last executing test programs: 1m43.931928415s ago: executing program 2 (id=257): close(0xffffffffffffffff) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x1, 0x220, &(0x7f0000000780)="$eJzsmb9rFEEUx78zd7d3BgnYCNpYGDCi2dvdU0mTIoJlQIiiloduwpnJnVxWyB0IBhsbSwvB1sbSwsLKwr/AVgsVBAtTWojCyMzO3M3l9m43GrTwfSCb7/x8O+/NfYs7EATx3/Lp47cPjy4uXjkL4DDmUDX9X0rDOdyZ//7J3TOPly49ffHu2Zv27L1Xe/djAKQsHt8D8Hq5hASsnPaMrp4bbms1roLjtNHXwOCn8qfUpI0YDDfMnNuO7hwyQsT+zU4Ng1a41hJxpB4NN756qd0dhlsAavrtpGTO+Favv9EUIu7uFRVpdx4b2q+Ylj/9fsscS7DZk1LV6/rDBzuqbXKDAHyQvxAcodENMKwavYgqfN9XOQjWWkLX3Z7/eHm4f6nI+Q9WfD8mpe1hLH/Vcy2OLOwvVgXASI+6nYWW289IsVg/5GhPe/Zv5HCaOIhr2ut7v7vcfqLyJlcyMp8Tojp+RcfuD3PrfnTXeuBGU6zYmn7+l9XJF9bIsotrRseG3s4IsfIH0T1t3xMKN/Qn5eynHH8qozzwj3qyeae+1esvtDab6/F63I6ixoXgXBCcj+raiNLnFP+raX+acfavTJjrMQ/bzSTphttA0g0H7Sh9Oo67+rLzVa/h2v845k/qpvZUdWhZzY7BzB/X/5WaL2XPvD/xTARBEARBEARBEARBEARBENmcAEP6S5hk5gvRLKLL+hvKXwEAAP//pwVWPg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003, 0x0, 0x0, 0x300}) 1m42.72450252s ago: executing program 2 (id=259): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x8) 1m42.572245631s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000240)=0x4, &(0x7f0000000280)=0x2) 1m41.644314066s ago: executing program 2 (id=265): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m38.98464108s ago: executing program 2 (id=273): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 1m33.292575358s ago: executing program 2 (id=292): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./file2\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m33.192231448s ago: executing program 32 (id=292): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) creat(&(0x7f0000000100)='./file2\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 13.611375063s ago: executing program 5 (id=535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000b558a2910ffdd76628063f9458562c195a68aa2fccd731f485c3dfb6f403ff56f32506d06427c4b3749d665c0ab403f71282600d074df74eace25a45f8ad5ab01f07851ce4c2f2b8188c575d015bf12494dec562cd89780676c1c4733ec3f1631ca4c23a9e5e91390b0ea1c0161d52e466c8f4903d464ea8bc"], 0x10}}, 0x20000004) 12.232062929s ago: executing program 1 (id=544): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e73"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) 10.07599421s ago: executing program 1 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000fd00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.090187325s ago: executing program 1 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000003c0)=0xf3e, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.952435816s ago: executing program 3 (id=554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x6, 0x0) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, "91"}, @selector_unit={0x6, 0x24, 0x5, 0x0, 0x0, '\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, "2a5232500e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 8.19831968s ago: executing program 4 (id=556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 8.16227039s ago: executing program 5 (id=557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}}, 0x0) 7.332754734s ago: executing program 5 (id=559): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000ac8a000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ffff"], 0x38}}, 0x0) 7.191624865s ago: executing program 5 (id=561): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x61f}], 0x1, 0x400001a1, 0x0) 7.128689335s ago: executing program 4 (id=562): setreuid(0xffffffffffffffff, 0xee00) unshare(0xa000200) 7.065942535s ago: executing program 4 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x5, 0x0, 0x1500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x2, @void, @value, @void, @value}, 0x50) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000703000/0x2000)=nil) 6.959133976s ago: executing program 5 (id=564): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.209064289s ago: executing program 0 (id=565): read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 5.896577711s ago: executing program 3 (id=566): creat(&(0x7f0000000240)='./file0\x00', 0x59) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x15) dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{0x48, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x10}]}) write$ppp(r6, &(0x7f0000000380)="03f4", 0x2) 5.382268704s ago: executing program 5 (id=567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000b558a2910ffdd76628063f9458562c195a68aa2fccd731f485c3dfb6f403ff56f32506d06427c4b3749d665c0ab403f71282600d074df74eace25a45f8ad5ab01f07851ce4c2f2b8188c575d015bf12494dec562cd89780676c1c4733ec3f1631ca4c23a9e5e91390b0ea1c0161d52e466c8f4903d464ea8bc"], 0x10}}, 0x20000004) 5.106485825s ago: executing program 0 (id=568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendfile(r0, r0, &(0x7f0000000000)=0x2443, 0x3) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x541b, 0x1000000000000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000015c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, 0xffffffffffffffff, 0x2e1f0000) 3.097108495s ago: executing program 1 (id=569): r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x24}, &(0x7f00000001c0), &(0x7f0000000080)) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.744665497s ago: executing program 0 (id=570): r0 = socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) 2.569500117s ago: executing program 3 (id=571): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @private2, 0x5}], 0x1c) 2.488427128s ago: executing program 4 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.424709808s ago: executing program 3 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 2.223580069s ago: executing program 3 (id=574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x48}}, 0x0) 1.825990931s ago: executing program 0 (id=575): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d1202049fd3e46740a84e73"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, 0x0, 0x0) shutdown(r0, 0x1) 1.469481893s ago: executing program 4 (id=576): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f0000000000), 0x4) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) 1.420631983s ago: executing program 1 (id=577): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 1.420403683s ago: executing program 3 (id=578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0xfffffffa, @private0}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)="906b03ca260597911414bf9e3261467f5ba23ea675ac674f9f6f3c28630949389fbc8943c4cab54e26e5563be1e4e0ab85769e9cd4096b92", 0x38}], 0x1, &(0x7f0000000b80)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d820000000000000018000000"], 0x38}, 0x41) 1.128338545s ago: executing program 4 (id=579): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb45fd629100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db220100002600000000000080622ea74b2b7f6a0cad8c932e1559f5fc8cd77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bce5a6f087ae8f5e64be2c9d2d00b391d8177d7bb9f129db3d36dd015c7bd3f15aa6aadbeafdc3cf4cda547a9f1c27a7b2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11befffffffeffffffff97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00512fea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579ebb6d949fb12f63be72a3d817b324d6cada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108f6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003e00)=[0x0], 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 322.159148ms ago: executing program 0 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8044) 272.661389ms ago: executing program 1 (id=581): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x6, 0x8d, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) 0s ago: executing program 0 (id=582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b04000000000000000002000000280004802400018009000100686173680000000014000280080002400000000a080007400000f3000900010073797a30000000020900020073797a32"], 0x7c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. syzkaller login: [ 53.454366][ T4156] cgroup: Unknown subsys name 'net' [ 53.586542][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.980234][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.354073][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 56.443858][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 56.485569][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 56.517299][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.525160][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.533658][ T4175] device bridge_slave_0 entered promiscuous mode [ 56.546728][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.553833][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.561984][ T4175] device bridge_slave_1 entered promiscuous mode [ 56.582031][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 56.629481][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.658912][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.668317][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 56.717760][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.725038][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.733007][ T4178] device bridge_slave_0 entered promiscuous mode [ 56.765227][ T4175] team0: Port device team_slave_0 added [ 56.777551][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.784835][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.792758][ T4178] device bridge_slave_1 entered promiscuous mode [ 56.799715][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.807063][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.815097][ T4169] device bridge_slave_0 entered promiscuous mode [ 56.829915][ T4175] team0: Port device team_slave_1 added [ 56.864518][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.871776][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.879520][ T4169] device bridge_slave_1 entered promiscuous mode [ 56.904419][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.911563][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.937554][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.979526][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.986715][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.012713][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.024065][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.031347][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.039280][ T4166] device bridge_slave_0 entered promiscuous mode [ 57.048528][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.066205][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.073332][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.081518][ T4170] device bridge_slave_0 entered promiscuous mode [ 57.093832][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.101271][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.108922][ T4166] device bridge_slave_1 entered promiscuous mode [ 57.117864][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.128867][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.141307][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.150548][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.157596][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.165600][ T4170] device bridge_slave_1 entered promiscuous mode [ 57.226549][ T4175] device hsr_slave_0 entered promiscuous mode [ 57.233631][ T4175] device hsr_slave_1 entered promiscuous mode [ 57.264268][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.275815][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.287179][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.298876][ T4178] team0: Port device team_slave_0 added [ 57.307165][ T4169] team0: Port device team_slave_0 added [ 57.330028][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.341048][ T4178] team0: Port device team_slave_1 added [ 57.355100][ T4169] team0: Port device team_slave_1 added [ 57.370809][ T4170] team0: Port device team_slave_0 added [ 57.416372][ T4170] team0: Port device team_slave_1 added [ 57.430434][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.437388][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.463588][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.482899][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.489976][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.515983][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.537369][ T4166] team0: Port device team_slave_0 added [ 57.543850][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.550999][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.577533][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.592696][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.599657][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.625593][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.644540][ T4166] team0: Port device team_slave_1 added [ 57.662210][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.669168][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.695567][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.734867][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.742069][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.768009][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.782670][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.789618][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.816279][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.829240][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.836330][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.862553][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.900999][ T4178] device hsr_slave_0 entered promiscuous mode [ 57.907757][ T4178] device hsr_slave_1 entered promiscuous mode [ 57.914666][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.922660][ T4178] Cannot create hsr debugfs directory [ 57.952431][ T4169] device hsr_slave_0 entered promiscuous mode [ 57.959222][ T4169] device hsr_slave_1 entered promiscuous mode [ 57.965919][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.973583][ T4169] Cannot create hsr debugfs directory [ 58.033399][ T4170] device hsr_slave_0 entered promiscuous mode [ 58.040567][ T4170] device hsr_slave_1 entered promiscuous mode [ 58.047126][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.054744][ T4170] Cannot create hsr debugfs directory [ 58.061272][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 58.067709][ T2358] Bluetooth: hci1: command 0x0409 tx timeout [ 58.073992][ T2358] Bluetooth: hci0: command 0x0409 tx timeout [ 58.112042][ T4166] device hsr_slave_0 entered promiscuous mode [ 58.118835][ T4166] device hsr_slave_1 entered promiscuous mode [ 58.125802][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.133595][ T4166] Cannot create hsr debugfs directory [ 58.154871][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 58.161064][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 58.366019][ T4175] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.387487][ T4175] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.398783][ T4175] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.422137][ T4175] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.466093][ T4178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.484635][ T4178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.505139][ T4178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.519146][ T4178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.530605][ T4169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.552184][ T4169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.571475][ T4169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.580784][ T4169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.671716][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.697993][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.712098][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.731789][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.744115][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.786006][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.796232][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.808799][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.825628][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.842894][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.861179][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.869378][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.878890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.889646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.899026][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.906276][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.917558][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.927384][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.938563][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.953260][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.960662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.971837][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.986362][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.995899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.004490][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.011587][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.034817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.053096][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.062301][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.072239][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.079294][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.087124][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.095150][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.109183][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.119935][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.148368][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.161712][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.170680][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.179420][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.186506][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.195975][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.204933][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.214604][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.223364][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.232090][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.239126][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.247475][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.277513][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.288021][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.297981][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.306886][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.316195][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.325097][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.341123][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.351012][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.359467][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.368777][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.377339][ T4206] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.384481][ T4206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.392277][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.400994][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.409327][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.444149][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.453571][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.465021][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.473730][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.482304][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.490880][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.499203][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.508305][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.518777][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.527887][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.553381][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.568187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.578218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.588286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.598011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.607435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.616309][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.629112][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.645053][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.664550][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.690389][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.698881][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.720840][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.728998][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.749228][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.769929][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.795448][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.812387][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.836910][ T4206] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.844062][ T4206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.852777][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.860687][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.868461][ T4206] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.879103][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.937369][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.946546][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.955441][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.962621][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.971743][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.981519][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.988943][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.996434][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.005530][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.014464][ T4218] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.021568][ T4218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.029419][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.038466][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.049494][ T4218] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.056581][ T4218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.065040][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.072877][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.080392][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.089034][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.108205][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.123158][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.141087][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.149927][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.158550][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 60.165149][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 60.169660][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.171903][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 60.189272][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.197511][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.211655][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.220588][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 60.226946][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 60.241841][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.254420][ T4166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.265406][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.277315][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.286050][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.295087][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.306545][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.316101][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.326026][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.334498][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.343148][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.353130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.362496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.382723][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.408159][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.419128][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.433949][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.446651][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.456775][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.470987][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.479579][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.488351][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.498101][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.524089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.542816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.581182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.592034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.628402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.646096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.663710][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.675667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.692844][ T4178] device veth0_vlan entered promiscuous mode [ 60.709857][ T4175] device veth0_vlan entered promiscuous mode [ 60.728185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.739335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.748101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.763541][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.774810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.783091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.806787][ T4175] device veth1_vlan entered promiscuous mode [ 60.816190][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.824669][ T4178] device veth1_vlan entered promiscuous mode [ 60.844502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.852697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.861540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.868954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.900358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.908508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.917022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.925726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.939254][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.977594][ T4178] device veth0_macvtap entered promiscuous mode [ 60.985349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.994402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.005956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.015104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.024468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.033564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.042162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.054523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.064239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.075043][ T4175] device veth0_macvtap entered promiscuous mode [ 61.095325][ T4178] device veth1_macvtap entered promiscuous mode [ 61.104978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.113188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.122705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.130521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.138242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.147351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.159144][ T4175] device veth1_macvtap entered promiscuous mode [ 61.177922][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.187734][ T4169] device veth0_vlan entered promiscuous mode [ 61.204900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.213754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.223510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.237882][ T4166] device veth0_vlan entered promiscuous mode [ 61.248187][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.262354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.272922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.281483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.290346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.299103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.307954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.317160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.325646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.333667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.342062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.356868][ T4178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.365941][ T4178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.374999][ T4178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.383993][ T4178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.404971][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.415698][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.427433][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.438932][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.450696][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.461930][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.469430][ T4170] device veth0_vlan entered promiscuous mode [ 61.478801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.487934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.498505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.507518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.518999][ T4166] device veth1_vlan entered promiscuous mode [ 61.526852][ T4169] device veth1_vlan entered promiscuous mode [ 61.536804][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.545747][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.555620][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.564651][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.585231][ T4170] device veth1_vlan entered promiscuous mode [ 61.659485][ T4169] device veth0_macvtap entered promiscuous mode [ 61.701475][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.712743][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.723783][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.738335][ T4170] device veth0_macvtap entered promiscuous mode [ 61.758328][ T4169] device veth1_macvtap entered promiscuous mode [ 61.765550][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.773827][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.785668][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.794771][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.803950][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.813193][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.842209][ T4170] device veth1_macvtap entered promiscuous mode [ 61.857987][ T4166] device veth0_macvtap entered promiscuous mode [ 61.889271][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.900845][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.912039][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.922803][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.934455][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.946713][ T4166] device veth1_macvtap entered promiscuous mode [ 61.961043][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.969033][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.976140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.991954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.999963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.008398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.016573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.025513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.037525][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.048844][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.054753][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.061053][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.068485][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.084796][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.095834][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.120799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.128965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.137932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.165365][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.176542][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.187984][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.198669][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.208767][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.219551][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.230809][ T4211] Bluetooth: hci3: command 0x040f tx timeout [ 62.232034][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.236969][ T4211] Bluetooth: hci1: command 0x040f tx timeout [ 62.250893][ T4211] Bluetooth: hci0: command 0x040f tx timeout [ 62.260762][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.269463][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.278396][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.288133][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.302385][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.313661][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.314036][ T4211] Bluetooth: hci4: command 0x040f tx timeout [ 62.327884][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.329709][ T4211] Bluetooth: hci2: command 0x040f tx timeout [ 62.347246][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.357230][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.367928][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.378062][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.391064][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.403738][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.414184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.423703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.433492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.442540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.459128][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.459211][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.472298][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.487424][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.489337][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.506000][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518681][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.529168][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.540339][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.551138][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.562635][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.572685][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.583225][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.593159][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.604071][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.614211][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.625101][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.636205][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.651730][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.660365][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.668903][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.678632][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.688566][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.698972][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.709686][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.727615][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.736632][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.745767][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.754794][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.767306][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.776289][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.785818][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.794552][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.811844][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.962687][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.980576][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.016822][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.048013][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.056863][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.056874][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.074435][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.086371][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.096790][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.129435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.183734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.200151][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.209303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.218369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 63.227525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 63.236601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.245678][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.254710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.263872][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.272895][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 63.282061][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 64.140122][ C1] sched: RT throttling activated [ 64.165833][ T4243] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.182711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.223167][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.250364][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.299260][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.316144][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.346071][ T4242] loop3: detected capacity change from 0 to 1024 [ 64.584069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.586669][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 64.599923][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 64.607921][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 64.608795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.614171][ T4209] Bluetooth: hci2: command 0x0419 tx timeout [ 64.614233][ T4209] Bluetooth: hci4: command 0x0419 tx timeout [ 66.765975][ T4250] loop2: detected capacity change from 0 to 4096 [ 66.833455][ T4218] hfsplus: b-tree write err: -5, ino 4 [ 66.941365][ T4250] NILFS (loop2): invalid segment: Checksum error in segment payload [ 66.979833][ T4250] NILFS (loop2): trying rollback from an earlier position [ 66.990571][ T4207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.066479][ T4250] NILFS (loop2): recovery complete [ 67.087636][ T4268] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.146205][ T4269] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10'. [ 67.280379][ T4207] usb 1-1: Using ep0 maxpacket: 16 [ 67.350634][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.413512][ T4207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.438295][ T4207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.475434][ T4207] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 67.494894][ T4207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.532585][ T4207] usb 1-1: config 0 descriptor?? [ 67.581571][ T23] usb 2-1: device descriptor read/64, error -71 [ 67.627033][ T4207] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 67.860353][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.997868][ T4207] usb 1-1: USB disconnect, device number 2 [ 68.026717][ T3531] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 68.084295][ T4278] loop4: detected capacity change from 0 to 256 [ 68.110176][ T23] usb 2-1: device descriptor read/64, error -71 [ 68.241169][ T23] usb usb2-port1: attempt power cycle [ 68.800624][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.060460][ T23] usb 2-1: device descriptor read/8, error -71 [ 69.340363][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 69.450535][ T23] usb 2-1: device descriptor read/8, error -71 [ 69.580509][ T23] usb usb2-port1: unable to enumerate USB device [ 69.676262][ T4287] loop2: detected capacity change from 0 to 32768 [ 69.794761][ T4287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.15 (4287) [ 69.827163][ T4295] loop0: detected capacity change from 0 to 32768 [ 69.878747][ T4287] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 69.881117][ T4295] ======================================================= [ 69.881117][ T4295] WARNING: The mand mount option has been deprecated and [ 69.881117][ T4295] and is ignored by this kernel. Remove the mand [ 69.881117][ T4295] option from the mount to silence this warning. [ 69.881117][ T4295] ======================================================= [ 69.898109][ T4287] BTRFS info (device loop2): enabling auto defrag [ 70.033928][ T4287] BTRFS info (device loop2): disabling tree log [ 70.085183][ T4287] BTRFS info (device loop2): use no compression [ 70.128523][ T4295] JBD2: Ignoring recovery information on journal [ 70.129568][ T4287] BTRFS info (device loop2): force clearing of disk cache [ 70.181742][ T4287] BTRFS info (device loop2): disabling free space tree [ 70.189775][ T4287] BTRFS info (device loop2): has skinny extents [ 70.318830][ T4295] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 70.572664][ T4315] ODEBUG: Out of memory. ODEBUG disabled [ 71.155518][ T26] audit: type=1800 audit(1733068863.617:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 71.185682][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.192245][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.260409][ T4322] loop_set_status: loop0 () has still dirty pages (nrpages=5) [ 71.400069][ T4295] syz.0.18 (4295) used greatest stack depth: 19360 bytes left [ 71.489316][ T4287] BTRFS info (device loop2): enabling ssd optimizations [ 71.539161][ T4287] BTRFS info (device loop2): clearing free space tree [ 71.555790][ T4287] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 71.566244][ T4287] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 71.608234][ T4166] ocfs2: Unmounting device (7,0) on (node local) [ 73.771068][ T4360] loop0: detected capacity change from 0 to 4096 [ 74.350782][ T4379] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.381526][ T4360] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 74.437315][ T4360] Remounting filesystem read-only [ 75.251169][ T26] audit: type=1800 audit(1733068867.717:3): pid=4383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.34" name="/" dev="fuse" ino=1 res=0 errno=0 [ 76.214208][ T4414] loop0: detected capacity change from 0 to 1024 [ 78.240630][ T4207] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.358013][ T4421] loop3: detected capacity change from 0 to 1024 [ 78.448475][ T4421] EXT4-fs (loop3): Ignoring removed nobh option [ 78.520320][ T4207] usb 5-1: Using ep0 maxpacket: 8 [ 78.583531][ T4421] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.44: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 78.622908][ T4434] qrtr: Invalid version 10 [ 78.640963][ T4421] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.44: couldn't read orphan inode 11 (err -117) [ 78.656076][ T4207] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.666438][ T4207] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.676567][ T4207] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.686595][ T4421] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 78.708098][ T4207] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.726626][ T4207] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.746708][ T4207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.855695][ T4207] usb 5-1: can't set config #16, error -71 [ 78.891461][ T4207] usb 5-1: USB disconnect, device number 2 [ 80.491419][ T4426] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 81.554266][ T1107] cfg80211: failed to load regulatory.db [ 81.786441][ T4469] netlink: 'syz.2.57': attribute type 4 has an invalid length. [ 85.482360][ T4486] loop2: detected capacity change from 0 to 40427 [ 85.532408][ T4513] loop3: detected capacity change from 0 to 1024 [ 85.596675][ T4486] F2FS-fs (loop2): invalid crc value [ 85.643382][ T4486] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.698992][ T4513] EXT4-fs (loop3): Ignoring removed nobh option [ 85.770195][ T4513] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.72: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 85.780368][ T4486] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 85.802561][ T4486] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 85.817254][ T4513] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.72: couldn't read orphan inode 11 (err -117) [ 85.970642][ T4513] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 87.591498][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.903070][ T21] usb 3-1: device descriptor read/64, error -71 [ 88.190251][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.400344][ T21] usb 3-1: device descriptor read/64, error -71 [ 88.443896][ T4552] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.72: Invalid block bitmap block 0 in block_group 0 [ 88.459503][ T4552] Quota error (device loop3): write_blk: dquota write failed [ 88.468993][ T4552] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 88.479113][ T4552] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.72: Failed to acquire dquot type 0 [ 88.520737][ T21] usb usb3-port1: attempt power cycle [ 89.031877][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.130616][ T21] usb 3-1: device descriptor read/8, error -71 [ 89.448506][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.136424][ T4565] loop2: detected capacity change from 0 to 128 [ 90.336931][ T4565] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 90.392806][ T21] usb 3-1: device not accepting address 5, error -71 [ 90.409079][ T21] usb usb3-port1: unable to enumerate USB device [ 91.050183][ T4565] FAT-fs (loop2): Filesystem has been set read-only [ 91.100376][ T4378] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.340224][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 91.460401][ T4378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 92.171009][ T4582] netlink: 'syz.2.88': attribute type 1 has an invalid length. [ 92.320100][ T4580] loop0: detected capacity change from 0 to 1024 [ 92.410554][ T4378] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 92.412863][ T4586] loop2: detected capacity change from 0 to 1024 [ 92.434117][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 92.463565][ T4580] EXT4-fs (loop0): Ignoring removed orlov option [ 92.469989][ T4378] usb 4-1: Product: syz [ 92.490607][ T4580] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 92.494823][ T4378] usb 4-1: Manufacturer: syz [ 92.510222][ T4378] usb 4-1: SerialNumber: syz [ 92.547032][ T4586] EXT4-fs (loop2): Ignoring removed nobh option [ 92.561153][ T4378] usb 4-1: config 0 descriptor?? [ 92.600459][ T4562] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 92.653684][ T4586] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.91: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 92.682861][ T4586] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.91: couldn't read orphan inode 11 (err -117) [ 92.721772][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 92.727089][ T4586] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 92.860192][ T4580] process 'syz.0.89' launched './file0/file0' with NULL argv: empty string added [ 93.187466][ T4597] loop4: detected capacity change from 0 to 16 [ 93.473282][ T4378] usb 4-1: USB disconnect, device number 2 [ 93.539337][ T4597] erofs: (device loop4): mounted with root inode @ nid 36. [ 94.381966][ T4592] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 94.497908][ T4613] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.91: Invalid block bitmap block 0 in block_group 0 [ 94.514999][ T4613] Quota error (device loop2): write_blk: dquota write failed [ 94.522736][ T4613] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 94.533169][ T4613] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.91: Failed to acquire dquot type 0 [ 95.034144][ T4610] loop0: detected capacity change from 0 to 1024 [ 95.330750][ T4610] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 95.373014][ T4623] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 97.338258][ T4641] loop4: detected capacity change from 0 to 1024 [ 97.523321][ T4641] EXT4-fs (loop4): Ignoring removed oldalloc option [ 97.613551][ T4641] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000040003,noauto_da_alloc,jqfmt=vfsold,jqfmt=vfsv0,noauto_da_alloc,nojournal_checksum,dax=never,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 101.117308][ T4686] loop2: detected capacity change from 0 to 736 [ 101.463759][ T4686] ISOFS: unable to read i-node block [ 102.551201][ T4699] loop4: detected capacity change from 0 to 16 [ 103.488219][ T4699] erofs: (device loop4): mounted with root inode @ nid 36. [ 105.702888][ T4732] Zero length message leads to an empty skb [ 105.711427][ T4730] loop0: detected capacity change from 0 to 1024 [ 105.780564][ T4730] EXT4-fs (loop0): Ignoring removed nobh option [ 105.899147][ T4730] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.129: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 106.107063][ T4730] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.129: couldn't read orphan inode 11 (err -117) [ 106.203936][ T4730] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 106.717703][ T4754] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.129: Invalid block bitmap block 0 in block_group 0 [ 106.731765][ T4754] Quota error (device loop0): write_blk: dquota write failed [ 106.739203][ T4754] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 106.749240][ T4754] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.129: Failed to acquire dquot type 0 [ 106.788209][ T4710] loop4: detected capacity change from 0 to 32768 [ 107.353624][ T4710] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 107.779921][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 110.833914][ T4802] loop2: detected capacity change from 0 to 1024 [ 110.841994][ T4803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 111.075979][ T4802] EXT4-fs (loop2): Ignoring removed nobh option [ 113.243178][ T4802] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.149: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 113.406022][ T4802] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.149: couldn't read orphan inode 11 (err -117) [ 113.464745][ T4802] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 113.540230][ T4819] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 114.490691][ T4836] Quota error (device loop2): write_blk: dquota write failed [ 114.498146][ T4836] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 114.508059][ T4836] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.149: Failed to acquire dquot type 0 [ 116.126627][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'. [ 116.194589][ T4861] loop4: detected capacity change from 0 to 256 [ 116.222396][ T4864] loop1: detected capacity change from 0 to 128 [ 116.306852][ T4864] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 116.334263][ T4861] FAT-fs (loop4): Directory bread(block 64) failed [ 116.353636][ T4864] FAT-fs (loop1): Filesystem has been set read-only [ 116.365422][ T4861] FAT-fs (loop4): Directory bread(block 65) failed [ 116.406336][ T4861] FAT-fs (loop4): Directory bread(block 66) failed [ 116.451090][ T4861] FAT-fs (loop4): Directory bread(block 67) failed [ 116.470676][ T4861] FAT-fs (loop4): Directory bread(block 68) failed [ 116.521048][ T4861] FAT-fs (loop4): Directory bread(block 69) failed [ 116.581161][ T4861] FAT-fs (loop4): Directory bread(block 70) failed [ 116.605114][ T4861] FAT-fs (loop4): Directory bread(block 71) failed [ 116.612364][ T4861] FAT-fs (loop4): Directory bread(block 72) failed [ 116.622406][ T4861] FAT-fs (loop4): Directory bread(block 73) failed [ 117.235807][ T4882] loop2: detected capacity change from 0 to 4096 [ 117.436086][ T4926] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.706779][ T4853] loop3: detected capacity change from 0 to 32768 [ 118.576657][ T4853] XFS: ikeep mount option is deprecated. [ 121.200166][ T4959] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.552898][ T4962] loop1: detected capacity change from 0 to 256 [ 121.749433][ T4964] trusted_key: encrypted_key: key user:syz not found [ 123.069663][ T4952] loop4: detected capacity change from 0 to 32768 [ 126.736932][ T4994] loop4: detected capacity change from 0 to 32768 [ 126.834303][ T4994] (syz.4.183,4994,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.873619][ T4980] loop0: detected capacity change from 0 to 32768 [ 126.891125][ T4994] (syz.4.183,4994,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.952574][ T4980] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.958350][ T4994] JBD2: Ignoring recovery information on journal [ 126.970191][ T4980] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 127.063302][ T4980] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 127.160315][ T4994] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 127.317651][ T4980] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 127.449219][ T4169] ocfs2: Unmounting device (7,4) on (node local) [ 128.557996][ T5013] loop3: detected capacity change from 0 to 1024 [ 128.662081][ T5006] loop2: detected capacity change from 0 to 32768 [ 128.793583][ T5023] loop4: detected capacity change from 0 to 4096 [ 128.853430][ T5013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.906751][ T5006] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.189 (5006) [ 129.297742][ T5029] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.380730][ T5013] EXT4-fs warning (device loop3): ext4_rmdir:3243: inode #11: comm syz.3.193: empty directory 'file1' has too many links (111) [ 129.599379][ T5006] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.638661][ T5006] BTRFS info (device loop2): enabling auto defrag [ 129.687604][ T5006] BTRFS info (device loop2): disabling tree log [ 129.730308][ T5006] BTRFS info (device loop2): use no compression [ 129.768326][ T5006] BTRFS info (device loop2): force clearing of disk cache [ 129.855710][ T5006] BTRFS info (device loop2): disabling free space tree [ 129.879713][ T5006] BTRFS info (device loop2): has skinny extents [ 130.087531][ T5042] xt_nat: multiple ranges no longer supported [ 132.333200][ T5067] loop4: detected capacity change from 0 to 1764 [ 133.011555][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018143][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.101735][ T5006] BTRFS error (device loop2): open_ctree failed [ 133.201244][ T4208] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.232330][ T4208] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 135.521775][ T5090] nbd0: detected capacity change from 0 to 12 [ 135.593787][ T263] block nbd0: Send control failed (result -89) [ 135.600594][ T263] block nbd0: Request send failed, requeueing [ 135.613313][ T146] block nbd0: Receive control failed (result -32) [ 135.622351][ T263] block nbd0: Dead connection, failed to find a fallback [ 135.629932][ T263] block nbd0: shutting down sockets [ 135.636126][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.647360][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.732827][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.743749][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.771160][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.782138][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.790179][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.801026][ T263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.816642][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.827656][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.907101][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.918486][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.932929][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.944972][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.969376][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 135.981645][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 135.996641][ T4251] ldm_validate_partition_table(): Disk read failed. [ 136.077966][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.089889][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 136.116146][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.127734][ T150] Buffer I/O error on dev nbd0, logical block 0, async page read [ 136.154074][ T4251] Dev nbd0: unable to read RDB block 0 [ 136.272508][ T4251] nbd0: unable to read partition table [ 136.462536][ T4251] nbd0: partition table beyond EOD, truncated [ 136.476382][ T4251] ldm_validate_partition_table(): Disk read failed. [ 136.477653][ T5103] loop4: detected capacity change from 0 to 4096 [ 136.500639][ T4251] Dev nbd0: unable to read RDB block 0 [ 136.560562][ T4251] nbd0: unable to read partition table [ 136.581864][ T4251] nbd0: partition table beyond EOD, truncated [ 136.709785][ T5103] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,lazytime,user_xattr,dioread_lock,,errors=continue. Quota mode: writeback. [ 136.834791][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.928881][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.948794][ T5113] loop2: detected capacity change from 0 to 16 [ 137.103245][ T5113] erofs: (device loop2): mounted with root inode @ nid 36. [ 137.130308][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.152602][ T5113] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 137.166087][ T5113] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 137.205076][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.214776][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 137.223969][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 137.233079][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.242457][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 137.251667][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 137.260798][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 137.273717][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.283079][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 137.292572][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 137.301741][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 137.310850][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 137.320922][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 137.330159][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 137.419762][ T5113] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 137.429253][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 137.438348][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 137.448284][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 137.457638][ T5113] attempt to access beyond end of device [ 137.457638][ T5113] loop2: rw=524288, want=848, limit=16 [ 137.468678][ T5113] attempt to access beyond end of device [ 137.468678][ T5113] loop2: rw=524288, want=13478624104, limit=16 [ 137.481001][ T5113] attempt to access beyond end of device [ 137.481001][ T5113] loop2: rw=524288, want=13478624080, limit=16 [ 137.494106][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 137.504457][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 137.513525][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 137.514882][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.522654][ T5113] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 137.539292][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 137.548389][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 137.558399][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 137.567493][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 137.577897][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 137.587319][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.596660][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 137.605765][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 137.614860][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 137.623943][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 137.633001][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 137.642075][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 137.651140][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 137.661217][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 137.670278][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.679892][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 137.688989][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 137.699046][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 137.708163][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 137.717239][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 137.726350][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 137.735504][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 137.746093][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 137.755295][ T5113] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 137.764703][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 137.773967][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 137.774425][ T5106] syz.0.211 (5106) used greatest stack depth: 19192 bytes left [ 137.784285][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 137.784312][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 137.784334][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 137.784387][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 137.784412][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 137.784436][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 137.784455][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 137.784472][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 137.784496][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 137.784519][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 137.784551][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 137.784575][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 137.784594][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 137.784615][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 137.784634][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 137.784655][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 137.784675][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 137.949879][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 137.958964][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 137.968974][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 137.978034][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36 [ 137.988053][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 137.997239][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 138.007519][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 138.016571][ T5113] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 138.026576][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 138.035627][ T5113] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 138.044935][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 138.054001][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 138.063070][ T5113] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 138.072223][ T5113] attempt to access beyond end of device [ 138.072223][ T5113] loop2: rw=524288, want=40, limit=16 [ 138.083167][ T5113] attempt to access beyond end of device [ 138.083167][ T5113] loop2: rw=524288, want=96, limit=16 [ 138.094114][ T5113] attempt to access beyond end of device [ 138.094114][ T5113] loop2: rw=524288, want=32, limit=16 [ 138.142015][ T4248] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 138.158350][ T4248] Bluetooth: hci0: Injecting HCI hardware error event [ 138.631436][ T5120] loop0: detected capacity change from 0 to 8 [ 138.814960][ T5120] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 138.952508][ T4167] Bluetooth: hci0: hardware error 0x00 [ 139.719782][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 139.830893][ T5137] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.840049][ T5137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.849176][ T5137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.857950][ T5137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.621154][ T5137] device vxlan0 entered promiscuous mode [ 141.560189][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.018081][ T1110] usb 1-1: Using ep0 maxpacket: 8 [ 143.025425][ T5170] netlink: 232 bytes leftover after parsing attributes in process `syz.1.231'. [ 143.107466][ T5170] netlink: 72 bytes leftover after parsing attributes in process `syz.1.231'. [ 143.160349][ T1110] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 143.186386][ T1110] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.212683][ T1110] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.253498][ T1110] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 143.279908][ T1110] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.318290][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.481612][ T1110] usbtmc 1-1:16.0: bulk endpoints not found [ 143.523062][ T5180] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.038278][ T5195] vivid-001: disconnect [ 145.151170][ T4375] usb 1-1: USB disconnect, device number 3 [ 145.167274][ T5148] vivid-001: reconnect [ 147.865792][ T5203] loop4: detected capacity change from 0 to 40427 [ 148.064217][ T5245] loop2: detected capacity change from 0 to 16 [ 148.114105][ T5203] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 148.677720][ T5203] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.696302][ T5245] erofs: (device loop2): mounted with root inode @ nid 36. [ 148.711904][ T5240] erofs: (device loop2): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 148.730499][ T5203] F2FS-fs (loop4): invalid crc value [ 148.770039][ T5203] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 149.037196][ T5252] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.057499][ T5229] loop3: detected capacity change from 0 to 32768 [ 149.213446][ T5229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.252 (5229) [ 149.594533][ T5229] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 149.611706][ T5229] BTRFS info (device loop3): setting nodatacow, compression disabled [ 149.644696][ T5229] BTRFS info (device loop3): setting datacow [ 149.650910][ T5229] BTRFS info (device loop3): doing ref verification [ 149.658131][ T5229] BTRFS info (device loop3): setting nodatacow, compression disabled [ 149.666862][ T5229] BTRFS info (device loop3): turning off barriers [ 149.673730][ T5229] BTRFS info (device loop3): enabling ssd optimizations [ 149.681684][ T5229] BTRFS info (device loop3): using spread ssd allocation scheme [ 149.689691][ T5229] BTRFS info (device loop3): not using ssd optimizations [ 149.699634][ T5229] BTRFS info (device loop3): not using spread ssd allocation scheme [ 149.707979][ T5229] BTRFS info (device loop3): using free space tree [ 149.730348][ T5229] BTRFS info (device loop3): has skinny extents [ 150.144257][ T26] audit: type=1800 audit(1733068942.607:4): pid=5229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.252" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 151.059224][ T5303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.269'. [ 151.071171][ T5283] loop2: detected capacity change from 0 to 40427 [ 151.166300][ T5283] F2FS-fs (loop2): invalid crc value [ 151.181703][ T5304] device ipvlan2 entered promiscuous mode [ 151.223192][ T5283] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.490967][ T5283] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.080337][ T26] audit: type=1800 audit(1733068944.537:5): pid=5283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.265" name="bus" dev="loop2" ino=17 res=0 errno=0 [ 152.150970][ T5283] F2FS-fs (loop2) : inject orphan in f2fs_acquire_orphan_inode of f2fs_unlink+0x382/0xb00 [ 152.181808][ T5283] overlayfs: cleanup of 'work/#2' failed (-28) [ 152.624518][ T4170] F2FS-fs (loop2): access invalid blkaddr:2816 [ 152.848334][ T4170] CPU: 1 PID: 4170 Comm: syz-executor Not tainted 5.15.173-syzkaller #0 [ 152.856698][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.866760][ T4170] Call Trace: [ 152.870037][ T4170] [ 152.872968][ T4170] dump_stack_lvl+0x1e3/0x2d0 [ 152.877661][ T4170] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 152.883310][ T4170] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 152.889138][ T4170] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 152.894534][ T4170] f2fs_map_blocks+0x159a/0x3720 [ 152.899534][ T4170] ? f2fs_force_buffered_io+0x630/0x630 [ 152.905108][ T4170] f2fs_mpage_readpages+0xe98/0x27c0 [ 152.910441][ T4170] ? dquot_release_reservation_block+0x90/0x90 [ 152.916634][ T4170] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 152.922795][ T4170] ? f2fs_readahead+0x16e/0x310 [ 152.927650][ T4170] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 152.933389][ T4170] read_pages+0x159/0x8e0 [ 152.937748][ T4170] ? page_cache_ra_unbounded+0x930/0x930 [ 152.943399][ T4170] ? add_to_page_cache_locked+0x40/0x40 [ 152.948961][ T4170] ? down_read+0x1b3/0x2e0 [ 152.953391][ T4170] page_cache_ra_unbounded+0x7b0/0x930 [ 152.958915][ T4170] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 152.965427][ T4170] ? blk_cgroup_congested+0x30c/0x390 [ 152.970825][ T4170] f2fs_readdir+0x546/0xef0 [ 152.975365][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 152.980612][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 152.985822][ T4170] ? iterate_dir+0x10a/0x570 [ 152.990437][ T4170] ? fsnotify_perm+0x442/0x590 [ 152.995225][ T4170] iterate_dir+0x224/0x570 [ 152.999656][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 153.004866][ T4170] __se_sys_getdents64+0x209/0x4f0 [ 153.009992][ T4170] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 153.015805][ T5323] loop4: detected capacity change from 0 to 512 [ 153.015982][ T4170] ? __x64_sys_getdents64+0x80/0x80 [ 153.027397][ T4170] ? filldir+0x720/0x720 [ 153.031748][ T4170] ? syscall_enter_from_user_mode+0x2e/0x240 [ 153.037741][ T4170] ? lockdep_hardirqs_on+0x94/0x130 [ 153.042955][ T4170] ? syscall_enter_from_user_mode+0x2e/0x240 [ 153.048959][ T4170] do_syscall_64+0x3b/0xb0 [ 153.053496][ T4170] ? clear_bhb_loop+0x15/0x70 [ 153.058280][ T4170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.064187][ T4170] RIP: 0033:0x7f81bb47c9d3 [ 153.068612][ T4170] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 153.088226][ T4170] RSP: 002b:00007ffe86eeb3a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 153.096648][ T4170] RAX: ffffffffffffffda RBX: 000055557fdec600 RCX: 00007f81bb47c9d3 [ 153.104630][ T4170] RDX: 0000000000008000 RSI: 000055557fdec600 RDI: 0000000000000005 [ 153.112609][ T4170] RBP: 000055557fdec5d4 R08: 0000000000000000 R09: 0000000000000000 [ 153.120586][ T4170] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 153.128564][ T4170] R13: 0000000000000010 R14: 000055557fdec5d0 R15: 00007ffe86eed650 [ 153.136562][ T4170] [ 153.139696][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.157414][ T4170] F2FS-fs (loop2): access invalid blkaddr:2816 [ 153.164022][ T4170] CPU: 0 PID: 4170 Comm: syz-executor Not tainted 5.15.173-syzkaller #0 [ 153.172361][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.182419][ T4170] Call Trace: [ 153.185702][ T4170] [ 153.188646][ T4170] dump_stack_lvl+0x1e3/0x2d0 [ 153.193348][ T4170] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 153.199005][ T4170] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 153.204840][ T4170] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 153.210230][ T4170] f2fs_map_blocks+0x159a/0x3720 [ 153.215224][ T4170] ? f2fs_force_buffered_io+0x630/0x630 [ 153.220799][ T4170] ? unlock_page+0x188/0x200 [ 153.225407][ T4170] f2fs_mpage_readpages+0xe98/0x27c0 [ 153.230734][ T4170] ? dquot_release_reservation_block+0x90/0x90 [ 153.236932][ T4170] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 153.243105][ T4170] ? f2fs_readahead+0x16e/0x310 [ 153.247966][ T4170] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 153.253711][ T4170] read_pages+0x159/0x8e0 [ 153.258067][ T4170] ? page_cache_ra_unbounded+0x930/0x930 [ 153.263740][ T4170] ? add_to_page_cache_locked+0x40/0x40 [ 153.269293][ T4170] ? down_read+0x1b3/0x2e0 [ 153.273706][ T4170] page_cache_ra_unbounded+0x7b0/0x930 [ 153.279178][ T4170] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 153.285674][ T4170] ? blk_cgroup_congested+0x30c/0x390 [ 153.291054][ T4170] f2fs_readdir+0x546/0xef0 [ 153.295563][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 153.300758][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 153.305953][ T4170] ? iterate_dir+0x10a/0x570 [ 153.310550][ T4170] ? fsnotify_perm+0x442/0x590 [ 153.315309][ T4170] iterate_dir+0x224/0x570 [ 153.319736][ T4170] ? f2fs_fill_dentries+0xd60/0xd60 [ 153.324925][ T4170] __se_sys_getdents64+0x209/0x4f0 [ 153.330029][ T4170] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 153.336003][ T4170] ? __x64_sys_getdents64+0x80/0x80 [ 153.341191][ T4170] ? filldir+0x720/0x720 [ 153.345449][ T4170] ? syscall_enter_from_user_mode+0x2e/0x240 [ 153.351422][ T4170] ? lockdep_hardirqs_on+0x94/0x130 [ 153.356717][ T4170] ? syscall_enter_from_user_mode+0x2e/0x240 [ 153.362691][ T4170] do_syscall_64+0x3b/0xb0 [ 153.367096][ T4170] ? clear_bhb_loop+0x15/0x70 [ 153.371772][ T4170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.377663][ T4170] RIP: 0033:0x7f81bb47c9d3 [ 153.382073][ T4170] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 153.401667][ T4170] RSP: 002b:00007ffe86eeb3a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 153.410100][ T4170] RAX: ffffffffffffffda RBX: 000055557fdec600 RCX: 00007f81bb47c9d3 [ 153.418068][ T4170] RDX: 0000000000008000 RSI: 000055557fdec600 RDI: 0000000000000005 [ 153.426036][ T4170] RBP: 000055557fdec5d4 R08: 0000000000000000 R09: 0000000000000000 [ 153.434000][ T4170] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 153.441970][ T4170] R13: 0000000000000010 R14: 000055557fdec5d0 R15: 00007ffe86eed650 [ 153.449957][ T4170] [ 153.484294][ T4170] attempt to access beyond end of device [ 153.484294][ T4170] loop2: rw=0, want=45072, limit=40427 [ 153.518827][ T5323] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 153.578383][ T5323] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 153.638859][ T5323] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.274: Corrupt directory, running e2fsck is recommended [ 153.688871][ T5323] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 153.706665][ T5332] loop1: detected capacity change from 0 to 512 [ 153.716683][ T5323] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.274: corrupted in-inode xattr [ 153.939686][ T5323] EXT4-fs (loop4): Remounting filesystem read-only [ 153.966118][ T5332] EXT4-fs (loop1): Unrecognized mount option "permit_directio" or missing value [ 153.994801][ T5323] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.274: couldn't read orphan inode 15 (err -117) [ 154.602205][ T5323] EXT4-fs (loop4): Remounting filesystem read-only [ 154.708515][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,stripe=0x0000000000000009,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 154.730217][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.751804][ T5339] syz.1.277 (5339): drop_caches: 2 [ 155.012682][ T4615] attempt to access beyond end of device [ 155.012682][ T4615] loop2: rw=2049, want=41008, limit=40427 [ 155.281590][ T5352] loop3: detected capacity change from 0 to 8 [ 156.210889][ T5352] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 157.582125][ T4909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.097734][ T4909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.362629][ T4909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.506082][ T4909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.538049][ T5357] loop0: detected capacity change from 0 to 32768 [ 158.680029][ T5357] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 158.748515][ T5357] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 159.533005][ T5357] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms [ 160.037567][ T5357] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 160.254585][ T5393] chnl_net:caif_netlink_parms(): no params data found [ 162.075535][ T5300] Bluetooth: hci2: command 0x0409 tx timeout [ 162.938137][ T5436] Unsupported ieee802154 address type: 0 [ 162.958222][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.981284][ T5393] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.004279][ T5393] device bridge_slave_0 entered promiscuous mode [ 163.369102][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.411448][ T5393] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.453550][ T5393] device bridge_slave_1 entered promiscuous mode [ 163.602033][ T5393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.674047][ T5393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.744959][ T5446] loop3: detected capacity change from 0 to 256 [ 163.788543][ T5393] team0: Port device team_slave_0 added [ 163.949284][ T5393] team0: Port device team_slave_1 added [ 163.983095][ T5446] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 164.723386][ T5292] Bluetooth: hci2: command 0x041b tx timeout [ 164.783692][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.791751][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.853715][ T5393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.921572][ T5393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.928546][ T5393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.233035][ T5393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.291607][ T5461] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 165.329204][ T5461] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 165.367738][ T5393] device hsr_slave_0 entered promiscuous mode [ 165.377422][ T5393] device hsr_slave_1 entered promiscuous mode [ 165.413353][ T5393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.444959][ T5393] Cannot create hsr debugfs directory [ 165.591808][ T4909] device hsr_slave_0 left promiscuous mode [ 165.708108][ T4909] device hsr_slave_1 left promiscuous mode [ 165.715923][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.722180][ T5472] kvm: emulating exchange as write [ 165.732865][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.748176][ T4909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.758937][ T4909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.938373][ T4909] device bridge_slave_1 left promiscuous mode [ 165.999458][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.110750][ T4909] device bridge_slave_0 left promiscuous mode [ 166.120368][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.217490][ T4909] device veth1_macvtap left promiscuous mode [ 166.231150][ T4909] device veth0_macvtap left promiscuous mode [ 166.237508][ T4909] device veth1_vlan left promiscuous mode [ 166.280517][ T4909] device veth0_vlan left promiscuous mode [ 166.921130][ T5300] Bluetooth: hci2: command 0x040f tx timeout [ 167.891290][ T4909] team0 (unregistering): Port device team_slave_1 removed [ 167.921431][ T4909] team0 (unregistering): Port device team_slave_0 removed [ 167.971650][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.031342][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.315164][ T4909] bond0 (unregistering): Released all slaves [ 169.261907][ T5292] Bluetooth: hci2: command 0x0419 tx timeout [ 169.268016][ T5509] loop0: detected capacity change from 0 to 128 [ 169.578500][ T5509] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.630376][ T5509] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.406000][ T5393] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.435851][ T5393] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.515396][ T5393] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.554832][ T5509] EXT4-fs (loop0): shut down requested (0) [ 170.588568][ T5393] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.620213][ T4375] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.911425][ T4375] usb 4-1: Using ep0 maxpacket: 16 [ 171.164763][ T5393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.200198][ T4375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 171.212001][ T4375] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 171.222842][ T4375] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 171.345265][ T5557] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.353198][ T5557] UDF-fs: Scanning with blocksize 512 failed [ 171.361950][ T5557] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.369708][ T5557] UDF-fs: Scanning with blocksize 1024 failed [ 171.557455][ T5557] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.565037][ T5557] UDF-fs: Scanning with blocksize 2048 failed [ 171.587758][ T5557] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 171.595592][ T5557] UDF-fs: Scanning with blocksize 4096 failed [ 171.627218][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.639656][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.671104][ T4375] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 35 [ 171.704510][ T5561] syz.1.326 sent an empty control message without MSG_MORE. [ 171.716042][ T5393] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.746871][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.755488][ T4375] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.781618][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.795526][ T4375] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 171.820013][ T4924] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.827165][ T4924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.841004][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.867218][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.879937][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.890430][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.930662][ T4924] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.937788][ T4924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.005015][ T5393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.040929][ T5393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.114521][ T4375] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 172.125886][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.165805][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.431886][ T5577] overlayfs: unrecognized mount option "reiser\s\" or missing value [ 172.478989][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.781869][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.384467][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.425123][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.439304][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.460755][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.475914][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.489615][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.664308][ T4375] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 173.714371][ T4375] usb 4-1: USB disconnect, device number 3 [ 173.750707][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.759302][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.907308][ T5600] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.114022][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 174.123967][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 174.185832][ T5393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.210820][ T5611] netlink: 96 bytes leftover after parsing attributes in process `syz.3.334'. [ 174.638013][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 174.757770][ T5621] loop3: detected capacity change from 0 to 40427 [ 174.792945][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.863067][ T5621] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 174.871043][ T5621] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 174.881586][ T5621] F2FS-fs (loop3): invalid crc value [ 175.572035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.584661][ T5621] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.672803][ T5621] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.679875][ T5621] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.706908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.796982][ T5393] device veth0_vlan entered promiscuous mode [ 175.860641][ T5393] device veth1_vlan entered promiscuous mode [ 175.904501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.153375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.600406][ T4924] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 177.609623][ T4924] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 177.696610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.735083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.856395][ T5393] device veth0_macvtap entered promiscuous mode [ 177.909461][ T5393] device veth1_macvtap entered promiscuous mode [ 177.972867][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.010185][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.057848][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.099120][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.130099][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.165878][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.196187][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.230323][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.277616][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.344081][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.380845][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.440372][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.463771][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.001884][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.050512][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.100656][ T5393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.217966][ T5393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.292372][ T5393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.299774][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.334114][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.382555][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.414286][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.455853][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.513679][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.547040][ T5393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.586876][ T5393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.685195][ T5393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.743108][ T5393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.785351][ T5296] Bluetooth: hci3: command 0x0406 tx timeout [ 180.798849][ T5296] Bluetooth: hci1: command 0x0406 tx timeout [ 180.810597][ T5296] Bluetooth: hci4: command 0x0406 tx timeout [ 180.933430][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.978862][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.030413][ T4924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.045916][ T4924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.071839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.158233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.422106][ T5735] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.357'. [ 184.772664][ T5296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.050269][ T5296] usb 2-1: Using ep0 maxpacket: 16 [ 185.337459][ T5296] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.353506][ T5296] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.368071][ T5296] usb 2-1: config 0 has no interface number 0 [ 185.557296][ T5296] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.579297][ T5296] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 185.601059][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.618276][ T5296] usb 2-1: config 0 descriptor?? [ 185.723205][ T5296] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 186.369165][ T1110] usb 2-1: USB disconnect, device number 6 [ 186.994206][ T5778] loop0: detected capacity change from 0 to 1 [ 187.036900][ T5778] Dev loop0: unable to read RDB block 1 [ 187.053429][ T5778] loop0: unable to read partition table [ 187.086360][ T5778] loop0: partition table beyond EOD, truncated [ 187.115090][ T5779] Dev loop0: unable to read RDB block 1 [ 187.160248][ T5779] loop0: unable to read partition table [ 187.165885][ T5778] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 187.165885][ T5778] ) failed (rc=-5) [ 187.232349][ T5779] loop0: partition table beyond EOD, truncated [ 194.076994][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.083347][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.822988][ T5300] Bluetooth: hci2: command 0x0405 tx timeout [ 202.058998][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.5.412'. [ 203.347213][ C0] Unknown status report in ack skb [ 203.902908][ T6029] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 203.931072][ T6025] bridge0: port 3(erspan0) entered blocking state [ 203.952586][ T6025] bridge0: port 3(erspan0) entered disabled state [ 204.017291][ T6025] device erspan0 entered promiscuous mode [ 204.044610][ T6025] bridge0: port 3(erspan0) entered blocking state [ 204.051479][ T6025] bridge0: port 3(erspan0) entered forwarding state [ 206.646632][ T6056] syz.1.429 uses obsolete (PF_INET,SOCK_PACKET) [ 206.684456][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 209.859534][ T6113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.653656][ T6213] device veth0_to_team entered promiscuous mode [ 219.849746][ T6253] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 219.885527][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 220.827755][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 220.981014][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.051553][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.223164][ T21] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 221.389512][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.673680][ T21] usb 4-1: config 0 descriptor?? [ 221.840275][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 221.846331][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 221.880317][ T21] usb 4-1: USB disconnect, device number 4 [ 224.152154][ T5300] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 225.281213][ T5300] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.300433][ T5300] usb 4-1: config 0 has no interfaces? [ 225.313140][ T5300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 225.333565][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.363265][ T5300] usb 4-1: config 0 descriptor?? [ 225.631680][ T6343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.120963][ T4377] usb 4-1: USB disconnect, device number 5 [ 230.373585][ T6378] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.416969][ T26] audit: type=1800 audit(1733069022.877:6): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.505" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 232.745282][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.517'. [ 233.917061][ T4367] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 233.925421][ T4367] Bluetooth: hci3: Injecting HCI hardware error event [ 233.932665][ T146] Bluetooth: hci3: hardware error 0x00 [ 234.114249][ T6437] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 234.136979][ T6437] PKCS7: Only support pkcs7_signedData type [ 239.297821][ T6495] IPv6: Can't replace route, no match found [ 239.380727][ T6476] netlink: 'syz.4.533': attribute type 3 has an invalid length. [ 239.388414][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.533'. [ 239.732992][ T6506] ip6t_rpfilter: unknown options [ 241.346067][ T6517] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 241.353829][ T6517] UDF-fs: Scanning with blocksize 512 failed [ 241.368507][ T6517] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 241.376252][ T6517] UDF-fs: Scanning with blocksize 1024 failed [ 241.490154][ T6517] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 241.497651][ T6517] UDF-fs: Scanning with blocksize 2048 failed [ 241.504269][ T6517] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 241.513233][ T6517] UDF-fs: Scanning with blocksize 4096 failed [ 243.300281][ T5300] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.580813][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 244.240315][ T5300] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.255966][ T5300] usb 4-1: config 1 has no interface number 1 [ 244.272540][ T5300] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.293502][ T5300] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.604073][ T5300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.639129][ T5300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.669527][ T5300] usb 4-1: Product: syz [ 244.701277][ T5300] usb 4-1: Manufacturer: syz [ 244.759169][ T5300] usb 4-1: SerialNumber: syz [ 245.140691][ T5300] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 245.147487][ T5300] usb 4-1: 2:1 : invalid channels 0 [ 245.300489][ T5300] usb 4-1: USB disconnect, device number 6 [ 245.457358][ T4251] udevd[4251]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.396773][ T6618] page:ffffea0001367540 refcount:4 mapcount:1 mapping:ffff88801ffba8a0 index:0x0 pfn:0x4d9d5 [ 251.407788][ T6618] memcg:ffff88801fa1c000 [ 251.412053][ T6618] aops:shmem_aops ino:4aa [ 251.416395][ T6618] flags: 0xfff00000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 251.426224][ T6618] raw: 00fff00000080015 ffffea0001368248 ffffea0001367588 ffff88801ffba8a0 [ 251.434821][ T6618] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88801fa1c000 [ 251.443409][ T6618] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 251.450430][ T6618] page_owner tracks the page as allocated [ 251.456150][ T6618] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 6619, ts 251390966228, free_ts 251290117607 [ 251.470934][ T6618] get_page_from_freelist+0x3b78/0x3d40 [ 251.476497][ T6618] __alloc_pages+0x272/0x700 [ 251.481106][ T6618] alloc_pages_vma+0x39a/0x800 [ 251.485885][ T6618] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 251.491528][ T6618] shmem_getpage_gfp+0x17b1/0x3190 [ 251.496669][ T6618] shmem_read_mapping_page_gfp+0xfd/0x180 [ 251.502398][ T6618] udmabuf_create+0xa62/0x15e0 [ 251.507177][ T6618] udmabuf_ioctl+0x300/0x4e0 [ 251.511779][ T6618] __se_sys_ioctl+0xf1/0x160 [ 251.516371][ T6618] do_syscall_64+0x3b/0xb0 [ 251.520803][ T6618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 251.526727][ T6618] page last free stack trace: [ 251.531400][ T6618] free_unref_page_prepare+0xc34/0xcf0 [ 251.536871][ T6618] free_unref_page_list+0x1f7/0x8e0 [ 251.542091][ T6618] release_pages+0x1bb9/0x1f40 [ 251.546867][ T6618] __pagevec_release+0x80/0xf0 [ 251.551644][ T6618] shmem_undo_range+0x67a/0x1b50 [ 251.556594][ T6618] shmem_evict_inode+0x21b/0xa00 [ 251.561555][ T6618] evict+0x529/0x930 [ 251.565461][ T6618] __dentry_kill+0x436/0x650 [ 251.570066][ T6618] dentry_kill+0xbb/0x290 [ 251.574408][ T6618] dput+0xd8/0x1a0 [ 251.578155][ T6618] __fput+0x636/0x8e0 [ 251.582159][ T6618] task_work_run+0x129/0x1a0 [ 251.586764][ T6618] do_exit+0x6a3/0x2480 [ 251.590933][ T6618] do_group_exit+0x144/0x310 [ 251.595539][ T6618] get_signal+0xc66/0x14e0 [ 251.599964][ T6618] arch_do_signal_or_restart+0xc3/0x1890 [ 251.605745][ T6618] ------------[ cut here ]------------ [ 251.611203][ T6618] kernel BUG at mm/filemap.c:166! [ 251.616258][ T6618] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 251.622338][ T6618] CPU: 1 PID: 6618 Comm: syz.1.581 Not tainted 5.15.173-syzkaller #0 [ 251.630407][ T6618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.640470][ T6618] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 251.646915][ T6618] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 251.666542][ T6618] RSP: 0018:ffffc900030bf610 EFLAGS: 00010046 [ 251.672649][ T6618] RAX: 42d2bbf697d15600 RBX: 0000000000000000 RCX: ffff88802c4e1dc0 [ 251.680631][ T6618] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 251.688608][ T6618] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 251.696581][ T6618] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd400026cea9 [ 251.704556][ T6618] R13: ffffea0001367548 R14: ffffea0001367540 R15: dffffc0000000000 [ 251.712537][ T6618] FS: 000055557828f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 251.721478][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.728070][ T6618] CR2: 0000000020000080 CR3: 000000007a4f8000 CR4: 00000000003506e0 [ 251.736054][ T6618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.744036][ T6618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.752034][ T6618] Call Trace: [ 251.755324][ T6618] [ 251.758257][ T6618] ? __die_body+0x5e/0xa0 [ 251.762595][ T6618] ? die+0x83/0xb0 [ 251.766320][ T6618] ? do_trap+0x11e/0x350 [ 251.770657][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.776477][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.782298][ T6618] ? do_error_trap+0x13d/0x1e0 [ 251.787077][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.792897][ T6618] ? do_int3+0x30/0x30 [ 251.796979][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.802822][ T6618] ? handle_invalid_op+0x2c/0x40 [ 251.807802][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.813700][ T6618] ? exc_invalid_op+0x2f/0x40 [ 251.818376][ T6618] ? asm_exc_invalid_op+0x16/0x20 [ 251.823412][ T6618] ? __dump_page_owner+0x414/0x620 [ 251.828532][ T6618] ? unaccount_page_cache_page+0x79d/0x8b0 [ 251.834344][ T6618] ? rcu_is_watching+0x11/0xa0 [ 251.839117][ T6618] __delete_from_page_cache+0xd1/0x860 [ 251.844584][ T6618] ? __rwlock_init+0x140/0x140 [ 251.849364][ T6618] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 251.856395][ T6618] ? _raw_spin_lock_irq+0xdb/0x110 [ 251.861516][ T6618] ? _raw_spin_lock_irqsave+0x120/0x120 [ 251.867072][ T6618] ? page_mapping+0x312/0x440 [ 251.871760][ T6618] delete_from_page_cache+0x126/0x190 [ 251.877143][ T6618] truncate_inode_page+0x8d/0xb0 [ 251.882093][ T6618] shmem_undo_range+0x535/0x1b50 [ 251.887057][ T6618] ? shmem_truncate_range+0xa0/0xa0 [ 251.892278][ T6618] ? __lock_acquire+0x1ff0/0x1ff0 [ 251.897318][ T6618] ? do_raw_spin_lock+0x14a/0x370 [ 251.902359][ T6618] shmem_evict_inode+0x21b/0xa00 [ 251.907311][ T6618] ? _raw_spin_unlock+0x24/0x40 [ 251.912177][ T6618] ? inode_wait_for_writeback+0x21f/0x280 [ 251.917909][ T6618] ? shmem_free_in_core_inode+0xb0/0xb0 [ 251.923464][ T6618] ? bit_waitqueue+0x30/0x30 [ 251.928076][ T6618] ? do_raw_spin_unlock+0x137/0x8b0 [ 251.933299][ T6618] ? shmem_free_in_core_inode+0xb0/0xb0 [ 251.938855][ T6618] evict+0x529/0x930 [ 251.942763][ T6618] ? mode_strip_sgid+0x210/0x210 [ 251.947700][ T6618] ? _raw_spin_unlock+0x24/0x40 [ 251.952544][ T6618] ? iput+0x6f5/0x8b0 [ 251.956517][ T6618] __dentry_kill+0x436/0x650 [ 251.961098][ T6618] dentry_kill+0xbb/0x290 [ 251.965446][ T6618] dput+0xd8/0x1a0 [ 251.969158][ T6618] __fput+0x636/0x8e0 [ 251.973149][ T6618] task_work_run+0x129/0x1a0 [ 251.977729][ T6618] exit_to_user_mode_loop+0x106/0x130 [ 251.983098][ T6618] exit_to_user_mode_prepare+0xb1/0x140 [ 251.988637][ T6618] syscall_exit_to_user_mode+0x5d/0x240 [ 251.994177][ T6618] do_syscall_64+0x47/0xb0 [ 251.998580][ T6618] ? clear_bhb_loop+0x15/0x70 [ 252.003259][ T6618] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.009152][ T6618] RIP: 0033:0x7f59f8fca849 [ 252.013575][ T6618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.033184][ T6618] RSP: 002b:00007fffec3fa8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 252.041585][ T6618] RAX: 0000000000000000 RBX: 000000000003d5be RCX: 00007f59f8fca849 [ 252.049568][ T6618] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 252.057545][ T6618] RBP: 00007f59f9191ba0 R08: 0000000000000001 R09: 00007fffec3fab8f [ 252.065506][ T6618] R10: 00007f59f8e4a000 R11: 0000000000000246 R12: 000000000003d617 [ 252.073462][ T6618] R13: 00007f59f918ffa0 R14: 0000000000000032 R15: ffffffffffffffff [ 252.081428][ T6618] [ 252.084432][ T6618] Modules linked in: [ 252.088333][ T6618] ---[ end trace cb6cd1dfb864f33e ]--- [ 252.093778][ T6618] RIP: 0010:unaccount_page_cache_page+0x79d/0x8b0 [ 252.100186][ T6618] Code: e8 b8 77 d8 ff 4c 89 f7 48 c7 c6 c0 14 b3 8a e8 c9 c9 0e 00 0f 0b e8 a2 77 d8 ff 4c 89 f7 48 c7 c6 00 15 b3 8a e8 b3 c9 0e 00 <0f> 0b 48 85 ed 75 62 e8 87 77 d8 ff 4c 89 eb eb 60 e8 7d 77 d8 ff [ 252.120301][ T6618] RSP: 0018:ffffc900030bf610 EFLAGS: 00010046 [ 252.126359][ T6618] RAX: 42d2bbf697d15600 RBX: 0000000000000000 RCX: ffff88802c4e1dc0 [ 252.134315][ T6618] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 252.142272][ T6618] RBP: 0000000000000000 R08: ffffffff81d10e84 R09: ffffed10171e4f24 [ 252.150322][ T6618] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffd400026cea9 [ 252.158278][ T6618] R13: ffffea0001367548 R14: ffffea0001367540 R15: dffffc0000000000 [ 252.166328][ T6618] FS: 000055557828f500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 252.175545][ T6618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.182112][ T6618] CR2: 0000000020000080 CR3: 000000007a4f8000 CR4: 00000000003506e0 [ 252.190079][ T6618] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.198040][ T6618] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.206008][ T6618] Kernel panic - not syncing: Fatal exception [ 252.212340][ T6618] Kernel Offset: disabled [ 252.216657][ T6618] Rebooting in 86400 seconds..