last executing test programs: 22m34.09225944s ago: executing program 32 (id=90): unshare(0x2040400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r4, 0x5416, 0x0) 16m58.214528399s ago: executing program 33 (id=963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x2e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000280)="55ee4addb0838779ff7a51df", 0xc}], 0x1}, 0x8810) 13m58.521286112s ago: executing program 34 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 13m56.948746083s ago: executing program 35 (id=1815): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r2, @ANYBLOB="0b1b0500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40880}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x1, 0x24000004, &(0x7f0000000180)={0x11, 0x8100, r2, 0x1, 0xfd, 0x6, @local}, 0x54) 13m52.79341648s ago: executing program 36 (id=1841): socket$inet6(0xa, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x100, @private0, 0x8}}, 0x80, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000000340)="960defb24c7f7148634ae16cc55e0a7f9b4dc4e88ffaef0fd07d2f53d453bf2a142b9bf75a17cd144030ed1cb25525d1db1aa687aa3888356a2446a4", 0x3c}, {&(0x7f00000003c0)="0c914e774a3955364fd99bdc0aaa0b4b610bfbab705a9888e6ea4959bf9eadcef54a9bcf808b1343f314d18c201a6357f577e3cb033b16571d3f593b0ed013fabb54cab07338f7ff189883d132ad81d6b80677570a8d49b729b52f660526c53b444e3703c6aad5c97146039c8baa5d9f90078b09d4b6d937c9d88a7a97c093c0eb0568d2e40a12eba359b0be5558252286", 0x91}, {&(0x7f0000000540)="0dd41a77", 0x4}, {&(0x7f0000000b80)="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", 0x870}, {&(0x7f0000001b80)="d5782022e2dd4f369e3096b6ce9fc8bd741ff6853afc88445a27c2e93244a4a3525da54af6ac5c7e456679436731e3a79370dcac061fe057f11e1bb8cf87e17b895d7073864bba9e0f6ef4a9aa2effb668bb39bc3c0eb25babd90bb9851dce052a3a319515e5808b2991d326c9", 0x6d}], 0x6}, 0x44000) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10m1.380613554s ago: executing program 37 (id=2603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='fusectl\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$team(0x0, r3) 9m20.514969483s ago: executing program 38 (id=2686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6, 0x0, 0x80, 0x4, 0x4000200}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={@remote, @loopback, @private1, 0x5, 0x6, 0x0, 0x100, 0x5, 0x86120186, r5}) 8m33.647392328s ago: executing program 39 (id=2762): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x1, 0x800003}}, 0xffffffd7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a) 7m53.165604406s ago: executing program 40 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000200)=r2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 6m7.382169408s ago: executing program 41 (id=2928): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) gettid() recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close(r0) 5m28.839467666s ago: executing program 42 (id=2981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4m23.788924822s ago: executing program 43 (id=3096): syz_emit_ethernet(0x50, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x1a, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2}]}}}}}}, 0x0) 3m24.357159012s ago: executing program 1 (id=3398): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) 3m24.223418246s ago: executing program 1 (id=3401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xd}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @window={0x3, 0x80, 0xe}, @window={0x3, 0x218, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000080)='<', 0xfffffffffffffda9, 0x4894, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0xe22, @remote}, 0x10) 3m23.956259022s ago: executing program 1 (id=3404): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x277, 0x1000, 0x7ff, 0x7}) 3m23.837116426s ago: executing program 1 (id=3406): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, r0, 0x0, 0x0, 0x97a4}]) 3m23.583485212s ago: executing program 1 (id=3410): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="13000000270001"], 0x50}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r4 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000180), 0x4) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 3m23.314105019s ago: executing program 7 (id=3413): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100"], 0x0, 0x3c}, 0x28) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 3m23.061148676s ago: executing program 7 (id=3416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000800088004000780080002000100000008000100000000000c00048005"], 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 3m22.925302969s ago: executing program 7 (id=3417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x20004080) 3m22.862904381s ago: executing program 7 (id=3418): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, r0, 0x0, 0x0, 0x97a4}]) 3m22.748979334s ago: executing program 1 (id=3419): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) 3m22.293385226s ago: executing program 44 (id=3419): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x21) 3m22.286857996s ago: executing program 7 (id=3424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @sack_perm, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xd}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @window={0x3, 0x80, 0xe}, @window={0x3, 0x218, 0x5}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, 0x0, 0x0, 0x4894, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0xe22, @remote}, 0x10) 3m21.569260395s ago: executing program 7 (id=3428): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 3m21.298648071s ago: executing program 45 (id=3428): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1, 0xe7b, 0x0, 0x1) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 3m18.926401333s ago: executing program 46 (id=3439): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x97a4}]) 2m3.622335532s ago: executing program 4 (id=3720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") r2 = open(&(0x7f0000000100)='./file2\x00', 0x167842, 0x1fb) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7) 2m0.725190176s ago: executing program 4 (id=3739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 2m0.412442124s ago: executing program 6 (id=3741): clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000001240)={r0, r1+10000000}) 1m59.717089772s ago: executing program 6 (id=3743): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x6, 0x30}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1m59.636207224s ago: executing program 4 (id=3745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1m59.251406473s ago: executing program 4 (id=3749): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") mount(0x0, 0x0, 0x0, 0x2200020, &(0x7f0000000000)) 1m58.966808711s ago: executing program 8 (id=3750): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) r1 = syz_open_dev$loop(0x0, 0x18bdb, 0x325967a866143452) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x401, 0x0, 0x0, 0x0, 0x10, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m58.887059673s ago: executing program 4 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x0, 0x1}}, @TCA_NETEM_CORRUPT={0xc, 0x2, {0x1}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 1m58.665035107s ago: executing program 8 (id=3753): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='2', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 1m58.653876358s ago: executing program 6 (id=3754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x3, 0xe, 0xa, 0x3, 0x7, 0xb, 0xe, 0xc, 0x10, 0xc, 0x6, 0xe, 0x6, 0xc, 0xd, 0x8], 0x0, [0x400, 0x8cf, 0x400, 0x0, 0x0, 0x0, 0xb, 0x5, 0x7, 0x2, 0x8, 0x0, 0x9, 0x9, 0x8, 0xc], [0xff7f, 0xffff, 0x3, 0xfff, 0x5, 0xa4e, 0x5, 0x80, 0x200, 0x401, 0x9, 0x9d, 0x0, 0x0, 0x1, 0x4]}}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1m58.377571093s ago: executing program 4 (id=3755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 1m58.373128844s ago: executing program 8 (id=3756): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x4a}, 0x1, 0x0, 0x0, 0x50}, 0xc101) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1000081, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m58.007548983s ago: executing program 6 (id=3757): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msync(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) 1m57.849010728s ago: executing program 6 (id=3758): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 1m57.793241239s ago: executing program 6 (id=3759): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m57.37046117s ago: executing program 8 (id=3760): connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e20, @multicast1}, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m57.189220444s ago: executing program 8 (id=3761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x2, 0x2, 0x3, 0x0, r1}) 1m57.126071785s ago: executing program 8 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) poll(0x0, 0x0, 0xa61) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) 1m42.535279544s ago: executing program 47 (id=3755): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) 1m42.468097825s ago: executing program 48 (id=3759): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) 1m41.52169024s ago: executing program 49 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) poll(0x0, 0x0, 0xa61) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) 56.712337371s ago: executing program 0 (id=3879): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x9}) 56.509146607s ago: executing program 0 (id=3881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 56.429506698s ago: executing program 0 (id=3883): unshare(0x28000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "cedaacdd95b8b313", "14ea2a3cb44119d2570c2612cf8a97afee66ff37e1e9ff6a78171840a6a258e4", "906f70eb", '\x00\x00\x00\x00\x00\x00@\x00'}, 0x38) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040)=0x7fff, 0x4) 56.232647463s ago: executing program 0 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a00010000000009000000000220200000000000001414bb080003000100"/52, 0x34) 56.074502918s ago: executing program 0 (id=3886): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv0}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000380)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) 55.793146835s ago: executing program 0 (id=3887): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 54.922061228s ago: executing program 3 (id=3892): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bf000/0x3000)=nil, &(0x7f00000f0000/0x1000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f3, 0x0, r0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 54.82109242s ago: executing program 2 (id=3893): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) 54.548817027s ago: executing program 3 (id=3895): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001c80)={0xffffffffffffffff, r1, 0x5, 0x5ed, &(0x7f0000000c80)="e1e2921823b3f9fa3ddd1e3b808d0ba4963abfb3c18c7d8bf5dc4134122b447a067f7835774ef502965fa9b62769d46cd819bcbfebe70f5819064408e7b43ee65be32d635f00843bb0a806c9026b98e2b3f3dff3c01fea7c528c8a8c1559936870b1b21bc0a197cf857cf4dcee600283a0b8a3f71232d9fcaf4db81628e3e23e4d692ae6369840213dfb9397bba45a303d8ffc8e577dcc737fd5b053d9c1b823ed04e7fc2936acb9ef45f31e5aa404a67f4d833a1a5e7ae81695f9a11244b4840a2fe3e2226244e85e65f9b5dc56a4945e1b84a39f2946dab34290239fadfe376806e8d42a833e4169222149e37579fef2ba95525145ecd632170b1c6feaf261e2641d639023c75f7555f296b52d23b1069490978a1f158f6e0fe3e0a156330fae9371f96ca80daf01b0b5440cb0a3994a8a9186c4c72dbdba1104dd5ff96bb4f0ca4bef519344b6beeaea607cd2ea1b622ec2b1da3308280d8f5537304fcc7e95f7d77732868ff81dd52b99e5173b2d180777207d8ba1a24ae07e8ced4672b9b56a873d4471f9b7b1bf46c66907e606e3227b591a06bcf45425e50d97dca1bde2b0c854691c3e5d688ef515654b900c979595e2b38cf392a896c9ab4cd3ac1acbe72cc3ce5a1901e917982da5aa331a3e73332681b90f5853e22fa04611a8aeafef32223bb7eaa8cc1b292b290ec91ad6931c6f914e61269126607fe3e0f8ca9bc62f604436e9cfeb99822c90f7ccc5ffd143b66050f84255e343e506f105a3750bed7adf308662f6dde95a3d93486f3298b2d9f321ba32c16a792cc888095c7c836d0a315c235788501c2ff9bedfcce512e13ed2cd82d5ff04d3ec0de1dbccfdf547e564d32e46062bcbd5c43bf363b854aa9804b01184d55e0a3dc52a9242ac913cee6f728d3702f397a6f5c1b34bd3722a732453ca13bdf5c82e7ba7ed41e91086db5a9f416d9d5befe87930be54b0c2a48874539890eaf31a0a6ef8b301bd4ab055844a5b790f9d72b70b4f574dd26ede3ef5a756c94ea22ec01088e88183695a6abec2da4c53e77aeb45a042e53eac7d8a9f082a6a7d7c6f03ece231b61fbd9045a53e08516c8545ba24e88677171e0049bebe1e0064e43b9471447bd7f5e3b36519a43856a74e991f3baa8563bffaae8da4250a39a5860089083ccab1751a6cdc5c32632354e2b35ca24286fc1612d6be4f1d33566e936c8c1aeb20c230037572619a2df82bf19b891a3192e2608d8dd1057a639c55e90b6c2cf84ba2f7294e1741125f12358aa316ed69c3dccd3d1801b59c30474906d1f7a06176a3151e617c07690a89fda856440065c25070acc1600f62c74ffcf3931f3745ae534c873ad70e034cb666158dff22aa25cb08346b2de125eda55a8e2a60fe7d080cb85aab22b0ef5e0888956898c8f78ecca3ffc375707bb62f7239f412c7e65d24960601e7a6de6693f87391d44f7deec94cb4a044d299d0b1e83530918ed102525e44e2cfa4d7c00717fc12e13fa45eba4b2909351e28fd8c39d7efdf31e4583553f11cea448eced655cfb22a97d157a1459289fe2abe59f54ab562973d9a0c21c246721af439ed1ff0f1c0fd83e7b1209374bad5c25adc82dc6ed7a17a1fd408ed4e086c028bdd59793e44490075677d3aa9024139fb45207daeb76b9ef6c53f5f3a47495ed8f4b8986536cab57f2e5bb5f65d3349893e098dd0946326dc31c046b79126343da9ce7bc8c9585b2aa966a7f7203f87208821157052522ab4edd15d4523daa06e5cf099f1341f21b1c9dc7ee2cdd0767b031cfd50c4e43fb63978dc2adb1e14b2e8548b61216e43853b0de73b8e753a3f6e5086137e00cc037eac13fd0a248e2d12df4e5bed3be0e51ed5c03c83d876fba00ea946bd23692825e224a593c7f7f9755173b3c2347f73ca96e2d07bbcf26ff94b53c4d39e0cc988765ed6d72e3c330fc57a8f70867fc3122440c39030d8133952042b863142ffbfa60346d9d37afbb084d1758e134b008393029bdcac920dc582e07ac84d86cb26dd98a6855f749c1f9a02310b59ae24f2dc5135f99767912e624b04f151b6d5415f5f2a69bece77826afb2959ae95b8be924ed38996a197dafeb88734f550a6cda090f50e6251e633beacb8873fbb", 0x9, 0x7, 0x7, 0xea8, 0x4, 0x1, 0x5, 'syz0\x00'}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x400, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040941) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xfffffdcf) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 54.398767741s ago: executing program 2 (id=3896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="6a9031c2d2f647e6ee164e02c2832642a30098b7f46758361b920bb9b2a55d0493235ba354095f3d4ce94c24779bf3f0b2f453fec24ee7ebf228dbecf7d1652d6caa1a47a959c37378cca7273419243065f948fcaf053f6fe74e6238bb35f0db3a6fbf635152de78931f1d4b958ddc0df723", 0x72, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x736, 0x75, 0x2, {0x72b, "d61beebfa5542d68638e436f2987b45c20ddc9b8032456354a36ebf51108a2c83e2d59825ef1c627bb06aa2cd098b180d941edc04a025195e9d5a6642e5ab450b79247a5ebe48c7788a2124298520ca42eac897947f0059ba303b959d8642c8380d4ee3f2d4103dd1f7063ebd37ef60f652c358790ba313d3b220a47493a4ae3b68aa26770c5939a2b88c6b22c3dd6c6f9182736a7a3c525f27368cb7c35071ef7fd7b1b2f084e1069d82932466618c8806365a4ece503605019e3689e0d612de42aab90beddebcc661cb707625912b56b2dae71ec570fff0fb696f509909dea12b24d405dbc10df7dbea36fbc7111050bfb049151ec6367214c23979b5ae8ed70f5e68a643fc38b10152def45ee124b875fea57601bf5636c101ea1332dbd1ecdf8c01b20ef5ba1c9dfee1559ee4395a6a6eb43a71aefe5711d8e08ed3687dc0e3777f8c40743ecde111e9f9663eae3b5547a0e9400f20ddaef74cdccab7f768f2dae0ca51f628c36821b27babe7b57c5f0892708d61eec067cef38ad77e464c489c4b6a5c413af8e5459e046d301d53551ffd99064ed95610895ff4f6a445d3ccbdfc77cbd36bea14f40c75ca1eaa42e5e8400f467d08a539c74fcc7dcf92edc14b8d2a7c9cf21617a568f375968c7407d5714d695544378a00683b53a3f816c6331a271714735cfb92dec0f11957c0e722acceb819afad3d5ced84f97dbf7c3034fd5a7508c31643ad75ea3c858d6b70e1b1a8990cdb6ee7b458e123db9f91e36982df2c3ef3e1070380e977288c5a115e5df4cafc4f23f2235c6b86f02cea204e22ba87a750981c9b791c3fae8a624e9cae2a85e2911fab68c00a9e3c5c1ffa3142063c268559c1d5f9e548107a05359e6b130fb54adc322772d2f5c86ba841e73e719cefed9f3b0a8c0d15ff8bea5b24a0eb8f65afc8535b9883afb23b9677df7eabe1cdb7637734b2e525c0f7309c64426b78159dac25aa8192c89256a781d9db142f845effbb688477abdeb5e5b119b498cd8070a436bc29fc9823d1f51e3e4c7da693080cc3e5232c18c003899949ad94637963aa83884aa2216308c7a898d5ad43a9103d2fc07153e67605b5a28a83cbaaab0dd4a48a2756b04f63c00639edaf7755d33d3a582a7e724f32426cca8848402c3fef4a765429f345d9a77ee55429c5d8f41b1e291f237ca740ec9a69634180be19656a56053ebabe7599c0a742e226be9392627a5d2efbb2e4c20e9fb743c5825d466babf92cb12a0d599147406a08c9d1e8cb137d01b73f22d606f621a0108b470f781b896f6593c07f51dab0f16fce3380ea3d44feb25dfd80de28b8beab02ab666ac4118dad1d29ea1b7d3ea461a0e905cdd8162d7a7e0ea5b0245a68860e54b6bebef36bf5e22b0e81fc7400d9f87955f9d4c0872ca57727050bd742bc8ff9189613ea19d06e93d04785b17967cf53889e9ffe04c0cbb5eeafe8a82c1a5c5e4a047f9cff137963c6f13fb4f0589cc1158a1d7d9cfd4cc37ba587875704cb9d5d3d92938e226a56088586f19f6cc3792b72293745334b16b0da2ba41c43657621680bae18912c13711197c3d84a43c46d12d03031b44829f67b825febff021d7b46bb5b710a8b54c83b917ed382b9736459fc9570453d741ea7ff4c0b5657fdc41c277f03f1d419432429b0a9477123639ae127c90de0060f1c000536d3f0dddee9ba37d33b1e6de7b2202ef4e5306c6d4c54b9599e27226f7876803e59bc7d1b3d30bb1bf5e616508cee95e748739d8fc14abc095b81dc863322e8037689c0cca182586039683beef683b7b91073e3705d49090fdac79f303499f1399f056b89231022b697177347c88b0cc7a0795c09a288f738ddc96f24d0b5c87280d93107d1a41a05b0cf31e1a9f1f53dfa0cc8514250beac5e35f3ff42331b5508c06dfcb3bccb58b84c12cf59afc8f7b553a2a5f1e95f949ea6e1c60b95536e83582878e73a26f081281830306931d731c23f57d37139ddb04cddc182b3e9beffb298cddabe1688c61ee4e2f40c2901e44a630bed3b4afbab42b0b3bc876b315760e68dc9a01fe2878379c6b65ef23be56793404946e923961fe07c876963e4873286d80945716a83ab70b3b6c8e099082ba5483eaa42624b18bc1d46be8eb6729f73159b5aaa119d2bf12e50e41447d1ba0aab09f6811abe26e91a07bf4252bbbbda5e446ec6a62d04b1aaad633e62da781b3951494dad34a5cd236c12e382d5f5200ab8a5e4ed2af8d7e12154c6a27b0a2f3adca22b46bb27e636ed7134b1cdf3255e652c7a8f0ae2064b7503ac83246c58fc9ca1c18c246e2ab2a801cbd35413ada7158ee8730e026de305b095bbfb447da29654c7243d4493cdb7c7c03692cf2f6cea66ff6c48164553588453467278ee0ae711f359d3ecdfbf0ea8186c675a7bdb079b43ec27ceb3d24b705fb5852bcdf95df9e1d43aa189f549163ae13e02e2ea0ba4b7e3aeeae81c0df64ce69dfa96d0c49eb5c6a807ba18a2f2d446e0f5ffb16fbdae3446646be0470757d63795f31df6c313b7f1a33b0d2e561ae848bf98f45531c9bc292c1eab4a36b42793282916a2fdc"}}, 0x736) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x141301) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}, 0x4000004) r9 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) 54.398518121s ago: executing program 5 (id=3897): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0, 0x3000}]) 54.085421589s ago: executing program 5 (id=3898): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x21) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 53.371818448s ago: executing program 2 (id=3899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 51.613069173s ago: executing program 2 (id=3900): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 51.386822629s ago: executing program 2 (id=3901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24008000) 51.163699925s ago: executing program 5 (id=3902): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x409c9, 0x0, 0x0, 'queue1\x00', 0x200001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) 51.062052297s ago: executing program 2 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0xe00, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 51.038892048s ago: executing program 5 (id=3904): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 50.95708853s ago: executing program 3 (id=3905): unshare(0x40400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x277, 0x1000, 0x7ff, 0x7}) 50.855645473s ago: executing program 3 (id=3906): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@discard}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") r0 = creat(0x0, 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0, 0x3000}]) 50.499419732s ago: executing program 3 (id=3907): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000000a00), 0x0, 0x0, &(0x7f0000000b00)={0x2, 0x1234, @local}, 0x10) 50.20913871s ago: executing program 3 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x148}}, 0x0) 49.610293045s ago: executing program 5 (id=3909): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f2c95f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) 49.486707698s ago: executing program 5 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 40.427027903s ago: executing program 50 (id=3887): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 35.92916511s ago: executing program 51 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0xe00, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 34.898558506s ago: executing program 52 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x148}}, 0x0) 34.419956548s ago: executing program 53 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.588095484s ago: executing program 9 (id=3918): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000000, 0x42202) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, r1, &(0x7f0000000140)='./file0\x00') setresuid(0xee01, r1, r1) ioctl$BLKROSET(r0, 0x801070cf, 0x0) 2.429427438s ago: executing program 9 (id=3919): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 1.992367959s ago: executing program 9 (id=3920): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f00000000c0), &(0x7f0000000040)=@udp6=r0, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) 1.670361967s ago: executing program 9 (id=3921): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x830, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f000068d000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = openat2(r1, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x80800, 0xa0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./bus\x00', r1, 0x4000, r2}, 0x18) io_uring_setup(0x2ccb, &(0x7f0000000040)={0x0, 0x88a1, 0xc801, 0x3, 0x289}) 237.384815ms ago: executing program 9 (id=3922): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e&my_read_msr1', 0xe) 0s ago: executing program 9 (id=3923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xa1}) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 1235.630812][ T2102] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1235.630812][ T2102] [ 1235.760462][T17846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1236.088460][T19015] loop5: detected capacity change from 0 to 1024 [ 1236.140505][T19015] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1236.194670][T19015] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1236.216200][T19015] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1236.258895][T19015] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.3282: Invalid inode table block 0 in block_group 0 [ 1236.331460][T19015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1236.362321][T19015] EXT4-fs error (device loop5): ext4_quota_write:7342: inode #3: comm syz.5.3282: mark_inode_dirty error [ 1236.395748][T19015] Quota error (device loop5): write_blk: dquota write failed [ 1236.403467][T19015] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1236.435068][T19015] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.3282: Failed to acquire dquot type 0 [ 1236.487103][T19015] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.3282: Invalid inode table block 0 in block_group 0 [ 1236.547279][T19015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1236.587066][T19015] EXT4-fs error (device loop5): ext4_ext_truncate:4535: inode #15: comm syz.5.3282: mark_inode_dirty error [ 1236.623540][T19015] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.3282: Invalid inode table block 0 in block_group 0 [ 1236.643584][T19015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1236.674723][T19015] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1236.690478][T19015] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.3282: Invalid inode table block 0 in block_group 0 [ 1236.719728][T19015] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1236.747565][T19015] EXT4-fs error (device loop5): ext4_truncate:4302: inode #15: comm syz.5.3282: mark_inode_dirty error [ 1236.799518][T19015] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1236.819837][T19015] EXT4-fs (loop5): 1 truncate cleaned up [ 1236.841301][T19015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1236.892588][T19043] loop9: detected capacity change from 0 to 1764 [ 1237.068392][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.820948][T19073] loop7: detected capacity change from 0 to 1764 [ 1238.042301][ T5832] usb 1-1: USB disconnect, device number 3 [ 1238.518285][T19091] loop7: detected capacity change from 0 to 1764 [ 1238.983146][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.992214][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.252368][T19119] loop9: detected capacity change from 0 to 1764 [ 1239.665435][T17595] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1239.867025][T17595] usb 6-1: device descriptor read/64, error -71 [ 1240.156404][T17595] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1240.335628][T17595] usb 6-1: device descriptor read/64, error -71 [ 1240.350918][T19155] loop7: detected capacity change from 0 to 512 [ 1240.408430][T19155] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.425877][T19155] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.477966][T17595] usb usb6-port1: attempt power cycle [ 1240.545843][T18284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.885828][T17595] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1240.916816][T17595] usb 6-1: device descriptor read/8, error -71 [ 1241.205618][T17595] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1241.256041][T17595] usb 6-1: device descriptor read/8, error -71 [ 1241.298112][T19193] loop1: detected capacity change from 0 to 512 [ 1241.332974][T19193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.349526][T19193] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.385659][T17595] usb usb6-port1: unable to enumerate USB device [ 1241.491083][T17846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.171647][T19219] loop7: detected capacity change from 0 to 1024 [ 1242.249218][T19219] hfsplus: unable to load nls mapping "cp37" [ 1242.256684][T19219] hfsplus: unable to parse mount options [ 1243.680347][T11385] Bluetooth: hci3: command 0x1003 tx timeout [ 1243.696212][T17417] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1244.081826][T19241] loop1: detected capacity change from 0 to 512 [ 1244.201953][T19241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.215520][T19241] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1244.490180][T17846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.710371][T19255] loop1: detected capacity change from 0 to 4096 [ 1244.759129][T19255] EXT4-fs: inline encryption not supported [ 1244.776763][T19255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1244.786442][T19255] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1244.804848][T19255] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 1244.855944][T19255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1245.077741][T19262] loop9: detected capacity change from 0 to 1764 [ 1245.202768][T19268] loop5: detected capacity change from 0 to 1024 [ 1245.400759][T19268] hfsplus: unable to load nls mapping "cp37" [ 1245.435431][T19268] hfsplus: unable to parse mount options [ 1247.343806][T19289] loop9: detected capacity change from 0 to 512 [ 1247.423194][T19289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.503592][T19289] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.760275][T17855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.282942][T19314] loop9: detected capacity change from 0 to 1764 [ 1248.825114][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3367'. [ 1248.887173][T19329] loop5: detected capacity change from 0 to 1024 [ 1248.971184][T19329] hfsplus: unable to load nls mapping "cp37" [ 1248.990300][T19329] hfsplus: unable to parse mount options [ 1250.459069][T19325] bond2: entered promiscuous mode [ 1250.464256][T19325] bond2: entered allmulticast mode [ 1251.184950][T19360] loop9: detected capacity change from 0 to 1764 [ 1252.101996][T19378] loop7: detected capacity change from 0 to 512 [ 1252.132492][T19378] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1252.164874][T19381] loop5: detected capacity change from 0 to 512 [ 1252.203581][T19378] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 1252.287980][T19381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.355429][T19381] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1252.396308][ T7388] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1252.548282][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.603270][T19393] loop7: detected capacity change from 0 to 1024 [ 1252.841756][T19393] hfsplus: unable to load nls mapping "cp37" [ 1252.860175][T19393] hfsplus: unable to parse mount options [ 1254.358175][T19407] loop9: detected capacity change from 0 to 1764 [ 1254.522620][T17846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.024013][T19425] loop1: detected capacity change from 0 to 512 [ 1255.153603][T19425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.173680][T19431] loop5: detected capacity change from 0 to 512 [ 1255.182626][T19425] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.216550][T19431] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1255.331738][T19431] EXT4-fs (loop5): 1 truncate cleaned up [ 1255.373295][T19431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1255.398374][T17846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.718827][T19446] loop1: detected capacity change from 0 to 128 [ 1255.856124][T19446] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1255.867878][T19446] FAT-fs (loop1): Filesystem has been set read-only [ 1255.903176][ T27] audit: type=1800 audit(1785981981.726:1537): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3391" name="file2" dev="loop1" ino=1048842 res=0 errno=0 [ 1256.605153][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.066272][T19469] loop9: detected capacity change from 0 to 512 [ 1257.150667][T19469] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.200242][T19479] autofs4:pid:19479:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(8.0), cmd(0xc018937b) [ 1257.233316][T19469] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.235956][T19479] autofs4:pid:19479:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 1257.562034][T17855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.797225][T19499] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1258.229993][T19517] loop9: detected capacity change from 0 to 512 [ 1258.279900][T19517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1258.328800][T19517] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.464628][T19512] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1258.591198][T17855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.607797][T19512] bond2 (unregistering): Released all slaves [ 1258.782580][T19534] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1259.711674][T11385] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.726754][T11385] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.748545][T11385] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1259.788967][T11385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1259.800744][T11385] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1259.815643][T11385] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1259.891562][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.010035][T19574] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1260.363084][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 1260.408810][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.494227][T17417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1260.534067][T17417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1260.545461][T17417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1260.564792][T17417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1260.582755][T17417] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1260.596724][T17417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1260.764608][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.913869][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.935483][T11385] Bluetooth: hci1: command tx timeout [ 1262.665351][T11385] Bluetooth: hci2: command tx timeout [ 1262.857581][T19637] loop5: detected capacity change from 0 to 4096 [ 1262.901386][T19637] EXT4-fs: inline encryption not supported [ 1263.009054][T19637] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1263.041702][T19569] chnl_net:caif_netlink_parms(): no params data found [ 1263.059216][T17417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1263.068627][T19637] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1263.077907][T17417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1263.087447][T17417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1263.104692][T17417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1263.116173][T17417] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1263.124598][T17417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1263.157377][T19637] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 1263.172855][T19637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.597571][T19588] chnl_net:caif_netlink_parms(): no params data found [ 1264.015487][T17417] Bluetooth: hci1: command tx timeout [ 1264.736871][T17417] Bluetooth: hci2: command tx timeout [ 1264.950309][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.217195][T17417] Bluetooth: hci3: command tx timeout [ 1265.358530][ T27] audit: type=1800 audit(1785981991.236:1538): pid=19683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3443" name="in_ports" dev="configfs" ino=71502 res=0 errno=0 [ 1265.602755][T19588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.625749][ T9724] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1265.640644][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3445'. [ 1265.642906][T19588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.667049][T19588] bridge_slave_0: entered allmulticast mode [ 1265.675032][T19588] bridge_slave_0: entered promiscuous mode [ 1265.688466][T19569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.702480][T19569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.710454][T19569] bridge_slave_0: entered allmulticast mode [ 1265.724978][T19569] bridge_slave_0: entered promiscuous mode [ 1265.827250][ T9724] usb 1-1: Dual-Role OTG device on HNP port [ 1265.839965][ T9724] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1265.855253][ T9724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.882311][ T9724] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1265.908206][ T9724] gspca_spca501: reg write: error -32 [ 1265.914272][ T9724] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1265.947219][ T9724] spca501: probe of 1-1:1.0 failed with error -22 [ 1265.954924][ T9724] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1265.972407][T19588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.002067][T19588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.037755][T19588] bridge_slave_1: entered allmulticast mode [ 1266.073392][T19588] bridge_slave_1: entered promiscuous mode [ 1266.094186][T19569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.102621][T17417] Bluetooth: hci1: command tx timeout [ 1266.115875][T19569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.124039][T19569] bridge_slave_1: entered allmulticast mode [ 1266.132824][T19569] bridge_slave_1: entered promiscuous mode [ 1266.586852][T19588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.634083][T19718] loop5: detected capacity change from 0 to 736 [ 1266.777649][T19569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1266.807259][T19569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1266.817164][T17417] Bluetooth: hci2: command tx timeout [ 1266.846355][T19588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.005006][ T27] audit: type=1800 audit(1785981992.886:1539): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3449" name="in_ports" dev="configfs" ino=72352 res=0 errno=0 [ 1267.295635][T17417] Bluetooth: hci3: command tx timeout [ 1267.381561][T19588] team0: Port device team_slave_0 added [ 1267.497825][T19569] team0: Port device team_slave_0 added [ 1267.741412][T19588] team0: Port device team_slave_1 added [ 1267.767100][T19569] team0: Port device team_slave_1 added [ 1268.175715][T17417] Bluetooth: hci1: command tx timeout [ 1268.296073][T19588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.303685][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.335372][T19588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.359387][T19644] chnl_net:caif_netlink_parms(): no params data found [ 1268.622384][T19588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.645717][T19588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.700516][T19588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.770534][T19776] loop5: detected capacity change from 0 to 128 [ 1268.790133][T19569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.825478][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.863897][T19569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.895781][T17417] Bluetooth: hci2: command tx timeout [ 1268.967015][T19781] loop5: detected capacity change from 0 to 128 [ 1268.999623][T19781] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1269.044600][T19781] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.083996][ T27] audit: type=1800 audit(1785981994.966:1540): pid=19781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3454" name="file1" dev="loop5" ino=12 res=0 errno=0 [ 1269.086567][ T59] hsr_slave_0: left promiscuous mode [ 1269.175466][ T59] hsr_slave_1: left promiscuous mode [ 1269.219788][T16509] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1269.247170][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.279974][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.317687][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.342335][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.375494][T17417] Bluetooth: hci3: command tx timeout [ 1269.385999][ T59] bridge_slave_1: left allmulticast mode [ 1269.391757][ T59] bridge_slave_1: left promiscuous mode [ 1269.397933][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.529764][ T59] bridge_slave_0: left allmulticast mode [ 1269.535633][ T59] bridge_slave_0: left promiscuous mode [ 1269.541446][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.734523][ T59] team_slave_0: left promiscuous mode [ 1269.740169][ T59] team_slave_1: left promiscuous mode [ 1269.925477][ T59] veth1_macvtap: left promiscuous mode [ 1269.933001][ T59] veth0_macvtap: left promiscuous mode [ 1269.941320][ T59] veth1_vlan: left promiscuous mode [ 1269.947190][ T59] veth0_vlan: left promiscuous mode [ 1271.455444][T17417] Bluetooth: hci3: command tx timeout [ 1273.410009][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1273.726195][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1273.976415][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.298590][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.377897][ T59] bond0 (unregistering): Released all slaves [ 1276.778511][T19569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.785824][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.813356][T19569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.911202][T19569] hsr_slave_0: entered promiscuous mode [ 1276.956832][T19569] hsr_slave_1: entered promiscuous mode [ 1277.351702][T19588] hsr_slave_0: entered promiscuous mode [ 1277.372030][T19809] loop5: detected capacity change from 0 to 512 [ 1277.395940][T19588] hsr_slave_1: entered promiscuous mode [ 1277.417228][T19806] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1277.429873][T19588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1277.449184][T19588] Cannot create hsr debugfs directory [ 1277.565862][T19644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.573424][T19644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.585973][T19644] bridge_slave_0: entered allmulticast mode [ 1277.596575][T19644] bridge_slave_0: entered promiscuous mode [ 1277.612541][T19644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.640408][T19644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.662865][T19644] bridge_slave_1: entered allmulticast mode [ 1277.676865][T19644] bridge_slave_1: entered promiscuous mode [ 1277.816559][T19644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.845662][T19644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.996561][T19644] team0: Port device team_slave_0 added [ 1278.012313][T19644] team0: Port device team_slave_1 added [ 1278.167164][T19644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.174522][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.203311][T19644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.290379][T19644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.298403][T19644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1278.346663][T19644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.469997][T19644] hsr_slave_0: entered promiscuous mode [ 1279.483492][T19866] loop5: detected capacity change from 0 to 736 [ 1279.536743][T19644] hsr_slave_1: entered promiscuous mode [ 1279.587406][T19644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1279.595788][T19644] Cannot create hsr debugfs directory [ 1280.905437][T19871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.589660][T19917] loop5: detected capacity change from 0 to 128 [ 1281.647188][T19917] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1281.678741][T19917] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.837937][T16509] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1283.012121][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.049679][ T27] audit: type=1800 audit(1785982008.936:1541): pid=19972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3472" name="in_ports" dev="configfs" ino=72783 res=0 errno=0 [ 1283.263761][ T34] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1283.310705][ T34] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1283.369854][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.729964][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.933097][T20002] loop5: detected capacity change from 0 to 736 [ 1284.217641][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.287899][T19569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1284.471040][T19569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1284.667822][T19569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1284.696079][T19569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1285.323650][T19569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.380676][T20045] loop5: detected capacity change from 0 to 256 [ 1285.678299][T19588] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1286.116776][T19588] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1286.158624][T19588] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1286.213232][T19588] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1286.577570][T20077] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3485'. [ 1286.595051][T20077] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1286.717968][T19569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.127855][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.135940][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.160055][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.167872][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.830903][T20112] netlink: 'syz.5.3487': attribute type 2 has an invalid length. [ 1287.850137][T20112] netlink: 'syz.5.3487': attribute type 1 has an invalid length. [ 1288.345459][T20132] xt_hashlimit: size too large, truncated to 1048576 [ 1289.489886][T19644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1289.569130][T19644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1289.761954][T19644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1289.833981][T19588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.326447][T19644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1290.645859][ T59] hsr_slave_0: left promiscuous mode [ 1290.725395][ T59] hsr_slave_1: left promiscuous mode [ 1290.795709][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1290.804243][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.846321][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.854785][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.906319][ T59] bridge_slave_1: left allmulticast mode [ 1290.912749][ T59] bridge_slave_1: left promiscuous mode [ 1290.920134][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.015997][ T59] bridge_slave_0: left allmulticast mode [ 1291.022064][ T59] bridge_slave_0: left promiscuous mode [ 1291.028851][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.325744][ T59] veth1_macvtap: left promiscuous mode [ 1291.332105][ T59] veth0_macvtap: left promiscuous mode [ 1291.338485][ T59] veth1_vlan: left promiscuous mode [ 1291.343889][ T59] veth0_vlan: left promiscuous mode [ 1294.912185][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1295.206210][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1295.496199][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.846015][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.878149][ T59] bond0 (unregistering): Released all slaves [ 1298.301332][T19569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.652266][T19588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.703318][ T2923] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.711052][ T2923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.732585][ T2923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.740341][ T2923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.068548][T19644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.225151][T19644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.322653][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.330285][ T7389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.391656][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.399361][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.550692][T19569] veth0_vlan: entered promiscuous mode [ 1299.660067][T19569] veth1_vlan: entered promiscuous mode [ 1299.712664][T19644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1299.819980][T19569] veth0_macvtap: entered promiscuous mode [ 1299.860387][T19588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.877225][T19569] veth1_macvtap: entered promiscuous mode [ 1299.929416][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1299.966306][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.002557][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1300.023713][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.038500][T19569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.057244][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.070749][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.082452][T19569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1300.094208][T19569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1300.106733][T19569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.153433][T20245] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1300.179691][T19569] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.199650][T19569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.218806][T19569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.243680][T19569] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.402410][T19644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.424497][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.443733][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.513326][T20259] loop5: detected capacity change from 0 to 1024 [ 1300.522640][T20259] EXT4-fs: Ignoring removed bh option [ 1300.606840][T20259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.625336][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.683400][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.808311][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.840364][T19588] veth0_vlan: entered promiscuous mode [ 1300.853415][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.903384][T19588] veth1_vlan: entered promiscuous mode [ 1301.076602][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.091182][T19588] veth0_macvtap: entered promiscuous mode [ 1301.128586][T19588] veth1_macvtap: entered promiscuous mode [ 1301.200517][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.214294][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.250879][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.287161][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.310688][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1301.344342][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.372226][T19588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.420434][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.445357][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.474018][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.502769][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.518548][T19588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1301.539448][T19588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1301.561386][T19588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.631564][T19588] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.653425][ T27] audit: type=1800 audit(1785982027.536:1542): pid=20288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3501" name="in_ports" dev="configfs" ino=74135 res=0 errno=0 [ 1301.665647][T19588] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.693576][T19588] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.715075][T19588] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.877297][T19644] veth0_vlan: entered promiscuous mode [ 1301.932206][T19644] veth1_vlan: entered promiscuous mode [ 1302.196339][T11239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.218545][T11239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.310489][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.312400][T19644] veth0_macvtap: entered promiscuous mode [ 1302.355373][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.395212][T19644] veth1_macvtap: entered promiscuous mode [ 1302.445946][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.463196][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.474925][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.486529][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.500573][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.513000][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.523546][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.534662][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.547306][T19644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.572955][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.603878][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.620321][T20315] loop4: detected capacity change from 0 to 128 [ 1302.681961][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.753173][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.813247][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.881191][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.930276][T19644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1302.970185][T19644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.990687][T19644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.067990][T19644] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.077189][T19644] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.086658][T19644] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.096424][T19644] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.476812][ T7389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.511245][ T7389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.676666][ T27] audit: type=1800 audit(1785982029.566:1543): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3508" name="in_ports" dev="configfs" ino=74496 res=0 errno=0 [ 1303.677681][T11239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.807880][T11239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.921574][ T5832] usb 1-1: USB disconnect, device number 4 [ 1304.070126][T20348] loop4: detected capacity change from 0 to 1024 [ 1304.150862][T20348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.409133][T19569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.643456][T20381] loop6: detected capacity change from 0 to 512 [ 1305.735132][ T27] audit: type=1800 audit(1785982031.616:1544): pid=20374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3519" name="in_ports" dev="configfs" ino=74574 res=0 errno=0 [ 1305.822154][ T27] audit: type=1326 audit(1785982031.656:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1305.937299][ T27] audit: type=1326 audit(1785982031.656:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.055395][ T27] audit: type=1326 audit(1785982031.666:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.096453][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1306.116458][T20396] loop5: detected capacity change from 0 to 1024 [ 1306.177785][ T27] audit: type=1326 audit(1785982031.666:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.237801][T20396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1306.252413][ T27] audit: type=1326 audit(1785982031.666:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.332788][ T5832] usb 1-1: Dual-Role OTG device on HNP port [ 1306.363335][ T5832] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 1306.416233][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.442985][ T27] audit: type=1326 audit(1785982031.666:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.452542][ T5832] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1306.533354][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1306.540833][ T27] audit: type=1326 audit(1785982031.666:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.565710][ T5832] gspca_spca501: reg write: error -32 [ 1306.616624][ T5832] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1306.648681][ T5832] spca501: probe of 1-1:1.0 failed with error -22 [ 1306.696221][ T5832] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1306.735778][ T27] audit: type=1326 audit(1785982031.666:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.855855][ T27] audit: type=1326 audit(1785982031.666:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1306.943765][ T27] audit: type=1326 audit(1785982031.666:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1307.051910][ T27] audit: type=1326 audit(1785982031.666:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1307.143662][ T27] audit: type=1326 audit(1785982031.666:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1307.213492][ T27] audit: type=1326 audit(1785982031.666:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1307.300371][ T27] audit: type=1326 audit(1785982031.666:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20385 comm="syz.5.3522" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f633279e0d9 code=0x7ffc0000 [ 1307.378529][ T27] audit: type=1800 audit(1785982032.976:1559): pid=20430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3533" name="in_ports" dev="configfs" ino=74637 res=0 errno=0 [ 1309.035119][T20463] loop6: detected capacity change from 0 to 1024 [ 1309.081717][T20463] EXT4-fs: Ignoring removed bh option [ 1309.148730][T20463] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1309.312524][T20463] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 1309.355904][T20463] System zones: 0-1, 3-12 [ 1309.424304][T20463] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #3: block 1: comm syz.6.3544: lblock 1 mapped to illegal pblock 1 (length 1) [ 1309.507839][T20463] EXT4-fs (loop6): Remounting filesystem read-only [ 1309.539797][ T27] audit: type=1800 audit(1785982035.426:1560): pid=20478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3546" name="in_ports" dev="configfs" ino=74664 res=0 errno=0 [ 1309.575302][T20463] Quota error (device loop6): write_blk: dquota write failed [ 1309.595853][T20463] EXT4-fs (loop6): 1 orphan inode deleted [ 1309.658688][T20463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.857283][T19644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.442681][T20508] loop4: detected capacity change from 0 to 4096 [ 1310.487083][T20508] EXT4-fs: inline encryption not supported [ 1310.523868][T20508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1310.543479][T20508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1310.569372][T20508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=80ec0a8, mo2=0003] [ 1310.587654][T20508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1312.197826][T20544] loop5: detected capacity change from 0 to 128 [ 1312.632891][T19569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.932259][T20551] loop5: detected capacity change from 0 to 8192 [ 1312.991554][T20559] loop8: detected capacity change from 0 to 512 [ 1313.036536][T20559] EXT4-fs: Ignoring removed orlov option [ 1313.046956][T20551] loop5: p1 p2 p4 [ 1313.103633][T20551] loop5: p4 start 167772160 is beyond EOD, truncated [ 1313.128872][T20559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.165620][T20559] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.354345][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1313.354361][ T27] audit: type=1800 audit(1785982039.236:1563): pid=20568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3570" name="in_ports" dev="configfs" ino=75343 res=0 errno=0 [ 1313.414498][T20559] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #15: comm syz.8.3568: corrupted xattr block 33: invalid ea_ino [ 1313.515524][T20559] EXT4-fs (loop8): Remounting filesystem read-only [ 1313.582638][T20239] udevd[20239]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1313.599976][T20346] udevd[20346]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1313.648110][T19588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.931452][T20596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3577'. [ 1315.168424][T20619] loop8: detected capacity change from 0 to 512 [ 1315.265661][T20619] EXT4-fs (loop8): 1 truncate cleaned up [ 1315.312529][T20619] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.558539][T19588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.918220][T20630] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3588'. [ 1318.780908][T20700] loop6: detected capacity change from 0 to 2048 [ 1318.832362][T20700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1319.582866][T20700] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1319.977529][T20717] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.3605: bg 0: block 345: padding at end of block bitmap is not set [ 1320.176849][T20719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3611'. [ 1320.198832][T20717] EXT4-fs (loop6): Remounting filesystem read-only [ 1320.344713][ T11] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4952: inode #15: block 15: len 1: ext4_ext_map_blocks returned -5 [ 1320.683821][T19644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.801216][T20735] loop8: detected capacity change from 0 to 1024 [ 1320.857317][T20735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1320.986567][T20735] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1321.098648][T19588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1322.023930][T20790] xt_TCPMSS: Only works on TCP SYN packets [ 1322.048947][T20791] Format for deleting device is "id" (uint). [ 1323.165289][ T27] audit: type=1800 audit(1785982049.036:1564): pid=20814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3635" name="in_ports" dev="configfs" ino=75617 res=0 errno=0 [ 1323.712932][T20839] loop5: detected capacity change from 0 to 128 [ 1325.891125][T20887] loop8: detected capacity change from 0 to 512 [ 1325.955734][T20887] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1325.995705][T20887] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 1326.149461][ T2901] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1326.719648][T20906] batman_adv: batadv0: Adding interface: dummy0 [ 1326.730550][T20906] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1326.785863][T20906] batman_adv: batadv0: Interface activated: dummy0 [ 1326.806357][T20908] netlink: 'syz.8.3659': attribute type 1 has an invalid length. [ 1326.832793][T20909] batadv0: mtu less than device minimum [ 1326.860427][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.873683][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.886141][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.898502][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.911106][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.924027][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.932631][T20927] xt_hashlimit: size too large, truncated to 1048576 [ 1326.936556][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.953997][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1326.966549][T20909] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1327.012035][T20911] netlink: 'syz.8.3659': attribute type 1 has an invalid length. [ 1327.021356][T20912] netlink: 'syz.6.3660': attribute type 10 has an invalid length. [ 1327.671230][T20956] loop6: detected capacity change from 0 to 128 [ 1328.454878][ T5436] veth1_macvtap: left promiscuous mode [ 1328.846352][T20980] loop4: detected capacity change from 0 to 1024 [ 1328.933673][T20980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.995532][T20980] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1329.078627][T19569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.342633][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3677'. [ 1329.540867][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3678'. [ 1329.819302][T21003] loop6: detected capacity change from 0 to 128 [ 1329.826290][ T27] audit: type=1800 audit(1785982055.716:1565): pid=21003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3679" name="file2" dev="loop6" ino=1048855 res=0 errno=0 [ 1329.827753][T21003] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1329.827808][T21003] FAT-fs (loop6): Filesystem has been set read-only [ 1330.556776][T21024] loop8: detected capacity change from 0 to 1024 [ 1330.623429][T21024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.749115][T21024] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1330.868651][T19588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.147028][T21042] loop5: detected capacity change from 0 to 128 [ 1331.398966][T21050] loop8: detected capacity change from 0 to 128 [ 1331.465801][ T27] audit: type=1800 audit(1785982057.356:1566): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3689" name="file2" dev="loop8" ino=1048856 res=0 errno=0 [ 1331.466484][T21050] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1331.593627][T21050] FAT-fs (loop8): Filesystem has been set read-only [ 1332.034260][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3695'. [ 1332.065964][T21068] xt_hashlimit: size too large, truncated to 1048576 [ 1332.353961][T21073] bond2: entered promiscuous mode [ 1332.378347][T21073] bond2: entered allmulticast mode [ 1333.225741][T21097] ucma_write: process 126 (syz.8.3699) changed security contexts after opening file descriptor, this is not allowed. [ 1333.715544][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3705'. [ 1333.736109][T21114] loop8: detected capacity change from 0 to 1024 [ 1333.880303][T21114] hfsplus: unable to load nls mapping "cp37" [ 1333.896756][T21114] hfsplus: unable to parse mount options [ 1335.221898][T21111] bond3: entered promiscuous mode [ 1335.269106][T21127] loop6: detected capacity change from 0 to 128 [ 1335.295636][T21111] bond3: entered allmulticast mode [ 1335.608427][ T27] audit: type=1800 audit(1785982061.496:1567): pid=21127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3707" name="file2" dev="loop6" ino=1048857 res=0 errno=0 [ 1335.631004][T21127] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1335.727049][T21127] FAT-fs (loop6): Filesystem has been set read-only [ 1336.497644][T21142] loop8: detected capacity change from 0 to 1024 [ 1336.517314][T21142] EXT4-fs: inline encryption not supported [ 1336.525297][T21142] EXT4-fs: Ignoring removed bh option [ 1336.565023][T21142] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1336.672858][T21142] EXT4-fs error (device loop8): ext4_map_blocks:720: inode #3: block 1: comm syz.8.3708: lblock 1 mapped to illegal pblock 1 (length 1) [ 1336.751329][T21142] Quota error (device loop8): write_blk: dquota write failed [ 1336.775091][T21142] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1336.802947][T21142] EXT4-fs error (device loop8): ext4_acquire_dquot:6953: comm syz.8.3708: Failed to acquire dquot type 0 [ 1336.825003][T21148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3711'. [ 1336.835565][T21142] EXT4-fs error (device loop8): ext4_free_blocks:6694: comm syz.8.3708: Freeing blocks not in datazone - block = 0, count = 4096 [ 1336.856625][T21148] netlink: 'syz.5.3711': attribute type 7 has an invalid length. [ 1336.871100][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 1336.886505][T21142] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.3708: Invalid inode bitmap blk 0 in block_group 0 [ 1336.905746][T21142] EXT4-fs error (device loop8) in ext4_free_inode:363: Corrupt filesystem [ 1336.920916][T21148] gretap0: entered promiscuous mode [ 1336.946205][ T59] EXT4-fs error (device loop8): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1336.971244][T21142] EXT4-fs (loop8): 1 orphan inode deleted [ 1336.979285][ T59] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1337.001440][ T59] EXT4-fs error (device loop8): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 0 [ 1337.021508][T21142] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.055482][T21148] gretap0: left promiscuous mode [ 1337.137545][T21142] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1337.271242][T19588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.594317][ T27] audit: type=1800 audit(1785982063.476:1568): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3717" name="in_ports" dev="configfs" ino=76969 res=0 errno=0 [ 1337.787570][T21181] loop4: detected capacity change from 0 to 128 [ 1337.855449][T21181] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1337.865941][ T27] audit: type=1800 audit(1785982063.736:1569): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3720" name="file2" dev="loop4" ino=1048858 res=0 errno=0 [ 1337.901875][T21181] FAT-fs (loop4): Filesystem has been set read-only [ 1338.228827][T21192] loop6: detected capacity change from 0 to 512 [ 1338.275282][T21192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1338.340706][T21192] EXT4-fs error (device loop6): ext4_orphan_get:1430: comm syz.6.3722: bad orphan inode 131083 [ 1338.367101][T21192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.910553][ T27] audit: type=1800 audit(1785982064.786:1570): pid=21213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3729" name="in_ports" dev="configfs" ino=76590 res=0 errno=0 [ 1339.091042][T19644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.422500][T21240] loop8: detected capacity change from 0 to 128 [ 1340.582408][T21247] loop5: detected capacity change from 0 to 128 [ 1341.436889][ T27] audit: type=1800 audit(1785982067.326:1571): pid=21257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3739" name="in_ports" dev="configfs" ino=76645 res=0 errno=0 [ 1341.857528][ T27] audit: type=1800 audit(1785982067.746:1572): pid=21270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3745" name="in_ports" dev="configfs" ino=76660 res=0 errno=0 [ 1342.113906][T21282] loop4: detected capacity change from 0 to 1024 [ 1342.183760][T21282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1342.399314][T19569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1342.735276][ T27] audit: type=1800 audit(1785982068.616:1573): pid=21308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3753" name="in_ports" dev="configfs" ino=76698 res=0 errno=0 [ 1345.206178][ T27] audit: type=1800 audit(1785982071.096:1574): pid=21366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3764" name="in_ports" dev="configfs" ino=77142 res=0 errno=0 [ 1359.148953][T11385] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1359.162442][T11385] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1359.186224][T11385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1359.198087][T17140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1359.198247][T21387] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1359.206373][T17140] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1359.237507][T17140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1359.237597][T21387] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1359.264110][T17417] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1359.278136][T17417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1359.287515][T17417] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1359.294845][T17417] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1359.914426][T17417] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1359.925065][T17417] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1359.950648][T21387] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1359.960192][T21387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1359.969822][T21387] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1359.978212][T21387] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1361.297071][T21387] Bluetooth: hci4: command tx timeout [ 1361.375389][T21387] Bluetooth: hci5: command tx timeout [ 1361.863835][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.870360][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.015598][T21387] Bluetooth: hci6: command tx timeout [ 1362.145033][T21383] chnl_net:caif_netlink_parms(): no params data found [ 1362.579899][ T7388] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.756856][T21441] loop5: detected capacity change from 0 to 1024 [ 1362.878116][T21441] hfsplus: unable to load nls mapping "cp37" [ 1362.892928][T21441] hfsplus: unable to parse mount options [ 1362.899529][ T7388] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.136313][T21387] Bluetooth: hci4: command tx timeout [ 1364.142577][T21387] Bluetooth: hci5: command tx timeout [ 1364.145002][ T51] Bluetooth: hci6: command tx timeout [ 1364.371737][ T7388] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.877087][ T7388] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.975540][T21385] chnl_net:caif_netlink_parms(): no params data found [ 1365.013923][T21383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.027596][T21383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.046557][T21383] bridge_slave_0: entered allmulticast mode [ 1365.053846][T21383] bridge_slave_0: entered promiscuous mode [ 1365.087997][T21383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.097921][T21383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.108068][T21383] bridge_slave_1: entered allmulticast mode [ 1365.116195][T21383] bridge_slave_1: entered promiscuous mode [ 1365.210804][T21390] chnl_net:caif_netlink_parms(): no params data found [ 1365.245012][T21477] loop5: detected capacity change from 0 to 128 [ 1365.260271][T21383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.296499][T21383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.489479][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.497712][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.505106][T21385] bridge_slave_0: entered allmulticast mode [ 1365.512947][T21385] bridge_slave_0: entered promiscuous mode [ 1365.522750][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.530032][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.537559][T21385] bridge_slave_1: entered allmulticast mode [ 1365.545363][T21385] bridge_slave_1: entered promiscuous mode [ 1365.666776][T21383] team0: Port device team_slave_0 added [ 1365.686418][T21383] team0: Port device team_slave_1 added [ 1366.032766][T21385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.111432][T21383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.118532][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.158117][T21383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.172111][T21385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1366.185375][ T51] Bluetooth: hci5: command tx timeout [ 1366.191678][ T51] Bluetooth: hci4: command tx timeout [ 1366.198974][T17417] Bluetooth: hci6: command tx timeout [ 1366.224568][T21390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.232282][T21390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.240119][T21390] bridge_slave_0: entered allmulticast mode [ 1366.247654][T21390] bridge_slave_0: entered promiscuous mode [ 1366.264661][T21383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.272610][T21383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.299956][T21383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.323900][T21390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.352853][T21390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.365414][T21390] bridge_slave_1: entered allmulticast mode [ 1366.372641][T21390] bridge_slave_1: entered promiscuous mode [ 1366.449197][T21385] team0: Port device team_slave_0 added [ 1366.817286][T21509] loop5: detected capacity change from 0 to 1024 [ 1366.845860][T21390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1366.858810][T21385] team0: Port device team_slave_1 added [ 1366.896291][T21509] hfsplus: unable to load nls mapping "cp37" [ 1366.902427][T21509] hfsplus: unable to parse mount options [ 1368.256459][T17417] Bluetooth: hci4: command tx timeout [ 1368.261903][T17417] Bluetooth: hci6: command tx timeout [ 1368.267825][ T51] Bluetooth: hci5: command tx timeout [ 1368.669561][T21390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.724959][T21385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.733194][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.763039][T21385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.787457][T21385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.794447][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1368.859572][T21385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.161338][T21525] tipc: Started in network mode [ 1369.174535][T21525] tipc: Node identity 3618425d6535, cluster identity 4711 [ 1369.183709][T21525] tipc: Enabled bearer , priority 0 [ 1369.201726][T21518] syzkaller0: entered promiscuous mode [ 1369.214274][T21518] syzkaller0: entered allmulticast mode [ 1369.279596][T21383] hsr_slave_0: entered promiscuous mode [ 1369.306496][T21383] hsr_slave_1: entered promiscuous mode [ 1369.353612][T21383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1369.363828][T21383] Cannot create hsr debugfs directory [ 1369.390069][T21516] tipc: Resetting bearer [ 1369.413026][T21390] team0: Port device team_slave_0 added [ 1369.608909][T21515] tipc: Resetting bearer [ 1369.736233][T21515] tipc: Disabling bearer [ 1369.951669][T21390] team0: Port device team_slave_1 added [ 1370.105094][T21555] loop5: detected capacity change from 0 to 1764 [ 1370.653231][T21385] hsr_slave_0: entered promiscuous mode [ 1370.688014][T21577] loop5: detected capacity change from 0 to 1024 [ 1370.706004][T21385] hsr_slave_1: entered promiscuous mode [ 1370.765462][T21385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.788192][T21385] Cannot create hsr debugfs directory [ 1370.798538][T21577] hfsplus: unable to load nls mapping "cp37" [ 1370.804697][T21577] hfsplus: unable to parse mount options [ 1372.016791][T21390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.024604][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.126083][T21390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.169345][T21390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.185582][T21390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.245252][T21390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.060814][T21390] hsr_slave_0: entered promiscuous mode [ 1373.076464][ T27] audit: type=1326 audit(1785982098.966:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21592 comm="syz.5.3790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f633279e0d9 code=0x0 [ 1373.145673][T21390] hsr_slave_1: entered promiscuous mode [ 1373.185298][T21390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.192910][T21390] Cannot create hsr debugfs directory [ 1377.305421][ T7388] hsr_slave_0: left promiscuous mode [ 1377.385255][ T7388] hsr_slave_1: left promiscuous mode [ 1377.465315][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1377.472920][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1377.515980][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1377.523474][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1377.577518][ T7388] bridge_slave_1: left allmulticast mode [ 1377.583204][ T7388] bridge_slave_1: left promiscuous mode [ 1377.589371][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.676101][ T7388] bridge_slave_0: left allmulticast mode [ 1377.681793][ T7388] bridge_slave_0: left promiscuous mode [ 1377.687650][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.985618][ T7388] veth1_macvtap: left promiscuous mode [ 1377.991231][ T7388] veth0_macvtap: left promiscuous mode [ 1377.997028][ T7388] veth1_vlan: left promiscuous mode [ 1378.002315][ T7388] veth0_vlan: left promiscuous mode [ 1379.162963][T21663] loop5: detected capacity change from 0 to 512 [ 1379.193936][T21663] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1379.202148][T21663] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1379.210361][T21663] System zones: 0-1, 15-15, 18-18, 34-34 [ 1379.218229][T21663] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1379.224664][T21663] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1379.234181][T21663] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1379.248876][T21663] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1379.258113][T21663] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3801: bg 0: block 40: padding at end of block bitmap is not set [ 1379.272868][T21663] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1379.281969][T21663] EXT4-fs (loop5): 1 truncate cleaned up [ 1379.288922][T21663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1379.360409][T21663] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1379.447051][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.447204][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1381.726468][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1381.965910][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1382.275735][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1382.788093][T21674] loop5: detected capacity change from 0 to 1024 [ 1382.795845][T21674] EXT4-fs: Ignoring removed bh option [ 1382.814594][T21674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1382.846095][ T27] audit: type=1800 audit(1785982108.736:1576): pid=21674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3805" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1383.052283][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1384.347309][ T7388] bond0 (unregistering): Released all slaves [ 1385.406276][T21698] loop5: detected capacity change from 0 to 1024 [ 1385.414769][T21698] EXT4-fs: Ignoring removed bh option [ 1385.445810][T21698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1385.472248][ T27] audit: type=1800 audit(1785982111.356:1577): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3811" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1385.558057][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1385.859903][T21705] syzkaller0: entered promiscuous mode [ 1385.865780][T21705] syzkaller0: entered allmulticast mode [ 1386.506933][T21712] netlink: 'syz.5.3815': attribute type 1 has an invalid length. [ 1387.162580][T21717] loop5: detected capacity change from 0 to 1024 [ 1387.177009][T21717] EXT4-fs: Ignoring removed bh option [ 1387.213957][T21717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1387.244924][ T27] audit: type=1800 audit(1785982113.126:1578): pid=21717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3817" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 1387.319846][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1387.998589][T21385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1388.768385][T21385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1388.831233][T21385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1389.008713][ T7388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.245346][T21385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1389.448017][ T7388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.896726][ T7388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.247501][ T7388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.556203][T21390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1390.618695][T21390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1390.719995][T21390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1390.773877][T21385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.841324][T21390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1391.000271][T21385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.190000][ T7388] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.239756][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.246938][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.262872][T21383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1391.319349][T21383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1391.367912][T21383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1391.407732][T21383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1391.578390][ T7388] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.638848][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.646067][T11239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.055987][ T7388] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.148698][T21765] syzkaller1: entered promiscuous mode [ 1392.154216][T21765] syzkaller1: entered allmulticast mode [ 1392.310154][ T7388] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.808273][T21390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1392.848921][T21390] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.997295][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.004466][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.029964][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.037218][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.199760][ T7388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.438342][ T7388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.504588][T21385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.524208][T21383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.678365][ T7388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.114944][ T7388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.131220][T21786] loop5: detected capacity change from 0 to 512 [ 1394.143653][T21786] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1394.178533][T21383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.230706][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.237937][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.318286][T21248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.325493][T21248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.395947][ T7389] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1394.426771][T21385] veth0_vlan: entered promiscuous mode [ 1394.559602][T21385] veth1_vlan: entered promiscuous mode [ 1394.732622][T21385] veth0_macvtap: entered promiscuous mode [ 1394.756727][T21390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.766985][T21385] veth1_macvtap: entered promiscuous mode [ 1394.823209][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.850935][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.869525][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.881180][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.892944][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.904238][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.914183][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.924847][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.937249][T21385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.033148][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.047675][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.059267][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.072191][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.082194][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.099692][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.114958][T21385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1395.134253][T21385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.148439][T21385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.416093][T21385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.424859][T21385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.444029][T21385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.464873][T21385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.599603][T21383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.614117][T21390] veth0_vlan: entered promiscuous mode [ 1396.529970][T21823] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3844'. [ 1396.559302][T21826] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3844'. [ 1397.487637][T21390] veth1_vlan: entered promiscuous mode [ 1397.587122][ T27] audit: type=1800 audit(1785982123.476:1579): pid=21851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3848" name="in_ports" dev="configfs" ino=79736 res=0 errno=0 [ 1397.826275][T21383] veth0_vlan: entered promiscuous mode [ 1397.875869][T21383] veth1_vlan: entered promiscuous mode [ 1397.895715][ T2102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1397.903577][ T2102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.775532][T21390] veth0_macvtap: entered promiscuous mode [ 1399.259622][T21390] veth1_macvtap: entered promiscuous mode [ 1399.344141][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.356575][T21383] veth0_macvtap: entered promiscuous mode [ 1399.379497][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.707658][T21383] veth1_macvtap: entered promiscuous mode [ 1399.745295][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.763846][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.776342][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.795782][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.815182][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.835231][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.846222][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.863975][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.877453][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1399.896592][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1399.914963][T21390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.305996][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.325481][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.349943][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.365235][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.375371][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.413893][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.450353][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.482824][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.509618][T21390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1400.545234][T21390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1400.560166][T21390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.579910][T21390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.605296][T21390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.632120][T21390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.645171][T21390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.776581][T21914] 9pnet_fd: Insufficient options for proto=fd [ 1401.571787][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.602644][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.618434][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.629209][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.654973][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.667369][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.677613][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.688275][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.713361][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.728283][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.738332][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1401.745007][T21958] loop5: detected capacity change from 0 to 512 [ 1401.749010][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.750695][T21383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1401.784858][T21958] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1401.795799][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.807299][T21958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1401.815271][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.815511][T21958] System zones: 0-1, 15-15, 18-18, 34-34 [ 1401.832268][T21958] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1401.834272][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.838831][T21958] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 1401.858453][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.858474][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.858489][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.858501][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.858512][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.858533][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.858544][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.858555][T21383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1401.858568][T21383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1401.860250][T21383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1401.869400][T21958] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1401.974240][T21958] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 1401.983680][T21958] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.3862: bg 0: block 40: padding at end of block bitmap is not set [ 1402.002157][T21958] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1402.011540][T21958] EXT4-fs (loop5): 1 truncate cleaned up [ 1402.033943][T21958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1402.167624][T16509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.280747][T21967] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3863'. [ 1402.578711][T21383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.610098][T21383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.635233][T21383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.658639][ T27] audit: type=1800 audit(1785982128.536:1580): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3866" name="in_ports" dev="configfs" ino=80046 res=0 errno=0 [ 1402.685515][T21383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1402.996261][T21996] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3871'. [ 1404.118835][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.145218][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.982692][ T7389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.022437][ T7389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.043607][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1405.085178][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.111230][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.382011][T22070] loop5: detected capacity change from 0 to 1024 [ 1405.403657][T22070] EXT4-fs: quotafile must be on filesystem root [ 1405.721096][T21248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.743491][T21248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.603467][T22114] loop5: detected capacity change from 0 to 256 [ 1406.652902][T22114] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1410.338429][ T7388] hsr_slave_0: left promiscuous mode [ 1410.445905][ T7388] hsr_slave_1: left promiscuous mode [ 1410.487581][T22171] loop3: detected capacity change from 0 to 1024 [ 1410.505987][T22171] EXT4-fs: Ignoring removed bh option [ 1410.540970][T22171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1410.565352][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.572831][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.623591][ T27] audit: type=1800 audit(1785982136.506:1581): pid=22171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3906" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1410.646490][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.653956][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.718221][ T7388] bridge_slave_1: left allmulticast mode [ 1410.740871][ T7388] bridge_slave_1: left promiscuous mode [ 1410.750918][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.793286][T21390] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1410.827218][ T7388] bridge_slave_0: left allmulticast mode [ 1410.833680][ T7388] bridge_slave_0: left promiscuous mode [ 1410.851627][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.096193][ T7388] hsr_slave_0: left promiscuous mode [ 1411.177110][ T7388] hsr_slave_1: left promiscuous mode [ 1411.275399][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1411.282874][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1411.355952][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.363426][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1411.435884][ T7388] bridge_slave_1: left allmulticast mode [ 1411.444635][ T7388] bridge_slave_1: left promiscuous mode [ 1411.465483][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.576534][ T7388] bridge_slave_0: left allmulticast mode [ 1411.582244][ T7388] bridge_slave_0: left promiscuous mode [ 1411.605515][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.682587][T22203] net_ratelimit: 10 callbacks suppressed [ 1411.682605][T22203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1411.885408][ T7388] hsr_slave_0: left promiscuous mode [ 1411.938314][ T7388] hsr_slave_1: left promiscuous mode [ 1412.016596][ T7388] batman_adv: batadv0: Interface deactivated: dummy0 [ 1412.025295][ T7388] batman_adv: batadv0: Removing interface: dummy0 [ 1412.074693][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.093507][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.146210][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.154985][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.196058][ T7388] bridge_slave_1: left allmulticast mode [ 1412.211960][ T7388] bridge_slave_1: left promiscuous mode [ 1412.224636][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.297861][ T7388] bridge_slave_0: left allmulticast mode [ 1412.303583][ T7388] bridge_slave_0: left promiscuous mode [ 1412.309856][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.777202][ T7388] veth1_macvtap: left promiscuous mode [ 1412.783814][ T7388] veth0_macvtap: left promiscuous mode [ 1412.790394][ T7388] veth1_vlan: left promiscuous mode [ 1412.796091][ T7388] veth0_vlan: left promiscuous mode [ 1413.190006][ T7388] veth1_macvtap: left promiscuous mode [ 1413.203042][ T7388] veth0_macvtap: left promiscuous mode [ 1413.208804][ T7388] veth1_vlan: left promiscuous mode [ 1413.214283][ T7388] veth0_vlan: left promiscuous mode [ 1413.645534][ T7388] veth1_macvtap: left promiscuous mode [ 1413.651179][ T7388] veth0_macvtap: left promiscuous mode [ 1413.657001][ T7388] veth1_vlan: left promiscuous mode [ 1413.662302][ T7388] veth0_vlan: left promiscuous mode [ 1417.699290][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1417.976338][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1418.256390][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1418.615644][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.778036][ T7388] bond0 (unregistering): Released all slaves [ 1421.022440][T17417] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1421.037878][T17417] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1421.052195][T17417] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1421.061662][T17417] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1421.074307][T17417] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1421.081786][T17417] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1421.189691][ T7388] bond2 (unregistering): Released all slaves [ 1421.206748][ T7388] bond1 (unregistering): Released all slaves [ 1423.135443][T17417] Bluetooth: hci1: command tx timeout [ 1423.299775][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.307928][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.426626][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1424.729093][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1425.006061][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.216120][T17417] Bluetooth: hci1: command tx timeout [ 1425.336851][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.526141][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1425.541045][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1425.564251][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1425.573459][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1425.583518][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1425.591076][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1426.543250][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1426.558440][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1426.569518][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1426.580368][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1426.588439][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1426.596051][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1427.050360][T17417] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1427.074938][T17417] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1427.084571][T17417] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1427.093150][T17417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1427.101808][T17417] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1427.133340][T17417] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1427.300354][T17417] Bluetooth: hci1: command tx timeout [ 1427.630219][ T7388] bond0 (unregistering): Released all slaves [ 1427.705374][T17417] Bluetooth: hci2: command tx timeout [ 1428.059874][ T7388] bond2 (unregistering): Released all slaves [ 1428.075712][ T7388] bond1 (unregistering): Released all slaves [ 1428.655443][T17417] Bluetooth: hci3: command tx timeout [ 1429.215502][T17417] Bluetooth: hci7: command tx timeout [ 1429.375450][T17417] Bluetooth: hci1: command tx timeout [ 1429.775517][T17417] Bluetooth: hci2: command tx timeout [ 1430.735441][T17417] Bluetooth: hci3: command tx timeout [ 1431.198420][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1431.295444][T17417] Bluetooth: hci7: command tx timeout [ 1431.497684][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1431.795879][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.865330][T17417] Bluetooth: hci2: command tx timeout [ 1432.106395][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1432.815271][T17417] Bluetooth: hci3: command tx timeout [ 1433.375592][T17417] Bluetooth: hci7: command tx timeout [ 1433.935601][T17417] Bluetooth: hci2: command tx timeout [ 1434.348008][ T7388] bond0 (unregistering): Released all slaves [ 1434.895316][T17417] Bluetooth: hci3: command tx timeout [ 1435.457499][T17417] Bluetooth: hci7: command tx timeout [ 1437.319632][T22282] chnl_net:caif_netlink_parms(): no params data found [ 1437.359178][T22292] chnl_net:caif_netlink_parms(): no params data found [ 1437.390558][T22287] chnl_net:caif_netlink_parms(): no params data found [ 1437.661309][T22295] chnl_net:caif_netlink_parms(): no params data found [ 1437.874794][T22287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.888904][T22287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.896737][T22287] bridge_slave_0: entered allmulticast mode [ 1437.903540][T22287] bridge_slave_0: entered promiscuous mode [ 1437.911956][T22292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.938238][T22292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.946523][T22292] bridge_slave_0: entered allmulticast mode [ 1437.953394][T22292] bridge_slave_0: entered promiscuous mode [ 1438.303545][T22287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.315254][T22287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.322532][T22287] bridge_slave_1: entered allmulticast mode [ 1438.332725][T22287] bridge_slave_1: entered promiscuous mode [ 1438.363738][T22292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.371302][T22292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.380559][T22292] bridge_slave_1: entered allmulticast mode [ 1438.388242][T22292] bridge_slave_1: entered promiscuous mode [ 1438.473785][T22282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.482333][T22282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.495501][T22282] bridge_slave_0: entered allmulticast mode [ 1438.502779][T22282] bridge_slave_0: entered promiscuous mode [ 1438.537978][T22282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.565230][T22282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.572623][T22282] bridge_slave_1: entered allmulticast mode [ 1438.596722][T22282] bridge_slave_1: entered promiscuous mode [ 1438.606925][T22287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.629043][T22287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.690249][T22292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.715742][T22292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.849113][T22295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.857349][T22295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.864588][T22295] bridge_slave_0: entered allmulticast mode [ 1438.874247][T22295] bridge_slave_0: entered promiscuous mode [ 1438.884945][T22282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.927403][T22292] team0: Port device team_slave_0 added [ 1438.941015][T22287] team0: Port device team_slave_0 added [ 1439.239221][T22295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.250352][T22295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.259046][T22295] bridge_slave_1: entered allmulticast mode [ 1439.266126][T22295] bridge_slave_1: entered promiscuous mode [ 1439.276611][T22282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.286833][T22292] team0: Port device team_slave_1 added [ 1439.293893][T22287] team0: Port device team_slave_1 added [ 1439.371930][T22282] team0: Port device team_slave_0 added [ 1439.394719][T22282] team0: Port device team_slave_1 added [ 1439.487596][T22287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.494583][T22287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.534918][T22287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.549575][T22295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.574068][T22295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.594757][T22292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.624428][T22292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.650771][T22292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.677215][T22282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.684205][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.712354][T22282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.737754][T22287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.744726][T22287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.781227][T22287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.819215][T22292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.826278][T22292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.858410][T22292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.916097][T22282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.923087][T22282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.949849][T22282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.160221][T22295] team0: Port device team_slave_0 added [ 1440.350578][T22295] team0: Port device team_slave_1 added [ 1440.470796][T22292] hsr_slave_0: entered promiscuous mode [ 1440.524080][T22292] hsr_slave_1: entered promiscuous mode [ 1440.640547][T22287] hsr_slave_0: entered promiscuous mode [ 1440.676979][T22287] hsr_slave_1: entered promiscuous mode [ 1440.715474][T22287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1440.723096][T22287] Cannot create hsr debugfs directory [ 1440.740843][T22295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.748417][T22295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.774579][T22295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.787745][T22295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.794713][T22295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.821812][T22295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.951158][T22282] hsr_slave_0: entered promiscuous mode [ 1441.003066][T22282] hsr_slave_1: entered promiscuous mode [ 1441.035454][T22282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.043950][T22282] Cannot create hsr debugfs directory [ 1441.521219][T22295] hsr_slave_0: entered promiscuous mode [ 1441.566203][T22295] hsr_slave_1: entered promiscuous mode [ 1441.605363][T22295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1441.613041][T22295] Cannot create hsr debugfs directory [ 1443.761771][ T7388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.341082][ T7388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.711294][ T7388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.964834][ T7388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.114256][T22292] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1445.310021][T22292] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1445.358267][T22292] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1445.418959][T22292] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1445.982473][ T7388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.662362][ T7388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.889207][ T7388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.969717][T22292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.158432][ T7388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.249450][T22292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.289077][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.296313][T11239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.318589][T22287] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1447.348688][T22287] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1447.854349][T22287] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1447.894629][T22287] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1447.959222][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.966364][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.096526][ T7388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.837767][ T7388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.067155][ T7388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.308246][ T7388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.391958][T22287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1450.414412][T22292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.512717][T22287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.558887][T22282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1450.769183][T22282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1450.855143][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.862332][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.997632][T22282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1451.064218][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.071868][ T7389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1451.196178][T22282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1451.610420][T22292] veth0_vlan: entered promiscuous mode [ 1451.674290][T22292] veth1_vlan: entered promiscuous mode [ 1451.859303][T22295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1451.915881][T22295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1451.966896][T22295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1452.765398][T22295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1453.138515][T22292] veth0_macvtap: entered promiscuous mode [ 1453.157052][T22292] veth1_macvtap: entered promiscuous mode [ 1453.507796][T22287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.940797][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.955005][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.969732][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.980486][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.995256][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.005861][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.017094][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1454.027731][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.038968][T22292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1454.051222][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.062204][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.072480][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.087585][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.098613][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.109356][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.119318][T22292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1454.129884][T22292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1454.142369][T22292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1454.157095][T22282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.166247][T22292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.174968][T22292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.193642][T22292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.202737][T22292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.820001][T22282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.162311][T21248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.169508][T21248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1455.510491][T21248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.517678][T21248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1455.920669][T22295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.261022][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.278858][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.683572][T22287] veth0_vlan: entered promiscuous mode [ 1456.689278][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.701563][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.714610][T22295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.942543][ T27] audit: type=1326 audit(1785982182.826:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1456.967041][ T27] audit: type=1326 audit(1785982182.826:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1456.992808][ T27] audit: type=1326 audit(1785982182.826:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.018947][ T27] audit: type=1326 audit(1785982182.826:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.043834][ T27] audit: type=1326 audit(1785982182.826:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.069486][ T27] audit: type=1326 audit(1785982182.826:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.112020][ T27] audit: type=1326 audit(1785982182.826:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.137642][ T27] audit: type=1326 audit(1785982182.826:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.161902][T22649] loop9: detected capacity change from 0 to 1024 [ 1457.162910][T22649] EXT4-fs: Ignoring removed bh option [ 1457.174740][ T27] audit: type=1326 audit(1785982182.826:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22645 comm="syz.9.3913" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd1ab9e0d9 code=0x7ffc0000 [ 1457.223817][T22649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1457.255020][ T27] audit: type=1800 audit(1785982183.136:1591): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3915" name="file2" dev="loop9" ino=16 res=0 errno=0 [ 1457.338639][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.345836][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.431323][T22287] veth1_vlan: entered promiscuous mode [ 1457.439655][T22292] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1457.478119][ T2102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.485354][ T2102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.731748][T22663] loop9: detected capacity change from 0 to 128 [ 1457.779158][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.795701][T22663] FAT-fs (loop9): Filesystem has been set read-only [ 1457.802591][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.815278][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.826776][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.838775][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.849575][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.862418][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.873107][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.894116][T22663] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1457.908599][T22666] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 1458.100289][T22287] veth0_macvtap: entered promiscuous mode [ 1458.212077][T22287] veth1_macvtap: entered promiscuous mode [ 1458.821214][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.855543][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.867689][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.881857][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.892040][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.902968][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.913851][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.924938][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.935419][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.946791][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.958682][T22287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.970500][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.984110][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.994263][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.012949][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.022874][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.042213][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.065304][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.088353][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.107443][T22287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1459.124847][T22287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.154838][T22287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.249611][T22287] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.285333][T22287] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.294086][T22287] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.333781][T22686] loop9: detected capacity change from 0 to 256 [ 1459.335496][T22287] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.451878][T22686] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1459.790501][T22282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.609832][T22295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.436684][ T7388] hsr_slave_0: left promiscuous mode [ 1461.514271][T22732] 9pnet_fd: p9_fd_create_tcp (22732): problem binding to privport [ 1461.725643][ T7388] hsr_slave_1: left promiscuous mode [ 1461.946510][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1461.974688][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.092737][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.139608][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.205735][ T7388] bridge_slave_1: left allmulticast mode [ 1462.211425][ T7388] bridge_slave_1: left promiscuous mode [ 1462.230852][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.326250][ T7388] bridge_slave_0: left allmulticast mode [ 1462.332026][ T7388] bridge_slave_0: left promiscuous mode [ 1462.339724][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.585488][ T7388] hsr_slave_0: left promiscuous mode [ 1462.685621][ T7388] hsr_slave_1: left promiscuous mode [ 1462.765467][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1462.773049][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.806723][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1462.814243][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.865708][ T7388] bridge_slave_1: left allmulticast mode [ 1462.871378][ T7388] bridge_slave_1: left promiscuous mode [ 1462.877198][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.965715][ T7388] bridge_slave_0: left allmulticast mode [ 1462.971444][ T7388] bridge_slave_0: left promiscuous mode [ 1462.980425][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.235242][ T7388] hsr_slave_0: left promiscuous mode [ 1463.315418][ T7388] hsr_slave_1: left promiscuous mode [ 1463.395381][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.402851][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.457538][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.467127][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.515997][ T7388] bridge_slave_1: left allmulticast mode [ 1463.521697][ T7388] bridge_slave_1: left promiscuous mode [ 1463.527521][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.617613][ T7388] bridge_slave_0: left allmulticast mode [ 1463.623296][ T7388] bridge_slave_0: left promiscuous mode [ 1463.630430][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.995641][ T7388] veth1_macvtap: left promiscuous mode [ 1464.001245][ T7388] veth0_macvtap: left promiscuous mode [ 1464.007112][ T7388] veth1_vlan: left promiscuous mode [ 1464.012421][ T7388] veth0_vlan: left promiscuous mode [ 1464.405448][ T7388] veth1_macvtap: left promiscuous mode [ 1464.411027][ T7388] veth0_macvtap: left promiscuous mode [ 1464.417354][ T7388] veth1_vlan: left promiscuous mode [ 1464.422679][ T7388] veth0_vlan: left promiscuous mode [ 1464.805413][ T7388] veth1_macvtap: left promiscuous mode [ 1464.810941][ T7388] veth0_macvtap: left promiscuous mode [ 1464.819355][ T7388] veth1_vlan: left promiscuous mode [ 1464.824922][ T7388] veth0_vlan: left promiscuous mode [ 1467.535426][ C1] [ 1467.537796][ C1] ================================ [ 1467.542887][ C1] WARNING: inconsistent lock state [ 1467.547992][ C1] syzkaller #0 Not tainted [ 1467.552384][ C1] -------------------------------- [ 1467.557473][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1467.564306][ C1] ksoftirqd/1/22 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1467.570556][ C1] ffff888058f14130 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1467.579961][ C1] {SOFTIRQ-ON-W} state was registered at: [ 1467.585780][ C1] lock_acquire+0x19e/0x420 [ 1467.590538][ C1] lock_sock_nested+0x48/0x100 [ 1467.595397][ C1] x25_connect+0x5c/0x890 [ 1467.599812][ C1] __sys_connect+0x3da/0x470 [ 1467.604480][ C1] __x64_sys_connect+0x7a/0x90 [ 1467.609333][ C1] do_syscall_64+0x55/0xb0 [ 1467.613838][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1467.619828][ C1] irq event stamp: 6369456 [ 1467.624230][ C1] hardirqs last enabled at (6369456): [] __local_bh_enable_ip+0x13a/0x1c0 [ 1467.634391][ C1] hardirqs last disabled at (6369455): [] __local_bh_enable_ip+0xdb/0x1c0 [ 1467.644462][ C1] softirqs last enabled at (6369400): [] run_ksoftirqd+0xa8/0x100 [ 1467.653959][ C1] softirqs last disabled at (6369405): [] run_ksoftirqd+0xa8/0x100 [ 1467.663429][ C1] [ 1467.663429][ C1] other info that might help us debug this: [ 1467.671488][ C1] Possible unsafe locking scenario: [ 1467.671488][ C1] [ 1467.678935][ C1] CPU0 [ 1467.682206][ C1] ---- [ 1467.685524][ C1] lock(sk_lock-AF_X25); [ 1467.689853][ C1] [ 1467.693295][ C1] lock(sk_lock-AF_X25); [ 1467.697790][ C1] [ 1467.697790][ C1] *** DEADLOCK *** [ 1467.697790][ C1] [ 1467.705921][ C1] 1 lock held by ksoftirqd/1/22: [ 1467.710862][ C1] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: netif_receive_skb_core+0x34/0x230 [ 1467.720892][ C1] [ 1467.720892][ C1] stack backtrace: [ 1467.726789][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1467.734091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1467.744165][ C1] Call Trace: [ 1467.747488][ C1] [ 1467.750413][ C1] dump_stack_lvl+0x18c/0x250 [ 1467.755099][ C1] ? show_regs_print_info+0x20/0x20 [ 1467.760295][ C1] ? ret_from_fork_asm+0x11/0x20 [ 1467.765282][ C1] valid_state+0x13b/0x1d0 [ 1467.769698][ C1] mark_lock_irq+0xad/0x900 [ 1467.774259][ C1] ? stack_trace_save+0xaa/0x100 [ 1467.779246][ C1] ? save_trace+0xcd0/0xcd0 [ 1467.783775][ C1] ? mark_lock+0x94/0x320 [ 1467.788107][ C1] ? save_trace+0x5d/0xcd0 [ 1467.792525][ C1] mark_lock+0x208/0x320 [ 1467.796784][ C1] __lock_acquire+0xcfc/0x7d80 [ 1467.801549][ C1] ? verify_lock_unused+0x140/0x140 [ 1467.806739][ C1] ? verify_lock_unused+0x140/0x140 [ 1467.811931][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1467.817904][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1467.823013][ C1] ? lock_chain_count+0x20/0x20 [ 1467.827858][ C1] lock_acquire+0x19e/0x420 [ 1467.832356][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1467.837466][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1467.842832][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1467.848194][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1467.853392][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1467.858834][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1467.863679][ C1] lock_sock_nested+0x48/0x100 [ 1467.868433][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1467.873546][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1467.878572][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1467.883947][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1467.889405][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1467.894954][ C1] ? x25_device_event+0x280/0x280 [ 1467.899978][ C1] netif_receive_skb_core+0x16a/0x230 [ 1467.905366][ C1] lapbeth_napi_poll+0x42/0x80 [ 1467.910147][ C1] __napi_poll+0xbb/0x460 [ 1467.914486][ C1] net_rx_action+0x65f/0xcc0 [ 1467.919079][ C1] ? net_tx_action+0x950/0x950 [ 1467.923837][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1467.929814][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1467.935110][ C1] ? lock_chain_count+0x20/0x20 [ 1467.939971][ C1] handle_softirqs+0x27d/0x820 [ 1467.944742][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1467.949503][ C1] ? do_softirq+0x1a0/0x1a0 [ 1467.953998][ C1] run_ksoftirqd+0xa8/0x100 [ 1467.958491][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1467.963681][ C1] ? takeover_tasklets+0x770/0x770 [ 1467.968834][ C1] ? takeover_tasklets+0x770/0x770 [ 1467.973956][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1467.979270][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1467.984219][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1467.989330][ C1] kthread+0x2fa/0x390 [ 1467.993483][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1467.999891][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1468.004479][ C1] ret_from_fork+0x48/0x80 [ 1468.008895][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1468.013481][ C1] ret_from_fork_asm+0x11/0x20 [ 1468.018290][ C1] [ 1468.021369][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3546 [ 1468.030183][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 22, name: ksoftirqd/1 [ 1468.039156][ C1] preempt_count: 100, expected: 0 [ 1468.044173][ C1] RCU nest depth: 1, expected: 0 [ 1468.049109][ C1] INFO: lockdep is turned off. [ 1468.053854][ C1] Preemption disabled at: [ 1468.053860][ C1] [] handle_softirqs+0x101/0x820 [ 1468.064713][ C1] CPU: 1 PID: 22 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 1468.071988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1468.082533][ C1] Call Trace: [ 1468.085803][ C1] [ 1468.088725][ C1] dump_stack_lvl+0x18c/0x250 [ 1468.093396][ C1] ? show_regs_print_info+0x20/0x20 [ 1468.098603][ C1] ? load_image+0x420/0x420 [ 1468.103219][ C1] ? handle_softirqs+0x101/0x820 [ 1468.108155][ C1] __might_resched+0x48d/0x5f0 [ 1468.112915][ C1] ? handle_softirqs+0x101/0x820 [ 1468.117843][ C1] ? __might_sleep+0xe0/0xe0 [ 1468.122418][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1468.127778][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1468.133160][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1468.138514][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1468.143985][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1468.148844][ C1] lock_sock_nested+0x5d/0x100 [ 1468.153611][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1468.158560][ C1] x25_lapb_receive_frame+0x1a7/0xef0 [ 1468.163924][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1468.169382][ C1] ? netif_receive_skb_core+0x34/0x230 [ 1468.174843][ C1] ? x25_device_event+0x280/0x280 [ 1468.179860][ C1] netif_receive_skb_core+0x16a/0x230 [ 1468.185240][ C1] lapbeth_napi_poll+0x42/0x80 [ 1468.190033][ C1] __napi_poll+0xbb/0x460 [ 1468.194393][ C1] net_rx_action+0x65f/0xcc0 [ 1468.198978][ C1] ? net_tx_action+0x950/0x950 [ 1468.203738][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1468.209718][ C1] ? __bpf_trace_tasklet+0x160/0x160 [ 1468.214994][ C1] ? lock_chain_count+0x20/0x20 [ 1468.219838][ C1] handle_softirqs+0x27d/0x820 [ 1468.224624][ C1] ? run_ksoftirqd+0xa8/0x100 [ 1468.229324][ C1] ? do_softirq+0x1a0/0x1a0 [ 1468.233855][ C1] run_ksoftirqd+0xa8/0x100 [ 1468.238350][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1468.243541][ C1] ? takeover_tasklets+0x770/0x770 [ 1468.248645][ C1] ? takeover_tasklets+0x770/0x770 [ 1468.253756][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 1468.258950][ C1] smpboot_thread_fn+0x651/0x9f0 [ 1468.263889][ C1] ? smpboot_thread_fn+0x4d/0x9f0 [ 1468.268992][ C1] kthread+0x2fa/0x390 [ 1468.273048][ C1] ? smpboot_unregister_percpu_thread+0x2a0/0x2a0 [ 1468.280099][ C1] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1468.284770][ C1] ret_from_fork+0x48/0x80 [ 1468.289277][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1468.293868][ C1] ret_from_fork_asm+0x11/0x20 [ 1468.298723][ C1] [ 1469.696283][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1469.966831][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1470.255662][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.555813][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.607576][ T7388] bond0 (unregistering): Released all slaves [ 1475.917028][ T7388] team0 (unregistering): Port device team_slave_1 removed [ 1476.207212][ T7388] team0 (unregistering): Port device team_slave_0 removed [ 1476.477112][ T7388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.795512][ T7388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface