last executing test programs: 1m51.597485544s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 1m29.83018558s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 1m17.444855471s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 59.060321761s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 39.147664215s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 9.051991821s ago: executing program 0 (id=472): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69) close(r0) execve(&(0x7f0000000100)='./file1/file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) execve(&(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000340)=[&(0x7f0000000480)='=\xbe\xacQ$\\ \x00o\xb8 \xbf_\xc4\\\x81XD\xbeL,\vDE2J2\x86\xce\x9a*\xb7\xe0\xae\xe1\xa8\x89g\xf2a\x02\xd4\x05\x1b\xcc\xbep8\x92r\xf4\xb7\xe5\x86\x00\x00\xf0\xdc5\x00\x00\x00\x00\x15P\x00\x00\x8c \x04\x8c\x8e\x85\x1cK\xd9\xbe\x1e\xa3\xd0%\xba\x83\xfb\x9e\xcfp7\x05e\x11\x00wyM\x86\x92\xdc\xe5\x06\xa4\xd8\x0e\xd3\xd3\xbb6)y\xf6%m\xc6Agzj\xfb\x97\xd0\xc8\xa7K\xac\xd6:\xe4\t\xa59c\v\x98\x96\x8b\x92\xca\x8e`V\xee']) 8.977341477s ago: executing program 0 (id=474): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1000, 0x0, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140)={0x0, 0x7fb2, 0x200, 0x0, 0xfffffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x4014) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[], 0xff2e) ppoll(&(0x7f00000013c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 8.588085449s ago: executing program 2 (id=476): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000005300850000036d02000000110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r6}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000002000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r10 = inotify_init1(0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) inotify_add_watch(r10, &(0x7f0000000080)='./bus\x00', 0x400) unlinkat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 7.511939937s ago: executing program 4 (id=479): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x2040400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xa}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000020400085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r4, r3, 0x5}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000680), &(0x7f0000000240)=@udp=r5, 0x2}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.790650146s ago: executing program 2 (id=481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x59}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x15) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x2, 0xfffffffc, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}}, [@policy_type={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 6.649798227s ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x4) (fail_nth: 9) 6.607753821s ago: executing program 4 (id=482): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r1, 0x84, 0x1b, &(0x7f0000000000)=""/4105, &(0x7f0000001080)=0x1009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000700)={0xa, 0x4e21, 0x9, @empty, 0x4}, 0x1c) 5.813980105s ago: executing program 2 (id=483): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) (fail_nth: 18) 5.550434246s ago: executing program 3 (id=485): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x0, 0x2, 0x6) getsockopt$nfc_llcp(r8, 0x6a, 0x3, 0x0, 0x20000071) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001811000044edf118fbc873fb53d16114b124d5215cd6e28a22ab13b89ae6e6a7909c57b5e483e9671eb1193d2459996bf8095f3a61b2773a4b5b4bdcb80a5531990bceaab9afd7e46f35f2925b03089593a208b80249c9bd058869606dbefee3c6c08101996fdab09a5cdbaab0759e8136dd7397b3d40e35fc8ad14a6d7c90201c3a91e73c7f2b2a923edda9e61b0be135015bce930ee7dce84115f57c25f7dd886103000000000000007c0bb5618d93c4d52378d8f3b093e5126b3f44864cb41a6ea773afe8109ee516e912290205cd03a688a7057cf16d8146ddebec6115c696440ff2b82b807dc8edad807b7a654d98f86d6626c86b2f3f2b4fa322ce0178bfe32d2e1ea6a5ed153d045b6a7e28edc866d0e0230f600159fcc068634b16d4ecfff2aabcc5cec7c713c7046b91beaa2e7cd9922b1602a0c22f068e5e7cdd4c730d75bb1c6e8509ada718c7696ede0bd2cf60c9e87f29df2a287c0c1d59642a93a244fa64d715adbdc14ae3d06424e77cce08b39be206ddca0dfd8135bf8256361a4180b0da9914ab217ddf61bcaaac687cc8e0fea3c1ddac82ac930fcbef20e0309583348e01ce08f36c7374387fac8de4c5f2305b7eb55f99e887f60430590c8333ef7a7b47cdf07711b3ab1d9880839b8400b6484bb0ab8af126784c2ea1373a00000000000000000e1bfe890c6c23bb98acc2dc01473711158ccbfead566aa6370fbe27ef37a90ae3853f", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)='\x00', 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x2b, 0x0, 0x0, @link_id, r12}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r8, r10, 0x19, 0x2020, 0x0, @prog_id=r11, r12}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map, r2, 0x4, 0x10, 0x0, @link_id, r12}, 0x20) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x76, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @loopback, 0xa27}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) 5.335859684s ago: executing program 0 (id=486): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x1, 0x1}, 0x48) mkdir(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000240), 0x4001) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000002c0)={0xfffffd4a, 0x0, 0x0, 0x3, 0x0, "10120dfe0ef7f0200000ff490a0180002ae9ff"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000040)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) 5.277028329s ago: executing program 2 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x7, 0xa260, 0x4cf, 0xffffffffffffffff, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xf}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000528000)=[{0x6}]}, 0x10) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) close(r1) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff002892", 0x21}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x1}, 0x90) 5.092557854s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xfffeffff, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x700, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x3c}}, 0x0) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002940), 0x784, 0x4000810) 4.882709711s ago: executing program 2 (id=489): r0 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@nolazytime}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES64=r0], 0x841, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0xd, 0x2a0, &(0x7f0000000840)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f0000000200)=ANY=[@ANYRES64=r5]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) 4.16041052s ago: executing program 3 (id=490): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='s\x03\x00rce', &(0x7f0000000180)='c\xd8\x82\x9c\xe8-\x80\xab\x1a\x15)::9\xd1', 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffe9ffaaaaaaaaaabb0000000000000080000000119078000000089078"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-(\xb94\xf1\x9c\x83\nbo<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<>\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x4e21, 0x9, @empty, 0x4}, 0x1c) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0xa0a00, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x0, 0x3d0, 0xd0, 0xd0, 0xd0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3d0}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0, @local}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8) 3.559798899s ago: executing program 4 (id=492): r0 = syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x80, &(0x7f0000000040)={[{@noalign}, {@gqnoenforce}, {}, {@noquota}, {@noattr2}, {@gquota}, {@nolazytime}, {@largeio}]}, 0x1, 0x9830, &(0x7f00000097c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r1, &(0x7f0000000000)='./file0\x00') openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000b00), 0x4) preadv2(r2, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/184, 0xb8}], 0x1, 0x0, 0x0, 0x0) 2.999224275s ago: executing program 2 (id=493): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@minixdf}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x40}, @window={0x3, 0x0, 0x8}, @sack_perm, @window={0x3, 0xffbd}], 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="10000b0000000b200093ffb3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="008000000000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x12, 0xa10, &(0x7f00000001c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010300000000e82000001100000008000300", @ANYRES32=0x0, @ANYBLOB="df4a5cbad921cf7a32314c844f9ae0e968431af30e889cacfc1189675152491ae8c7cb3d20cbb362592a0610968f520c3e3fb8413e11766ac2fa59ee30c13e231535a8ccb48fdf8484511826a53fbaf7132ed91f44a774b458f19d51d1c9c401052ba25d08d88cee501882ea6573746e1db935fd1cbdc8b214376c30cfab9d48250b434ca638f3f4b9f34a48a429face261e8622d389e3ebf8a7cc1aa83ef892230d6da1f2"], 0x1c}}, 0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r11, 0x0, 0x0, 0x1000f4) 2.93021292s ago: executing program 0 (id=494): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x1014800, &(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="32dca5cdedbec9fcb3c4bd727fd51ac29b0e2781fe6159fee55ccf2b17599ce3901577b117cfff458a6d0d61d148e71eea2abfc417c7e7447b8e48fc2f05644e983bf708037ee4cc82111755f55870aa3434dda9d944e5ec8941b01b2cff7ebd8cc86f03e041a4c4dcb9b9d91b25c0c3648f925fd39e811bade26712197ae07361496c68d4f8f2c6829a6a5d5f1d2c637861303b84eca61b9fcef7bf8c591cf466b53bac4c45dd42287155ce38289076b25ae1cc62fe4b9cddc911a092c617e1eec9a6607a6a1fd01db45ca9a1b22399d6d0e7f7a2dc2fbc5de33902bf4a422d8e99ea65947046f6461708e26a0750d53d693e38e3ec0f3e326ecfd35018966492c100b5fba05d3357bd0c401a85beab8e280b1f890625c8673e98b794fbb7a3e8708e661452fa9123ecfe6c4d42553b36659776d823ce0dfb001e3526949c6b3a8d43f12ead5b67b5467f1b835295df5d5549e9c025b73e81a1dfbe4a16d4c719af8823a5526f0292d040119fcb70fd83deec45688fcae9d76b981c12735f922d70a7edcc4e83b80f6d77955323125b5f3bac03dfdf883208712096bbf03ff01e5fffc8ee5c08dec70a6251c09b2c55f8926584845b75dca791c4ed6423fd9776a64dab4b78ccb2ec86ca52554ebae3cad260d790e1610c69a44acec445edd771a69d3f4bff91b14bd6877d51d57e5643ed86b1938789bd13866fabbfaddda9eadb4514a435f74532a3315d6fc3f213f78335049422f0928482712e5856e5e7a2ff8da4a31b4fcdf791bcc6f1facb01856338b2c17d03b26ac9b91895d231ce346f9b69ff8c26b46587c7f64dc89bf468742baec654bdd9ec3e623373856fc7bb032237a78a216b033e135e9464d86fd640308685ff51555e62fb586a3baf0113fb90041567d55457e4cc6964fa9249bded35beb4b492fe465769a79ab772aa975743af81c3ac0a4420c616ef2c9a7425fc08d80cd349911f77268e503e58b91e689546c6281f5296616adf1225e6612708062049cc947a955499e3cc36c11c2c363a35cf83a7e3a7d301aaebf0a96638a2e2212cf11b317f439514d76ecae50b7f9ad3f771cab12f6955a7d350238f04cba7a812f0d2d40f4343c42486a5e0dc9ee3af6eb4f20d46e02c13e07bf0bbb88af62f81d3d8acb130937b1134285a9b6fc9cd2208734ac972ab2420e5a86e3773a77e560fcb5822355a170fe32d2eb5692a274e24871496f97f7db83131feefc723ac3dcd5389a99bf6a85a4b08c1df64a645d9809174415dcf489bc076e567aa726827e375d054751af3fe0066ccd701de636c101b4845c673ecf93097d000e14004d539022dac23de112cc3f4b323ad20ae2b7cd6dc616089c55ac13bdc980badfdd59112f6be2f7d7d5372b714d2cef6d26ecd85a4e70ce9ec07df912157d9391a1457b6b054c86abd9a2be0c7c5386ad07e34d0e23be29455af04c3c27771041e2e6d4e7243f357b9cad0e799365276f321dfa2bf5bda959912de696fb33d757490cfc15bb291aef058cd53616255ca422e1384238339ade451908a6c4721205c54acc687d1391e6bd2fe8f934a7d874cb34d55fdfb5493c9db01f624b1ea6ebf4a3fb60b970827d7d49e19d4fd7c6bc7c78c9b4a1b6562e7a3254d8d25181768c2dc32fb3dfb75641bcc8fab55021471f54d98db571c6c67bb9af4ce4102afa5b729e90886a8f9e77269f752d32318e88ff7a4056cbf8272760533caf35434a5ae7cd1353e5cb8f30009c24fd7280fc265aae56adb8b99e178e6bb7402078dab8701cbcbfc51b384a4798929799b88bbddc161fad01bde59ea349f06c4ce1177a4c7c5ef5a6171e49408bde22a0db8cb474dbfe5d3add36adfb1320fa23c72c0c0b55a3713f4bd62cfd4fb96a5ed7245f738b3692fb43b9ae001338c044477f63349440467184d85531b7596ebe1f518ce1f5ef5f026e0f1bbf58e935ef1259a3c862165413f19b75080e2d3c39499ffffff7f000000000853c45ad25ff4aced9a9f394c7aaee1741bcc80e8fdeee539703526fc6ee920964ac33bc61efc816a81c1a6bb11b2347b4be8c8aa386b2afeca3f3e80020626b219a467e71af7cf55b5e3804da06268dcbe7ec6132f9a990d263ff013920da553b477ef29f9499137a6db7b3ae0f57e97e2deb29275e06bf9bba3491192703eadb43b498a0abaa05ef4e0ef0d1dae2c0b1ddee7c3b3e47c3cf37aa3274fe326cba6cfe455edd70b8d5c5a437e14512b27dc96c604dd980fe18d455a4244fde0c54161f6526fdf07879dade807319972d6c6c1c9f8c46e14f52b032c7fe6fc6efd8917ddec08f00023851c92a1e947e0abc2a38fc4e5d5e54679df457c3fd7d82b96b9ef951139082aac3598ff8f9ab373d6a626bc282936db001fc3bc8528933204a638c80a1e4a3ae637bcf7368c54f294d9568544a64935b8d6bfa210a57c0f7c410d7a94a62a743d804ad58829ddfa503278656485bf96e2502d9bb3034a0c020b0ceb2b46025be9583b2d0e0872c0204322442c0ebb87843eb6d2574c5c3932d7adf39525862323a5acd0ba8c57b016ab8e1dad23a2305599e55ccda021a31050a9db17e78a2bb8c4afe28308d727d4681ebc7efc9a713842c41f09ad33a30d980bc80c6a4397e359115793f881853ecb8a6feef89ae549fea7b82310f25c0a65c78dc7d5e5b9bdf0f387e157e1020547f907fac0bb48704401664ebcb2bf5df5b231005896a5fcd4165971fc39a70091509583837e0062609ec7b3cb35947509332a009f20692544232bd5d3aee74d793c24aaff361859442cad1e167e10e7236db577694085bbda3b00e2295dcc905f15d10f2e839eb18a7e3698a33230beab04d759117259361c9da84a947766d883f40ada108073911055a9172f9ebc835b094041ad793c482bfac8858bc7a722fb82e55fc02350626125aed7e03e70557d93a8157c795813d6e686be367ddf21d764d875b1f5b06aa8d841f0285b8b9ec49218051034404cb37ca41487451682bf2a81a97764ff3a2d6ba3c7d1a535c08855952a8f578fc5380cc5674f1b103bf2297b724311d9006117436a082387d2e99de6df054e17a2b4c315b77ae38e5623fa8fca103924ea57165b5652c17a09f6e4c0748b0b1bad4b67d06125a1fb563e02f79815954b6d52c40a2744d037fe2a664414aa22bb35ece515f5fec241b377e7528a5db0ba6401577ad7ba54f3867ff4260a175830d449890ed04c1708d7e4672c018fec7379f9d822d1dec67b0c104bfe28254a66aa4e088b366c213395dae14de68ae3311307ce0a6d029b44e93075168c8a3461d1ad37add8b4da8fa3cde3f72ed4135ba940719989094280eb2ec38f1f780cdf09a5d6e74a62e97bcec008be27c197b97f0386d4f171c177ee2fb3c0a6309b88a4e7fd252f1e82bbe14fa602b8ccbfac28ab95da6688f32c60e4cd4163fd6eca9de2439b4b412ff8f0f1a61be37a76865967d3ccc3eb1ef02661ec06fa0ea71d7dfcaeaa54d7d700459366d2b90f70551a55048ae15482ab611ecccacd4012d326037ece523c61d9a5620946d57ff7326005cff29300365234d2a7bd1f3666a9e8ab2102ad8e7b5ac87710625485d71577aa8918bb9072113dd905e18c120a0e68cc22f912b79d24aef67fc513f54934f5fe5f3ea4abd7fb27a2b47c0956028f59b726109f0c4f07b033cace2ba3fe0184440f28e5eb50e3cf510be5993aa7a53c08a12e497846e9bc2d01701a03df389da09feb9ef05f4fed16e81f6dd7d8004a6ca0fedfe479cb0b5fb919e47270151280ca81fdeac996d5066d8fd73974f8bb7f3125d2820f315311e3681404c4bd43f258aed972762434c4a7cccdbc8209ac2b18bbc33ad60be7530801a0b051e3957e5f0de24ae99f767bf90d98889a299061109f368d271a6bdafd64bd9e8a993e0dde5701b454a443ae859019bf1cde126653e69548c34c0aaeb535144331f674f9e545ed04a5d7b01a398a6b4b69978a02b5a5c506f74372637a0137cb1502a77d616e67647ba74cf2c6b7c33e5b8e49a0211b739190ecf12565f630803e551ab668e175a063cadf6b88be55ab98250b9c9d3ffc2f755eb41c6813bd7da1d4a7ccf514a7435069bb9bf47d7c2b4fde61c2eb0696ecf8eb8559371cb547b825e6d550d212e7b384380dfbfe0214e786a29cb52b53ab21776e8ae0fd32a51c6c268f928dce13f4a9bb5d53635343c854dcbbff37b87f495d6e96ad229b8ec541316dc3d13bc7c0aafd591480f0d0631289c619e7b2c9480fce95feb5eee82f9de25c20bdc7e1230280f4cd29c5a26bcbfc3c7ca9f5e4f7eff085dd7d810a6537c28cddda40fc1b8f0ff5cca65c752f37f182a002c3e9b34f2b88f23ad0ffb13c5199730ac01b0a8224c7e526625697dfcf264bb4aac83d210a55389c37bb71bc931893b51baae3c4be98e3842d962a27003bb8156ff1fa2b41efcddd432cc00fcf95b458d06f40b237bafdf525c88c09a0c9c607cb4468fe5f3b610872c66044dcc10190b16de8208e3ad64072b7d711dd0de5efde61ee63b703dc26a201156ccbb1c59a17a38ff0c8796f7a37da4a5975c7bedc0515fcb1d7bccd6e67327c65f47ba69d2717ce377357b51bf9738e0faed16ca2b6b592cc0ab672f9f260e67692544717d17b5f1d153c24d5ee63e0ea1c1481f340d6137613645ce22e8a5fafbe54ea561b6c092cb49752ab3903141163da48a114170803e318f76d56ad58c5b65090824cac8929ca24958ac36a29419e6139aa98e736765d222ba3c4edefd6edae7e4d68ff6d81cf90e6515c53998423e7ff28fddff6ed7374cef7c85e8c9e20e581a61a14c8aa467b7a3928adc44a12853a7a5fc8b3b315b2bb35c03bcb348702382d6c47ecb4f026f32547ce55a9e4fedc74214159d945f33006c1b10df2c745ee5b8f422bcece3fc132d13a26210868f1c2c98c02430d318d2df8d9aff1266adb651f567eb74ccb3a4a9ab611de28e0823c8a20035390ab736a62b29975e4fea47e8a6939cbda05b4750ddae7881247809bc3f3f3cea7f63a577b0bd0067aaea25006347fced467c8b026f6de3b6abd8ca2d565c978c262baed39fe45457f27ab8368d4c1055cf898e73eb9bfe28cd038424b94bc58bec9da8472f2080b9ebf1f008bbbeab66a2b4bf14530b9ec126a57743260ef5d07ac0d675cc18b5c1100c14024196f06e3401a2b6df7967d20c0e84490ce64f33339b54b38d9ea15e48590fa95694ad87afbd91e8b571a9b5bd2b6e3f6aa68f70a29c22ae0b98be9c277b3f81e0406187229785e9debd80e2e805b5e4c8a6e6dbe9c1c045e914af6b6bdc0c1320a3e3afe0b26b3f684e34fbbec72a7aa8855ddf3aed3ac11fbfbee9f297033aa7340918d67ebe6223ac47683caee83df79ccf0ceb62b56772247b33ad8e2983e52e3bb4817707132c56546ce388ba76502e6568ba1d62fe3a25cd3b7115ab3baa39c3cd0787db461c70ef317ebc96138faa0cbbbcff18b48242f5237d3e80abdaab2d194e39e090053dc24201fb25fd79f32fd1bc70e7a7ba5df7741fdc073e03c8ca3f45a58476b70d3ee3659a2d5572c1c521fdbad70d9c6bd4dceb04234f119f72e18c8c478b6621b88771d2f29e2cbe0a8faa69e9e0b7b2e0749d9201fe2632c3787f17b1e7d7a3daed0c2a0b1d715f2798c412140bd2a8af8f3af2775731434b4e839d544b123dc5c7bf0371f89e6bd54edba40e6eec1b96a52f31adfee973d4604e6d31b7b66a4e0ec7c9e9175034c8684be6dad97302c8bbc3bbc558726cdb22edb60237e1275a626562f1da73ce0a6afee1076d4834999bfc4c88ee65adef6fe0a11c042fe53c0e448d9fd5ce8400a2a58160e5d23ea35ed3d6323", @ANYBLOB="a240939593dcf5d96f4ae9a6a307fed9139e08b16fa6096b876c40f3645fe4793498f349e30de690cc6f68a0bd843e5fc9cd54566eb36c05efba9e7e11805a000853610e8dc7c7a9ae20", @ANYBLOB="23ea354d55dcb3fbf7f036f3f27910e04a0728241007e3d26c04e2d88ef1cfa9c3f93d9fea5a199f114d4ea413207106f15c2543536adc4b605802008db0bd0e8c87d8edad0f16f3152e57217af1d25fb6d4e968cf86a2aa62f79122", @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES16], 0x3, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x3, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file2\x00', 0x1000b, &(0x7f00000000c0)=ANY=[], 0x21, 0x1cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040), 0x1c) listen(r4, 0x80080400) socket$inet_dccp(0x2, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000080)=0xf0) ioctl$CEC_S_MODE(r6, 0x40046109, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x11, &(0x7f0000000040)={[{@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0x59}}, {@nobarrier}, {@auto_da_alloc}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") 1.607052838s ago: executing program 4 (id=495): ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xffffffff, 0x7, 0x4, 0x1, 0x800, {0x77359400}, {0x2, 0x1, 0x10, 0x6, 0x0, 0x1, "87d1d5a8"}, 0xef24063, 0x4, {}, 0xb4, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/vlan0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000002c0)={0x7, 0x0, 0x1, 'queue0\x00', 0x2}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000380)={0xc4, 0x9, 0x100}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000400)=0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000480)={0x8, &(0x7f0000000440)=[{0x7, 0x2}, {0x7, 0x7}, {0x10, 0x1}, {0x7fff, 0x5}, {0xfff8, 0x6}, {0x2fff, 0xa00}, {0x7000, 0x5}, {0xb4, 0xa0}]}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000004c0)={0x17e, 0xeb, 0xfff, 0x81}, 0x8) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f00000005c0)={0x6, &(0x7f0000000500)="14cb7513f4dfebb3466d3f9dc37cd2630b9db8093eac6ef104cdcab1db4b9794c06a4611fbe4d9e1c8289b6c189bfa22d45333fbda023ad21466e711c11add60f58ea49319db760c52688d77db6d2a4e527c8260596c03ef27a45cc75a971dd530c6d7aae912be1e0f8411bd59d97e2d3babde39440217b0fd5d33895c20c6ac719d91787b742225173a119a7dab0c81b2c2d1f2810b98a6780199f181e52ffe213a596d36ae"}) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000600)=0x8, 0x4) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) set_mempolicy(0x8000, &(0x7f0000000680)=0x700000, 0x3) ioctl$int_out(r0, 0x0, &(0x7f00000006c0)) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000700)={0xf, 0x8, 0x80, 0x9, 0x9}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000740)=0x3e) r5 = openat$cgroup_ro(r2, &(0x7f0000000780)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f00000007c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000800)={0x0, 0x7}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000880)={r6, 0x8}, &(0x7f00000008c0)=0xc) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000900), 0x40002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000a40)={&(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x4, 0x2, 0x6}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x48, 0x140c, 0x300, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x24008080) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000c00)={'bond_slave_1\x00', &(0x7f0000000bc0)=@ethtool_test={0x1a, 0x1200000, 0x80000000, 0x1, [0x4]}}) readlinkat(r2, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)=""/123, 0x7b) 1.459965061s ago: executing program 0 (id=496): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1000, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x4, 0x3, 0x0, r0}, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1866, &(0x7f0000000140)={0x0, 0x7fb2, 0x200, 0x0, 0xfffffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x4014) r4 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[], 0xff2e) ppoll(&(0x7f00000013c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.262840666s ago: executing program 4 (id=497): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b36e48d276c1a0fce104", 0x0, 0x7fffffff, 0xe8030000, 0x300, 0x0, 0x0, 0x0}, 0x50) 1.116823809s ago: executing program 3 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000680)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffeca50000007d000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x0, 0x10001, 0x9}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000000000000000000000000000000000000000000000000000000000000000000200"/144]}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r4, 0x4000}, {r6, 0x20}], 0x2, &(0x7f0000000240), 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x38, 0x2b, 0x0, 0x0, 0x0, "", [@nested={0x25, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic='P']}]}, 0x38}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={0x0}}, 0x48008) 1.051934184s ago: executing program 4 (id=499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x1, 0x1, 0x1, "b8"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @local=@item_4, @main=@item_4={0x3, 0x0, 0x8, "4156ee12"}, @global=@item_4={0x3, 0x1, 0x2, "63a7bef9"}]}}, 0x0}, 0x0) 915.878085ms ago: executing program 3 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xfffeffff, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x700, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}]}, 0x3c}}, 0x0) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002940), 0x784, 0x4000810) 0s ago: executing program 3 (id=501): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'wg1\x00', 0x4531}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) syz_io_uring_setup(0x31e, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$binfmt_script(r5, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) kernel console output (not intermixed with test programs): sts on: batadv_slave_0 [ 157.625487][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.638933][ T3647] usb 1-1: Using ep0 maxpacket: 16 [ 157.644328][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.663281][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.673201][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.684394][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.729885][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.733119][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.745410][ T5364] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038 (0x7fffffff) [ 157.753461][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.781692][ T3647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.785844][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.801612][ T3647] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.810894][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.814016][ T3647] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.823158][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.842463][ T3647] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.854568][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.854588][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.855807][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.872693][ T3647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.880321][ T5244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.906288][ T3647] usb 1-1: config 0 descriptor?? [ 157.910367][ T5244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.922857][ T5244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.933988][ T5244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.949721][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.992907][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.009160][ T4988] attempt to access beyond end of device [ 158.009160][ T4988] loop4: rw=2049, want=45104, limit=40427 [ 158.914742][ T3647] usbhid 1-1:0.0: can't add hid device: -71 [ 158.926838][ T3647] usbhid: probe of 1-1:0.0 failed with error -71 [ 158.937737][ T3647] usb 1-1: USB disconnect, device number 24 [ 158.970233][ T3649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.016235][ T3649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.044721][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.070760][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.071927][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.096827][ T3811] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.120839][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.410157][ T5378] loop0: detected capacity change from 0 to 4096 [ 159.482774][ T5378] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ' [ 159.687045][ T3811] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.704114][ T3811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.731109][ T3811] usb 4-1: Product: syz [ 159.745421][ T3811] usb 4-1: Manufacturer: syz [ 159.760597][ T3811] usb 4-1: SerialNumber: syz [ 159.789686][ T3811] usb 4-1: config 0 descriptor?? [ 160.057847][ T13] usb 4-1: USB disconnect, device number 6 [ 160.146824][ T3613] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 160.526881][ T3613] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.895973][ T5394] loop0: detected capacity change from 0 to 131072 [ 160.922792][ T5394] F2FS-fs (loop0): invalid crc value [ 160.932696][ T3613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.977443][ T5394] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.024110][ T3613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.044063][ T5394] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 161.214480][ T3613] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.585929][ T3613] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.603902][ T5403] loop3: detected capacity change from 0 to 1024 [ 161.618445][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.635554][ T3613] usb 3-1: Product: syz [ 161.640504][ T3613] usb 3-1: Manufacturer: syz [ 161.657303][ T5403] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 161.708124][ T3613] cdc_wdm 3-1:1.0: skipping garbage [ 161.713359][ T3613] cdc_wdm 3-1:1.0: skipping garbage [ 161.721000][ T5403] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 161.759038][ T3613] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 161.919455][ T3613] usb 3-1: USB disconnect, device number 10 [ 162.135196][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.189174][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 162.210423][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.296544][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.381484][ T3742] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.429783][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.444854][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.453342][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.461667][ T5412] device bridge_slave_0 entered promiscuous mode [ 162.471770][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.479082][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.487573][ T5412] device bridge_slave_1 entered promiscuous mode [ 162.552407][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.677683][ T5424] loop2: detected capacity change from 0 to 512 [ 162.696402][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.706949][ T3742] usb 5-1: Using ep0 maxpacket: 16 [ 162.814800][ T5424] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.287: casefold flag without casefold feature [ 162.828122][ T5424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.287: missing EA_INODE flag [ 162.841122][ T3742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.852451][ T5424] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.287: error while reading EA inode 12 err=-117 [ 162.865241][ T5424] EXT4-fs (loop2): 1 orphan inode deleted [ 162.871046][ T5424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.883000][ T3742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.895030][ T26] audit: type=1800 audit(1723376658.747:20): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.287" name="bus" dev="loop2" ino=15 res=0 errno=0 [ 162.917089][ T3742] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.931222][ T3742] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 162.956058][ T3742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.959653][ T5412] team0: Port device team_slave_0 added [ 162.972373][ T5424] FAULT_INJECTION: forcing a failure. [ 162.972373][ T5424] name failslab, interval 1, probability 0, space 0, times 0 [ 162.986653][ T5424] CPU: 0 PID: 5424 Comm: syz.2.287 Not tainted 5.15.164-syzkaller #0 [ 162.995528][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 163.005693][ T5424] Call Trace: [ 163.008956][ T5424] [ 163.011867][ T5424] dump_stack_lvl+0x1e3/0x2d0 [ 163.017311][ T5424] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 163.022927][ T5424] ? panic+0x860/0x860 [ 163.026985][ T5424] should_fail+0x38a/0x4c0 [ 163.031473][ T5424] should_failslab+0x5/0x20 [ 163.036164][ T5424] slab_pre_alloc_hook+0x53/0xc0 [ 163.041189][ T5424] kmem_cache_alloc_trace+0x49/0x290 [ 163.046474][ T5424] ? sctp_add_bind_addr+0x85/0x3a0 [ 163.051574][ T5424] sctp_add_bind_addr+0x85/0x3a0 [ 163.056601][ T5424] sctp_copy_local_addr_list+0x2e7/0x4c0 [ 163.062234][ T5424] ? sctp_do_8_2_transport_strike+0x810/0x810 [ 163.068285][ T5424] ? sctp_v6_is_any+0x5c/0x70 [ 163.072957][ T5424] sctp_bind_addr_copy+0xa9/0x3b0 [ 163.078057][ T5424] ? sctp_assoc_set_bind_addr_from_ep+0x71/0x190 [ 163.084462][ T5424] sctp_connect_new_asoc+0x2e5/0x6a0 [ 163.089743][ T5424] ? __sctp_connect+0xe10/0xe10 [ 163.094576][ T5424] ? sctp_sendmsg+0xb21/0x3370 [ 163.099457][ T5424] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 163.105117][ T5424] ? security_sctp_bind_connect+0x86/0xb0 [ 163.110943][ T5424] sctp_sendmsg+0x1cd9/0x3370 [ 163.115823][ T5424] ? sctp_getsockopt+0x7f0/0x7f0 [ 163.120754][ T5424] ? aa_af_perm+0x350/0x350 [ 163.125250][ T5424] ? validate_chain+0x112/0x5930 [ 163.130187][ T5424] ? inet_sendmsg+0xfc/0x310 [ 163.134761][ T5424] ? inet_send_prepare+0x250/0x250 [ 163.139866][ T5424] ____sys_sendmsg+0x59e/0x8f0 [ 163.144623][ T5424] ? iovec_from_user+0x300/0x390 [ 163.149630][ T5424] ? __sys_sendmsg_sock+0x30/0x30 [ 163.154752][ T5424] ___sys_sendmsg+0x252/0x2e0 [ 163.159767][ T5424] ? __sys_sendmsg+0x260/0x260 [ 163.164985][ T5424] ? __fdget+0x191/0x220 [ 163.169307][ T5424] __se_sys_sendmsg+0x19a/0x260 [ 163.174773][ T5424] ? __x64_sys_sendmsg+0x80/0x80 [ 163.180250][ T5424] ? syscall_enter_from_user_mode+0x2e/0x240 [ 163.186231][ T5424] ? lockdep_hardirqs_on+0x94/0x130 [ 163.191518][ T5424] ? syscall_enter_from_user_mode+0x2e/0x240 [ 163.198150][ T5424] do_syscall_64+0x3b/0xb0 [ 163.202820][ T5424] ? clear_bhb_loop+0x15/0x70 [ 163.207868][ T5424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 163.215282][ T5424] RIP: 0033:0x7f456bce29f9 [ 163.219729][ T5424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.242389][ T5424] RSP: 002b:00007f456a161038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.250881][ T5424] RAX: ffffffffffffffda RBX: 00007f456be70f80 RCX: 00007f456bce29f9 [ 163.259026][ T5424] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 000000000000000c [ 163.267611][ T5424] RBP: 00007f456a161090 R08: 0000000000000000 R09: 0000000000000000 [ 163.275750][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.284234][ T5424] R13: 0000000000000000 R14: 00007f456be70f80 R15: 00007ffeff4e3458 [ 163.292625][ T5424] [ 163.295686][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.308384][ T3742] usb 5-1: config 0 descriptor?? [ 163.330573][ T3815] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 163.355237][ T3815] Bluetooth: hci4: Injecting HCI hardware error event [ 163.380510][ T5412] team0: Port device team_slave_1 added [ 163.387473][ T3583] Bluetooth: hci4: hardware error 0x00 [ 163.732243][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.846877][ T3813] Bluetooth: hci0: command 0x0409 tx timeout [ 163.924755][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.336926][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.456868][ T3742] usbhid 5-1:0.0: can't add hid device: -71 [ 164.463919][ T3742] usbhid: probe of 5-1:0.0 failed with error -71 [ 164.496287][ T3742] usb 5-1: USB disconnect, device number 11 [ 164.509931][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.548583][ T5461] program syz.2.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.577021][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.593172][ T5465] loop3: detected capacity change from 0 to 512 [ 164.618139][ T5461] loop2: detected capacity change from 0 to 4096 [ 164.664517][ T5465] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.680207][ T5465] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 164.694188][ T5465] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.294: Corrupt directory, running e2fsck is recommended [ 164.708797][ T5465] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 164.718374][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.764287][ T5465] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.294: corrupted in-inode xattr [ 164.779811][ T5461] loop2: detected capacity change from 0 to 1024 [ 164.797551][ T5465] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.294: couldn't read orphan inode 15 (err -117) [ 164.817103][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 164.840200][ T3613] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 164.903935][ T5412] device hsr_slave_0 entered promiscuous mode [ 164.912289][ T5412] device hsr_slave_1 entered promiscuous mode [ 165.057223][ T3703] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 165.986904][ T3613] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.000219][ T3613] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.021170][ T3613] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.029309][ T3815] Bluetooth: hci0: command 0x041b tx timeout [ 166.033954][ T3613] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.096885][ T3703] usb 5-1: Using ep0 maxpacket: 16 [ 166.286887][ T3613] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.317166][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.448401][ T3703] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 166.474191][ T3613] usb 1-1: Product: syz [ 166.478668][ T3703] usb 5-1: config 0 has no interface number 0 [ 166.485043][ T3613] usb 1-1: Manufacturer: syz [ 166.490029][ T3703] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 167.029155][ T3613] cdc_wdm 1-1:1.0: skipping garbage [ 167.034397][ T3613] cdc_wdm 1-1:1.0: skipping garbage [ 167.064303][ T3613] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.081916][ T5502] loop3: detected capacity change from 0 to 512 [ 167.082859][ T3613] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.180041][ T5502] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.187038][ T3703] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 167.195279][ T5502] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 167.232391][ T3703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.358713][ T3703] usb 5-1: Product: syz [ 167.362908][ T3703] usb 5-1: Manufacturer: syz [ 167.368254][ T3703] usb 5-1: SerialNumber: syz [ 167.374615][ T3703] usb 5-1: config 0 descriptor?? [ 168.072865][ T13] usb 1-1: USB disconnect, device number 25 [ 168.079070][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 168.079096][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 168.079113][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 168.097048][ T3811] Bluetooth: hci0: command 0x040f tx timeout [ 168.186890][ T3703] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 168.194397][ T3703] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 168.206189][ T3703] usb 5-1: USB disconnect, device number 12 [ 168.334562][ T5523] loop2: detected capacity change from 0 to 16 [ 168.616464][ T5523] erofs: (device loop2): mounted with root inode @ nid 36. [ 169.277455][ T9] device hsr_slave_0 left promiscuous mode [ 169.294647][ T9] device hsr_slave_1 left promiscuous mode [ 169.311074][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.323681][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.347586][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.355027][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.375020][ T9] device bridge_slave_1 left promiscuous mode [ 169.376882][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 169.387175][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.414152][ T9] device bridge_slave_0 left promiscuous mode [ 169.424001][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.460645][ T9] device veth1_macvtap left promiscuous mode [ 169.477246][ T9] device veth0_macvtap left promiscuous mode [ 169.483683][ T9] device veth1_vlan left promiscuous mode [ 169.511742][ T9] device veth0_vlan left promiscuous mode [ 169.596976][ T5519] loop4: detected capacity change from 0 to 32768 [ 169.772200][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 169.897380][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.932425][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.055021][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 170.213172][ T13] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.251527][ T3647] Bluetooth: hci0: command 0x0419 tx timeout [ 170.269549][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.282624][ T13] usb 3-1: config 0 descriptor?? [ 170.292840][ T5519] XFS (loop4): Mounting V5 Filesystem [ 170.416488][ T5519] XFS (loop4): Ending clean mount [ 170.462071][ T5560] loop3: detected capacity change from 0 to 47 [ 170.498993][ T5519] XFS (loop4): User initiated shutdown received. [ 170.513170][ T5519] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 170.538814][ T5519] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 170.614342][ T4988] XFS (loop4): Unmounting Filesystem [ 170.688093][ T9] team0 (unregistering): Port device team_slave_1 removed [ 170.746071][ T9] team0 (unregistering): Port device team_slave_0 removed [ 170.773452][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.791349][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.918718][ T9] bond0 (unregistering): Released all slaves [ 170.934514][ T5566] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 170.985323][ T5412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.002276][ T5412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.030839][ T5412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.031664][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 171.057524][ T5412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.064896][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 171.083385][ T13] usb 3-1: USB disconnect, device number 11 [ 171.256977][ T3613] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 171.285440][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.337977][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.350232][ T3815] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.384763][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.434150][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.453852][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.462074][ T5583] loop0: detected capacity change from 0 to 512 [ 171.487101][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.494322][ T3647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.558132][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.570922][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.600145][ T5583] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.314: casefold flag without casefold feature [ 171.612179][ T5586] loop2: detected capacity change from 0 to 4096 [ 171.618256][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.637054][ T3613] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 171.644268][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.646477][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.653968][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.669495][ T5583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.314: missing EA_INODE flag [ 171.677562][ T5586] ntfs3: Unknown parameter 'ÿ00000000000000000000000' [ 171.693895][ T3613] usb 4-1: config 0 descriptor?? [ 171.723617][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.762230][ T5583] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.314: error while reading EA inode 2 err=-117 [ 171.782296][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.808678][ T5583] EXT4-fs (loop0): 1 orphan inode deleted [ 171.843179][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.877363][ T5412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.933646][ T5412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.961539][ T5591] loop2: detected capacity change from 0 to 2048 [ 171.969200][ T5583] syz.0.314 (pid 5583) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 171.982416][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.003068][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.024494][ T5591] UDF-fs: bad mount option "gid=€;i|Œ\Qs ÆÑ:)+A!àµ×MõK¸ÇX-º±»bŒíÔ·w÷¾D»``·ˆ”·2¿x‹ë9ùUöÏ‚¸{tÛ<ôª^Vôy´y¤G–¨oÅ&è1¤©<¡£00000000000000000000" or missing value [ 172.056262][ T5603] EXT4-fs (loop0): shut down requested (2) [ 172.066486][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.117581][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.125697][ T5583] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 172.165701][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.196316][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.213896][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.275673][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.334447][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.373730][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.383475][ T5613] loop0: detected capacity change from 0 to 1024 [ 172.448333][ T5613] UDF-fs: bad mount option "uid=¯³pŽ¢ [ 172.448333][ T5613] ¥ [ 172.448333][ T5613] 4“bt”kÒ[^ÈæÉô\dšç#ÃÔ&%Jo½+|M‰Î*ÎÅÝ~¼=®0ºr€›©{"”WѾ¢" or missing value [ 172.538251][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.547993][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.556129][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.615722][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.625702][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.677745][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.713504][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.735281][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.754604][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.782162][ T5412] device veth0_vlan entered promiscuous mode [ 172.831122][ T5412] device veth1_vlan entered promiscuous mode [ 172.881456][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.893515][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.912429][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.937953][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.964943][ T5412] device veth0_macvtap entered promiscuous mode [ 173.008645][ T5412] device veth1_macvtap entered promiscuous mode [ 173.056944][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.097469][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.120372][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.157089][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.206995][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.233368][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.266950][ T3613] pegasus 4-1:0.0: can't reset MAC [ 173.272338][ T3613] pegasus: probe of 4-1:0.0 failed with error -5 [ 173.292507][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.324959][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.337361][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.347150][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.354529][ T3613] usb 4-1: USB disconnect, device number 7 [ 173.355344][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.379565][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.477933][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.701105][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.924490][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.056788][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.100583][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.110964][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.127326][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.140486][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.166929][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.207597][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.245007][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.255093][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.280096][ T5412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.302494][ T5629] loop2: detected capacity change from 0 to 4096 [ 174.312507][ T5412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.327602][ T5412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.347212][ T5412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.377869][ T5629] ntfs3: Unknown parameter '00000000000000000003' [ 174.557859][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.575730][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.624537][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.640534][ T5632] loop0: detected capacity change from 0 to 4096 [ 174.677199][ T5632] ntfs3: Unknown parameter 'diŽcard' [ 174.687809][ T3649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.700768][ T3649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.758983][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.776811][ T3703] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.959948][ T5646] loop0: detected capacity change from 0 to 2048 [ 175.036831][ T3703] usb 3-1: Using ep0 maxpacket: 16 [ 175.052897][ T5646] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 175.109800][ T5646] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 175.169424][ T3703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.218670][ T5646] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.328: bg 0: block 234: padding at end of block bitmap is not set [ 175.240916][ T3703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.272780][ T3703] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.312659][ T5646] EXT4-fs (loop0): Remounting filesystem read-only [ 175.331786][ T3703] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.363402][ T3703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.402014][ T3703] usb 3-1: config 0 descriptor?? [ 176.317586][ T3703] usbhid 3-1:0.0: can't add hid device: -71 [ 176.334206][ T3703] usbhid: probe of 3-1:0.0 failed with error -71 [ 176.559856][ T3703] usb 3-1: USB disconnect, device number 12 [ 176.676459][ T5661] loop3: detected capacity change from 0 to 764 [ 178.947054][ T5673] loop2: detected capacity change from 0 to 512 [ 179.024896][ T5673] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.044453][ T5673] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 179.364894][ T5688] tap0: tun_chr_ioctl cmd 2148553947 [ 179.400659][ T5688] loop2: detected capacity change from 0 to 64 [ 179.763020][ T3703] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 180.049797][ T3900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.375948][ T5681] loop3: detected capacity change from 0 to 32768 [ 180.379564][ T3703] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.398600][ T3703] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.487801][ T3703] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.499803][ T5681] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 180.513232][ T5681] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 180.525985][ T3703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.537647][ T3703] usb 5-1: SerialNumber: syz [ 180.595647][ T5681] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 180.612286][ T3613] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 180.621400][ T3613] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 180.700688][ T3613] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 79ms [ 180.719498][ T3613] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 180.728453][ T5681] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 181.116854][ T3613] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 181.136015][ T3703] usb 5-1: 0:2 : does not exist [ 181.178725][ T3703] usb 5-1: USB disconnect, device number 13 [ 181.243572][ T3900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.400243][ T5710] loop0: detected capacity change from 0 to 32768 [ 181.404405][ T5715] loop3: detected capacity change from 0 to 4096 [ 181.415357][ T3900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.429132][ T3656] udevd[3656]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.467341][ T5710] XFS: attr2 mount option is deprecated. [ 181.476256][ T5704] chnl_net:caif_netlink_parms(): no params data found [ 181.477016][ T3613] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.489955][ T5710] XFS: ikeep mount option is deprecated. [ 181.499474][ T3613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.509954][ T3613] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.527191][ T3613] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.554319][ T5710] XFS: noikeep mount option is deprecated. [ 181.813725][ T5710] XFS (loop0): Mounting V5 Filesystem [ 181.819322][ T3900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.830225][ T3613] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.852833][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.951208][ T5733] loop4: detected capacity change from 0 to 1024 [ 182.023602][ T3613] usb 3-1: Product: syz [ 182.065677][ T3613] usb 3-1: Manufacturer: syz [ 182.557808][ T5733] hfsplus: unable to parse mount options [ 182.570903][ T3613] cdc_wdm 3-1:1.0: skipping garbage [ 182.576890][ T3613] cdc_wdm 3-1:1.0: skipping garbage [ 182.587887][ T5718] loop3: detected capacity change from 0 to 32768 [ 182.615359][ T3613] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 182.643576][ T5704] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.649777][ T3613] cdc_wdm 3-1:1.0: Unknown control protocol [ 182.662795][ T5710] XFS (loop0): Ending clean mount [ 182.669784][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.679817][ T5704] device bridge_slave_0 entered promiscuous mode [ 182.718555][ T5704] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.735263][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.771497][ T5704] device bridge_slave_1 entered promiscuous mode [ 182.813651][ T5718] XFS (loop3): Mounting V5 Filesystem [ 182.828650][ T5710] XFS (loop0): Quotacheck needed: Please wait. [ 183.031692][ T5710] XFS (loop0): Quotacheck: Done. [ 183.056800][ T3613] Bluetooth: hci0: command 0x0409 tx timeout [ 183.749768][ T5704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.865608][ T3647] usb 3-1: USB disconnect, device number 13 [ 183.876759][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 183.884098][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 183.891270][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.021705][ T4745] XFS (loop0): Unmounting Filesystem [ 184.040360][ T5704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.112832][ T5718] XFS (loop3): Ending clean mount [ 184.120646][ T5718] XFS (loop3): Quotacheck needed: Please wait. [ 184.414373][ T5704] team0: Port device team_slave_0 added [ 184.438235][ T5704] team0: Port device team_slave_1 added [ 184.926847][ T5718] XFS (loop3): Quotacheck: Done. [ 185.137004][ T3809] Bluetooth: hci0: command 0x041b tx timeout [ 185.749813][ T4673] XFS (loop3): Unmounting Filesystem [ 185.791881][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.799669][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.892306][ T5704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.030137][ T5704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.056721][ T5704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.114605][ T5704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.119465][ T5777] loop2: detected capacity change from 0 to 256 [ 186.332334][ T5704] device hsr_slave_0 entered promiscuous mode [ 186.347541][ T5704] device hsr_slave_1 entered promiscuous mode [ 186.370959][ T5704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.390114][ T5704] Cannot create hsr debugfs directory [ 186.673710][ T5786] loop0: detected capacity change from 0 to 32768 [ 186.747630][ T5793] netlink: 'syz.3.354': attribute type 3 has an invalid length. [ 187.300489][ T3615] Bluetooth: hci0: command 0x040f tx timeout [ 187.455286][ T5786] XFS (loop0): Mounting V5 Filesystem [ 187.656008][ T5786] XFS (loop0): Ending clean mount [ 187.729277][ T5811] loop3: detected capacity change from 0 to 1024 [ 187.808242][ T5811] hfsplus: unable to parse mount options [ 187.860581][ T3900] device hsr_slave_0 left promiscuous mode [ 187.868817][ T3900] device hsr_slave_1 left promiscuous mode [ 187.879408][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.662271][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.707476][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.714960][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.752741][ T3900] device bridge_slave_1 left promiscuous mode [ 188.774481][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.794264][ T3900] device bridge_slave_0 left promiscuous mode [ 188.804489][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.832720][ T3900] device veth1_macvtap left promiscuous mode [ 188.839419][ T3900] device veth0_macvtap left promiscuous mode [ 188.850740][ T3900] device veth1_vlan left promiscuous mode [ 188.863002][ T3900] device veth0_vlan left promiscuous mode [ 188.879680][ T4745] XFS (loop0): Unmounting Filesystem [ 188.965170][ T5828] loop4: detected capacity change from 0 to 2048 [ 189.024626][ T5828] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 189.041833][ T5828] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 189.060100][ T5828] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 189.070623][ T5828] UDF-fs: Scanning with blocksize 512 failed [ 189.106992][ T5828] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 189.115147][ T5828] UDF-fs: Scanning with blocksize 1024 failed [ 189.150138][ T5828] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 189.202890][ T5828] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 189.220488][ T5828] UDF-fs: Scanning with blocksize 2048 failed [ 189.240775][ T5828] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 189.281260][ T5828] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 189.344540][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 189.364506][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 189.372536][ T3809] Bluetooth: hci0: command 0x0419 tx timeout [ 189.389448][ T5828] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 189.406107][ T5828] UDF-fs: Scanning with blocksize 4096 failed [ 189.413562][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.429201][ T5828] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 189.447262][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.901238][ T3900] bond0 (unregistering): Released all slaves [ 190.391284][ T5843] loop4: detected capacity change from 0 to 512 [ 191.170323][ T5849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.214776][ T5849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.223778][ T5849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.228259][ T5843] EXT4-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 191.232991][ T5849] device bridge_slave_0 left promiscuous mode [ 191.260391][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.306023][ T5849] device bridge_slave_1 left promiscuous mode [ 191.320591][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.415548][ T5849] bond0: (slave bond_slave_0): Releasing backup interface [ 191.468098][ T5849] bond0: (slave bond_slave_1): Releasing backup interface [ 191.571594][ T5849] team0: Port device team_slave_0 removed [ 191.600902][ T5849] team0: Port device team_slave_1 removed [ 191.614474][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.623263][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.633769][ T5849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.642030][ T5849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.705440][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.727922][ T5853] team0: Port device bond0 added [ 191.804108][ T3616] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 191.969499][ T5704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.003690][ T5704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.022585][ T5704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.055856][ T5704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.108934][ T3616] usb 1-1: Using ep0 maxpacket: 16 [ 192.316039][ T5896] loop3: detected capacity change from 0 to 512 [ 192.374428][ T5704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.396294][ T5896] EXT4-fs (loop3): Unrecognized mount option "obj_user=cgroup.controllers" or missing value [ 192.425677][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.437010][ T3616] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 192.438500][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.450040][ T3616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.486718][ T3616] usb 1-1: Product: syz [ 192.491181][ T5704] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.492043][ T3616] usb 1-1: Manufacturer: syz [ 192.535548][ T3616] usb 1-1: SerialNumber: syz [ 192.543877][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.559644][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.577116][ T3616] usb 1-1: config 0 descriptor?? [ 192.585791][ T3703] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.592972][ T3703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.641913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.653972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.676186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.682464][ T3656] udevd[3656]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.701928][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.709174][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.751888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.809176][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.827058][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 192.855535][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 192.901310][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.059269][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.074682][ T5704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 193.090451][ T5704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.120337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.129070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.137980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.151347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.164303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.190981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.415641][ T3616] usb 1-1: USB disconnect, device number 26 [ 193.548810][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.107745][ T5939] FAULT_INJECTION: forcing a failure. [ 194.107745][ T5939] name failslab, interval 1, probability 0, space 0, times 0 [ 194.176802][ T5939] CPU: 0 PID: 5939 Comm: syz.3.379 Not tainted 5.15.164-syzkaller #0 [ 194.184898][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 194.195049][ T5939] Call Trace: [ 194.198319][ T5939] [ 194.201240][ T5939] dump_stack_lvl+0x1e3/0x2d0 [ 194.205918][ T5939] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 194.211544][ T5939] ? panic+0x860/0x860 [ 194.215627][ T5939] should_fail+0x38a/0x4c0 [ 194.220052][ T5939] should_failslab+0x5/0x20 [ 194.224546][ T5939] slab_pre_alloc_hook+0x53/0xc0 [ 194.229486][ T5939] __kmalloc+0x6e/0x300 [ 194.233643][ T5939] ? __list_lru_init+0xa6/0xa70 [ 194.238498][ T5939] ? down_read+0x1b3/0x2e0 [ 194.242918][ T5939] __list_lru_init+0xa6/0xa70 [ 194.247590][ T5939] ? __raw_spin_lock_init+0x41/0x100 [ 194.252878][ T5939] alloc_super+0x783/0x940 [ 194.257382][ T5939] sget_fc+0x21e/0x630 [ 194.261458][ T5939] ? kill_litter_super+0xa0/0xa0 [ 194.266434][ T5939] ? binderfs_fs_context_reconfigure+0x200/0x200 [ 194.272803][ T5939] get_tree_nodev+0x26/0x160 [ 194.277450][ T5939] vfs_get_tree+0x88/0x270 [ 194.281875][ T5939] __se_sys_fsconfig+0xa5d/0xec0 [ 194.286826][ T5939] ? __x64_sys_fsconfig+0xc0/0xc0 [ 194.291871][ T5939] ? __x64_sys_fsconfig+0x1c/0xc0 [ 194.296910][ T5939] do_syscall_64+0x3b/0xb0 [ 194.301338][ T5939] ? clear_bhb_loop+0x15/0x70 [ 194.306015][ T5939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.312005][ T5939] RIP: 0033:0x7f4599e239f9 [ 194.316421][ T5939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.336022][ T5939] RSP: 002b:00007f4598260038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 194.344439][ T5939] RAX: ffffffffffffffda RBX: 00007f4599fb2130 RCX: 00007f4599e239f9 [ 194.352495][ T5939] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 194.360545][ T5939] RBP: 00007f4598260090 R08: 0000000000000000 R09: 0000000000000000 [ 194.369097][ T5939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.377152][ T5939] R13: 0000000000000000 R14: 00007f4599fb2130 R15: 00007ffd3ce94ef8 [ 194.385151][ T5939] [ 194.389278][ T5939] fuse: Bad value for 'group_id' [ 194.526265][ T1396] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.528332][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.544395][ T5704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.601562][ T5949] loop3: detected capacity change from 0 to 256 [ 195.702140][ T26] audit: type=1326 audit(1723376691.557:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002003c9f9 code=0x7fc00000 [ 195.730477][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 195.774637][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.811536][ T5949] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 195.826189][ T26] audit: type=1326 audit(1723376691.617:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002003b390 code=0x7fc00000 [ 195.843758][ T5704] device veth0_vlan entered promiscuous mode [ 195.848421][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.893842][ T5949] attempt to access beyond end of device [ 195.893842][ T5949] loop3: rw=524288, want=524409, limit=256 [ 195.928599][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 195.942973][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.986879][ T5704] device veth1_vlan entered promiscuous mode [ 196.004536][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 196.034261][ T5949] attempt to access beyond end of device [ 196.034261][ T5949] loop3: rw=0, want=524409, limit=256 [ 196.051982][ T26] audit: type=1326 audit(1723376691.727:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002003c9f9 code=0x7fc00000 [ 196.075689][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 196.111157][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 196.162666][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 196.167004][ T26] audit: type=1800 audit(1723376691.987:24): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.382" name="file1" dev="loop3" ino=1048688 res=0 errno=0 [ 196.263383][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.283517][ T5949] exFAT-fs (loop3): hint_cluster is invalid (65537) [ 196.306428][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.338774][ T5949] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805d9407e0 iblock : 8, err : -5) [ 196.379026][ T5704] device veth0_macvtap entered promiscuous mode [ 196.396584][ T5971] loop4: detected capacity change from 0 to 512 [ 196.396809][ T5949] exFAT-fs (loop3): Filesystem has been set read-only [ 196.412040][ T5704] device veth1_macvtap entered promiscuous mode [ 196.574559][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.612544][ T5971] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.387: casefold flag without casefold feature [ 196.657242][ T5971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.387: missing EA_INODE flag [ 196.679641][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.701209][ T5949] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00010000) [ 196.732852][ T5971] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.387: error while reading EA inode 12 err=-117 [ 196.736858][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.776985][ T5971] EXT4-fs (loop4): 1 orphan inode deleted [ 196.782777][ T5971] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.828076][ T26] audit: type=1800 audit(1723376692.687:25): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.387" name="bus" dev="loop4" ino=15 res=0 errno=0 [ 196.857231][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.896850][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.915201][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.948179][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.968676][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.998074][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 197.007101][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.015781][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.068816][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.117213][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.174964][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.186576][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.202316][ T5704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.213252][ T5704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.253806][ T5704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.316896][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 197.325608][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 197.348486][ T5704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.365841][ T5992] loop4: detected capacity change from 0 to 1024 [ 197.373671][ T5704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.394812][ T5704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.403932][ T5704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.488088][ T5998] FAULT_INJECTION: forcing a failure. [ 197.488088][ T5998] name failslab, interval 1, probability 0, space 0, times 0 [ 197.577044][ T5998] CPU: 1 PID: 5998 Comm: syz.0.390 Not tainted 5.15.164-syzkaller #0 [ 197.585138][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 197.595197][ T5998] Call Trace: [ 197.598480][ T5998] [ 197.601415][ T5998] dump_stack_lvl+0x1e3/0x2d0 [ 197.606129][ T5998] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 197.611900][ T5998] ? panic+0x860/0x860 [ 197.615986][ T5998] ? __might_sleep+0xc0/0xc0 [ 197.620795][ T5998] should_fail+0x38a/0x4c0 [ 197.625229][ T5998] should_failslab+0x5/0x20 [ 197.629742][ T5998] slab_pre_alloc_hook+0x53/0xc0 [ 197.634771][ T5998] ? getname_flags+0xb8/0x4e0 [ 197.639449][ T5998] kmem_cache_alloc+0x3f/0x280 [ 197.644223][ T5998] getname_flags+0xb8/0x4e0 [ 197.648748][ T5998] user_path_at_empty+0x2a/0x180 [ 197.653700][ T5998] __se_sys_mount+0x296/0x3c0 [ 197.658421][ T5998] ? __x64_sys_mount+0xc0/0xc0 [ 197.663195][ T5998] ? syscall_enter_from_user_mode+0x2e/0x240 [ 197.669286][ T5998] ? lockdep_hardirqs_on+0x94/0x130 [ 197.674505][ T5998] ? __x64_sys_mount+0x1c/0xc0 [ 197.679280][ T5998] do_syscall_64+0x3b/0xb0 [ 197.683697][ T5998] ? clear_bhb_loop+0x15/0x70 [ 197.688471][ T5998] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.694373][ T5998] RIP: 0033:0x7fa92fec99f9 [ 197.698801][ T5998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.718409][ T5998] RSP: 002b:00007fa92e348038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.726834][ T5998] RAX: ffffffffffffffda RBX: 00007fa930057f80 RCX: 00007fa92fec99f9 [ 197.734810][ T5998] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000000 [ 197.742775][ T5998] RBP: 00007fa92e348090 R08: 0000000000000000 R09: 0000000000000000 [ 197.750748][ T5998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.758726][ T5998] R13: 0000000000000000 R14: 00007fa930057f80 R15: 00007ffdcb8a47a8 [ 197.766829][ T5998] [ 197.882765][ T3789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.890805][ T6001] mkiss: ax0: crc mode is auto. [ 197.968285][ T3789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.090098][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 198.415666][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.510923][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.775371][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 198.817019][ T3615] Bluetooth: hci5: command 0x0409 tx timeout [ 198.856213][ T6004] loop0: detected capacity change from 0 to 4096 [ 198.866235][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 199.044562][ T5990] loop3: detected capacity change from 0 to 65536 [ 199.186969][ T5990] XFS (loop3): Mounting V5 Filesystem [ 199.302267][ T6009] loop4: detected capacity change from 0 to 32768 [ 199.332457][ T5990] XFS (loop3): Ending clean mount [ 199.342730][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.349165][ T5990] XFS (loop3): Quotacheck needed: Please wait. [ 199.350540][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.369624][ T6009] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.393 (6009) [ 199.389011][ T5970] device bridge_slave_0 entered promiscuous mode [ 199.393748][ T1366] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x25 dinode [ 199.434875][ T6009] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 199.454729][ T6009] BTRFS info (device loop4): doing ref verification [ 199.464494][ T6009] BTRFS info (device loop4): max_inline at 4096 [ 199.475810][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.484055][ T1366] XFS (loop3): Unmount and run xfs_repair [ 199.490291][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.498009][ T1366] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 199.505671][ T6009] BTRFS info (device loop4): max_inline at 3 [ 199.513199][ T5970] device bridge_slave_1 entered promiscuous mode [ 199.528050][ T1366] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 199.537572][ T6009] BTRFS info (device loop4): disabling tree log [ 199.543903][ T6009] BTRFS info (device loop4): turning off barriers [ 199.565703][ T1366] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.575505][ T6009] BTRFS info (device loop4): using free space tree [ 199.590018][ T6009] BTRFS info (device loop4): has skinny extents [ 199.597026][ T1366] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 199.605987][ T1366] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 199.620423][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.632823][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.643582][ T1366] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.655351][ T1366] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 199.706397][ T1366] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 199.725219][ T1366] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 199.748149][ T5970] team0: Port device team_slave_0 added [ 199.757581][ T5970] team0: Port device team_slave_1 added [ 199.799125][ T5990] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 199.809121][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.816159][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.956795][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.980034][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.987797][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.015942][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.194178][ T4673] XFS (loop3): Unmounting Filesystem [ 200.239624][ T5970] device hsr_slave_0 entered promiscuous mode [ 200.283218][ T5970] device hsr_slave_1 entered promiscuous mode [ 200.343672][ T3900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.447404][ T3613] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 200.492684][ T3900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.657767][ T3900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.846911][ T3613] usb 1-1: Using ep0 maxpacket: 16 [ 200.967527][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.039767][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.137483][ T3613] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 201.308178][ T3613] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.382168][ T3816] Bluetooth: hci5: command 0x041b tx timeout [ 201.414948][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.425589][ T3613] usb 1-1: config 0 descriptor?? [ 201.452448][ T3900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.407676][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 202.740482][ T3900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.740903][ T3613] usbhid 1-1:0.0: can't add hid device: -71 [ 202.767115][ T3613] usbhid: probe of 1-1:0.0 failed with error -71 [ 202.807728][ T3613] usb 1-1: USB disconnect, device number 27 [ 202.884623][ T3900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.898371][ T6083] loop4: detected capacity change from 0 to 1024 [ 202.915763][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 203.004277][ T3900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.129028][ T3900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.377387][ T6079] loop3: detected capacity change from 0 to 40427 [ 203.466373][ T3811] Bluetooth: hci5: command 0x040f tx timeout [ 203.529587][ T6079] F2FS-fs (loop3): invalid crc value [ 203.552818][ T6109] netlink: 100 bytes leftover after parsing attributes in process `syz.4.408'. [ 203.817157][ T6079] F2FS-fs (loop3): Found nat_bits in checkpoint [ 203.825874][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.853524][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.009555][ T6047] device bridge_slave_0 entered promiscuous mode [ 204.260736][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.268415][ T6079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 204.278305][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.327073][ T6047] device bridge_slave_1 entered promiscuous mode [ 204.420245][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.461390][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.486965][ T3816] Bluetooth: hci0: command 0x041b tx timeout [ 204.659547][ T6138] loop0: detected capacity change from 0 to 512 [ 204.691721][ T6138] EXT4-fs (loop0): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 205.459028][ T4673] attempt to access beyond end of device [ 205.459028][ T4673] loop3: rw=2049, want=45128, limit=40427 [ 205.558604][ T6047] team0: Port device team_slave_0 added [ 205.625075][ T3810] Bluetooth: hci5: command 0x0419 tx timeout [ 205.649240][ T6047] team0: Port device team_slave_1 added [ 206.456368][ T5970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.502387][ T6161] loop3: detected capacity change from 0 to 1024 [ 208.081186][ T3816] Bluetooth: hci0: command 0x040f tx timeout [ 208.145179][ T5970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.216088][ T5970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.293106][ T5970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.333124][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.356838][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.358283][ T6161] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 208.383265][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.385013][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.429614][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.456353][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.122782][ T6161] nullb0: [POWERTEC] p1 p2 p3 p4 p5 [ 209.224468][ T6161] nullb0: p1 start 1885959795 is beyond EOD, truncated [ 209.311252][ T6161] nullb0: p2 start 1986356271 is beyond EOD, truncated [ 209.318864][ T6161] nullb0: p3 start 1461480527 is beyond EOD, truncated [ 209.325739][ T6161] nullb0: p4 size 675559746 extends beyond EOD, truncated [ 209.343884][ T6047] device hsr_slave_0 entered promiscuous mode [ 209.358077][ T6161] nullb0: p5 start 579273684 is beyond EOD, truncated [ 209.627073][ T6047] device hsr_slave_1 entered promiscuous mode [ 209.756374][ T6047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.036719][ T6047] Cannot create hsr debugfs directory [ 210.067521][ T6193] loop4: detected capacity change from 0 to 8192 [ 210.130758][ T6210] ip6t_rpfilter: unknown options [ 210.141885][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 210.167364][ T3810] Bluetooth: hci0: command 0x0419 tx timeout [ 210.184059][ T6193] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 210.211073][ T6213] loop3: detected capacity change from 0 to 512 [ 210.218299][ T6193] REISERFS (device loop4): using ordered data mode [ 210.224818][ T6193] reiserfs: using flush barriers [ 210.225514][ T6185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.423'. [ 210.234454][ T6193] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 8388382, max trans age 30 [ 210.246288][ T6185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.423'. [ 210.256748][ T6193] REISERFS (device loop4): checking transaction log (loop4) [ 210.290785][ T6193] REISERFS (device loop4): Using r5 hash to sort names [ 210.326448][ T6185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.423'. [ 210.361764][ T6213] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 210.386335][ T6213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 210.413966][ T6213] System zones: 0-1, 15-15, 18-18, 34-34 [ 210.438155][ T6213] EXT4-fs (loop3): orphan cleanup on readonly fs [ 210.448214][ T6213] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 210.458102][ T3742] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 210.475996][ T6213] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 210.491515][ T6213] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 210.501422][ T6213] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.425: bg 0: block 40: padding at end of block bitmap is not set [ 210.525292][ T6213] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 210.536592][ T6213] EXT4-fs (loop3): 1 truncate cleaned up [ 210.566765][ T6213] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,nouid32,block_validity,norecovery,norecovery,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 210.602503][ T6218] FAULT_INJECTION: forcing a failure. [ 210.602503][ T6218] name failslab, interval 1, probability 0, space 0, times 0 [ 210.624853][ T6213] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 210.632844][ T6218] CPU: 1 PID: 6218 Comm: syz.4.427 Not tainted 5.15.164-syzkaller #0 [ 210.632866][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 210.632875][ T6218] Call Trace: [ 210.632882][ T6218] [ 210.632889][ T6218] dump_stack_lvl+0x1e3/0x2d0 [ 210.632913][ T6218] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 210.632931][ T6218] ? panic+0x860/0x860 [ 210.632952][ T6218] ? __might_sleep+0xc0/0xc0 [ 210.632979][ T6218] should_fail+0x38a/0x4c0 [ 210.633003][ T6218] should_failslab+0x5/0x20 [ 210.633021][ T6218] slab_pre_alloc_hook+0x53/0xc0 [ 210.633041][ T6218] ? security_file_alloc+0x24/0x120 [ 210.633060][ T6218] kmem_cache_alloc+0x3f/0x280 [ 210.649943][ T6213] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 210.651154][ T6218] security_file_alloc+0x24/0x120 [ 210.655044][ T6213] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 210.657342][ T6218] __alloc_file+0xc3/0x240 [ 210.657368][ T6218] alloc_empty_file+0x92/0x180 [ 210.657387][ T6218] alloc_file+0x5b/0x4f0 [ 210.657410][ T6218] alloc_file_pseudo+0x259/0x2f0 [ 210.657426][ T6218] ? prandom_u32+0x218/0x260 [ 210.657446][ T6218] ? alloc_empty_file_noaccount+0x80/0x80 [ 210.657467][ T6218] ? shmem_get_inode+0x8e3/0xad0 [ 210.657494][ T6218] __shmem_file_setup+0x1ca/0x290 [ 210.657514][ T6218] big_key_preparse+0x291/0x4e0 [ 210.657537][ T6218] ? keyctl_pkey_verify+0x6a0/0x6a0 [ 210.769328][ T6218] key_create_or_update+0x47b/0xbf0 [ 210.774537][ T6218] ? key_type_put+0x20/0x20 [ 210.779033][ T6218] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 210.785019][ T6218] ? _copy_from_user+0x31/0x170 [ 210.789853][ T6218] ? copy_user_enhanced_fast_string+0xe/0x40 [ 210.795816][ T6218] __se_sys_add_key+0x33b/0x480 [ 210.800657][ T6218] ? __x64_sys_add_key+0xc0/0xc0 [ 210.805595][ T6218] ? syscall_enter_from_user_mode+0x2e/0x240 [ 210.811563][ T6218] ? lockdep_hardirqs_on+0x94/0x130 [ 210.816762][ T6218] ? __x64_sys_add_key+0x1c/0xc0 [ 210.821694][ T6218] do_syscall_64+0x3b/0xb0 [ 210.826089][ T6218] ? clear_bhb_loop+0x15/0x70 [ 210.830757][ T6218] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 210.836630][ T6218] RIP: 0033:0x7f002003c9f9 [ 210.836882][ T3742] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 210.841040][ T6218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.858048][ T3742] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 210.870697][ T6218] RSP: 002b:00007f001e4bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 210.870725][ T6218] RAX: ffffffffffffffda RBX: 00007f00201caf80 RCX: 00007f002003c9f9 [ 210.870737][ T6218] RDX: 00000000200002c0 RSI: 0000000020000280 RDI: 0000000020000000 [ 210.870747][ T6218] RBP: 00007f001e4bb090 R08: fffffffffffffffe R09: 0000000000000000 [ 210.870758][ T6218] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000002 [ 210.870767][ T6218] R13: 0000000000000000 R14: 00007f00201caf80 R15: 00007ffe3c56f648 [ 210.870792][ T6218] [ 210.942094][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.964659][ T3742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.028751][ T3742] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 211.067057][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.074687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.089300][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.166785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.175505][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.198707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.205968][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.222749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.233654][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.243965][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.251122][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.267532][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.306907][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.325614][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.344836][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.398572][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.422374][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.169091][ T6220] loop4: detected capacity change from 0 to 32768 [ 212.170521][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.206897][ T3742] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 212.215357][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.237757][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.246198][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.255603][ T6220] XFS: ikeep mount option is deprecated. [ 212.287241][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.333779][ T5970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.408934][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.626739][ T6220] XFS (loop4): Mounting V5 Filesystem [ 213.106999][ T6220] XFS (loop4): Ending clean mount [ 213.122119][ T6220] XFS (loop4): Quotacheck needed: Please wait. [ 213.169774][ T3742] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 213.195801][ T3742] stv0680 1-1:4.0: last error: 173, command = 0x0 [ 213.223943][ T6256] loop3: detected capacity change from 0 to 1024 [ 213.238254][ T3696] usb 1-1: USB disconnect, device number 28 [ 213.285150][ T6220] XFS (loop4): Quotacheck: Done. [ 213.334522][ T6256] EXT4-fs (loop3): Mount option "data=ordered" incompatible with ext2 [ 213.557757][ T3900] IPVS: stopping backup sync thread 5123 ... [ 214.438009][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.449976][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.716629][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.907720][ T6270] loop0: detected capacity change from 0 to 2048 [ 215.170601][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.197726][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.213126][ T6220] ufs: You didn't specify the type of your ufs filesystem [ 215.213126][ T6220] [ 215.213126][ T6220] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 215.213126][ T6220] [ 215.213126][ T6220] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 215.284823][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.293546][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.307848][ T5970] device veth0_vlan entered promiscuous mode [ 215.316294][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 215.336900][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.344871][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.391447][ T6220] ufs: ufstype=old is supported read-only [ 215.425211][ T6220] ufs: ufs_fill_super(): bad magic number [ 215.474202][ T5970] device veth1_vlan entered promiscuous mode [ 215.563950][ T4988] XFS (loop4): Unmounting Filesystem [ 215.685979][ T5970] device veth0_macvtap entered promiscuous mode [ 215.756923][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.775791][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.841005][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.850021][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.881785][ T5970] device veth1_macvtap entered promiscuous mode [ 215.957607][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.977898][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.996472][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.013083][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.285966][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.496466][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.719277][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.781941][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.789854][ T26] audit: type=1326 audit(1723376712.617:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa92fec99f9 code=0x0 [ 216.838194][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.869526][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.891386][ T26] audit: type=1326 audit(1723376712.747:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6310 comm="syz.0.440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa92fec99f9 code=0x0 [ 216.898282][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.986118][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.006328][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.042405][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.075920][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.096001][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.108246][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.226738][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.244392][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.254912][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.317253][ T3810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.998612][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.110231][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.170452][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.276544][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.924266][ T6047] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.035771][ T6047] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.055407][ T5970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.834297][ T5970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.895068][ T5970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.908121][ T5970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.922441][ T6047] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.954822][ T6345] loop0: detected capacity change from 0 to 512 [ 219.963911][ T3900] device hsr_slave_0 left promiscuous mode [ 219.983446][ T3900] device hsr_slave_1 left promiscuous mode [ 220.014297][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.022605][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.036933][ T3810] usb 4-1: unable to read config index 0 descriptor/all [ 220.043915][ T3810] usb 4-1: can't read configurations, error -71 [ 220.054086][ T6345] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 220.076865][ T6345] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000051" or missing value [ 220.092408][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.110339][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.129196][ T3900] device bridge_slave_1 left promiscuous mode [ 220.137016][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.150148][ T3900] device bridge_slave_0 left promiscuous mode [ 220.156385][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.172229][ T3900] device hsr_slave_0 left promiscuous mode [ 220.180131][ T3900] device hsr_slave_1 left promiscuous mode [ 220.186582][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.194858][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.203061][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.226728][ T13] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 220.235489][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.275297][ T3900] device bridge_slave_1 left promiscuous mode [ 220.306983][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.323517][ T3900] device bridge_slave_0 left promiscuous mode [ 220.344979][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.371869][ T3900] device veth1_macvtap left promiscuous mode [ 220.383810][ T3900] device veth0_macvtap left promiscuous mode [ 220.402825][ T3900] device veth1_vlan left promiscuous mode [ 220.417235][ T3900] device veth0_vlan left promiscuous mode [ 220.436394][ T3900] device veth1_macvtap left promiscuous mode [ 220.436553][ T6350] loop3: detected capacity change from 0 to 32768 [ 220.449072][ T3900] device veth0_macvtap left promiscuous mode [ 220.449219][ T3900] device veth1_vlan left promiscuous mode [ 220.461818][ T3900] device veth0_vlan left promiscuous mode [ 220.468838][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 220.487484][ T6350] XFS: attr2 mount option is deprecated. [ 220.494293][ T6350] XFS: ikeep mount option is deprecated. [ 220.510977][ T6350] XFS: noikeep mount option is deprecated. [ 220.587164][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.604209][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.614987][ T6350] XFS (loop3): Mounting V5 Filesystem [ 220.628119][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.649591][ T13] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.663512][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.713548][ T13] usb 5-1: config 0 descriptor?? [ 220.738507][ T6350] XFS (loop3): Ending clean mount [ 220.745406][ T6350] XFS (loop3): Quotacheck needed: Please wait. [ 220.836642][ T6350] XFS (loop3): Quotacheck: Done. [ 220.898349][ T4673] XFS (loop3): Unmounting Filesystem [ 221.065455][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 221.115822][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 221.131484][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.167908][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.204223][ T6385] loop3: detected capacity change from 0 to 512 [ 221.242676][ T3900] bond0 (unregistering): Released all slaves [ 221.305135][ T6385] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 221.316902][ T6385] ext4 filesystem being mounted at /73/bus supports timestamps until 2038 (0x7fffffff) [ 221.330874][ T6385] FAULT_INJECTION: forcing a failure. [ 221.330874][ T6385] name failslab, interval 1, probability 0, space 0, times 0 [ 221.357096][ T6385] CPU: 0 PID: 6385 Comm: syz.3.449 Not tainted 5.15.164-syzkaller #0 [ 221.365312][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 221.375359][ T6385] Call Trace: [ 221.378635][ T6385] [ 221.381550][ T6385] dump_stack_lvl+0x1e3/0x2d0 [ 221.386324][ T6385] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 221.391947][ T6385] ? panic+0x860/0x860 [ 221.396001][ T6385] ? __might_sleep+0xc0/0xc0 [ 221.400581][ T6385] should_fail+0x38a/0x4c0 [ 221.404995][ T6385] should_failslab+0x5/0x20 [ 221.409486][ T6385] slab_pre_alloc_hook+0x53/0xc0 [ 221.414412][ T6385] __kmalloc+0x6e/0x300 [ 221.418548][ T6385] ? ext4_find_extent+0x368/0xdd0 [ 221.423580][ T6385] ext4_find_extent+0x368/0xdd0 [ 221.428433][ T6385] ? register_lock_class+0x100/0x9a0 [ 221.433717][ T6385] ext4_ext_map_blocks+0x2da/0x7690 [ 221.438913][ T6385] ? ext4_ext_release+0x10/0x10 [ 221.443748][ T6385] ? read_lock_is_recursive+0x10/0x10 [ 221.449118][ T6385] ? percpu_counter_add_batch+0x142/0x160 [ 221.454933][ T6385] ? down_read+0x1b3/0x2e0 [ 221.459329][ T6385] ? ext4_map_blocks+0x395/0x1e00 [ 221.464336][ T6385] ext4_map_blocks+0x420/0x1e00 [ 221.469201][ T6385] ? ext4_issue_zeroout+0x250/0x250 [ 221.474407][ T6385] ext4_getblk+0x19f/0x710 [ 221.478807][ T6385] ? ext4_get_block_unwritten+0x30/0x30 [ 221.484332][ T6385] ? __might_sleep+0xc0/0xc0 [ 221.488907][ T6385] ext4_bread_batch+0x5a/0x4f0 [ 221.493656][ T6385] __ext4_find_entry+0xfd1/0x1b20 [ 221.498671][ T6385] ? ext4_ci_compare+0x660/0x660 [ 221.503587][ T6385] ? mark_lock+0x98/0x340 [ 221.507896][ T6385] ? __lock_acquire+0x1295/0x1ff0 [ 221.512901][ T6385] ? ext4_fname_setup_ci_filename+0x67/0x490 [ 221.518866][ T6385] ? ext4_lookup+0x365/0xaa0 [ 221.523464][ T6385] ext4_lookup+0x3c6/0xaa0 [ 221.527884][ T6385] ? ext4_add_entry+0x12b0/0x12b0 [ 221.532892][ T6385] ? do_raw_spin_lock+0x14a/0x370 [ 221.537909][ T6385] ? _raw_spin_unlock+0x24/0x40 [ 221.542740][ T6385] ? d_alloc+0x194/0x1d0 [ 221.546971][ T6385] lookup_one_qstr_excl+0x117/0x240 [ 221.552157][ T6385] do_unlinkat+0x294/0x950 [ 221.556561][ T6385] ? fsnotify_link_count+0xf0/0xf0 [ 221.561665][ T6385] ? strncpy_from_user+0x209/0x370 [ 221.566765][ T6385] ? syscall_enter_from_user_mode+0x2e/0x240 [ 221.572756][ T6385] __x64_sys_unlinkat+0xca/0xf0 [ 221.577707][ T6385] do_syscall_64+0x3b/0xb0 [ 221.582116][ T6385] ? clear_bhb_loop+0x15/0x70 [ 221.586777][ T6385] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.592651][ T6385] RIP: 0033:0x7f4599e239f9 [ 221.597048][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.616632][ T6385] RSP: 002b:00007f45982a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 221.625038][ T6385] RAX: ffffffffffffffda RBX: 00007f4599fb1f80 RCX: 00007f4599e239f9 [ 221.633010][ T6385] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 221.640962][ T6385] RBP: 00007f45982a2090 R08: 0000000000000000 R09: 0000000000000000 [ 221.648916][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.656966][ T6385] R13: 0000000000000000 R14: 00007f4599fb1f80 R15: 00007ffd3ce94ef8 [ 221.664944][ T6385] [ 221.727102][ T13] usbhid 5-1:0.0: can't add hid device: -71 [ 221.728421][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 221.733097][ T13] usbhid: probe of 5-1:0.0 failed with error -71 [ 221.752795][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 221.780007][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.782769][ T13] usb 5-1: USB disconnect, device number 14 [ 221.824570][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.936073][ T3900] bond0 (unregistering): Released all slaves [ 222.012629][ T6390] loop3: detected capacity change from 0 to 32768 [ 222.026261][ T6047] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.118932][ T6390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.450 (6390) [ 222.135062][ T6392] FAULT_INJECTION: forcing a failure. [ 222.135062][ T6392] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 222.189198][ T6390] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 222.216943][ T6392] CPU: 0 PID: 6392 Comm: syz.0.451 Not tainted 5.15.164-syzkaller #0 [ 222.225134][ T6392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 222.235193][ T6392] Call Trace: [ 222.236828][ T6390] BTRFS info (device loop3): using free space tree [ 222.238470][ T6392] [ 222.238480][ T6392] dump_stack_lvl+0x1e3/0x2d0 [ 222.238504][ T6392] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 222.244986][ T6390] BTRFS info (device loop3): has skinny extents [ 222.247903][ T6392] ? panic+0x860/0x860 [ 222.247929][ T6392] ? __lock_acquire+0x1ff0/0x1ff0 [ 222.247952][ T6392] should_fail+0x38a/0x4c0 [ 222.247981][ T6392] _copy_from_iter+0x243/0xe90 [ 222.282880][ T6392] ? copy_mc_pipe_to_iter+0x760/0x760 [ 222.288274][ T6392] ? __virt_addr_valid+0x3bb/0x460 [ 222.293399][ T6392] ? 0xffffffff81000000 [ 222.297663][ T6392] ? __check_object_size+0x300/0x410 [ 222.303508][ T6047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.303573][ T6392] netlink_sendmsg+0x800/0xd60 [ 222.314986][ T6392] ? netlink_getsockopt+0x5b0/0x5b0 [ 222.317780][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.320197][ T6392] ? aa_sock_msg_perm+0x91/0x150 [ 222.320224][ T6392] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 222.329544][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.332393][ T6392] ? security_socket_sendmsg+0x7d/0xa0 [ 222.332419][ T6392] ? netlink_getsockopt+0x5b0/0x5b0 [ 222.341812][ T6047] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.344855][ T6392] ____sys_sendmsg+0x59e/0x8f0 [ 222.355637][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.362224][ T6392] ? iovec_from_user+0x300/0x390 [ 222.362255][ T6392] ? __sys_sendmsg_sock+0x30/0x30 [ 222.362287][ T6392] ___sys_sendmsg+0x252/0x2e0 [ 222.362308][ T6392] ? __sys_sendmsg+0x260/0x260 [ 222.368843][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.375136][ T6392] ? __fdget+0x191/0x220 [ 222.375163][ T6392] __se_sys_sendmsg+0x19a/0x260 [ 222.375185][ T6392] ? __x64_sys_sendmsg+0x80/0x80 [ 222.375211][ T6392] ? syscall_enter_from_user_mode+0x2e/0x240 [ 222.375230][ T6392] ? lockdep_hardirqs_on+0x94/0x130 [ 222.375249][ T6392] ? syscall_enter_from_user_mode+0x2e/0x240 [ 222.375269][ T6392] do_syscall_64+0x3b/0xb0 [ 222.375285][ T6392] ? clear_bhb_loop+0x15/0x70 [ 222.375305][ T6392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.375324][ T6392] RIP: 0033:0x7fa92fec99f9 [ 222.375341][ T6392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.375355][ T6392] RSP: 002b:00007fa92e348038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.375377][ T6392] RAX: ffffffffffffffda RBX: 00007fa930057f80 RCX: 00007fa92fec99f9 [ 222.375390][ T6392] RDX: 0000000000000000 RSI: 0000000020000840 RDI: 0000000000000003 [ 222.375401][ T6392] RBP: 00007fa92e348090 R08: 0000000000000000 R09: 0000000000000000 [ 222.375412][ T6392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.375423][ T6392] R13: 0000000000000000 R14: 00007fa930057f80 R15: 00007ffdcb8a47a8 [ 222.375449][ T6392] [ 222.572342][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.579520][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.698589][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.718102][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.738453][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.129762][ T6390] BTRFS info (device loop3): enabling ssd optimizations [ 223.360572][ T3813] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.367894][ T3813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.376642][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.385450][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.394900][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.482214][ T6422] loop4: detected capacity change from 0 to 512 [ 223.535618][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.557611][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.593160][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.618189][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.696068][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.415795][ T6422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.461572][ T6422] ext4 filesystem being mounted at /61/bus supports timestamps until 2038 (0x7fffffff) [ 224.688745][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.698091][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.708019][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.716454][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.768861][ T3979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.784746][ T3979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.786549][ T6047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.811508][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.940184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.956590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.092493][ T6442] FAULT_INJECTION: forcing a failure. [ 225.092493][ T6442] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.111556][ T6444] program syz.2.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.136758][ T7] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 225.141794][ T6442] CPU: 1 PID: 6442 Comm: syz.4.458 Not tainted 5.15.164-syzkaller #0 [ 225.152376][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 225.163401][ T6442] Call Trace: [ 225.166685][ T6442] [ 225.169612][ T6442] dump_stack_lvl+0x1e3/0x2d0 [ 225.174274][ T6442] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 225.179890][ T6442] ? panic+0x860/0x860 [ 225.183980][ T6442] should_fail+0x38a/0x4c0 [ 225.188412][ T6442] prepare_alloc_pages+0x1db/0x5b0 [ 225.193544][ T6442] __alloc_pages+0x14f/0x700 [ 225.197710][ T6444] loop2: detected capacity change from 0 to 2048 [ 225.198152][ T6442] ? __rmqueue_pcplist+0x2030/0x2030 [ 225.209751][ T6442] ? count_memcg_event_mm+0x385/0x3e0 [ 225.215135][ T6442] ? remove_device_exclusive_entry+0xbf0/0xbf0 [ 225.221280][ T6442] alloc_pages_vma+0x39a/0x800 [ 225.226068][ T6442] handle_mm_fault+0x2f49/0x5950 [ 225.231025][ T6442] ? numa_migrate_prep+0x1a0/0x1a0 [ 225.236174][ T6442] ? vmacache_find+0x23c/0x590 [ 225.241046][ T6442] exc_page_fault+0x271/0x700 [ 225.245747][ T6442] asm_exc_page_fault+0x22/0x30 [ 225.248901][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.250606][ T6442] RIP: 0033:0x7f001ff00b63 [ 225.258747][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.262264][ T6442] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 225.275435][ T6047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.289193][ T6442] RSP: 002b:00007f001e4ba4a0 EFLAGS: 00010206 [ 225.289217][ T6442] RAX: 0000000000002000 RBX: 00007f001e4ba540 RCX: 00007f001609b000 [ 225.289228][ T6442] RDX: 00007f001e4ba6e0 RSI: 0000000000000001 RDI: 00007f001e4ba5e0 [ 225.289238][ T6442] RBP: 0000000000000046 R08: 0000000000000009 R09: 0000000000000126 [ 225.289247][ T6442] R10: 000000000000012c R11: 00007f001e4ba540 R12: 0000000000000001 [ 225.289257][ T6442] R13: 00007f00200bd4e0 R14: 00000000000000ff R15: 00007f001e4ba5e0 [ 225.289282][ T6442] [ 225.300242][ T6442] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 225.378384][ T6444] loop2: p1 < > p4 [ 225.471625][ T6444] loop2: p4 size 8388608 extends beyond EOD, truncated [ 225.546851][ T7] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.555480][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.597332][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.633895][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.657946][ T6442] loop4: detected capacity change from 0 to 4096 [ 225.763249][ T6047] device veth0_vlan entered promiscuous mode [ 225.781574][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.791808][ T3026] loop2: p1 < > p4 [ 225.791839][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.800091][ T3026] loop2: p4 size 8388608 extends beyond EOD, truncated [ 225.809120][ T6047] device veth1_vlan entered promiscuous mode [ 226.189830][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.678731][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.687493][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.716903][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.718063][ T6438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.725957][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.744411][ T6047] device veth0_macvtap entered promiscuous mode [ 226.774931][ T6442] ntfs: (device loop4): load_attribute_list(): Cannot read attribute list since runlist is missing. [ 226.790569][ T6047] device veth1_macvtap entered promiscuous mode [ 226.838974][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.852613][ T6442] ntfs: (device loop4): ntfs_read_locked_inode(): Failed to load attribute list attribute. [ 226.867049][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.927123][ T3656] udevd[3656]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 226.936018][ T6272] udevd[6272]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 226.943782][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.951898][ T6442] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 227.026608][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.039655][ T6442] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 227.073275][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.084868][ T6442] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 227.100609][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.110942][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.116869][ T7] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.121879][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.151421][ T6442] ntfs: volume version 3.1. [ 227.175665][ T6442] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 227.193716][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.227554][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.246917][ T6442] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 227.251298][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.267474][ T7] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.280491][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.299500][ T6442] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 227.303057][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.323638][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.329350][ T7] usb 1-1: Product: syz [ 227.334283][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.341891][ T7] usb 1-1: Manufacturer: syz [ 227.348544][ T6047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.356206][ T6442] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 227.363855][ T6047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.396707][ T6442] ntfs: (device loop4): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 227.413019][ T6047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.425248][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.447972][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.454869][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 227.461551][ T6463] loop3: detected capacity change from 0 to 128 [ 227.464550][ T6047] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.486331][ T7] cdc_wdm 1-1:1.0: skipping garbage [ 227.513046][ T7] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 227.516783][ T6047] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.530537][ T6047] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.539522][ T6047] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.588946][ T6463] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.613080][ T7] cdc_wdm 1-1:1.0: Unknown control protocol [ 227.672817][ T6463] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.675641][ T7] usb 1-1: USB disconnect, device number 29 [ 227.850883][ T6471] loop0: detected capacity change from 0 to 512 [ 228.123819][ T3979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.166469][ T3979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.441933][ T3813] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.490708][ T3789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.529962][ T3789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.592487][ T4597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.605059][ T6471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 228.680786][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.462'. [ 228.682804][ T6471] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038 (0x7fffffff) [ 228.768663][ T6484] loop4: detected capacity change from 0 to 8192 [ 228.844357][ T6484] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 228.847437][ T6486] loop2: detected capacity change from 0 to 2048 [ 228.862170][ T6484] REISERFS (device loop4): using ordered data mode [ 228.869375][ T6484] reiserfs: using flush barriers [ 228.875793][ T6484] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 228.901411][ T6484] REISERFS (device loop4): checking transaction log (loop4) [ 228.917085][ T6484] REISERFS (device loop4): Using r5 hash to sort names [ 228.935706][ T6484] REISERFS (device loop4): using 3.5.x disk format [ 228.981036][ T6484] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 229.011066][ T6488] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 229.122363][ T6486] trusted_key: encrypted_key: insufficient parameters specified [ 229.122449][ T3583] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 229.143650][ T3583] CPU: 1 PID: 3583 Comm: kworker/u5:7 Not tainted 5.15.164-syzkaller #0 [ 229.152008][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 229.162077][ T3583] Workqueue: hci5 hci_rx_work [ 229.166768][ T3583] Call Trace: [ 229.170161][ T3583] [ 229.173103][ T3583] dump_stack_lvl+0x1e3/0x2d0 [ 229.177796][ T3583] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 229.183574][ T3583] ? panic+0x860/0x860 [ 229.187667][ T3583] ? sysfs_create_dir_ns+0x282/0x390 [ 229.192972][ T3583] sysfs_create_dir_ns+0x2c6/0x390 [ 229.198098][ T3583] ? sysfs_warn_dup+0xa0/0xa0 [ 229.202796][ T3583] ? do_raw_spin_unlock+0x137/0x8b0 [ 229.208031][ T3583] kobject_add_internal+0x6e0/0xe00 [ 229.211556][ T6492] mmap: syz.2.468 (6492) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 229.213248][ T3583] kobject_add+0x14e/0x210 [ 229.213277][ T3583] ? device_add+0x3c2/0xfd0 [ 229.233947][ T3583] ? kobject_init+0x1d0/0x1d0 [ 229.238642][ T3583] ? __raw_spin_lock_init+0x41/0x100 [ 229.243940][ T3583] ? get_device_parent+0x128/0x400 [ 229.249061][ T3583] device_add+0x476/0xfd0 [ 229.253412][ T3583] hci_conn_add_sysfs+0xe4/0x1f0 [ 229.258368][ T3583] le_conn_complete_evt+0xc15/0x1500 [ 229.263674][ T3583] ? cs_le_create_conn+0x5f0/0x5f0 [ 229.268812][ T3583] hci_le_meta_evt+0xd86/0x3f50 [ 229.273698][ T3583] ? __lock_acquire+0x1ff0/0x1ff0 [ 229.278754][ T3583] ? __mutex_lock_common+0x444/0x25a0 [ 229.284159][ T3583] ? hci_remote_host_features_evt+0x280/0x280 [ 229.290238][ T3583] ? __mutex_unlock_slowpath+0x218/0x750 [ 229.295905][ T3583] ? hci_event_packet+0x3b4/0x1550 [ 229.301191][ T3583] ? mutex_unlock+0x10/0x10 [ 229.305799][ T3583] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 229.311897][ T3583] ? print_irqtrace_events+0x210/0x210 [ 229.317472][ T3583] hci_event_packet+0xc41/0x1550 [ 229.322436][ T3583] ? rcu_lock_release+0x20/0x20 [ 229.327304][ T3583] ? hci_send_to_monitor+0x99/0x4d0 [ 229.332600][ T3583] hci_rx_work+0x232/0x990 [ 229.337033][ T3583] process_one_work+0x8a1/0x10c0 [ 229.341997][ T3583] ? worker_detach_from_pool+0x260/0x260 [ 229.347744][ T3583] ? _raw_spin_lock_irqsave+0x120/0x120 [ 229.353306][ T3583] ? kthread_data+0x4e/0xc0 [ 229.357837][ T3583] ? wq_worker_running+0x97/0x170 [ 229.362870][ T3583] worker_thread+0xaca/0x1280 [ 229.367583][ T3583] kthread+0x3f6/0x4f0 [ 229.371671][ T3583] ? rcu_lock_release+0x20/0x20 [ 229.376538][ T3583] ? kthread_blkcg+0xd0/0xd0 [ 229.381145][ T3583] ret_from_fork+0x1f/0x30 [ 229.385671][ T3583] [ 229.398617][ T3583] kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.412322][ T3583] Bluetooth: hci5: failed to register connection device [ 229.609060][ T6498] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 230.067814][ T6438] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 230.992639][ T6517] trusted_key: encrypted_key: keylen parameter is missing [ 231.137837][ T6438] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.156875][ T6438] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.167189][ T6438] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.176344][ T6438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.273095][ T6523] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.318790][ T6438] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.328364][ T6438] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.337058][ T6438] usb 1-1: Product: syz [ 231.342982][ T6438] usb 1-1: Manufacturer: syz [ 231.409675][ T6438] cdc_wdm 1-1:1.0: skipping garbage [ 231.416821][ T6438] cdc_wdm 1-1:1.0: skipping garbage [ 231.436829][ T6438] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 231.446919][ T6438] cdc_wdm 1-1:1.0: Unknown control protocol [ 231.742477][ T7] usb 1-1: USB disconnect, device number 30 [ 231.945260][ T6526] loop3: detected capacity change from 0 to 8192 [ 232.027044][ T6526] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 232.046956][ T6526] REISERFS (device loop3): using ordered data mode [ 232.053566][ T6526] reiserfs: using flush barriers [ 232.234137][ T3900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.257465][ T6526] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.275543][ T6526] REISERFS (device loop3): checking transaction log (loop3) [ 232.288753][ T6526] REISERFS (device loop3): Using r5 hash to sort names [ 232.298499][ T6526] REISERFS (device loop3): using 3.5.x disk format [ 232.313932][ T6526] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 232.432950][ T6526] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 232.470849][ T3900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.499846][ T6526] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 232.536776][ T6526] REISERFS (device loop3): Remounting filesystem read-only [ 232.552715][ T3900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.561941][ T6526] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4 0x0 SD] stat data [ 232.667874][ T3900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.822836][ T6537] FAULT_INJECTION: forcing a failure. [ 232.822836][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 232.876867][ T6537] CPU: 1 PID: 6537 Comm: syz.2.483 Not tainted 5.15.164-syzkaller #0 [ 232.885036][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 232.895076][ T6537] Call Trace: [ 232.898340][ T6537] [ 232.901249][ T6537] dump_stack_lvl+0x1e3/0x2d0 [ 232.905903][ T6537] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 232.911512][ T6537] ? panic+0x860/0x860 [ 232.915571][ T6537] should_fail+0x38a/0x4c0 [ 232.919966][ T6537] should_failslab+0x5/0x20 [ 232.924444][ T6537] slab_pre_alloc_hook+0x53/0xc0 [ 232.929366][ T6537] kmem_cache_alloc_trace+0x49/0x290 [ 232.934670][ T6537] ? sctp_add_bind_addr+0x85/0x3a0 [ 232.939797][ T6537] sctp_add_bind_addr+0x85/0x3a0 [ 232.944743][ T6537] sctp_copy_local_addr_list+0x2e7/0x4c0 [ 232.950379][ T6537] ? sctp_do_8_2_transport_strike+0x810/0x810 [ 232.956806][ T6537] ? sctp_v6_is_any+0x5c/0x70 [ 232.959361][ T6539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.484'. [ 232.961502][ T6537] sctp_bind_addr_copy+0xa9/0x3b0 [ 232.975720][ T6537] ? sctp_assoc_set_bind_addr_from_ep+0x71/0x190 [ 232.982054][ T6537] sctp_connect_new_asoc+0x2e5/0x6a0 [ 232.987334][ T6537] ? __sctp_connect+0xe10/0xe10 [ 232.992185][ T6537] ? sctp_endpoint_lookup_assoc+0x1d5/0x200 [ 232.998081][ T6537] __sctp_connect+0x657/0xe10 [ 233.002578][ T6539] netlink: 76 bytes leftover after parsing attributes in process `syz.3.484'. [ 233.002763][ T6537] ? __local_bh_enable_ip+0x164/0x1f0 [ 233.016924][ T6537] ? sctp_send_asconf+0x170/0x170 [ 233.022036][ T6537] ? sctp_inet_connect+0xa3/0x1e0 [ 233.027063][ T6537] ? _local_bh_enable+0xa0/0xa0 [ 233.031908][ T6537] ? do_raw_spin_unlock+0x137/0x8b0 [ 233.037112][ T6537] sctp_inet_connect+0x145/0x1e0 [ 233.042050][ T6537] ? sctp_send_asconf_del_ip+0xd10/0xd10 [ 233.047689][ T6537] __sys_connect+0x38b/0x410 [ 233.052283][ T6537] ? __sys_connect_file+0x170/0x170 [ 233.057493][ T6537] ? syscall_enter_from_user_mode+0x2e/0x240 [ 233.063561][ T6537] ? lockdep_hardirqs_on+0x94/0x130 [ 233.068764][ T6537] __x64_sys_connect+0x76/0x80 [ 233.073530][ T6537] do_syscall_64+0x3b/0xb0 [ 233.077943][ T6537] ? clear_bhb_loop+0x15/0x70 [ 233.082632][ T6537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.088529][ T6537] RIP: 0033:0x7fbe6e0499f9 [ 233.092948][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.112557][ T6537] RSP: 002b:00007fbe6c4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 233.120975][ T6537] RAX: ffffffffffffffda RBX: 00007fbe6e1d7f80 RCX: 00007fbe6e0499f9 [ 233.128945][ T6537] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 233.136930][ T6537] RBP: 00007fbe6c4c8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.145005][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.152979][ T6537] R13: 0000000000000000 R14: 00007fbe6e1d7f80 R15: 00007ffd42d608d8 [ 233.161057][ T6537] [ 233.434259][ T6542] netlink: 88 bytes leftover after parsing attributes in process `syz.3.485'. [ 234.630536][ T6541] chnl_net:caif_netlink_parms(): no params data found [ 234.769999][ T4597] libceph: connect (1)[c::]:6789 error -101 [ 234.781838][ T4597] libceph: mon0 (1)[c::]:6789 connect error [ 234.808541][ T6568] ceph: No mds server is up or the cluster is laggy [ 234.963929][ T6559] loop2: detected capacity change from 0 to 32768 [ 234.996890][ T6438] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 235.047972][ T6559] XFS: ikeep mount option is deprecated. [ 235.084534][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.093026][ T6541] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.102871][ T6541] device bridge_slave_0 entered promiscuous mode [ 235.119988][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.128028][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.136452][ T6541] device bridge_slave_1 entered promiscuous mode [ 235.157895][ T6559] XFS (loop2): Mounting V5 Filesystem [ 235.186810][ T6438] usb 4-1: device descriptor read/64, error -71 [ 235.233482][ T6559] XFS (loop2): Ending clean mount [ 235.271350][ T6559] XFS (loop2): Quotacheck needed: Please wait. [ 235.284020][ T6541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.286992][ T4597] Bluetooth: hci0: command 0x0409 tx timeout [ 235.353148][ T6559] XFS (loop2): Quotacheck: Done. [ 235.371378][ T6541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.474901][ T6438] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 235.552958][ T6541] team0: Port device team_slave_0 added [ 235.596540][ T6541] team0: Port device team_slave_1 added [ 235.637594][ T5970] XFS (loop2): Unmounting Filesystem [ 235.774476][ T6601] loop0: detected capacity change from 0 to 4096 [ 235.781217][ T6438] usb 4-1: device descriptor read/64, error -71 [ 235.789565][ T6591] loop4: detected capacity change from 0 to 32768 [ 235.803588][ T3900] device hsr_slave_0 left promiscuous mode [ 235.827648][ T3900] device hsr_slave_1 left promiscuous mode [ 235.868647][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.874119][ T6601] NILFS (loop0): invalid segment: Checksum error in segment payload [ 235.884740][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.885276][ T6591] XFS: noattr2 mount option is deprecated. [ 235.898819][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.916509][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.924154][ T6438] usb usb4-port1: attempt power cycle [ 235.927998][ T6601] NILFS (loop0): trying rollback from an earlier position [ 235.956586][ T3900] device bridge_slave_1 left promiscuous mode [ 235.970116][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.983667][ T6601] NILFS (loop0): recovery complete [ 235.997618][ T3900] device bridge_slave_0 left promiscuous mode [ 236.003741][ T6612] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.020550][ T6601] NILFS (loop0): the device already has a read/write mount. [ 236.020611][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.059557][ T3900] device veth1_macvtap left promiscuous mode [ 236.065774][ T3900] device veth0_macvtap left promiscuous mode [ 236.081935][ T3900] device veth1_vlan left promiscuous mode [ 236.088514][ T3900] device veth0_vlan left promiscuous mode [ 236.094892][ T6591] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 236.357089][ T6438] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 236.357672][ T6622] loop2: detected capacity change from 0 to 1024 [ 236.467805][ T6622] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 236.505005][ T6622] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 236.538289][ T6438] usb 4-1: device descriptor read/8, error -71 [ 236.566952][ T6622] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.628264][ T6622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 236.647959][ T6622] System zones: 0-1, 3-36 [ 236.712267][ T6622] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 236.826892][ T6438] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 236.919111][ T6438] usb 4-1: device descriptor read/8, error -71 [ 237.029679][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 237.047794][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 237.054512][ T6438] usb usb4-port1: unable to enumerate USB device [ 237.063367][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.080810][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.133065][ T3811] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 237.179399][ T3900] bond0 (unregistering): Released all slaves [ 237.206882][ T4597] Bluetooth: hci1: command 0x0406 tx timeout [ 237.236182][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.259612][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.305426][ T6541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.351993][ T6541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.366906][ T4597] Bluetooth: hci0: command 0x041b tx timeout [ 237.366989][ T3811] usb 3-1: device descriptor read/64, error -71 [ 237.427917][ T6541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.464776][ T6541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.594638][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 237.627001][ T3810] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 237.676979][ T3811] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 237.688442][ T6541] device hsr_slave_0 entered promiscuous mode [ 237.715363][ T6541] device hsr_slave_1 entered promiscuous mode [ 237.756806][ T6541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.859617][ T6541] Cannot create hsr debugfs directory [ 238.019647][ T3813] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.019717][ T3811] usb 3-1: device descriptor read/64, error -71 [ 238.556329][ T3811] usb usb3-port1: attempt power cycle [ 238.637371][ T6652] loop3: detected capacity change from 0 to 512 [ 238.696870][ T3813] usb 5-1: Using ep0 maxpacket: 16 [ 238.702028][ T3810] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 238.723071][ T6652] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.501: casefold flag without casefold feature [ 238.725435][ T3810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.747176][ T6652] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.501: missing EA_INODE flag [ 238.824882][ T6652] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.501: error while reading EA inode 2 err=-117 [ 238.849263][ T3810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 238.859248][ T3813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.906877][ T6652] EXT4-fs (loop3): 1 orphan inode deleted [ 238.912661][ T3813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.916773][ T6652] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 238.922696][ T3810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.944113][ T3813] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.992386][ T3813] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 239.007430][ T3813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.096677][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 344.103655][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3900/1:b..l P9/1:b..l [ 344.112980][ C0] (detected by 0, t=10502 jiffies, g=25045, q=18) [ 344.119454][ C0] task:kworker/u4:0 state:R running task stack:21752 pid: 9 ppid: 2 flags:0x00004000 [ 344.131444][ C0] Workqueue: bat_events batadv_nc_worker [ 344.137083][ C0] Call Trace: [ 344.140338][ C0] [ 344.143246][ C0] __schedule+0x12c4/0x45b0 [ 344.147724][ C0] ? validate_chain+0x112/0x5930 [ 344.152640][ C0] ? mark_lock+0x98/0x340 [ 344.156944][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 344.162895][ C0] ? release_firmware_map_entry+0x190/0x190 [ 344.168760][ C0] ? reacquire_held_locks+0x660/0x660 [ 344.174108][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 344.179366][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 344.184447][ C0] ? __cond_resched+0x20/0x20 [ 344.189103][ C0] irqentry_exit+0x53/0x80 [ 344.193528][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.199484][ C0] RIP: 0010:rcu_is_watching+0x6a/0xa0 [ 344.204835][ C0] Code: 48 c7 c3 08 b3 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 1a 8b 03 65 ff 0d 35 57 97 7e 74 08 24 01 5b 41 5e <41> 5f c3 e8 16 74 95 ff eb f1 89 d9 80 e1 07 80 c1 03 38 c1 7c da [ 344.224446][ C0] RSP: 0018:ffffc90000ce7a70 EFLAGS: 00000202 [ 344.230498][ C0] RAX: 00000000000c7b01 RBX: 0000000000000001 RCX: ffffffff8162ad0c [ 344.238450][ C0] RDX: 0000000000000000 RSI: ffffffff8ad8f7e0 RDI: ffffffff8ad8f7a0 [ 344.246397][ C0] RBP: ffffc90000ce7bd8 R08: dffffc0000000000 R09: fffffbfff1bd2986 [ 344.254360][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200019cf58 [ 344.262410][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 344.270371][ C0] ? lock_acquire+0xcc/0x4f0 [ 344.274957][ C0] lock_acquire+0xdd/0x4f0 [ 344.279360][ C0] ? read_lock_is_recursive+0x10/0x10 [ 344.284718][ C0] ? rcu_lock_release+0x5/0x20 [ 344.289459][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 344.294457][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 344.300414][ C0] rcu_lock_acquire+0x2a/0x30 [ 344.305087][ C0] ? rcu_lock_acquire+0x5/0x30 [ 344.309826][ C0] batadv_nc_worker+0xc1/0x5b0 [ 344.314569][ C0] process_one_work+0x8a1/0x10c0 [ 344.319490][ C0] ? worker_detach_from_pool+0x260/0x260 [ 344.325123][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 344.330642][ C0] ? kthread_data+0x4e/0xc0 [ 344.335121][ C0] ? wq_worker_running+0x97/0x170 [ 344.340120][ C0] worker_thread+0xaca/0x1280 [ 344.344792][ C0] kthread+0x3f6/0x4f0 [ 344.348834][ C0] ? rcu_lock_release+0x20/0x20 [ 344.353659][ C0] ? kthread_blkcg+0xd0/0xd0 [ 344.358343][ C0] ret_from_fork+0x1f/0x30 [ 344.362750][ C0] [ 344.365749][ C0] task:kworker/u4:10 state:R running task stack:23928 pid: 3900 ppid: 2 flags:0x00004000 [ 344.376511][ C0] Workqueue: netns cleanup_net [ 344.381253][ C0] Call Trace: [ 344.384506][ C0] [ 344.387504][ C0] __schedule+0x12c4/0x45b0 [ 344.391980][ C0] ? unwind_next_frame+0x1437/0x1fa0 [ 344.397253][ C0] ? mark_lock+0x98/0x340 [ 344.401556][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 344.407507][ C0] ? release_firmware_map_entry+0x190/0x190 [ 344.413376][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 344.418633][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 344.423716][ C0] ? __cond_resched+0x20/0x20 [ 344.428396][ C0] irqentry_exit+0x53/0x80 [ 344.432784][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.438737][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 344.444019][ C0] Code: 2b 00 74 08 4c 89 f7 e8 cc 86 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 344.463594][ C0] RSP: 0018:ffffc900032078e0 EFLAGS: 00000206 [ 344.469645][ C0] RAX: 0000000000000001 RBX: 1ffff92000640f28 RCX: 1ffff92000640ec8 [ 344.477592][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f800 [ 344.485536][ C0] RBP: ffffc90003207a40 R08: dffffc0000000000 R09: fffffbfff1f8e019 [ 344.493479][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000640f24 [ 344.501421][ C0] R13: dffffc0000000000 R14: ffffc90003207940 R15: 0000000000000246 [ 344.509378][ C0] ? read_lock_is_recursive+0x10/0x10 [ 344.514729][ C0] ? __might_sleep+0xc0/0xc0 [ 344.519315][ C0] rcu_lock_acquire+0x2a/0x30 [ 344.523965][ C0] ? rcu_lock_acquire+0x5/0x30 [ 344.528699][ C0] inet_twsk_purge+0x129/0x9d0 [ 344.533438][ C0] ? rcu_force_quiescent_state+0x230/0x230 [ 344.539217][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 344.544565][ C0] ? evict+0x56e/0x620 [ 344.548629][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 344.553451][ C0] cleanup_net+0x763/0xb60 [ 344.557844][ C0] ? ops_free_list+0x340/0x340 [ 344.562673][ C0] process_one_work+0x8a1/0x10c0 [ 344.567591][ C0] ? worker_detach_from_pool+0x260/0x260 [ 344.573198][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 344.578716][ C0] ? kthread_data+0x4e/0xc0 [ 344.583195][ C0] ? wq_worker_running+0x97/0x170 [ 344.588188][ C0] worker_thread+0xaca/0x1280 [ 344.592848][ C0] kthread+0x3f6/0x4f0 [ 344.596891][ C0] ? rcu_lock_release+0x20/0x20 [ 344.601713][ C0] ? kthread_blkcg+0xd0/0xd0 [ 344.606277][ C0] ret_from_fork+0x1f/0x30 [ 344.610672][ C0] [ 344.613665][ C0] rcu: rcu_preempt kthread starved for 10548 jiffies! g25045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 344.624825][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 344.634762][ C0] rcu: RCU grace-period kthread stack dump: [ 344.640616][ C0] task:rcu_preempt state:R running task stack:26520 pid: 15 ppid: 2 flags:0x00004000 [ 344.651360][ C0] Call Trace: [ 344.654614][ C0] [ 344.657520][ C0] __schedule+0x12c4/0x45b0 [ 344.661994][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 344.667952][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 344.673821][ C0] ? __mod_timer+0xa8e/0xeb0 [ 344.678389][ C0] ? release_firmware_map_entry+0x190/0x190 [ 344.684778][ C0] ? mod_timer_pending+0x20/0x20 [ 344.689692][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 344.695036][ C0] schedule+0x11b/0x1f0 [ 344.699172][ C0] schedule_timeout+0x1b9/0x300 [ 344.704005][ C0] ? console_conditional_schedule+0x40/0x40 [ 344.709869][ C0] ? update_process_times+0x200/0x200 [ 344.715304][ C0] ? prepare_to_swait_event+0x321/0x340 [ 344.720828][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 344.725656][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 344.731783][ C0] ? rcu_gp_init+0x1140/0x1140 [ 344.736523][ C0] ? finish_swait+0xc5/0x1d0 [ 344.741087][ C0] rcu_gp_kthread+0xa4/0x360 [ 344.745646][ C0] ? _raw_spin_unlock+0x40/0x40 [ 344.750498][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.755579][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 344.761441][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 344.766439][ C0] kthread+0x3f6/0x4f0 [ 344.770479][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.775568][ C0] ? kthread_blkcg+0xd0/0xd0 [ 344.780131][ C0] ret_from_fork+0x1f/0x30 [ 344.784530][ C0] [ 344.787525][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 344.793830][ C0] NMI backtrace for cpu 0 [ 344.798221][ C0] CPU: 0 PID: 6651 Comm: syz.3.501 Not tainted 5.15.164-syzkaller #0 [ 344.806276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 344.816673][ C0] Call Trace: [ 344.819940][ C0] [ 344.822765][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 344.827442][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 344.833052][ C0] ? panic+0x860/0x860 [ 344.837112][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 344.842022][ C0] ? __wake_up_klogd+0xd5/0x100 [ 344.846933][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 344.853147][ C0] ? _printk+0xd1/0x120 [ 344.857277][ C0] ? cpu_online+0x1f/0x40 [ 344.861581][ C0] ? panic+0x860/0x860 [ 344.865645][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 344.871687][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 344.877646][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 344.883774][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 344.889209][ C0] ? print_cpu_stall+0x600/0x600 [ 344.894127][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 344.899129][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 344.904303][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 344.909476][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 344.914299][ C0] ? hrtimer_run_queues+0x163/0x450 [ 344.919470][ C0] ? account_process_tick+0x232/0x3a0 [ 344.924836][ C0] update_process_times+0x196/0x200 [ 344.930009][ C0] tick_sched_timer+0x386/0x550 [ 344.934837][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 344.940355][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 344.945539][ C0] ? hrtimer_interrupt+0x980/0x980 [ 344.950623][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 344.956671][ C0] hrtimer_interrupt+0x392/0x980 [ 344.961601][ C0] __sysvec_apic_timer_interrupt+0x139/0x470 [ 344.967556][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 344.973163][ C0] [ 344.976079][ C0] [ 344.979001][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.984976][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 344.990768][ C0] Code: a1 68 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 2d 26 f7 48 89 df e8 66 81 27 f7 e8 f1 3c 4a f7 fb bf 01 00 00 00 16 c6 1a f7 65 8b 05 d7 ca c5 75 85 c0 74 02 5b c3 e8 a4 e7 c3 [ 345.010353][ C0] RSP: 0018:ffffc900030a7bc0 EFLAGS: 00000282 [ 345.016399][ C0] RAX: b504eee4023ced00 RBX: ffff888021b55c80 RCX: ffffffff91467f03 [ 345.024431][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001 [ 345.032465][ C0] RBP: 0000000000000000 R08: ffffffff8186e200 R09: ffffed100436ab91 [ 345.040425][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 345.048389][ C0] R13: dffffc0000000000 R14: ffff888021b56118 R15: ffff888021b55c80 [ 345.056343][ C0] ? trace_hardirqs_on+0x30/0x80 [ 345.061271][ C0] get_signal+0x13ee/0x14e0 [ 345.065758][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 345.071390][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 345.077784][ C0] ? __might_fault+0xb4/0x110 [ 345.082439][ C0] ? _copy_from_user+0x10f/0x170 [ 345.087545][ C0] ? restore_altstack+0x274/0x400 [ 345.092563][ C0] ? get_sigframe_size+0x10/0x10 [ 345.097474][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 345.102844][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 345.108278][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 345.113711][ C0] exit_to_user_mode_loop+0x97/0x130 [ 345.118970][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 345.124488][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 345.130024][ C0] do_syscall_64+0x47/0xb0 [ 345.134438][ C0] ? clear_bhb_loop+0x15/0x70 [ 345.139363][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.145238][ C0] RIP: 0033:0x7f4599e239f9 [ 345.149632][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.169229][ C0] RSP: 002b:00007ffd3ce95058 EFLAGS: 00000246 [ 345.175277][ C0] RAX: fffffffffffffffc RBX: 000000000003a746 RCX: 00007f4599e239f9 [ 345.183224][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4599fb1f8c [ 345.191709][ C0] RBP: 00007f4599fb1f8c R08: 00007f4599fb1f80 R09: 00007ffd3ce9533f [ 345.199683][ C0] R10: 00007ffd3ce95150 R11: 0000000000000246 R12: 0000000000000032 [ 345.207650][ C0] R13: 00007ffd3ce95150 R14: 00007ffd3ce95170 R15: 000000000003a714 [ 345.215617][ C0] [ 345.221516][ T3813] usb 5-1: config 0 descriptor?? [ 345.255881][ T3811] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 345.274090][ T4597] Bluetooth: hci0: command 0x040f tx timeout [ 345.284272][ T1396] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.736825][ T3811] usb 3-1: device not accepting address 16, error -71 SYZFAIL: failed to send rpc fd=3 want=400 sent=0 n=-1 (errno 104: Connection reset by peer) [ 347.294919][ T3900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.333111][ T3900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.372781][ T3900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.415486][ T3900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.532163][ T3900] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.594324][ T3900] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.658096][ T3900] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.733034][ T3900] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.770108][ T3813] usb 5-1: can't set config #0, error -71 [ 347.798148][ T3810] usb 1-1: string descriptor 0 read error: -71 [ 347.804470][ T3810] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.825879][ T3813] usb 5-1: USB disconnect, device number 15 [ 347.836105][ T3810] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 347.876957][ T3810] usb 1-1: can't set config #1, error -71 [ 347.884063][ T3900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.926481][ T3810] usb 1-1: USB disconnect, device number 31 [ 347.940637][ T3900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.993476][ T3900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.038130][ T3900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.181865][ T3900] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.229883][ T3900] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.285090][ T3900] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.326358][ T3900] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.222208][ T3900] device hsr_slave_0 left promiscuous mode [ 350.234116][ T3900] device hsr_slave_1 left promiscuous mode [ 350.252540][ T3900] device hsr_slave_0 left promiscuous mode [ 350.260271][ T3900] device hsr_slave_1 left promiscuous mode [ 350.271389][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.280038][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.292476][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.302358][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.314836][ T3900] device bridge_slave_1 left promiscuous mode [ 350.322683][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.336605][ T3900] device bridge_slave_0 left promiscuous mode [ 350.344380][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.364349][ T3900] device hsr_slave_0 left promiscuous mode [ 350.370891][ T3900] device hsr_slave_1 left promiscuous mode [ 350.378002][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.385603][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.393521][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.401679][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.409543][ T3900] device bridge_slave_1 left promiscuous mode [ 350.415738][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.424067][ T3900] device bridge_slave_0 left promiscuous mode [ 350.430444][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.441787][ T3900] device hsr_slave_0 left promiscuous mode [ 350.451022][ T3900] device hsr_slave_1 left promiscuous mode [ 350.457670][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.465125][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.472963][ T3900] device bridge_slave_1 left promiscuous mode [ 350.479281][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.487456][ T3900] device bridge_slave_0 left promiscuous mode [ 350.493599][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.504275][ T3900] device hsr_slave_0 left promiscuous mode [ 350.510520][ T3900] device hsr_slave_1 left promiscuous mode [ 350.519648][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.527191][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.534763][ T3900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.542453][ T3900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.550372][ T3900] device bridge_slave_1 left promiscuous mode [ 350.556513][ T3900] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.566543][ T3900] device bridge_slave_0 left promiscuous mode [ 350.573192][ T3900] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.590726][ T3900] device veth1_macvtap left promiscuous mode [ 350.596805][ T3900] device veth0_macvtap left promiscuous mode [ 350.603179][ T3900] device veth1_vlan left promiscuous mode [ 350.609126][ T3900] device veth0_vlan left promiscuous mode [ 350.615912][ T3900] device veth1_macvtap left promiscuous mode [ 350.622000][ T3900] device veth0_macvtap left promiscuous mode [ 350.628707][ T3900] device veth1_vlan left promiscuous mode [ 350.634558][ T3900] device veth0_vlan left promiscuous mode [ 350.641955][ T3900] device veth1_macvtap left promiscuous mode [ 350.648208][ T3900] device veth0_macvtap left promiscuous mode [ 350.654322][ T3900] device veth1_vlan left promiscuous mode [ 350.660229][ T3900] device veth0_vlan left promiscuous mode [ 350.670252][ T3900] device veth1_macvtap left promiscuous mode [ 350.676276][ T3900] device veth0_macvtap left promiscuous mode [ 350.682471][ T3900] device veth1_vlan left promiscuous mode [ 350.688617][ T3900] device veth0_vlan left promiscuous mode [ 350.954415][ T3900] bond1 (unregistering): Released all slaves [ 351.076530][ T3900] team0 (unregistering): Port device bond0 removed [ 351.099858][ T3900] bond0 (unregistering): Released all slaves [ 351.238994][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 351.256831][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 351.270209][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.283683][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.338842][ T3900] bond0 (unregistering): Released all slaves [ 351.452435][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 351.471363][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 351.484500][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.497308][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.554888][ T3900] bond0 (unregistering): Released all slaves [ 351.645544][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 351.658086][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 351.669977][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.685065][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.737187][ T3900] bond0 (unregistering): Released all slaves [ 351.833760][ T3900] team0 (unregistering): Port device team_slave_1 removed [ 351.853138][ T3900] team0 (unregistering): Port device team_slave_0 removed [ 351.864093][ T3900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.877367][ T3900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.933594][ T3900] bond0 (unregistering): Released all slaves