovery mounts must be read-only. [ 719.399842][T14285] xt_hashlimit: size too large, truncated to 1048576 [ 719.822514][T13540] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 720.545860][T14297] loop1: detected capacity change from 0 to 512 [ 720.675207][T14297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.863446][T14328] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 723.790077][T14341] loop3: detected capacity change from 0 to 32768 [ 723.797895][T14341] XFS (loop3): no-recovery mounts must be read-only. [ 724.013463][T13257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.226049][T14359] veth0_vlan: entered allmulticast mode [ 725.249669][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 726.371937][T14368] loop3: detected capacity change from 0 to 256 [ 726.531440][T14368] FAT-fs (loop3): Directory bread(block 64) failed [ 726.562764][T14368] FAT-fs (loop3): Directory bread(block 65) failed [ 726.582798][T14368] FAT-fs (loop3): Directory bread(block 66) failed [ 726.600096][T14368] FAT-fs (loop3): Directory bread(block 67) failed [ 726.623481][T14368] FAT-fs (loop3): Directory bread(block 68) failed [ 726.633860][T14368] FAT-fs (loop3): Directory bread(block 69) failed [ 726.650264][T14368] FAT-fs (loop3): Directory bread(block 70) failed [ 726.915237][T14368] FAT-fs (loop3): Directory bread(block 71) failed [ 726.956007][T14368] FAT-fs (loop3): Directory bread(block 72) failed [ 726.994319][T14368] FAT-fs (loop3): Directory bread(block 73) failed [ 727.886313][T14388] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 729.769918][T14425] binder: BINDER_SET_CONTEXT_MGR already set [ 729.785132][T14425] binder: 14424:14425 ioctl 4018620d 200000004a80 returned -16 [ 729.796246][T14425] binder: 14424:14425 ioctl c0306201 2000000004c0 returned -22 [ 730.676095][T14437] loop1: detected capacity change from 0 to 2048 [ 730.791265][T14437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.968829][T14437] [ 730.971191][T14437] ====================================================== [ 730.978331][T14437] WARNING: possible circular locking dependency detected [ 730.982016][T14450] loop4: detected capacity change from 0 to 2048 [ 730.985470][T14437] syzkaller #0 Not tainted [ 730.996340][T14437] ------------------------------------------------------ [ 731.000490][T14450] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 731.003441][T14437] syz.1.2708/14437 is trying to acquire lock: [ 731.003458][T14437] ffff8880769f28c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x28/0xe0 [ 731.026222][T14437] [ 731.026222][T14437] but task is already holding lock: [ 731.033599][T14437] ffff88805f39ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 731.043755][T14437] [ 731.043755][T14437] which lock already depends on the new lock. [ 731.043755][T14437] [ 731.054577][T14437] [ 731.054577][T14437] the existing dependency chain (in reverse order) is: [ 731.064245][T14437] [ 731.064245][T14437] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 731.072981][T14437] percpu_down_read+0x44/0x1a0 [ 731.078370][T14437] ext4_writepages+0x1a4/0x350 [ 731.083885][T14437] do_writepages+0x3b3/0x630 [ 731.089023][T14437] __writeback_single_inode+0x153/0xec0 [ 731.095212][T14437] writeback_single_inode+0x21f/0x760 [ 731.101137][T14437] write_inode_now+0x183/0x210 [ 731.106635][T14437] iput+0x5ae/0x920 [ 731.110960][T14437] ext4_xattr_block_set+0x249e/0x32b0 [ 731.117032][T14437] ext4_expand_extra_isize_ea+0x12c5/0x1e80 [ 731.123591][T14437] __ext4_expand_extra_isize+0x306/0x400 [ 731.130025][T14437] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 731.137181][T14437] ext4_evict_inode+0x7f3/0xea0 [ 731.143191][T14437] evict+0x4ca/0x8d0 [ 731.147868][T14437] ext4_orphan_cleanup+0xbec/0x1420 [ 731.153886][T14437] ext4_fill_super+0x5eea/0x67b0 [ 731.160287][T14437] get_tree_bdev+0x3f3/0x520 [ 731.165615][T14437] vfs_get_tree+0x8c/0x280 [ 731.170659][T14437] do_new_mount+0x24b/0xa40 [ 731.175978][T14437] __se_sys_mount+0x2e7/0x3d0 [ 731.181364][T14437] do_syscall_64+0x55/0xa0 [ 731.186318][T14437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.193014][T14437] [ 731.193014][T14437] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 731.200770][T14437] __lock_acquire+0x2df1/0x7d40 [ 731.206224][T14437] lock_acquire+0x19e/0x420 [ 731.211261][T14437] down_write+0x97/0x200 [ 731.216051][T14437] ext4_destroy_inline_data+0x28/0xe0 [ 731.221973][T14437] ext4_do_writepages+0x4f0/0x3990 [ 731.227640][T14437] ext4_writepages+0x1dd/0x350 [ 731.233301][T14437] do_writepages+0x3b3/0x630 [ 731.238752][T14437] filemap_fdatawrite_wbc+0x122/0x180 [ 731.244687][T14437] file_write_and_wait_range+0x197/0x280 [ 731.250949][T14437] generic_buffers_fsync_noflush+0x6f/0x160 [ 731.257393][T14437] ext4_sync_file+0x45b/0xd30 [ 731.262822][T14437] ext4_buffered_write_iter+0x2c0/0x350 [ 731.269008][T14437] ext4_file_write_iter+0x1d9/0x1880 [ 731.274932][T14437] vfs_write+0x46c/0x990 [ 731.279901][T14437] __x64_sys_pwrite64+0x19b/0x230 [ 731.285478][T14437] do_syscall_64+0x55/0xa0 [ 731.290535][T14437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.297496][T14437] [ 731.297496][T14437] other info that might help us debug this: [ 731.297496][T14437] [ 731.307913][T14437] Possible unsafe locking scenario: [ 731.307913][T14437] [ 731.315376][T14437] CPU0 CPU1 [ 731.320767][T14437] ---- ---- [ 731.326151][T14437] rlock(&sbi->s_writepages_rwsem); [ 731.331727][T14437] lock(&ei->xattr_sem); [ 731.338694][T14437] lock(&sbi->s_writepages_rwsem); [ 731.346620][T14437] lock(&ei->xattr_sem); [ 731.351509][T14437] [ 731.351509][T14437] *** DEADLOCK *** [ 731.351509][T14437] [ 731.359851][T14437] 2 locks held by syz.1.2708/14437: [ 731.365190][T14437] #0: ffff88805f398418 (sb_writers#4){.+.+}-{0:0}, at: vfs_write+0x21b/0x990 [ 731.374272][T14437] #1: ffff88805f39ac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 731.377059][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 731.384842][T14437] [ 731.384842][T14437] stack backtrace: [ 731.384874][T14437] CPU: 1 PID: 14437 Comm: syz.1.2708 Not tainted syzkaller #0 [ 731.384891][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.384908][T14437] Call Trace: [ 731.384922][T14437] [ 731.384929][T14437] dump_stack_lvl+0x18c/0x250 [ 731.384957][T14437] ? load_image+0x420/0x420 [ 731.384975][T14437] ? show_regs_print_info+0x20/0x20 [ 731.385001][T14437] ? print_circular_bug+0x12b/0x1a0 [ 731.385023][T14437] check_noncircular+0x2fc/0x400 [ 731.385043][T14437] ? print_deadlock_bug+0x5d0/0x5d0 [ 731.453069][T14437] ? lockdep_lock+0xf5/0x230 [ 731.457775][T14437] ? _find_first_zero_bit+0xd3/0x100 [ 731.463177][T14437] __lock_acquire+0x2df1/0x7d40 [ 731.468066][T14437] ? xfd_validate_state+0x6d/0x150 [ 731.473277][T14437] ? verify_lock_unused+0x140/0x140 [ 731.478853][T14437] ? mark_lock+0x94/0x320 [ 731.483826][T14437] lock_acquire+0x19e/0x420 [ 731.488528][T14437] ? ext4_destroy_inline_data+0x28/0xe0 [ 731.494344][T14437] ? __might_sleep+0xe0/0xe0 [ 731.499277][T14437] ? read_lock_is_recursive+0x20/0x20 [ 731.504852][T14437] ? __might_sleep+0xe0/0xe0 [ 731.509476][T14437] ? __schedule+0x155b/0x45a0 [ 731.514242][T14437] down_write+0x97/0x200 [ 731.518591][T14437] ? ext4_destroy_inline_data+0x28/0xe0 [ 731.524251][T14437] ? down_read_killable+0x340/0x340 [ 731.529563][T14437] ? lockdep_unlock+0x146/0x2e0 [ 731.534625][T14437] ? ext4_journal_check_start+0x178/0x250 [ 731.540477][T14437] ext4_destroy_inline_data+0x28/0xe0 [ 731.546149][T14437] ext4_do_writepages+0x4f0/0x3990 [ 731.551301][T14437] ? mark_lock+0x94/0x320 [ 731.555752][T14437] ? lock_chain_count+0x20/0x20 [ 731.560626][T14437] ? __lock_acquire+0x1347/0x7d40 [ 731.565687][T14437] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 731.571533][T14437] ? lockdep_hardirqs_on+0x98/0x150 [ 731.576769][T14437] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 731.582546][T14437] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 731.589429][T14437] ? lock_acquire+0x208/0x420 [ 731.594275][T14437] ? rcu_read_lock_any_held+0xb4/0x140 [ 731.599767][T14437] ext4_writepages+0x1dd/0x350 [ 731.604558][T14437] ? ext4_read_folio+0x2f0/0x2f0 [ 731.609533][T14437] ? __rwlock_init+0x150/0x150 [ 731.614323][T14437] ? ext4_da_get_block_prep+0xde1/0x1020 [ 731.620250][T14437] ? do_raw_spin_unlock+0x121/0x230 [ 731.625650][T14437] ? ext4_read_folio+0x2f0/0x2f0 [ 731.629802][ T5809] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 731.630684][T14437] do_writepages+0x3b3/0x630 [ 731.646146][T14437] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 731.650585][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.651876][T14437] ? __lock_acquire+0x7d40/0x7d40 [ 731.651899][T14437] ? __rwlock_init+0x150/0x150 [ 731.672883][T14437] ? do_raw_spin_unlock+0x121/0x230 [ 731.678231][T14437] filemap_fdatawrite_wbc+0x122/0x180 [ 731.679337][ T5809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.683616][T14437] file_write_and_wait_range+0x197/0x280 [ 731.693905][ T5809] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 731.699209][T14437] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 731.699238][T14437] ? __might_sleep+0xe0/0xe0 [ 731.699256][T14437] ? folio_unlock+0x118/0x2e0 [ 731.699273][T14437] generic_buffers_fsync_noflush+0x6f/0x160 [ 731.714156][ T5809] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 731.718440][T14437] ext4_sync_file+0x45b/0xd30 [ 731.718471][T14437] ? trace_ext4_fsmap_mapping+0x210/0x210 [ 731.718494][T14437] ? vfs_fsync_range+0x130/0x1a0 [ 731.727834][ T5809] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 731.733700][T14437] ext4_buffered_write_iter+0x2c0/0x350 [ 731.733735][T14437] ext4_file_write_iter+0x1d9/0x1880 [ 731.763104][ T5809] usb 4-1: Manufacturer: syz [ 731.766223][T14437] ? rcu_read_lock_any_held+0xb4/0x140 [ 731.787789][T14437] ? ext4_file_read_iter+0x670/0x670 [ 731.793235][T14437] vfs_write+0x46c/0x990 [ 731.797502][T14437] ? file_end_write+0x250/0x250 [ 731.801340][ T5809] usb 4-1: config 0 descriptor?? [ 731.802404][T14437] ? __fget_files+0x43d/0x4b0 [ 731.812132][T14437] ? __fdget+0x180/0x210 [ 731.816409][T14437] ? __x64_sys_pwrite64+0xf6/0x230 [ 731.821553][T14437] __x64_sys_pwrite64+0x19b/0x230 [ 731.826704][T14437] ? ksys_pwrite64+0x1c0/0x1c0 [ 731.831845][T14437] ? lockdep_hardirqs_on+0x98/0x150 [ 731.837163][T14437] do_syscall_64+0x55/0xa0 [ 731.841610][T14437] ? clear_bhb_loop+0x40/0x90 [ 731.846508][T14437] ? clear_bhb_loop+0x40/0x90 [ 731.851228][T14437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.857151][T14437] RIP: 0033:0x7fc043d9c819 [ 731.861717][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.881958][T14437] RSP: 002b:00007fc044cd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 731.890485][T14437] RAX: ffffffffffffffda RBX: 00007fc044015fa0 RCX: 00007fc043d9c819 [ 731.898576][T14437] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 731.906586][T14437] RBP: 00007fc043e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 731.914754][T14437] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 731.922923][T14437] R13: 00007fc044016038 R14: 00007fc044015fa0 R15: 00007ffc68953618 [ 731.931285][T14437] [ 732.027765][T14437] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 732.045135][T14437] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 732.060318][T14437] EXT4-fs (loop1): This should not happen!! Data will be lost [ 732.060318][T14437] [ 732.062198][ T28] audit: type=1326 audit(1776243697.965:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14436 comm="syz.1.2708" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc043d9c819 code=0x0 [ 732.074116][T14437] EXT4-fs (loop1): Total free blocks count 0 [ 732.100626][T14437] EXT4-fs (loop1): Free/Dirty block details [ 732.106919][T14437] EXT4-fs (loop1): free_blocks=66060288 [ 732.112801][T14437] EXT4-fs (loop1): dirty_blocks=48 [ 732.116896][T13540] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 732.118622][T14437] EXT4-fs (loop1): Block reservation details [ 732.139011][T14437] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 732.228217][ T5809] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 732.237983][ T5809] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 732.255749][ T5809] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 732.297374][ T1073] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 2 with error 28 [ 732.507749][ T2129] usb 4-1: USB disconnect, device number 2