last executing test programs: 52.571658223s ago: executing program 1 (id=4295): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0800266ec81600000a00180000000000000000011c005a8018000180140003"], 0x4c}}, 0x0) 52.116577979s ago: executing program 1 (id=4297): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc9, @none, 0x0, 0x3}}}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x3f9}, {0x4, [{@any, 0xf3, 0x7f, "2f1120", 0x8001, 0xdf, "723cb64524ac1e77306f536d10502afcf723b437b4a4e1d1a3d088e962841b6a42bf58c715951034449122435322764f0e011792e8515c9dabe256d90d498083731593ea236360427ec5ac7decc30b81de7158d4d629ca06783c005de43c00dee3cb39f6e84045c2d1941e8840ac07321cf181a1e0a4b603b4867776281ed3bacb5f4060d148a83dde8c08a3dab41463e5731894ced555462fed1b605a68027533bdabd0da8189a0c088ff2e4c2b4ed6c7d23232e02dbe678ad801fcfbbd131b656c3e0fb0b3645c5aefdd1cc01eafce56b4a6148309a9050e0b64edaadc6d38ad221b149dcc79bbf6e50524da2e6275"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x15, 0x8, "fd3dbf", 0x4, 0x7f, "6317603f83672d3a626ac999e4309813e2ba9f69235a3d7a873f1b56697550b07ea42430ba8053e22021c7bc7513874f62029cbb0e0fed239479a3dac102af26e6afa6a4c9b999ea03e98e7f6451ddde0aa659b1081ac4e7abc9f40ee9c547f1fd2a1e0fb7b506b7228c9dc0f1fbc6e5b8a910e55cd090547edb328edb09185da1fd4aa346cf52dad7b78f4dedb3845f8b3e89074e5f6607989c24d178a82f99af7f0a31e32a0ffbc1e9aaed84c9b9e4e3900fba475fa6ff1c7d4c9bc97f6ea15fa25bc354e53edb14f567a5fc60f622f101170d43094bd33eb3feb63f51d6ec2f3b7ae661c1dd6dfbb0fd3fb323adbd"}, {@none, 0xa, 0x7, "168280", 0x1, 0xf, "f3af338db72c8cccc153024ba5cd18ea72bc4ba5a645a15608786cda737046a2b4705666145296ab83f3408f1f10ef00cfb8cedbdf3f1952e36306b65a20e5afcd9e171ff911da09c4e6fb0c42b718f5bfb0ad76e29a6a9ee051ed884dd5ff5a582641bc40520bd77c07308eb453d94d2282638c67be6a1a10d8f1f0c679fe6c799f1fc2f72033925d5bb629e722c4dd4f66037a8a65329c67e57b675dc761e8755b801429b924d7162ddedb2c8f646e70e798168631707d7ab9e7dd8cfc9bc717df3e2e63662e9a533ef9688039cb364c6820ef326e9d714e497271a9861ad25f8defc37914aeec2b44c28330719350"}, {@none, 0x2, 0x81, 'h\x00r', 0xff, 0x5, "f9bd3ff1a5d76839fa002566ba6be5632db330aaca1fcfb97ee6e700552a1861e69e91dc32c45a1fd6aa2a343b78b4fd0d77f215c29ce46d65698fae7da17913e5ff56a2603f156c2eb094f0734f2cd77a4f179a3dd8e4261f6d43f2c226afd9fd4a7176c0a6edf89ecfed03c8da29b0241f1f9b76ab8eae897bccb1c92925532845c48cb0ba1d9647e9368d39ffa2e7f6c0b482a4291a4731da8a51220f52e59f7990ccdec0dbfaa2cb9fcc27554a2619f87d7357c1c4fc55ec76b89514f868142ae17533b809710bcd475634be2ac18af2273d91d5a409ea6d44e951b6b382df9821a7a424a9ae15eeb007f92b7834"}]}}}, 0x3fc) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x14, 0x0, 0x4f6}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setresuid(0x0, 0xee00, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x301, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4088}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf25060000006b050180060004004e24000008000500000000005c0001800c0007000400000004000000080006006f766600080009000a000000060002006c00000008000b007369700008000500020000000c0007"], 0x84}}, 0x0) 49.541076056s ago: executing program 1 (id=4301): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x20100000, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 42.76367152s ago: executing program 3 (id=4317): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=0x4, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000180), 0x0}, 0x20) 42.234001477s ago: executing program 3 (id=4318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) 41.894645836s ago: executing program 3 (id=4319): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0x0, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 40.978932755s ago: executing program 3 (id=4320): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 39.752375845s ago: executing program 3 (id=4321): prlimit64(0x0, 0x8, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8], [0x0, 0xffffffdc], [0xfb]], '\x00', [{}, {}, {0xfffffffc}, {0x8000}, {0x8000000}, {0x81}], '\x00', 0x0, 0x0, 0x0, 0x2}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0x1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) symlink(0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) kcmp(r9, r9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) accept$alg(r6, 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$int_in(r10, 0x5452, &(0x7f00000003c0)=0x7) setsockopt(r10, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) 37.935732665s ago: executing program 3 (id=4323): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 13.954649906s ago: executing program 5 (id=4355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000008000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0xd}, 0x90) 13.878339448s ago: executing program 5 (id=4356): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000800)={'mangle\x00', 0x7003}, &(0x7f0000000040)=0x54) 6.698514817s ago: executing program 5 (id=4368): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0x6c, r1}, 0x38) 6.017966361s ago: executing program 0 (id=4371): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 6.012971414s ago: executing program 2 (id=4372): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001640)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 5.930650631s ago: executing program 5 (id=4373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x4e22, 0x200003, @loopback, 0xfffffff7}, 0x21) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0xd0, 0x218, 0x0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) unshare(0x0) 5.222280988s ago: executing program 4 (id=4375): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000140)=0x1de, 0x4) bind$packet(r6, &(0x7f0000000300)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @local}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}}}}) unshare(0x64000600) sync() 4.850538205s ago: executing program 2 (id=4376): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbff, 0xc4767ea2e56cabb6}, 0xc) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000200)={0xfffffff9, 0x3, 0x7, 0xfff}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000001f00)='\t', 0x0) 4.841511121s ago: executing program 5 (id=4377): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d4, &(0x7f0000012ec0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x40, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205838, &(0x7f0000000100)=ANY=[]) 3.096356152s ago: executing program 4 (id=4378): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) 2.764677224s ago: executing program 0 (id=4379): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="f6c56f0228b937225c21a87072407fe83d5fecd7bcca9b3fb6c714baa7d905bd76d4f38eba0ffafc067da9e5b2a863dbea1f11e32b455862ad205d1de267dbf9edb296fda48092e372fd3166c91d636b627f4ce223d2fff7db30abd245c174812a8ebfce720483d74f6658daaba3ea9e453d789d9d1d8b63c91f02b1282f122d5847241f305a5d791a7188c946ed5d5e5343c04968e62b064aeadeafd55ddb6a1b724a9adf29b15c4c55c9afd709d19cf29df117c69d1f855b647f2d6dc3ad9cc2e413cda65ca8d3fd777fdf88827428723d37b89a7330dddd234f39187db8e54905b8eb0dc851f51ff37b5deb69b64bbd27b72881267f94a88974a56b1d3178d49c209d6f4e974c00f25a87255c3804b1150f98d46437f5333b200651dfd1ae939125483cec1690ecb4d449ae4f2bdf88d50382440dbe1699017f21c0f1e0c85cd339a9f87046af063b54b923d4eaa04fc8dabb3bb3e3bc83f0657b5a3c4cdfce3c325abe45a39b794d13057e3a036ec20c4eb1c18a7501a8bf3899626fe01b2b9c18ab08eaa972ab9f8a786888162c7f77db751c1ab88db854ad8a99c7307a52571fd4d0a8ca5a6f4f5e46396bab29e4a5bb6f7c40404be7357b47028a1cd2b780abbba9e37d182866a9171ddea543a5684ff6445d4c3ba61b4300a1556e85518301862b398e43f61d461054469f693c42f995a000dc9b950b277bbc5a9bec872462a0938ef0e0ba4f4d2bff4d81804996a9f97893c02b2deff1abf1a6cb7987f446132f55a10aaf537d93422ed22fa659ceda5939cf18398f8632a257abbf68d4854e452ceb5acc02c7b65d67b582e159fb5039ecfe636dfd00218f2e5d1e2ebeca027472d63fdd2b61d7bbd9258a3fbb14ee2559845a638e07bbde84f87a42b59a09c1bc877b7e51a4ea42c64bcb3b3c8043f1604c569308bd6ddf438204df167580f5aefe2a8beabb77a8fd3392f99e3a43a7cfa0a68b1b21a307aeecd5b7a3742d74ff1790b13f1026ebec296210301d48d9354646382a18d247300bfd8aca878051a2d667ad2ee489edfeb3c1c912cc6a6c573fd92dd4cd1b6d2fb1bbdc86ddd8bf515c28f15ebafe858df78e8a783b293db3144c44397cbaeeadea44655c6350562166bda3accf7a2e65cf3eb7beace08760337e2dff8c9611fb131b345f44dba2aa2eee0bb4ec719c59a269e71ffc0775c5c193e341a833d38edf8a1f01f66b9fd039ff55c884257ec7330f333e579e66ac67097bfe31b2b78d88b81b640351da3bea710e38d8b50b0a63814f4638df1680d2217dfe7364dc228ea79f74e678b338105391e8c1e041cae3d2ccb9d1b034d96b811bf06515b3f4dd02cf2cf9f9884a6a1af39f219fde0b1caee2065536b8e900bf4fe9d87396cb0854ff28db253382a8f1e6c2a2805b5d5c8b756640a49a092f8fbc5ab87e511d790519e9e79c1336b2af288b1b07871858966197f65919009c435e6ca5bc89a15fae0e3534e50cbacb3cb2ee519a9894f08facb453a7ada35c0cd8e6ac71cf9ceb21c1b944d81a16a3299c730fe1ddb164505e2df5e4dc7f46c3fa3230a9cc3845298d4abf909565a67be3316ca881540f2920c8fb6ffe5ffc66ef477476cc4941ba03795287f408b6175df89274e189bc2e12e93f5d8aaa532400946a7a0cb6cacb55d4947d0c02da9e2345b4d0cc92a570019ac51f64b29b7e509109500f9fe8129196bc46230a1848ad7dc721efd97f1cbee41a1e520da4cda9fa5a0024d7865e637d0f17f240647f11f4d41a39e29643917f6ccd8680d83cfaa33081c3dd613ba2ebe736539834ba7977d2617b85b073a4532c8e6cb3dc3ecb492f23b573ee103ad6c56a5930904e836e9390a8b20470de2c7e0d1b52000366cbc198caa4917b593334a449840a093bbd709a6f835eb4338e23b12f59efd0fe6a8f7d108e6c40d63b06b43639a73822b431b636c3c6cfa2c973fd43aab1ebb560eb5b556b98758583195190651d9f12bec2a2db9c87f879af59d9e72786e416ea8fa36ff4a4f08d56c5e208b9995fd9ed0607d3af20b1eb51dc0943cd96bee0cc78875fac1dc471f80664ef9eb1f146d5b6871842ae1c51e83523f28a149346df307eae77929a81c235f5593d7eb30581b0650a8759d5a59b5c2697c461e17d8458b13dc88935b878f71f0597d46924bc84714ca7af2df5749b1b0fbe1950aade8d85555887809f9d4cb5d8d6cdd0ddede90e2fd122d1168f0c7e535aefe0385ce12a5cb1060498ba51b28fc344e6c6094b1cf6263007e299d7ceae7814c664f43bc2b8e989779e1a2a36e7e209175c197117966925ced8cd941fb4d37d05a5c771ba579671d505d6af7fb70fe764d906fa84f046fb4429d82bc7f4ed72f686bf2f923ec7bd48b1be8773ef8a51235825cb6c54d444021e823ba2614e7d93920a96d23f19d9adfcabe1716fea4979ef4d74fadc6fd53e8d6c6704c4eb04a039ba4c83d15afdb195a36f292ba9a2728cd85311076aa6a484c01fbf9fad617f4870fcbd1cd453aeaa391968287263852732552443e3388bd07d975cd2a11624fa2d0d931034b940c4b2babe262706c6cd72007c5fd5744564babc9fc37da476cb38ed0de6b530864e26a6febeb8d901d40c771a0cf2f498830487d83368ff3f8af68a0ffa5762d3f2c9cf2a66e2338d3e3655b647685c2dcacba997eac420d5618c3d268b85795fa49e37ee504521017439581a6c5c064f0184e4cad2b8134e2f9b9ec42981c155775d7d744bfff7adb3f7599f159c7cf1d7d56fb7cddf5b4f8ee8a3dcfbc1151b3d253771db09879f48c3c0cc9506e97c776fa8251c21d5fed9dba8ca6674e45ac2a6bef86ae18b175ffb5d281f58527661ef7d5651b28db85c1b7cc305ab5b34fb49a32778390d3b6d4e78d06d3d863eff86435d36be3043529fb9b4d061a7a983d6e287fa83925dfab1b526d6bf510a29f9d6ad493bbb4da5fdf0aef4f16ff50799b016dc4230aaf87b9ef8953f8ad522ab4c3ec3209a57852cbdb5e39628ad107b248d6f07d123fb0e68d7b7aa8558478de5dee88032de6ccbbcab0ecfe8fccb1681816db894fdc24a9b6cf8ad5690efb01c8b4840255a5d5563b4cb73609f0a5337738e179fd9577bb795eb5a89a4ee4e2b2bed5fc65ba1efb911889e131a0b010c5699d7f6b869ffff3945208feee8d245eb45590f2c67b97d186307dbee5327ef60340386ae04d45f981061b80d33ed6db2e5dcd711d68f8d9befdca10334e9636de1a2d6e6de2888d0984aae79b636eb0576f6cc9f450320b7e946eb82e9e1f8b3477f382090c79a9524a69f3416eadba673ff24cb1846358680d370e6ae98230256ebad4826f90ef8189b95f3b6275950c33ec2781bf438bbcce8ee350f3c1475b026a6c189db5101981b21f82ba8d8f62e852ccc5109a2780c70eb4a0b014c0c06ef46ff506c481b8082154db687b644ff122e5f35af5882212834a5b696afda432241f966d5706fa7c00be4a4912b6adb8e5629d0e18bb2ed4e2d7b6dbe79920d21ed0491f7a5017ae5ccdee5b498f61bb9ad5845a6268abebf80338c20c09530675a8366bfd4ea746957dd7337f1c1184751b649a399891ad2b6306bb062b9b2dc8a8b09302ea3386ccd78d9a3a0314c3df264ce81048391ae66ec9eeda8c70efe95146205d0b6bed2c362f2920615d41c7d12fc3991000a080061dad4e34587ff1684c6756f55dfd249d2d62bef74b5e4a40a63a2bc14a473cf913d5a4fd289d1792fc693c4a5f85326eebc52994a34e16af861438f22633fc5a4ce0d30d37ac0e2277e072f78375d7b1443e1af9647c23decfc411a3d0def781ce6679d92872fbc27dbd4a7edc2acfe565103d472fbde7ac626248a5305cf6e1c5fc81e9b71adb2523839b9425c72a67409539d611240ff5ad04ea2b3d063e197f5663606aeb0b76fa2e1121e3815506fe4a9ac09d555c1b8d8c9749f5dd5096130aaab80d9b721a831013885e3a376a57f97db4f1878372c7ac241b7424b86d97ae5fa3a0943f55c64cdbb4aa3209c4fbee3d9ed201e2bfccee01d33bd99c01689e1f23b185acb82e75cd2a161c316334f4887c8225f11ec1354105e3180d67ebb3a98d1178cca8332eb73555f53ed86c7285fc6c85570be32e74baeece3d610cfb505e1ca6c02fabffbd9b4c80274db8faab4a4d29f8bfa6db38daf4ca8442aad66e40581f40a63e50b3a33d9a3e32f4440b761d149a8d71c138f74d5b0e10d9266788499a19f03a17726226e27c899c538bf4c219d7a035bdab2c5b347bcb176555fa451594050c6196a2236e5b0981eabab3519dd10ed1ffb6334476cbb06059384f02c0100278d49391c6069b9adf25c14870e2fe1f28abdb325d3101fe464f829e971067dc9231fc3bc9d0e2a6c8e13db15f4b69b3b028a587a092453296f7f790a547ba191bca2ca929d1477344d7ba30b826a10152580e5ed7418f481e4b10139a4acea1a1c42f748cafff8b0215c6be50e0af09905366f0403c53f8c746ff06ec45d69d3c4039d0980af45c8a2d6cadafe477ffe3451fce3bdc9644faf73ef3ca3e823526fdc086d82967b1a569cdb99ea26fe6d06a21fdfa7a8342089931240324b786f6be1b987c8fc9e9e602cb0ad66039a0147319a896134cc97a7f50b3a0c04c4f80b8a53ea222f5c009325eca6668e453d92e1577712af0297ffbc3e3365d504ebc1c7e825e045c30c0ad9067fcea6dd754c179c3febce85187611f78634c081192b430010987a852837015a3c2a70604e18c5d394207fa61fd3c51a8ac5ab263d1c15a9918f599338d21b894e6016337a5a31422867a775a7def8fb7cc3a41342175e05c891ebbd7318bf011ab2dcd865dc5efa3a9451d973951c96752803665567c08013259f14fd704d5d108cef5a38b4e2375aa241c5cfa99511e334cac9665a06f25da7d3fdb497363b119bb4d536a6803b3aed59143655ef6df225b5a9305979f77e32942ffb48e859da96a309ab57b68fa56a9e0d6e53650e7b1968fe5afc21e5638cd50f5c415c9addd998fe32ac983a9f9266590967782b6d9b70f22a48cc14301af5de46d7b71d0f7c0ead21ff503cbed5c2535672835ea0216eaa7fed72390b66b4684b51365d1923aec4dcf4dd08b357552cfb7e96a5ab956ac1276882e80a79d018c5ca7ffb3367d59846387f4af1fd4b6098cb560bb565af3ec0c3934da29120546804f3800aaba4969e00cb83d9d9b0cf216c42a8722030a6fc85a01b9748bebe688671318a2cc33f69e0bf3a8a3779c8847de958b28b2e8017da7f74d56f1a75134a4da0944e45dfefe63ff367759b55e1659870e0be86cef2789ec9063ae6093693c1d47cfc164eae67c97efa447120a36b39561d380077ceaff4bf0f55b066af441e400cc3996633abf905a32cf025becf31983dc6fceb6e0fb506bd350d81afa6421115939adef8cd68abbbd94f1567d9e9f7505af57e1802b8d704bb7460b3822330c4a4bb6ff2b187fb9a3f324b0f415c706a1de8a7cf6747c72be3b356c0206a3c0c39daa85309bff9faba7b68178108b261086cc15a0e21a52a37c1576a72d2d5da5c43248ad760d239711739cb79fc79b4ca2dbec2e100db1c535ed90623c67ed2e3817ebec259343b17efdd912ea0fbf73653015b7f8a51cae3cab19ba00638b8c8bfa8db481ca7dc7ce5c2540c46c963386188f74dec088552330e6ea067b222bd97ecab5073d95d5814599f522a36fc80636bb66ee8dca399586f90f1c849e30d92382bb0e64f62511a7f1044560175d68dffc03a9e56ac7629a4bcf50a4334f29b3391ef4bf0f3174a44d69e143437cb3dcb3871c4e7de50084b5e5033c48df364a1d5cf925d42a3c8e2b419909e4a2ca2156c1397eb87704e8f8d6cdb3a4a031c1b5468a1e75a923cbdbd384cd8d87c2c05f11f1df014ef98c13fcf9f182f6fb68dc0aa4adf7bec8a17caedd172f64806c311fc106b39edd9628a01d7159d638e09b39feab432718059589dc971143da4a8e640aa63ae0c2fb4a71129d362cdcf993adbc97b4f1543637cf1acbc9e67067f6c6f95be39fdd14dc6478c507507ceff88c2d1c5e13522547ab149dad2526393714c6c0a221c167ddf1084b563c0bfcc4c75a972131c62ddec7a497bd5118eaa12ab25bbbf7cc62eca5de5ea50bab67ce6ff2e05cc47cc0b0a5465eb01bbc08dac30b8522bd92180d8987390314e19eb3201f0be2b4f71abb697a751fd8d6a3251ca8ea1b2f20a7827d2599d62e392d6c065183a1778950d5ebe04180047ee8a2a096e5f1d6813ec63ff4a626c725b24d259cbd9ca6305009b29c6ef7225eecf9078824f9aef4d3e9aee1e9616b2b7f87499f8abab6c38e9a3e7714132850b5e71fa671697e6c8407ac3dad5abeee5f7b2a63aa51d29744736b0c38adccf8e29a85b81f3b3106daed64fc78618e18c9056cc41ce2f50379cc6c2c1411ba2c690e1899dee193f0f2877412f1cbd54d12255ca81a72211f9a8ab7f0b7bebb6c11b4bd6c77455decdfd7df2b2014395ba69f22e520138a43e1b3a11264822b143adcad307b35800563bab720687a898a76cde1f0a15aa3f32c0d302ce6f1094bacf5a1add935884be029c7fe18a5e90c696e3371af0f3cd721abd7dd4ce74efe353105ebcc4b1411d52026901380a9c7a807a76fa617667adea8b7734822da93d93969641a92ad2af6350ceee54e3d7c7c39e22d6c5f363d201572b8d68c2b9c7230b0b85801cfafbc5557f21bc444ea05fc612e2c2a8d4a38578c69bb252d8f4d617d0974f95b6ebb416d5c8f3fa925d4ed4f23bfce03e28389ca8c1bece1fa49e8d66387bbb09b3c29d9ed75ea5a9ac7930cb3ed05f999867c640b3435962fdb763002e2fb451c5a1b9d4536e49ba50fcf61451168a994249ef29af51694a1426d987ed8cfe09f10462c7629c4ff1b1cc709b99e9e87a54d1ecf54cd9da0c2c19b84b2a2c32c0bd12d158b73230cf610645048cf1afbb62aa7ce6fab79bec3ad84108f3d96cb9fb3d78a26724892a6bca533e64880c7d4c28a6685502f4cb2a27b132c8253b97e88583fe0766d04795709486556df99b7e65fbf71febe24e0a188e2dc489b8fddbf9d4b1c9ef4b558f888824469df9b2085a845998220332d9cb693472ff2abcc10784c2280825adfcc630e3a961b39ab786deddc53b18e862edc75742d6eb2d7cc227ba3ed770851718388612e4e7f4f257a90fdf09e3b0081d7498e2d5b628d9132aa0165f323f59af5e9ea54c582999fb527d5f2f3dd7e4f85877080526f8481899b6afc732f5da6af31b561ddc36a6b8c723087d3f168292550d89b228f7a3cc131c110a2dab2f81e339f24d3d2b696892dcd4a3e8f2eaaddc0d78e2d07cb9df9d2fe73e4c55562c0794092c7dabd4364f9fea89d6cdd8369d5bf1bc8863b8f89aacf0fd9b9b380947bb4872656e58bc87526e18fa8b17ef8a7219adf1b79d1be5dd827e7ba8e4ed50a81eb7562b179876a8803dde2ea99fe744e8f7df17040ac38592a3be7eb353416496e867d8a74c7eb94556b16241935d718dd43462fe0855cc31a812e0ac01109d1d3539bd2fd4eeb422009138a92324bd072edee2ba47d6cacc24588410ce30565a8aaa5aad52d9c55368372715717ff5ed3a0243ddafd11a7059c29a26b9ea9374e8434f31e4c15a747ee6d69368d12b96122690f843569e82ad27eb8fb25e94821168a79e03cd223ce54a1d5e38eec12e23027b12c6a8094c805088617c2fb4f52008366faf37fdb13b3a7a879949d13644da36dd35a4ede785ca0ac7b4f15472e77a33228129143f849ee75c915df31764c96954621a01e0941d6bb58125f544818b7152698f3addcd0a684af8fcdd4bcdf5752b3faa731988866ee8a664850989d280505d2a4b861f159d47d2d61ab3de866fb2c8f90075b713f61cf83a2ed426d53214b70385b7a46e5620c032486a5a00e0e73d3ea16eeccf5731507903a25685466b61311502ce781634ee46542957a0d5bacabb8d965689422588ee102d6a6016bf11589fff32e503feefccefe4107d0619e7a15336a8655e2f09034b4069941126d48909232592aac6d9c231285dc1d038ff1fa09c1588f543304659ca334afbc42b5f5fb813b34663cc6f4b0a12fc3edc28765b062e7a50fd19ef575be96cd1d9aa48c1fef1b2763949982a47bf25a69c8b1306e8e36c91d2096e6a6cf934452233ff49e91ee173c1e288b9ff70ff364689b82e2467a3d741809657ce0856582d24da5663162422a6f1ed1fce7cef40d90ce57cb99e19a0b4365d483361d03d0cceadd682f333bcdb0a49e24d8c7d004aad2dac06f4839cffc0a77730623917e5f101c33411ab4e0a8491de9a8bbd5dedb8dfeb5a5880da57c74bb8e1fd8b02d3c22087be3f686aee26988b2d62a41d4593ff0dc100c31dad221489f612ef60c160bd6c1f5a00ea6efd3a5aa5ca14efbf78ae4e5d8c5db9c03758b81e636005ade8d03a11f5d8231cfc1bdacdb276992ca8ecbad337fa89dacc9e9be11d398d37207e15ddb45566e0af78833545352d3043b70e20695ddddaccccaa93ee5e2874bfc7f9510541a57fb3cb9c8d6e75460cca3c4cca39a642eff1967dda07a66fe67d87696a5fe22a718a52cd9ba83e348ed211c1dc2e21ebd797455f0648af12c10321240058857632112a75adfdca249f26cf8d6ba05ee83d00ff8d64d8fed069dae70b79105ccd95fc9df34426d765578f651a4cba8094f46e0a9b676c0c0ebb1803660a70f5c7ad2de1ff96676c3ecacdc2953fd235856228556db20395b8d54819b7b12f56e4dddf6a7fe4f7f3d69dff022c59efb2313ae801dcb02b117f50f18eb11dd5a291a7068c820fbe381bd0697566909a38fdab0a0c48442dc935ab8447ebecb93af879a6bb82ab5f245274d873b5be4312856fe4fab8edc9575c02ba4cdb34b31323b69cfef40755bf96279460640ed9fb84d5c60d95cfd76a39726c29f5607d80090e5e3da18fd74682975dd98d98e4afdf4460e1aeb7087a18ded69310b28fa45b356fc28d1f2bef4c9dd50909076de9587fa07b966ee143ec589f70b8ac4d1320cac5bafefe640e445922090c721ce79e4e2c546cfb9b7f058932e6c83170dd2785e28ed81757ade61aa094bd042411aafe0b75156067a5790c78a44589728f1190ac0ba2f93004e06602f51fab34cc56a485569be11e0fd8c89ec3363e053dbdb6cbc69b686e89ff3730dce9099daff958f3be6e7f9ac00bddf0f133a6f904262443963aabe84b0ec9ab9209ebb0d6e81b8d30b2959bbfe5b332459310be2d8183a93ea08301b816d5b009a967916dd45b0f541c57685a6c7ef8cf715ae7fd1780f0a0da48467196e25e26fd2d5a075ad5acfa1ebec9647da21672b642ee4a908fbce416f4ed36ab5b96e5b47a0f6c7f280119567b7d54640c65ce5a0f4912690c4a3d0805e4284fb695eb3af2528f031261439506a4d3f4c2e18b736c55475828a0faf0153acf0dd89bf3c2f6525cb4bfcb419421c7696ee93bc595158a9a43bb288022122a8c45a0db060fe5e85bcc128f396f7af7006eba4e0d6e2f0802625342799bc1b98366682db90ff1be99322bc0672e07757c44173b96e659ff645d263af255d6ecd88bd9a0863006db7f674e79b0493d41a12057e36243394294b4c7850d14a988715de4b55e9f83c2f0676a8486efcc948109076361267f092315dae79164da8f832ad6f35f600b92e4a8228d39e507117c1c1b2a4a12b667538000912ea67de21bd85616cb30f95573ba748a75d2e04b493865a8711a688e33221b26f621ab3a137cf86cc9dd340bcee72f19e00de06f1e9abbe08b4cb8725c9e624f02d36c4c276a529b6e23581c348bb90a4fb1f89053aee36caca5529bad9124825860c011140744f245cd02ffe219e436bfef045517e4e41094b25cf9082692cd8e37d3893c5a90c35b808a17a6508fa7ae743740be0d984ef5ea80cee51e14b9997f86b45b97e5acf89a0a6aa962689c4f53bc7b65e5037de60fa395ed1013591caa79412108224c020d77069939391e20ee32b86139fca7eb9ca5c07fa733311fef5d5594b83ae34c6bc32f037b09995511ff9b9b611bc727055a10b808ebb8c8e5ce532046c7ad3336c38d506e0e3043c4413dc8ce0a9caadbef27d6f663b22bf8d399621ee86e52d9abd5628e3270424d8a06a79174c7de23c431224fd8d0f42853510600f9e2deb8a7bfcd324a5c6ec19cd0c9ca81c552b111a2acc4479e20439e2e3caf44c92026b5be1ad6933ed8d4de1575216c134d55171568ee64213fc4d32ca5cd7ad04b8705ecfd1b88d56294dca67efe3b1b37c7d5d170cef18997c4af074e97a98c11ec3cdc83a4ea564ebb47f02344d3ab410e25a4ad658be9bf627d49c106c1098dccf7ff62ff9f4dc997a279afdc5630ba32167a68ed7bb3bae2a8b61fca67b5b7dc5b3ef3ab679b602764da9aabf3d0caa56b278c2ab6fbee2cfdd7277402a1f82de1d97807829c0105277073772929f16d79584118f31b45ec4db29aad83693b2d9de08f417beaa2f78d55a36a824a94d1e3cfeb3d75c3d41ddd0e317e85d327e9b5a9da44dc12b6fc3acf6d222a44f59520fa3fcdc37903eca4b7a91fe14cf54b06855d204ebd71018fe767a158b5e389b5e8e136fc8960840ef1916d8e36f08260e5fc9808442e2034f2c761ae051d03fa618a5f6b8ba8cee00411d09aaa3f8fe30a5d29d9403a905403b5310355326387ea6ea72643b70fcc5bf767371878440d07be919c4ad8c4b8952ea61655bbeac50025f4cc2e859c20dfd440a0b1b14549bccaf7952a27f12266c3b7185d9f37ab405d0765011ae6dbc0717f58ec6bd4101589f5c6054faba863bd2af1e8b19cc2cee98c619e477a47497896c42c37697313917b37140a77a5afec97556f06e0ee1d87c3739bd9ff4c210ddd4eceb65701e64bf4d6cbd5d4b9786f4d45acd881fa6eb1c6fda5f8844f5a1635d05e7bb82270694efe063d44296d86b4bb8b28e573dd7cc0d379b5449af1064f10ab8e8f5f177713a63fd7ea8bb68305356c59b5b48334d568fc6d81713bf2c1438dbec4c2c793d5bcd94c459eaace9295ec5b51328fcea5c8f984d8bf90b2f9fb247ce722a1c001e6ff179524417d647b856d905976f623b2db0facf05d62a87662ddc0d6c31cadca2ec262439fdd0f5cd7788617b98bbb802ceed7f971fe6d432a49dc132fe5475db3bc61d6ff04442a9afa9078be7a15de8668cdf469697e337eb4a99b24cd89da2a36eaf4f725cfc77f5e4de3dc010c2ef1f6b22dc479544c0c4c611fe1c8ef5ed3c23ddae7cd01ae1874217f8d1001f0c5f8d2ace0ec72ef3ed9b95b72753462feaa1ff5c2d23f5ec1ccf41064895d6944f38bf7c41a091df7b8c5c5021ff7ab7571439a3d5c889aa57c715e4a55ecd77b5cb4f8bc3408d95d560f5e8ec711e81ef8a751df5d1d053822debf0295574ebfc5f1fc47caafdf8b3862d68fb01d6239fa13c026320aafdead31d003d8bd8b46842687b600", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.763236335s ago: executing program 2 (id=4380): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x10}, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000850000000c000000b700000000000000bf91000000000000b71d95b17858550a7a00000085000000b720000000000000950000"], 0x0, 0x8, 0x28, &(0x7f00000001c0)=""/40, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1]}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0x11, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000005}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffa, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925a", 0x22}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001a001f001007f4f9002304000a04f511080004000201000208001e8005000000", 0x24) ioctl$sock_inet_SIOCDARP(r3, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff7d, {0x2, 0x0, @broadcast}}) write(r0, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) 2.65072363s ago: executing program 4 (id=4381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) finit_module(r0, 0x0, 0x0) 2.521751737s ago: executing program 0 (id=4382): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x2}}) 2.504965674s ago: executing program 4 (id=4383): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x35, 0x701, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 2.487449923s ago: executing program 1 (id=4322): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "80a0049c36038fcdfb3d76f5bc6bbbab9770a7315fdf6da94cb8a8eb7cea56276b49143cde29c10b8881733997a06feedf6a07f103094865b0aab988f8f4dd5577249e8b83d6f5e2c0547364e9254b7c9957e5fac75bc2874e19467d8821dbd5f2c59fedcb509092b3b8ca6dcd03dd47f4322667d9a3b327"}, 0x83) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0x18, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'geneve1\x00'}}, 0x1e) 2.423729299s ago: executing program 2 (id=4384): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) read(r0, &(0x7f0000001b00)=""/194, 0xc2) 2.25855463s ago: executing program 0 (id=4385): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x74}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000240)=0x68) tgkill(0x0, r0, 0x1f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 2.258334262s ago: executing program 4 (id=4386): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fsopen(0x0, 0x0) 2.244369336s ago: executing program 1 (id=4387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PRIORITY={0x8, 0x6, 0x2}]}, 0x2c}}, 0x0) 2.163609453s ago: executing program 2 (id=4388): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe0, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x30, 0x6, [@m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 771.314729ms ago: executing program 0 (id=4389): recvmmsg(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @empty}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 673.268411ms ago: executing program 5 (id=4390): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) 672.431389ms ago: executing program 1 (id=4391): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000180)=ANY=[@ANYBLOB="00aeaec288af2844"], 0x2, 0x6f2, &(0x7f00000004c0)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="54040000", @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="2c047d80c20002009349f90707d9b6bfecb57c43d71a88a0e66b39559ea2ef85fc48be3a683c927176becc457aefaaa8fb871ca1520e3d0c93c5679fc6179695cb94e54d7176f9487710ca6bdb2e52bfa675c1c99e5ff96cd78a7cc37c5744e8ead7f5d57fe7b0b3e1538c3fd1332071f87b7f6888b0e032def3416827c84842556b87fb9dcf615030fcd82ea0bb675e49bee99109d8a8c654e2fc2fffae0404df163b42b46571082e2db0cc4194fcd069588a8f9bf20a5a8035687be9faf1c63898761f504800006d00"], 0x454}}, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2) creat(&(0x7f0000000440)='./cgroup\x00', 0x0) 614.681476ms ago: executing program 2 (id=4392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x32b5997b968176e1}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 65.857208ms ago: executing program 0 (id=4393): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x58}}, 0x0) 0s ago: executing program 4 (id=4394): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa0, 0x11, 0x148, 0xa0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r0 = syz_io_uring_setup(0x2cd7, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xff44}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r3, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): contents [ 1467.694250][T22397] EXT4-fs (loop1): Remounting filesystem read-only [ 1467.826620][T22410] 9pnet_virtio: no channels available for device [ 1468.325230][T21657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.870302][T22422] loop3: detected capacity change from 0 to 16 [ 1468.902090][T22422] erofs: (device loop3): mounted with root inode @ nid 36. [ 1469.008457][T22422] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 1469.019255][T22422] syz.3.4059: attempt to access beyond end of device [ 1469.019255][T22422] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 1469.109182][T22422] syz.3.4059: attempt to access beyond end of device [ 1469.109182][T22422] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 1469.433628][T21658] Bluetooth: hci2: command 0x0406 tx timeout [ 1469.876394][T22428] macvlan2: entered promiscuous mode [ 1469.881752][T22428] macvlan2: entered allmulticast mode [ 1469.900204][T22428] team_slave_0: entered promiscuous mode [ 1469.907450][T22428] team_slave_1: entered promiscuous mode [ 1469.938779][T22428] team0: entered allmulticast mode [ 1469.964543][T22428] team_slave_0: entered allmulticast mode [ 1469.971798][T22428] team_slave_1: entered allmulticast mode [ 1469.993779][T22428] team0: entered promiscuous mode [ 1470.005999][T22428] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1470.035627][T22428] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1470.045607][T22430] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1470.093569][T10288] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1470.226260][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1470.253255][T22439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4067'. [ 1470.269278][T22441] loop4: detected capacity change from 0 to 1024 [ 1470.279361][T22440] cgroup: fork rejected by pids controller in /syz3 [ 1470.289151][T10288] usb 2-1: Using ep0 maxpacket: 16 [ 1470.312105][T10288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.345553][T10288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.379265][T10288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.419150][T10288] usb 2-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 1470.464031][T10288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.494873][T10288] usb 2-1: config 0 descriptor?? [ 1470.812735][T22426] loop1: detected capacity change from 0 to 128 [ 1470.824213][T20333] Bluetooth: hci1: command 0x0406 tx timeout [ 1470.825215][T22426] vfat: Bad value for 'time_offset' [ 1470.937499][T16969] hfsplus: b-tree write err: -5, ino 3 [ 1471.063843][T22426] netlink: 'syz.1.4061': attribute type 29 has an invalid length. [ 1471.071708][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1471.144516][T22455] netlink: 'syz.4.4073': attribute type 21 has an invalid length. [ 1471.164376][T22426] netlink: 'syz.1.4061': attribute type 29 has an invalid length. [ 1471.193811][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1471.511233][T10288] usbhid 2-1:0.0: can't add hid device: -71 [ 1471.527931][T10288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1471.561560][T10288] usb 2-1: USB disconnect, device number 70 [ 1471.912484][T22446] loop0: detected capacity change from 0 to 32768 [ 1471.965454][T22446] gfs2: Invalid block size [ 1472.159445][T22469] loop5: detected capacity change from 0 to 2048 [ 1472.394648][T22469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.974105][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1475.980857][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1475.987549][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 1476.032338][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4078'. [ 1476.326625][T21377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.432889][T22484] loop0: detected capacity change from 0 to 64 [ 1476.556153][T22489] loop5: detected capacity change from 0 to 64 [ 1476.584803][T20333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1476.598118][T20333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1476.617827][T20333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1476.631065][T20333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1476.640225][T20333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1476.648429][T20333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1476.744137][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ec40800: rx timeout, send abort [ 1477.252457][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805ec40800: abort rx timeout. Force session deactivation [ 1478.066205][T22501] loop1: detected capacity change from 0 to 32768 [ 1478.615869][T22501] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 1478.635853][T22501] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 1478.645090][T22501] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 1478.645090][T22501] running recovery passes: check_allocations [ 1478.963579][T22501] bcachefs (loop1): accounting_read... done [ 1478.970231][T22501] bcachefs (loop1): alloc_read... done [ 1478.975961][T22501] bcachefs (loop1): stripes_read... done [ 1478.981661][T22501] bcachefs (loop1): snapshots_read... done [ 1478.989189][T21656] Bluetooth: hci0: command tx timeout [ 1478.996039][T22501] bcachefs (loop1): check_allocations... [ 1479.016754][T22501] btree ptr not marked in member info btree allocated bitmap [ 1479.016903][T22501] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 1479.049937][T22501] bcachefs (loop1): inconsistency detected - emergency read only at journal seq 7 [ 1479.050171][T22501] bcachefs (loop1): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 1479.050189][T22501] bcachefs (loop1): bch2_gc_btree(): error fsck_errors_not_fixed [ 1479.050206][T22501] bcachefs (loop1): bch2_gc_btrees(): error fsck_errors_not_fixed [ 1479.050782][T22501] bcachefs (loop1): bch2_check_allocations(): error fsck_errors_not_fixed [ 1479.051225][T22501] bcachefs (loop1): bch2_fs_recovery(): error fsck_errors_not_fixed [ 1479.051239][T22501] bcachefs (loop1): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 1479.051254][T22501] bcachefs (loop1): shutting down [ 1479.084381][T22501] bcachefs (loop1): shutdown complete [ 1479.285951][ T29] audit: type=1804 audit(2000000710.989:450): pid=22522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4089" name="/newroot/32/file0/bus" dev="hugetlbfs" ino=85457 res=1 errno=0 [ 1479.315511][ T29] audit: type=1804 audit(2000000711.029:451): pid=22522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4089" name="/newroot/32/file0/bus" dev="hugetlbfs" ino=85457 res=1 errno=0 [ 1479.331410][T22487] chnl_net:caif_netlink_parms(): no params data found [ 1479.403754][T22501] bcachefs: bch2_fs_get_tree() error: fsck_errors_not_fixed [ 1479.445844][ T29] audit: type=1804 audit(2000000711.149:452): pid=22522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4089" name="/newroot/32/file0/bus" dev="hugetlbfs" ino=85457 res=1 errno=0 [ 1479.922937][T22524] vlan2: entered promiscuous mode [ 1480.020354][T22523] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 1480.040550][T22524] veth0: entered promiscuous mode [ 1480.098666][T22524] team0: Port device vlan2 added [ 1480.381560][T22487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.403583][T22487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.443684][T22487] bridge_slave_0: entered allmulticast mode [ 1480.458526][T22487] bridge_slave_0: entered promiscuous mode [ 1480.485537][T22487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.493340][T22487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.510953][T22487] bridge_slave_1: entered allmulticast mode [ 1480.553914][T22487] bridge_slave_1: entered promiscuous mode [ 1480.687268][T22550] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1480.791317][T22487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.844739][T22487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1481.042018][T22487] team0: Port device team_slave_0 added [ 1481.064432][T20333] Bluetooth: hci0: command tx timeout [ 1481.106504][T22487] team0: Port device team_slave_1 added [ 1481.566854][T22487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1481.623727][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.699100][T22487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1481.732735][T22487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1481.747435][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.880389][T22487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.132104][T22560] loop1: detected capacity change from 0 to 32768 [ 1482.239160][T22579] loop5: detected capacity change from 0 to 1024 [ 1482.246434][T22579] EXT4-fs: Ignoring removed orlov option [ 1482.631986][T22487] hsr_slave_0: entered promiscuous mode [ 1482.764508][T22579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.962085][T22487] hsr_slave_1: entered promiscuous mode [ 1483.183598][T20333] Bluetooth: hci0: command tx timeout [ 1483.223547][T22487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1483.231137][T22487] Cannot create hsr debugfs directory [ 1483.277199][T21377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.604109][ T5229] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1483.697932][T22588] loop5: detected capacity change from 0 to 4096 [ 1483.745819][T22588] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1483.811729][T22590] loop0: detected capacity change from 0 to 22 [ 1483.825869][T22588] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 1483.833878][ T5229] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1483.848149][T22590] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1483.881684][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.905692][ T5229] usb 5-1: config 0 descriptor?? [ 1483.920883][T22590] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1483.940664][T22588] ntfs3: loop5: ino=1e, "file1" encrypted i/o not supported [ 1483.986485][ T29] audit: type=1800 audit(2000000715.699:453): pid=22588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4112" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 1484.107651][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.419674][T22487] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.834628][T22607] loop2: detected capacity change from 0 to 2048 [ 1484.837937][T22487] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.871179][T22607] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1484.914621][T22607] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1485.014011][ T5343] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1485.051894][T22607] loop2: detected capacity change from 0 to 1024 [ 1485.072153][T22607] EXT4-fs: quotafile must be on filesystem root [ 1485.115447][T22614] loop5: detected capacity change from 0 to 4096 [ 1485.118745][T22487] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.132045][T22614] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 1485.224280][T20333] Bluetooth: hci0: command tx timeout [ 1485.430049][T22487] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.443619][ T5343] usb 1-1: Using ep0 maxpacket: 8 [ 1485.457027][ T5343] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1485.468952][ T29] audit: type=1800 audit(2000000717.179:454): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4122" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 1485.581272][T22620] loop2: detected capacity change from 0 to 1024 [ 1485.606480][ T5343] usb 1-1: config 0 has no interface number 0 [ 1485.612976][ T5343] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1486.030129][ T5343] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1486.070684][ T5343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.090287][ T29] audit: type=1804 audit(2000000717.739:455): pid=22621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4122" name="/newroot/68/file1/bus" dev="loop5" ino=33 res=1 errno=0 [ 1486.168510][ T5343] usb 1-1: config 0 descriptor?? [ 1486.212764][T20333] Bluetooth: hci4: command 0x0406 tx timeout [ 1486.232389][ T5343] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1486.374187][ T62] hfsplus: b-tree write err: -5, ino 4 [ 1486.480676][T22487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1486.542024][T22487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1486.604368][T22487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1486.658671][T22487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1486.946468][T22487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.016162][T22487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.067681][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.074929][ T5343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.129013][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.136250][ T5343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1487.169319][T22623] loop1: detected capacity change from 0 to 32768 [ 1487.328807][ T5229] usb 5-1: Cannot set autoneg [ 1487.340113][ T5229] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1487.375773][ T5229] usb 5-1: USB disconnect, device number 41 [ 1487.836054][T22487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1488.002687][T22487] veth0_vlan: entered promiscuous mode [ 1488.065753][T22487] veth1_vlan: entered promiscuous mode [ 1488.173484][ T5343] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1488.195874][T22487] veth0_macvtap: entered promiscuous mode [ 1488.232189][T22487] veth1_macvtap: entered promiscuous mode [ 1488.322133][ T935] usb 1-1: USB disconnect, device number 41 [ 1488.328719][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.378481][ T935] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 1488.406915][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.426985][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.469064][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.513890][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.543484][ T5343] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1488.573229][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.595675][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.620840][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.645468][ T5343] usb 2-1: config 0 descriptor?? [ 1488.691359][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.904931][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1488.943041][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.000828][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.183196][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.261392][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.287351][T22656] loop0: detected capacity change from 0 to 1024 [ 1489.338861][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.360069][T22656] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1489.406441][ T5343] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1489.418917][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.441076][T22656] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1489.445882][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.460166][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.472692][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.483266][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.484263][T22656] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1489.496257][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.514814][T22487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.556237][T22656] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.4132: Freeing blocks not in datazone - block = 0, count = 4096 [ 1489.616225][T22656] EXT4-fs (loop0): 1 orphan inode deleted [ 1489.624448][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.700608][T10288] usb 2-1: USB disconnect, device number 71 [ 1489.730369][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.774667][T22656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1489.783578][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.800218][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.810245][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.821246][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.850694][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.874336][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.918150][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.936900][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.950015][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.966751][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.985431][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.010857][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.026470][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.042897][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.059904][T22487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.076479][T22487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.103056][T21651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.120894][T22487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.182417][T22487] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.206400][T22487] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.223163][T22487] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.247090][T22487] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.527886][T22667] loop0: detected capacity change from 0 to 512 [ 1490.567027][T22657] loop4: detected capacity change from 0 to 32768 [ 1490.585071][T22667] EXT4-fs: Ignoring removed bh option [ 1490.622276][T22657] [ 1490.622276][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.622276][T22657] [ 1490.705098][ T260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.713267][T22667] EXT4-fs error (device loop0): __ext4_iget:4985: inode #15: block 1803188595: comm syz.0.4136: invalid block [ 1490.725484][T22657] [ 1490.725484][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.725484][T22657] [ 1490.725699][T22657] [ 1490.725699][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.725699][T22657] [ 1490.725721][T22657] [ 1490.725721][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.725721][T22657] [ 1490.725741][T22657] [ 1490.725741][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.725741][T22657] [ 1490.773726][ T260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.800004][ T111] [ 1490.800004][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.800004][ T111] [ 1490.836750][T22667] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4136: couldn't read orphan inode 15 (err -117) [ 1490.849120][T22657] [ 1490.849120][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.849120][T22657] [ 1490.877663][ T260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.879745][T22667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.912818][T22657] [ 1490.912818][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.912818][T22657] [ 1490.916889][ T260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1490.937775][T22674] loop2: detected capacity change from 0 to 128 [ 1490.963557][T22657] [ 1490.963557][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1490.963557][T22657] [ 1491.009358][T22657] [ 1491.009358][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1491.009358][T22657] [ 1491.044475][T22657] [ 1491.044475][T22657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1491.044475][T22657] [ 1491.089621][ T29] audit: type=1800 audit(2000000722.789:456): pid=22674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4139" name="bus" dev="loop2" ino=1049022 res=0 errno=0 [ 1491.093758][T22667] loop0: detected capacity change from 512 to 11 [ 1491.243758][T22676] syz.0.4136: attempt to access beyond end of device [ 1491.243758][T22676] loop0: rw=524288, sector=12, nr_sectors = 2 limit=11 [ 1491.281736][ T110] [ 1491.281736][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1491.281736][ T110] [ 1491.392598][T22676] syz.0.4136: attempt to access beyond end of device [ 1491.392598][T22676] loop0: rw=12288, sector=14, nr_sectors = 2 limit=11 [ 1491.413692][T22676] EXT4-fs error (device loop0): ext4_get_inode_loc:4574: inode #12: block 7: comm syz.0.4136: unable to read itable block [ 1491.467364][T16969] [ 1491.467364][T16969] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1491.467364][T16969] [ 1491.801581][T22672] ext4lazyinit: attempt to access beyond end of device [ 1491.801581][T22672] loop0: rw=2057, sector=10, nr_sectors = 16 limit=11 [ 1492.194044][T16969] [ 1492.194044][T16969] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1492.194044][T16969] [ 1492.228143][T21651] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 1492.234044][T21649] [ 1492.234044][T21649] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1492.234044][T21649] [ 1492.312295][T21651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.486652][ T111] [ 1492.486652][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1492.486652][ T111] [ 1492.561226][T21649] [ 1492.561226][T21649] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1492.561226][T21649] [ 1492.861631][T22669] loop1: detected capacity change from 0 to 32768 [ 1492.952896][T22669] bcachefs (/dev/loop1): error reading default superblock: Unsupported superblock version 63.1023: (unknown version) (min 0.9: (unknown version), max 1.9: disk_accounting_v2) [ 1493.035659][T22669] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 256 [ 1493.035659][T22669] journal_v2 (size 40): [ 1493.035659][T22669] Buckets: 9-16 24-25 [ 1493.035659][T22669] [ 1493.117854][T22669] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 1493.391063][T16969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.216653][T16969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.329260][T22704] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1494.580589][T16969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.694525][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1494.815509][T20333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1494.866981][T20333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1494.898678][T20333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1494.906420][T22718] loop4: detected capacity change from 0 to 128 [ 1494.929653][T20333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1494.945161][T20333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1494.957234][T20333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1495.039093][T22718] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1495.134087][T22718] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1495.247683][T16969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.368815][T21649] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1495.471685][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'. [ 1496.676259][T22740] loop2: detected capacity change from 0 to 128 [ 1496.687990][T22742] loop1: detected capacity change from 0 to 64 [ 1496.695685][T22742] hfs: umask requires a value [ 1496.700388][T22742] hfs: unable to parse mount options [ 1496.706607][T22740] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1498.679777][T21656] Bluetooth: hci3: command tx timeout [ 1500.209292][T16969] bridge_slave_1: left allmulticast mode [ 1500.226861][T16969] bridge_slave_1: left promiscuous mode [ 1500.233438][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1500.312924][T16969] bridge_slave_0: left allmulticast mode [ 1500.354504][T16969] bridge_slave_0: left promiscuous mode [ 1500.360374][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.470732][T22766] loop5: detected capacity change from 0 to 64 [ 1500.876401][T20333] Bluetooth: hci3: command tx timeout [ 1502.612830][T22770] loop2: detected capacity change from 0 to 32768 [ 1502.636914][T22770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4174 (22770) [ 1502.754844][T22770] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1502.765140][T22770] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 1502.783704][T22770] BTRFS info (device loop2): using free-space-tree [ 1502.916372][T20333] Bluetooth: hci3: command tx timeout [ 1502.986531][T22770] BTRFS info (device loop2): rebuilding free space tree [ 1503.176908][T22803] loop5: detected capacity change from 0 to 8192 [ 1503.446436][T21541] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1503.462667][T22789] loop4: detected capacity change from 0 to 32768 [ 1503.517200][T22789] BTRFS: device /dev/loop4 (7:4) using temp-fsid 88d27794-1b87-4d23-a234-86608b4aba4f [ 1503.538955][T22789] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4180 (22789) [ 1503.631166][T22789] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1503.666028][T22789] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 1503.683506][T22789] BTRFS info (device loop4): using free-space-tree [ 1503.844003][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1503.894565][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1503.957402][T16969] bond0 (unregistering): Released all slaves [ 1503.997142][T22789] BTRFS info (device loop4): rebuilding free space tree [ 1504.464819][T21649] BTRFS info (device loop4): last unmount of filesystem 88d27794-1b87-4d23-a234-86608b4aba4f [ 1504.753188][T22712] chnl_net:caif_netlink_parms(): no params data found [ 1505.005226][ T5228] Bluetooth: hci3: command tx timeout [ 1506.072509][T22858] loop4: detected capacity change from 0 to 512 [ 1506.295276][T22858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.323570][T22858] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1506.663625][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 1506.669977][ T5228] Bluetooth: hci7: command 0x0406 tx timeout [ 1507.051401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1507.065118][T16969] hsr_slave_0: left promiscuous mode [ 1507.305443][T22875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1507.407781][T22879] loop3: detected capacity change from 0 to 1024 [ 1507.415220][T22879] EXT4-fs: Ignoring removed nobh option [ 1507.424083][T22879] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1507.443611][T16969] hsr_slave_1: left promiscuous mode [ 1507.871322][T22879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.415580][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1508.423062][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1508.453902][T22487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.518585][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1508.544457][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.696975][T16969] veth0: left promiscuous mode [ 1508.711492][T16969] veth1_macvtap: left promiscuous mode [ 1508.760264][T16969] veth0_macvtap: left promiscuous mode [ 1508.793664][T16969] veth1_vlan: left promiscuous mode [ 1508.810986][T16969] veth0_vlan: left promiscuous mode [ 1509.045169][T22867] loop5: detected capacity change from 0 to 32768 [ 1509.121964][T22867] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1509.348007][T22867] XFS (loop5): Ending clean mount [ 1509.518614][T21377] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1509.824757][T16969] team0 (unregistering): Port device vlan2 removed [ 1510.430335][T22887] loop3: detected capacity change from 0 to 40427 [ 1510.505949][T22887] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1510.633630][T22887] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1510.665338][T22887] F2FS-fs (loop3): invalid crc value [ 1510.951140][T22887] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1511.383093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1511.429685][T22887] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 1511.457892][T22887] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1511.581684][T22887] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 1511.610741][T22887] F2FS-fs (loop3): Unrecognized mount option "journal_dev=0x0000002000000000" or missing value [ 1511.871967][T22910] loop5: detected capacity change from 0 to 512 [ 1511.894889][T22910] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1511.918459][T22910] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1512.068313][T22910] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 1512.143960][T22910] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 1512.152067][T22910] System zones: 0-2, 18-18, 34-34 [ 1512.219908][T22910] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1512.290468][T22910] EXT4-fs (loop5): 1 truncate cleaned up [ 1512.328014][T22910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.476491][ T29] audit: type=1326 audit(2000000744.189:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.3.4207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72cc9779f9 code=0x0 [ 1512.627076][T21377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.694482][T22925] loop1: detected capacity change from 0 to 1024 [ 1512.755020][T22925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.560679][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1513.860592][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1513.871562][T21657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.973453][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1514.114906][ T9] usb 6-1: config 0 has no interfaces? [ 1514.120451][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1514.129756][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.185847][ T9] usb 6-1: config 0 descriptor?? [ 1514.432457][T22931] loop5: detected capacity change from 0 to 256 [ 1514.448152][T20333] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1514.483700][T22931] FAT-fs (loop5): bogus number of directory entries (4) [ 1514.488276][T20333] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1514.501187][T22931] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1514.501538][T20333] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1514.523570][T20333] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1514.531540][T20333] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1514.539185][T20333] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1514.657887][T22944] loop1: detected capacity change from 0 to 8 [ 1515.200687][ T5293] usb 6-1: USB disconnect, device number 61 [ 1516.306208][T21656] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1516.371427][T21656] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1516.401091][T21656] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1516.411139][T21656] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1516.427363][T21656] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1516.458130][T21656] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1516.663848][T20333] Bluetooth: hci8: command tx timeout [ 1516.796205][T22946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1516.873297][T22882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.115606][T22712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.143598][T22712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.151011][T22712] bridge_slave_0: entered allmulticast mode [ 1517.179307][T22712] bridge_slave_0: entered promiscuous mode [ 1517.498488][T22958] loop3: detected capacity change from 0 to 40427 [ 1517.514972][T22958] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1517.523168][T22958] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1517.564659][T22958] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1517.630658][T22958] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1517.637926][T22958] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1518.566115][T22712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.603473][T22712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.621167][T22712] bridge_slave_1: entered allmulticast mode [ 1518.646852][T22712] bridge_slave_1: entered promiscuous mode [ 1518.666046][T20333] Bluetooth: hci9: command tx timeout [ 1518.747257][T20333] Bluetooth: hci8: command tx timeout [ 1518.906574][T22712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.929106][T22712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.047127][T22961] loop5: detected capacity change from 0 to 32768 [ 1519.297116][T22712] team0: Port device team_slave_0 added [ 1519.344420][T22712] team0: Port device team_slave_1 added [ 1519.538207][T22983] loop5: detected capacity change from 0 to 256 [ 1519.556406][T22983] exfat: Deprecated parameter 'utf8' [ 1519.614359][T22983] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 1519.778091][T22712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.810994][T22712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.867657][T22712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.955188][T22712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.003593][T22712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.113673][T22712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.366866][T22980] loop1: detected capacity change from 0 to 32768 [ 1520.463841][T22980] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1520.565264][T22980] XFS (loop1): Ending clean mount [ 1520.594049][T22712] hsr_slave_0: entered promiscuous mode [ 1520.644573][T22712] hsr_slave_1: entered promiscuous mode [ 1520.659525][T23007] loop5: detected capacity change from 0 to 2048 [ 1520.673812][T22712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1520.681411][T22712] Cannot create hsr debugfs directory [ 1520.743096][T22955] chnl_net:caif_netlink_parms(): no params data found [ 1520.743541][T20333] Bluetooth: hci9: command tx timeout [ 1520.790973][T23007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1520.827205][T20333] Bluetooth: hci8: command tx timeout [ 1520.854941][T21657] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1521.075761][T21377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.152675][ T29] audit: type=1326 audit(2000000752.859:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.202230][ T29] audit: type=1326 audit(2000000752.859:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.227366][ T29] audit: type=1326 audit(2000000752.889:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.297303][ T29] audit: type=1326 audit(2000000752.889:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.368191][T23001] loop3: detected capacity change from 0 to 32768 [ 1521.374759][ T29] audit: type=1326 audit(2000000752.889:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.399229][T23001] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4233 (23001) [ 1521.443442][ T29] audit: type=1326 audit(2000000752.889:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.481826][T23001] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1521.496163][T16969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.507375][T23001] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 1521.535337][ T29] audit: type=1326 audit(2000000752.909:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23013 comm="syz.5.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494cf779f9 code=0x7ffc0000 [ 1521.572135][T23001] BTRFS info (device loop3): using free-space-tree [ 1521.775767][T23026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4237'. [ 1521.890380][T16969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.015824][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4238'. [ 1522.033567][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4238'. [ 1522.137756][T23040] BTRFS info (device loop3 state M): max_inline set to 0 [ 1522.236225][T16969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.350858][T22487] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1522.434175][T23039] loop1: detected capacity change from 0 to 32768 [ 1522.444333][T23039] XFS: ikeep mount option is deprecated. [ 1522.450005][T23039] XFS: noikeep mount option is deprecated. [ 1522.511939][T16969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.579993][T23039] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1522.692957][T22941] chnl_net:caif_netlink_parms(): no params data found [ 1522.770730][T23039] XFS (loop1): Ending clean mount [ 1522.778572][T22955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.824531][T20333] Bluetooth: hci9: command tx timeout [ 1522.830575][T23039] XFS (loop1): Quotacheck needed: Please wait. [ 1522.839496][T22955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.870148][T22955] bridge_slave_0: entered allmulticast mode [ 1522.904015][T20333] Bluetooth: hci8: command tx timeout [ 1522.910388][T22955] bridge_slave_0: entered promiscuous mode [ 1523.027781][T23039] XFS (loop1): Quotacheck: Done. [ 1523.042514][T22955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.098980][T22955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.134440][T22955] bridge_slave_1: entered allmulticast mode [ 1523.158420][T22955] bridge_slave_1: entered promiscuous mode [ 1523.837198][T21657] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1524.007622][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1524.366191][T22955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.437111][T22955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.750129][T23068] loop1: detected capacity change from 0 to 512 [ 1524.757849][T23068] journal_path: Lookup failure for './file0' [ 1524.764439][T23068] EXT4-fs: error: could not find journal device path [ 1524.793624][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1524.818376][ T9] usb 6-1: config index 0 descriptor too short (expected 51, got 45) [ 1524.847704][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.867155][T23068] loop1: detected capacity change from 0 to 2048 [ 1524.877300][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1524.917497][T20333] Bluetooth: hci9: command tx timeout [ 1524.938792][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 1524.953413][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1524.963953][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1525.015378][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 1525.028925][T23068] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.4243: casefold flag without casefold feature [ 1525.090630][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.137743][T23068] EXT4-fs (loop1): get root inode failed [ 1525.148404][T23068] EXT4-fs (loop1): mount failed [ 1525.306904][ T9] usb 6-1: config 0 descriptor?? [ 1525.391773][T23063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1525.706852][ T9] usb 6-1: USB disconnect, device number 62 [ 1525.715172][T22941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.738294][T22941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.753910][T22941] bridge_slave_0: entered allmulticast mode [ 1525.761671][T22941] bridge_slave_0: entered promiscuous mode [ 1526.136486][T23075] overlayfs: missing 'workdir' [ 1526.881360][T16969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.103307][T22955] team0: Port device team_slave_0 added [ 1527.134381][T22941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.157154][T22941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.182518][T22941] bridge_slave_1: entered allmulticast mode [ 1527.210082][T22941] bridge_slave_1: entered promiscuous mode [ 1527.411258][T16969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.497628][T22955] team0: Port device team_slave_1 added [ 1527.591690][T23095] loop1: detected capacity change from 0 to 512 [ 1527.668698][T16969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.695683][T23095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.735880][T23095] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.847850][T21657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.875941][T22941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.358635][T16969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.494081][T22955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.527340][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.673698][T22955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.758590][T22941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.008987][T22941] team0: Port device team_slave_0 added [ 1529.048349][T22941] team0: Port device team_slave_1 added [ 1529.244702][T22955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.251723][T22955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.325516][T22955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.351725][T23102] loop5: detected capacity change from 0 to 32768 [ 1529.414010][T22941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.442129][T22941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.566431][T20333] Bluetooth: hci7: unexpected cc 0x1408 length: 57 > 4 [ 1529.577861][T20333] Bluetooth: hci7: unexpected event for opcode 0x1408 [ 1530.151914][T22941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1530.175998][T22941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1530.182981][T22941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1530.564927][T23121] loop3: detected capacity change from 0 to 1024 [ 1530.843550][T22941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.976241][T22955] hsr_slave_0: entered promiscuous mode [ 1531.004979][T22955] hsr_slave_1: entered promiscuous mode [ 1531.038226][T22955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1531.063709][T22955] Cannot create hsr debugfs directory [ 1531.224039][T17328] hfsplus: b-tree write err: -5, ino 4 [ 1531.502042][T23128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1531.505964][T23132] loop1: detected capacity change from 0 to 256 [ 1531.555542][T23132] exFAT-fs (loop1): failed to load alloc-bitmap [ 1531.561835][T23132] exFAT-fs (loop1): failed to recognize exfat type [ 1531.657722][T22712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1532.060565][T23141] loop1: detected capacity change from 0 to 64 [ 1532.220994][T22941] hsr_slave_0: entered promiscuous mode [ 1532.333412][T22941] hsr_slave_1: entered promiscuous mode [ 1532.408535][T22941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1532.475801][T22941] Cannot create hsr debugfs directory [ 1532.602390][T22712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1532.642212][T16969] bridge_slave_1: left allmulticast mode [ 1532.654911][T16969] bridge_slave_1: left promiscuous mode [ 1532.668002][T21657] hfs: request for non-existent node 131072 in B*Tree [ 1532.684331][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.703251][T16969] bridge_slave_0: left allmulticast mode [ 1532.718118][T16969] bridge_slave_0: left promiscuous mode [ 1532.730972][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.756796][T16969] bridge_slave_1: left allmulticast mode [ 1532.762579][T16969] bridge_slave_1: left promiscuous mode [ 1532.766108][T23148] loop1: detected capacity change from 0 to 2048 [ 1532.768890][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.787696][T16969] bridge_slave_0: left allmulticast mode [ 1532.793669][T16969] bridge_slave_0: left promiscuous mode [ 1532.799734][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1532.812547][T23148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.827555][T23148] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.902017][T21657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.624713][T20333] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1533.646602][T20333] Bluetooth: hci7: Injecting HCI hardware error event [ 1533.660639][T21656] Bluetooth: hci7: hardware error 0x00 [ 1534.286824][T23160] loop3: detected capacity change from 0 to 40427 [ 1534.310974][T23160] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1534.323438][T23160] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1534.361909][T23160] F2FS-fs (loop3): invalid crc value [ 1534.380893][T23160] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1534.534219][T23160] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1534.553512][T23160] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1534.646329][ T29] audit: type=1800 audit(2000000766.349:465): pid=23160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4276" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 1534.865866][T22487] syz-executor: attempt to access beyond end of device [ 1534.865866][T22487] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1534.915847][T22487] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1535.081791][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.117593][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.197257][T16969] bond0 (unregistering): Released all slaves [ 1535.672035][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.700866][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.710568][T21656] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1535.722145][T16969] bond0 (unregistering): Released all slaves [ 1535.740486][T23143] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1535.834235][T22712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1536.073869][T14221] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1536.284739][T14221] usb 4-1: Using ep0 maxpacket: 16 [ 1536.294168][T14221] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.305342][T14221] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.315281][T14221] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1536.335377][T14221] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1536.342367][T14221] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1536.353722][T14221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.499799][T14221] usb 4-1: config 0 descriptor?? [ 1536.799668][T22712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1537.017704][T14221] hid-generic 0003:045E:05DA.0045: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0 [ 1537.083555][ T5234] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1537.189693][T14221] usb 4-1: USB disconnect, device number 53 [ 1537.243521][ T5293] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1537.265722][ T5234] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1537.279851][ T5234] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1537.306125][ T5234] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1537.315330][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.328053][T23178] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1537.342684][ T5234] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1537.436313][ T5293] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1537.460307][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1537.477115][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1537.487507][ T5293] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1537.500625][ T5293] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1537.510193][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.521279][ T5293] usb 6-1: config 0 descriptor?? [ 1537.658355][T16969] hsr_slave_0: left promiscuous mode [ 1537.684914][T16969] hsr_slave_1: left promiscuous mode [ 1537.691912][T14221] usb 2-1: USB disconnect, device number 72 [ 1537.692078][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.733812][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.760804][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.773441][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.798066][T16969] hsr_slave_0: left promiscuous mode [ 1537.804799][T16969] hsr_slave_1: left promiscuous mode [ 1537.823859][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.831387][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.845315][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.852893][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.941061][T16969] veth1_macvtap: left promiscuous mode [ 1537.949880][T16969] veth0_macvtap: left promiscuous mode [ 1537.955879][T16969] veth1_vlan: left promiscuous mode [ 1537.961434][T16969] veth0_vlan: left promiscuous mode [ 1537.971812][ T5293] kye 0003:0458:5015.0046: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1537.983829][ T5293] kye 0003:0458:5015.0046: item fetching failed at offset 5/7 [ 1537.992435][ T5293] kye 0003:0458:5015.0046: parse failed [ 1537.999212][T16969] veth1_macvtap: left promiscuous mode [ 1538.006788][T16969] veth0_macvtap: left promiscuous mode [ 1538.012422][T16969] veth1_vlan: left promiscuous mode [ 1538.017936][ T5293] kye 0003:0458:5015.0046: probe with driver kye failed with error -22 [ 1538.033627][T16969] veth0_vlan: left promiscuous mode [ 1538.222005][ T5278] usb 6-1: USB disconnect, device number 63 [ 1538.808079][T23186] loop1: detected capacity change from 0 to 32768 [ 1538.879858][T23186] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1539.074709][T23186] XFS (loop1): Ending clean mount [ 1539.095060][T23186] XFS (loop1): Quotacheck needed: Please wait. [ 1539.687975][T23186] XFS (loop1): Quotacheck: Done. [ 1540.134210][T21657] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1541.781637][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1541.921316][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1543.767997][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1543.853263][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1545.122933][T22712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1545.237361][T22712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1545.288437][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.295678][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.348502][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.355717][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.591483][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.734675][ T5281] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1546.566843][T23228] loop5: detected capacity change from 0 to 128 [ 1546.673436][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 1546.753511][ T5281] usb 4-1: config 0 has no interfaces? [ 1546.759052][ T5281] usb 4-1: New USB device found, idVendor=0403, idProduct=d9aa, bcdDevice=cd.db [ 1546.843513][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.963800][ T5281] usb 4-1: config 0 descriptor?? [ 1547.087499][T22955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1547.145147][T22955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1547.217019][ T935] usb 4-1: USB disconnect, device number 54 [ 1547.250620][T21377] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 1547.269273][T22712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1547.295742][T21377] FAT-fs (loop5): Filesystem has been set read-only [ 1547.969523][T22955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1548.037553][T22955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1549.756913][T22712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.230062][T22941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1550.279524][T22941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1550.320600][T22941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1550.349522][T22941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1550.377026][T22712] veth0_vlan: entered promiscuous mode [ 1550.421577][T22955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.552455][T16969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.683808][T22712] veth1_vlan: entered promiscuous mode [ 1550.854115][T16969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.908255][T23265] netlink: 'syz.3.4307': attribute type 4 has an invalid length. [ 1550.917562][T20333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1550.934206][T20333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1550.952694][T20333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1550.965878][T20333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1550.979519][T20333] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1550.991820][T20333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1551.077008][T16969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.103953][T22955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.132446][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.139663][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.212639][T16969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.264065][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.271189][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.518143][T22712] veth0_macvtap: entered promiscuous mode [ 1551.609361][T22712] veth1_macvtap: entered promiscuous mode [ 1551.758613][T16969] team0: left allmulticast mode [ 1551.773609][T16969] team_slave_0: left allmulticast mode [ 1551.779091][T16969] team_slave_1: left allmulticast mode [ 1551.803549][T16969] team0: left promiscuous mode [ 1551.808338][T16969] team_slave_0: left promiscuous mode [ 1551.821762][T16969] team_slave_1: left promiscuous mode [ 1551.832341][T16969] bridge0: port 3(team0) entered disabled state [ 1551.851939][T16969] bridge_slave_1: left allmulticast mode [ 1551.874806][T16969] bridge_slave_1: left promiscuous mode [ 1551.880635][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.908346][T16969] bridge_slave_0: left allmulticast mode [ 1551.914384][T16969] bridge_slave_0: left promiscuous mode [ 1551.920140][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.948488][T23274] loop3: detected capacity change from 0 to 32768 [ 1551.978252][T23274] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1552.030452][T23274] XFS (loop3): Ending clean mount [ 1552.038772][T23274] XFS (loop3): Quotacheck needed: Please wait. [ 1552.182283][T23274] XFS (loop3): Quotacheck: Done. [ 1552.240841][T22487] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1552.724611][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.737160][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.750891][T16969] bond0 (unregistering): Released all slaves [ 1552.772880][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.788516][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.798687][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.811990][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.821887][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.833016][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.843005][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.854319][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.864322][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.877164][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.887079][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.897635][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.909374][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1552.922476][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.937296][T22712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1553.017645][T22941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1553.037516][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.051820][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.063937][T20333] Bluetooth: hci1: command tx timeout [ 1553.093458][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.104051][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.114032][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.124590][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.135723][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.146285][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.158212][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.170337][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.182000][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.192522][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.202423][T22712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1553.213886][T22712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1553.242964][T22712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.397624][T22712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.415126][T22712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.423982][T22712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.432771][T22712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.745276][T22955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.757711][T23266] chnl_net:caif_netlink_parms(): no params data found [ 1553.919402][T16969] hsr_slave_0: left promiscuous mode [ 1553.934008][T16969] hsr_slave_1: left promiscuous mode [ 1553.942741][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1553.954783][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.974072][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1553.981483][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.028853][T16969] veth1_macvtap: left promiscuous mode [ 1554.034532][T16969] veth0_macvtap: left promiscuous mode [ 1554.040215][T16969] veth1_vlan: left promiscuous mode [ 1554.045769][T16969] veth0_vlan: left promiscuous mode [ 1554.735232][T21656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1554.759195][T21656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1554.785775][T21656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1554.816881][T23297] loop3: detected capacity change from 0 to 4096 [ 1554.825613][T23297] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 1554.854638][T23297] ntfs3: loop3: ino=4, Correct links count -> 2. [ 1554.861074][T23297] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1554.869516][T23297] ntfs3: loop3: Failed to load $AttrDef (-22) [ 1554.885307][T21656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1554.914581][T21656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1554.933871][T21656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1555.144717][T20333] Bluetooth: hci1: command tx timeout [ 1555.628518][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1555.766255][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1556.327590][T23309] loop3: detected capacity change from 0 to 512 [ 1556.335564][T23309] EXT4-fs: Ignoring removed i_version option [ 1556.342380][T23309] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1556.370180][T23309] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.4316: corrupted in-inode xattr: invalid ea_ino [ 1556.393497][T23309] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4316: couldn't read orphan inode 12 (err -117) [ 1556.407379][T23309] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.509745][T22487] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1556.921457][T22941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1556.994068][T20333] Bluetooth: hci2: command tx timeout [ 1557.182906][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.190117][ T5343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.225622][T20333] Bluetooth: hci1: command tx timeout [ 1557.351418][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.358633][ T5343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1557.527044][T23266] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.543639][T23266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1557.551026][T23266] bridge_slave_0: entered allmulticast mode [ 1557.560666][T23266] bridge_slave_0: entered promiscuous mode [ 1557.692987][T23266] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.700746][T23266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.709784][T23266] bridge_slave_1: entered allmulticast mode [ 1557.718208][T23266] bridge_slave_1: entered promiscuous mode [ 1557.818979][T23266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.837312][T23266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.874336][T22941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1558.059988][T23266] team0: Port device team_slave_0 added [ 1558.097985][T23266] team0: Port device team_slave_1 added [ 1558.164923][T23266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.172313][T23266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.242943][T23266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.268516][T23266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.293447][T23266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1558.325263][T23266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.396138][T22955] veth0_vlan: entered promiscuous mode [ 1558.571533][T16969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.613372][T22955] veth1_vlan: entered promiscuous mode [ 1558.808016][T16969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.854866][T23266] hsr_slave_0: entered promiscuous mode [ 1558.874767][T23266] hsr_slave_1: entered promiscuous mode [ 1558.929865][T23298] chnl_net:caif_netlink_parms(): no params data found [ 1558.991734][T16969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.035285][T23333] loop3: detected capacity change from 0 to 40427 [ 1559.046202][T23333] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1559.055368][T23333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1559.064137][T20333] Bluetooth: hci2: command tx timeout [ 1559.095371][T23333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1559.177542][T23333] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1559.193364][T23333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1559.219527][T16969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.283759][T23333] loop3: detected capacity change from 40427 to 0 [ 1559.295865][T23333] syz.3.4320: attempt to access beyond end of device [ 1559.295865][T23333] loop3: rw=2049, sector=32800, nr_sectors = 8 limit=0 [ 1559.310466][T20333] Bluetooth: hci1: command tx timeout [ 1559.311424][T22941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.323221][T14221] kworker/1:2: attempt to access beyond end of device [ 1559.323221][T14221] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1559.353664][T14221] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 1559.364837][T23333] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1559.373456][T23333] syz.3.4320: attempt to access beyond end of device [ 1559.373456][T23333] loop3: rw=2049, sector=36920, nr_sectors = 8 limit=0 [ 1559.387195][T23333] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1559.394299][ T5343] kworker/0:6: attempt to access beyond end of device [ 1559.394299][ T5343] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1559.408929][ T5343] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5 [ 1559.495995][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.507942][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.527482][T22955] veth0_macvtap: entered promiscuous mode [ 1559.529944][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.541972][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.549744][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.583503][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.594589][T22487] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 1559.616707][T23298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.624484][T23298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.631923][T23298] bridge_slave_0: entered allmulticast mode [ 1559.640429][T23298] bridge_slave_0: entered promiscuous mode [ 1559.685179][T22955] veth1_macvtap: entered promiscuous mode [ 1559.707423][T23298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.722574][T23298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.730313][T23298] bridge_slave_1: entered allmulticast mode [ 1559.755056][T23298] bridge_slave_1: entered promiscuous mode [ 1559.902268][T23298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.962271][T23298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.024236][T16969] bridge_slave_1: left allmulticast mode [ 1560.029919][T16969] bridge_slave_1: left promiscuous mode [ 1560.053570][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.062897][T16969] bridge_slave_0: left allmulticast mode [ 1560.070383][T16969] bridge_slave_0: left promiscuous mode [ 1560.083924][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.601115][T21656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1560.612807][T21656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1560.622225][T21656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1560.643166][T21656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1560.651041][T21656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1560.663465][T21656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1561.009301][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.030724][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.044591][T16969] bond0 (unregistering): Released all slaves [ 1561.154578][T21656] Bluetooth: hci2: command tx timeout [ 1561.252551][T23298] team0: Port device team_slave_0 added [ 1561.264124][T23298] team0: Port device team_slave_1 added [ 1561.315690][T16969] hsr_slave_0: left promiscuous mode [ 1561.323670][T16969] hsr_slave_1: left promiscuous mode [ 1561.334051][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.341472][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.366120][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.384507][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.456726][T16969] veth1_macvtap: left promiscuous mode [ 1561.462306][T16969] veth0_macvtap: left promiscuous mode [ 1561.474283][T16969] veth1_vlan: left promiscuous mode [ 1561.479628][T16969] veth0_vlan: left promiscuous mode [ 1562.066819][T20333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1562.096499][T20333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1562.105655][T20333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1562.114780][T20333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1562.122627][T20333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1562.130326][T20333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1562.525421][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1562.592663][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1562.748833][T21656] Bluetooth: hci0: command tx timeout [ 1563.231682][T21656] Bluetooth: hci2: command tx timeout [ 1563.384439][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.414381][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.431812][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.442252][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.452147][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.462612][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.473820][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.485449][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.495724][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.506199][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.516100][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1563.528067][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.541449][T22955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.556987][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.567757][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.577723][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.588355][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.599680][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.610144][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.619963][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.632036][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.642052][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.653750][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.663620][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1563.674072][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1563.687970][T22955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.748080][T23298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.755452][T23298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.782697][T23298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.797516][T23298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.806983][T23298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.862935][T23298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.922887][T22941] veth0_vlan: entered promiscuous mode [ 1563.957459][T22955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.967984][T22955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.976770][T22955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.985855][T22955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.183858][T21656] Bluetooth: hci3: command tx timeout [ 1564.287646][T23298] hsr_slave_0: entered promiscuous mode [ 1564.303070][T23298] hsr_slave_1: entered promiscuous mode [ 1564.309420][T23298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1564.317953][T23298] Cannot create hsr debugfs directory [ 1564.335899][T22941] veth1_vlan: entered promiscuous mode [ 1564.377217][T23266] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1564.468352][T23266] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1564.536100][T23266] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1564.559453][T23266] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1564.826032][T21656] Bluetooth: hci0: command tx timeout [ 1564.890933][T22941] veth0_macvtap: entered promiscuous mode [ 1564.969171][T16969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.106753][T22941] veth1_macvtap: entered promiscuous mode [ 1565.169963][T16969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.197355][T10496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.223780][T10496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.303052][T23344] chnl_net:caif_netlink_parms(): no params data found [ 1565.372874][T16969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.468556][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.480297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.488381][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.495903][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.511890][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.525142][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.535175][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.546984][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.556941][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.567625][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.579568][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.590147][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.600031][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.610598][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.620504][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1565.631129][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.644628][T22941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.726574][T16969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.827123][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.863604][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.875017][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.886485][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.896445][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.909382][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.919318][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.929833][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.939789][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.950860][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.961187][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.972221][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1565.982959][T22941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1565.994419][T22941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1566.006648][T22941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1566.022894][T22941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.043537][T22941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.052253][T22941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.083382][T22941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.263506][T21656] Bluetooth: hci3: command tx timeout [ 1566.279062][T23347] chnl_net:caif_netlink_parms(): no params data found [ 1566.834391][T23344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.843606][T23344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.850815][T23344] bridge_slave_0: entered allmulticast mode [ 1566.885273][T23344] bridge_slave_0: entered promiscuous mode [ 1566.905136][T23344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.912298][T23344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.919946][T21656] Bluetooth: hci0: command tx timeout [ 1566.934736][T23344] bridge_slave_1: entered allmulticast mode [ 1566.942365][T23344] bridge_slave_1: entered promiscuous mode [ 1567.201538][T23344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.288943][T16969] bridge_slave_1: left allmulticast mode [ 1567.303499][T16969] bridge_slave_1: left promiscuous mode [ 1567.312476][T16969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.337324][T16969] bridge_slave_0: left allmulticast mode [ 1567.342983][T16969] bridge_slave_0: left promiscuous mode [ 1567.363780][T16969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.807232][T23371] loop4: detected capacity change from 0 to 32768 [ 1567.881334][T23371] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1567.905305][T23371] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 1568.003071][T23371] XFS (loop4): Quotacheck needed: Please wait. [ 1568.052260][T23371] XFS (loop4): Quotacheck: Done. [ 1568.201256][T22955] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1568.211254][T16969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.226468][T16969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.254736][T16969] bond0 (unregistering): Released all slaves [ 1568.313566][T23298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1568.343907][T21656] Bluetooth: hci3: command tx timeout [ 1568.385893][T23266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1568.440289][T23344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1568.603154][T23382] loop4: detected capacity change from 0 to 1024 [ 1568.610962][T23382] hfsplus: unable to parse mount options [ 1568.627785][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.644123][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1568.880809][T23298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1570.138418][T21656] Bluetooth: hci0: command tx timeout [ 1570.281755][T23347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.293680][T23347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.311110][T23347] bridge_slave_0: entered allmulticast mode [ 1570.330276][T23347] bridge_slave_0: entered promiscuous mode [ 1570.424667][T21656] Bluetooth: hci3: command tx timeout [ 1570.443705][T23298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1570.489855][T23344] team0: Port device team_slave_0 added [ 1570.512671][T23347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.543597][T23347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.560858][T23347] bridge_slave_1: entered allmulticast mode [ 1570.575748][T23347] bridge_slave_1: entered promiscuous mode [ 1570.600558][T23266] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.627324][T14442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.636728][T23298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1570.646028][T14442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.690585][T23344] team0: Port device team_slave_1 added [ 1570.848530][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.855741][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.910293][T23390] loop4: detected capacity change from 0 to 128 [ 1570.954321][T23347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1570.990066][T23347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.078533][T23344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.100277][T23344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.128022][T23344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.128904][T23392] loop2: detected capacity change from 0 to 64 [ 1571.153096][T16969] hsr_slave_0: left promiscuous mode [ 1571.159531][T16969] hsr_slave_1: left promiscuous mode [ 1571.166664][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.182752][T16969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.212112][T16969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.220294][T16969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.258943][T16969] veth1_macvtap: left promiscuous mode [ 1571.264751][T16969] veth0_macvtap: left promiscuous mode [ 1571.270777][T16969] veth1_vlan: left promiscuous mode [ 1571.276262][T16969] veth0_vlan: left promiscuous mode [ 1571.563776][ T5343] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1571.758688][ T5343] usb 5-1: Using ep0 maxpacket: 8 [ 1571.780706][ T5343] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.830198][ T5343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1571.846675][ T5343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.854899][ T5343] usb 5-1: Product: syz [ 1571.859221][ T5343] usb 5-1: Manufacturer: syz [ 1571.865588][ T5343] usb 5-1: SerialNumber: syz [ 1572.290977][T16969] team0 (unregistering): Port device team_slave_1 removed [ 1572.385905][T16969] team0 (unregistering): Port device team_slave_0 removed [ 1573.122888][ T5343] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1573.133009][ T5343] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 1573.312974][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.320245][T11709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.375303][T23344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1573.382290][T23344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1573.443414][T23344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1573.474444][T23394] netlink: 'syz.4.4332': attribute type 34 has an invalid length. [ 1573.682528][ T5343] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1573.690366][T23347] team0: Port device team_slave_0 added [ 1573.729322][T23347] team0: Port device team_slave_1 added [ 1573.776998][ T5343] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1573.829265][ T5343] usb 5-1: USB disconnect, device number 42 [ 1573.844484][ T5343] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1573.925577][T23266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1573.951462][T23344] hsr_slave_0: entered promiscuous mode [ 1573.960061][T23344] hsr_slave_1: entered promiscuous mode [ 1573.969083][T23344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1573.973757][ T5278] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1573.976856][T23344] Cannot create hsr debugfs directory [ 1574.041567][T23347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.053863][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.088355][T23347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.167636][T23347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.177704][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.207800][T23347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.214316][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 1574.255530][ T5278] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.263201][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.283819][ T5278] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.298462][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.310411][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1574.324579][ T5278] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.346042][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.366360][ T5278] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.414259][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.465570][T23347] hsr_slave_0: entered promiscuous mode [ 1574.471236][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1574.489632][T23405] loop4: detected capacity change from 0 to 1024 [ 1574.496689][T23347] hsr_slave_1: entered promiscuous mode [ 1574.503558][T23347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1574.511131][T23347] Cannot create hsr debugfs directory [ 1574.515239][ T5278] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1574.525728][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1574.557878][ T5278] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1574.571647][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1574.585260][ T5278] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1574.634327][ T5278] usb 3-1: string descriptor 0 read error: -22 [ 1574.640647][ T5278] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1574.684381][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.715177][ T5278] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1574.907654][T23266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.012614][ T5293] usb 3-1: USB disconnect, device number 50 [ 1575.192833][T23344] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.437849][T23344] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.662695][T23344] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.846745][T23344] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.896600][T23298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.911997][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'. [ 1575.928212][T23419] team0: entered promiscuous mode [ 1575.933261][T23419] team_slave_0: entered promiscuous mode [ 1575.940852][T23419] team_slave_1: entered promiscuous mode [ 1575.949444][T23419] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1575.998739][T23298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.079188][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.086492][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.116863][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.124061][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.356323][T23266] veth0_vlan: entered promiscuous mode [ 1576.420283][T23266] veth1_vlan: entered promiscuous mode [ 1577.377861][T23266] veth0_macvtap: entered promiscuous mode [ 1577.440561][T23429] loop2: detected capacity change from 0 to 2048 [ 1577.468217][T23429] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0x52 != 0x00 [ 1577.488771][T23266] veth1_macvtap: entered promiscuous mode [ 1577.507302][T23429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1577.617195][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.660937][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.673390][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.684053][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.693973][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.704708][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.715017][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.725550][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.737516][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.748305][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.759826][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.770281][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.780663][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.803047][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.836419][T23266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.898315][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.912158][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.964796][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1577.977111][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.001894][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.024348][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.047269][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.071975][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.093846][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.117646][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.139052][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.159891][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.180366][T23266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.216997][T23266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.229899][T23266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1578.284385][T23298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.330296][T23436] loop2: detected capacity change from 0 to 128 [ 1578.596412][T23266] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.619865][T23266] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.642363][T23266] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.661839][T23266] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.879004][T23344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1578.904917][T23344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1578.951290][T23344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1579.032922][T23344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1579.200591][T23298] veth0_vlan: entered promiscuous mode [ 1579.280983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.313737][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.485328][T23441] loop4: detected capacity change from 0 to 4096 [ 1579.493265][T23441] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 1579.522208][T23347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1579.882885][T23446] Bluetooth: MGMT ver 1.23 [ 1579.888644][T23445] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 1581.955195][T21656] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1583.375103][T10496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.382981][T10496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.401715][T23347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1583.415382][T23347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1583.447085][T23347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1583.482687][T23298] veth1_vlan: entered promiscuous mode [ 1583.648127][T23298] veth0_macvtap: entered promiscuous mode [ 1583.739903][T23298] veth1_macvtap: entered promiscuous mode [ 1583.802745][T23344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.951480][T23344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1583.990344][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.153438][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.193438][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.243427][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.282360][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.298287][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.323401][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.347986][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.366699][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.390111][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.422727][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.469530][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.508593][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.562442][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.600682][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1584.898999][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1584.937547][T23298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.011208][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.018448][T10288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.111422][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.118636][T10288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.194079][T23464] loop4: detected capacity change from 0 to 32768 [ 1585.295025][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.320596][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.349000][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.363687][T23464] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 1585.363687][T23464] [ 1585.386410][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.396777][T23464] ERROR: (device loop4): remounting filesystem as read-only [ 1585.408703][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.413359][T23464] jfs_readdir: unexpected rc = -5 from dtReadNext [ 1585.432010][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.472842][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.502068][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.512741][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.523886][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.533917][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.546546][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.556419][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.568127][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.577990][T23298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1585.588485][T23298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1585.601363][T23298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.689898][T23347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.779271][T23298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.818293][T23298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.851498][T23298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.867589][T23298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.999097][T23344] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1586.692675][T23486] syzkaller0: entered promiscuous mode [ 1586.698334][T23486] syzkaller0: entered allmulticast mode [ 1586.730429][T23347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.928788][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.936084][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.265621][T21656] Bluetooth: hci8: unexpected event 0x2f length: 1017 > 260 [ 1590.619765][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.626926][T10288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.744135][T10496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.751975][T10496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.838559][T23344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.119864][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.144587][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.924208][T23344] veth0_vlan: entered promiscuous mode [ 1592.098716][T23344] veth1_vlan: entered promiscuous mode [ 1592.242593][T23514] loop4: detected capacity change from 0 to 2048 [ 1592.312763][T23344] veth0_macvtap: entered promiscuous mode [ 1592.320409][T23517] loop0: detected capacity change from 0 to 47 [ 1592.358993][T23344] veth1_macvtap: entered promiscuous mode [ 1592.365403][T23514] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.4364: bad orphan inode 8192 [ 1592.421714][T23514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.518344][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.723756][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.783479][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.875004][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1592.903375][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1592.998209][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.149308][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.205112][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.266940][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.318001][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.384835][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.434991][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.480450][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1593.494707][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.541912][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.585065][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.631994][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.641892][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1593.652492][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.666280][T23344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1593.685905][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.696390][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.708711][T22955] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.710572][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.733922][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.743810][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.754303][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.764175][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.774743][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.785811][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.813116][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.847623][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.873427][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.883278][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.908159][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.928240][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.951811][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1593.976872][T23344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1593.999110][T23344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1594.027156][T23344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1594.233086][T23344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.308598][T23344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.357969][T23344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.413438][T23344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.539720][T23347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1596.005701][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.203533][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.482395][T23347] veth0_vlan: entered promiscuous mode [ 1596.521997][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.537429][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.590497][T23347] veth1_vlan: entered promiscuous mode [ 1596.786718][T23347] veth0_macvtap: entered promiscuous mode [ 1596.831894][T23347] veth1_macvtap: entered promiscuous mode [ 1596.897228][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1596.943446][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1596.953276][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.021855][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.047685][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.075299][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.116140][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.160606][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.176331][T23562] loop5: detected capacity change from 0 to 32768 [ 1597.269827][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.292985][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.319367][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.341295][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.363622][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.396682][T23562] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1597.428951][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.464030][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.474767][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.503256][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1597.539917][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1597.557960][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1598.312527][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.354020][T23562] XFS (loop5): Ending clean mount [ 1598.372592][T23347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.554051][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.603619][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.632979][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.664889][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.695941][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.713385][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.723791][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.737568][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.749515][T23607] loop1: detected capacity change from 0 to 1024 [ 1598.755939][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.755965][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.755993][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.756012][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.756029][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.756049][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.756074][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.756094][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.756114][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.756134][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.756159][T23347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1598.756180][T23347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1598.863222][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4391'. [ 1598.906544][T23266] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1598.918738][T23347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.940919][T23608] netlink: 'syz.0.4389': attribute type 4 has an invalid length. [ 1598.990121][ T29] audit: type=1326 audit(2000000830.699:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23605 comm="syz.1.4391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60d9d779f9 code=0x0 [ 1599.025301][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1599.186287][T23347] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.217560][T23347] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.253375][T23347] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.273353][T23347] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.381783][T23617] ================================================================== [ 1599.389884][T23617] BUG: KASAN: use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 1599.396928][T23617] Read of size 8 at addr ffff8880617f9930 by task syz.4.4394/23617 [ 1599.404829][T23617] [ 1599.407163][T23617] CPU: 0 UID: 0 PID: 23617 Comm: syz.4.4394 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 1599.417936][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1599.427989][T23617] Call Trace: [ 1599.431261][T23617] [ 1599.434189][T23617] dump_stack_lvl+0x241/0x360 [ 1599.438892][T23617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1599.444108][T23617] ? __pfx__printk+0x10/0x10 [ 1599.448710][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.454355][T23617] ? _printk+0xd5/0x120 [ 1599.458521][T23617] ? __virt_addr_valid+0x183/0x530 [ 1599.463637][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.469287][T23617] print_report+0x169/0x550 [ 1599.473810][T23617] ? __virt_addr_valid+0x183/0x530 [ 1599.478928][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.484570][T23617] ? __virt_addr_valid+0x45f/0x530 [ 1599.489679][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.495320][T23617] ? __phys_addr+0xba/0x170 [ 1599.499826][T23617] ? uprobe_mmap+0xb9a/0x11a0 [ 1599.504511][T23617] kasan_report+0x143/0x180 [ 1599.509055][T23617] ? uprobe_mmap+0xb9a/0x11a0 [ 1599.513759][T23617] uprobe_mmap+0xb9a/0x11a0 [ 1599.518351][T23617] ? shmem_is_huge+0x28e/0x2f0 [ 1599.523137][T23617] ? __pfx_uprobe_mmap+0x10/0x10 [ 1599.528087][T23617] mmap_region+0x1891/0x2090 [ 1599.532690][T23617] ? mark_lock+0x9a/0x350 [ 1599.537049][T23617] ? __pfx_mmap_region+0x10/0x10 [ 1599.542000][T23617] ? mm_get_unmapped_area+0xa5/0xd0 [ 1599.547216][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.552856][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.558492][T23617] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 1599.564139][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.569777][T23617] ? cap_mmap_addr+0x163/0x2c0 [ 1599.574556][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.580191][T23617] ? __get_unmapped_area+0x2f0/0x360 [ 1599.585490][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.591129][T23617] do_mmap+0x8f9/0x1010 [ 1599.595294][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.600935][T23617] ? __pfx_do_mmap+0x10/0x10 [ 1599.605538][T23617] ? __pfx_down_write_killable+0x10/0x10 [ 1599.611183][T23617] ? __pfx_ima_file_mmap+0x10/0x10 [ 1599.616299][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.621937][T23617] ? security_mmap_file+0x178/0x1a0 [ 1599.627145][T23617] vm_mmap_pgoff+0x1dd/0x3d0 [ 1599.631756][T23617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1599.636880][T23617] ? __fget_files+0x29/0x470 [ 1599.641484][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1599.647121][T23617] ? __fget_files+0x3f6/0x470 [ 1599.651824][T23617] ksys_mmap_pgoff+0x4f1/0x720 [ 1599.656600][T23617] ? __x64_sys_mmap+0x7f/0x140 [ 1599.661380][T23617] do_syscall_64+0xf3/0x230 [ 1599.665905][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.671829][T23617] RIP: 0033:0x7fd4c65779f9 [ 1599.676243][T23617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1599.695852][T23617] RSP: 002b:00007fd4c5fff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1599.704268][T23617] RAX: ffffffffffffffda RBX: 00007fd4c6705f80 RCX: 00007fd4c65779f9 [ 1599.712236][T23617] RDX: 0000000002000005 RSI: 0000000000400000 RDI: 0000000020000000 [ 1599.720205][T23617] RBP: 00007fd4c65e58ee R08: 0000000000000004 R09: 0000000000000000 [ 1599.728175][T23617] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1599.736144][T23617] R13: 000000000000000b R14: 00007fd4c6705f80 R15: 00007ffcf03dc5b8 [ 1599.744128][T23617] [ 1599.747141][T23617] [ 1599.749455][T23617] The buggy address belongs to the physical page: [ 1599.755852][T23617] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880617f9100 pfn:0x617f9 [ 1599.765910][T23617] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1599.773028][T23617] raw: 00fff00000000000 ffffea0001aae488 ffffea0001a6bc08 0000000000000000 [ 1599.781610][T23617] raw: ffff8880617f9100 0000000000000000 00000000ffffffff 0000000000000000 [ 1599.790185][T23617] page dumped because: kasan: bad access detected [ 1599.796585][T23617] page_owner tracks the page as freed [ 1599.801948][T23617] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x540dc0(GFP_USER|__GFP_COMP|__GFP_ZERO|__GFP_ACCOUNT), pid 23298, tgid 23298 (syz-executor), ts 1596966023977, free_ts 1598364609742 [ 1599.821483][T23617] post_alloc_hook+0x1f3/0x230 [ 1599.826256][T23617] get_page_from_freelist+0x2e4c/0x2f10 [ 1599.831810][T23617] __alloc_pages_noprof+0x256/0x6c0 [ 1599.837025][T23617] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1599.842493][T23617] pte_alloc_one+0x88/0x5d0 [ 1599.847005][T23617] __pte_alloc+0x79/0x3a0 [ 1599.851333][T23617] copy_pmd_range+0x7ccd/0x8500 [ 1599.856197][T23617] copy_page_range+0x99f/0xe90 [ 1599.860963][T23617] copy_mm+0x11ea/0x1f30 [ 1599.865215][T23617] copy_process+0x187a/0x3dc0 [ 1599.869899][T23617] kernel_clone+0x226/0x8f0 [ 1599.874414][T23617] __x64_sys_clone+0x258/0x2a0 [ 1599.879189][T23617] do_syscall_64+0xf3/0x230 [ 1599.883701][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.889615][T23617] page last free pid 23599 tgid 23582 stack trace: [ 1599.896110][T23617] free_unref_folios+0x103a/0x1b00 [ 1599.901235][T23617] folios_put_refs+0x76e/0x860 [ 1599.906012][T23617] free_pages_and_swap_cache+0x5c8/0x690 [ 1599.911650][T23617] tlb_flush_mmu+0x3a3/0x680 [ 1599.916241][T23617] tlb_finish_mmu+0xd4/0x200 [ 1599.920833][T23617] exit_mmap+0x44f/0xc80 [ 1599.925071][T23617] __mmput+0x115/0x390 [ 1599.929145][T23617] exit_mm+0x220/0x310 [ 1599.933206][T23617] do_exit+0x9b2/0x27f0 [ 1599.937381][T23617] do_group_exit+0x207/0x2c0 [ 1599.942055][T23617] get_signal+0x16a1/0x1740 [ 1599.946565][T23617] arch_do_signal_or_restart+0x96/0x860 [ 1599.952131][T23617] syscall_exit_to_user_mode+0xc9/0x370 [ 1599.957687][T23617] do_syscall_64+0x100/0x230 [ 1599.962285][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.968191][T23617] [ 1599.970506][T23617] Memory state around the buggy address: [ 1599.976131][T23617] ffff8880617f9800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1599.984188][T23617] ffff8880617f9880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1599.992243][T23617] >ffff8880617f9900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1600.000292][T23617] ^ [ 1600.005917][T23617] ffff8880617f9980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1600.013980][T23617] ffff8880617f9a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1600.022038][T23617] ================================================================== [ 1600.088910][T23617] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1600.096148][T23617] CPU: 1 UID: 0 PID: 23617 Comm: syz.4.4394 Not tainted 6.11.0-rc1-syzkaller-00293-gdefaf1a2113a #0 [ 1600.106926][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1600.116998][T23617] Call Trace: [ 1600.120278][T23617] [ 1600.123205][T23617] dump_stack_lvl+0x241/0x360 [ 1600.128256][T23617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1600.133468][T23617] ? __pfx__printk+0x10/0x10 [ 1600.138329][T23617] ? preempt_schedule+0xe1/0xf0 [ 1600.143456][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.151882][T23617] ? vscnprintf+0x5d/0x90 [ 1600.156216][T23617] panic+0x349/0x860 [ 1600.160126][T23617] ? check_panic_on_warn+0x21/0xb0 [ 1600.165243][T23617] ? __pfx_panic+0x10/0x10 [ 1600.169668][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.175308][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.180946][T23617] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1600.186980][T23617] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1600.193319][T23617] ? print_report+0x502/0x550 [ 1600.198026][T23617] check_panic_on_warn+0x86/0xb0 [ 1600.202975][T23617] ? uprobe_mmap+0xb9a/0x11a0 [ 1600.207655][T23617] end_report+0x77/0x160 [ 1600.211911][T23617] kasan_report+0x154/0x180 [ 1600.216432][T23617] ? uprobe_mmap+0xb9a/0x11a0 [ 1600.221119][T23617] uprobe_mmap+0xb9a/0x11a0 [ 1600.225624][T23617] ? shmem_is_huge+0x28e/0x2f0 [ 1600.230412][T23617] ? __pfx_uprobe_mmap+0x10/0x10 [ 1600.235359][T23617] mmap_region+0x1891/0x2090 [ 1600.239965][T23617] ? mark_lock+0x9a/0x350 [ 1600.244323][T23617] ? __pfx_mmap_region+0x10/0x10 [ 1600.249274][T23617] ? mm_get_unmapped_area+0xa5/0xd0 [ 1600.254485][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.260128][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.265767][T23617] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 1600.271416][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.277054][T23617] ? cap_mmap_addr+0x163/0x2c0 [ 1600.281828][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.287474][T23617] ? __get_unmapped_area+0x2f0/0x360 [ 1600.292775][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.298417][T23617] do_mmap+0x8f9/0x1010 [ 1600.302587][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.308233][T23617] ? __pfx_do_mmap+0x10/0x10 [ 1600.312834][T23617] ? __pfx_down_write_killable+0x10/0x10 [ 1600.318485][T23617] ? __pfx_ima_file_mmap+0x10/0x10 [ 1600.323601][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.329237][T23617] ? security_mmap_file+0x178/0x1a0 [ 1600.334438][T23617] vm_mmap_pgoff+0x1dd/0x3d0 [ 1600.339052][T23617] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1600.344183][T23617] ? __fget_files+0x29/0x470 [ 1600.348795][T23617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1600.354433][T23617] ? __fget_files+0x3f6/0x470 [ 1600.359134][T23617] ksys_mmap_pgoff+0x4f1/0x720 [ 1600.363914][T23617] ? __x64_sys_mmap+0x7f/0x140 [ 1600.368701][T23617] do_syscall_64+0xf3/0x230 [ 1600.373220][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.379131][T23617] RIP: 0033:0x7fd4c65779f9 [ 1600.383546][T23617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1600.403155][T23617] RSP: 002b:00007fd4c5fff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1600.411580][T23617] RAX: ffffffffffffffda RBX: 00007fd4c6705f80 RCX: 00007fd4c65779f9 [ 1600.419551][T23617] RDX: 0000000002000005 RSI: 0000000000400000 RDI: 0000000020000000 [ 1600.427521][T23617] RBP: 00007fd4c65e58ee R08: 0000000000000004 R09: 0000000000000000 [ 1600.435491][T23617] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000000 [ 1600.443459][T23617] R13: 000000000000000b R14: 00007fd4c6705f80 R15: 00007ffcf03dc5b8 [ 1600.451441][T23617] [ 1600.454650][T23617] Kernel Offset: disabled [ 1600.458966][T23617] Rebooting in 86400 seconds..