last executing test programs: 1m28.159866772s ago: executing program 4 (id=3213): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) socket(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/49, 0x31) 1m27.161840003s ago: executing program 4 (id=3216): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x10000000, {0x2}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xc, 0x2, 'batadv0\x00'}}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x3c}}, 0x40) 1m27.010159146s ago: executing program 4 (id=3218): r0 = socket$inet(0x2, 0x4000000000000001, 0x106) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, 0x0, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 1m24.238244244s ago: executing program 4 (id=3225): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 1m23.48232277s ago: executing program 4 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) 1m21.831456365s ago: executing program 4 (id=3234): r0 = socket$inet(0x2, 0x4000000000000001, 0x106) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, 0x0, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 1m20.821149717s ago: executing program 32 (id=3234): r0 = socket$inet(0x2, 0x4000000000000001, 0x106) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x14, 0x0, 0x303, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) 37.421393021s ago: executing program 2 (id=3497): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000005c0)=ANY=[]) 37.265135054s ago: executing program 2 (id=3499): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x900, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}}, 0x0) 37.102870628s ago: executing program 2 (id=3500): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x6c, 0x30, 0x11, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x4004010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.830296803s ago: executing program 2 (id=3502): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 35.731653047s ago: executing program 2 (id=3508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newtaction={0x398, 0x30, 0xffff, 0x0, 0x0, {}, [{0x384, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x2, 0xa04}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0x18c, 0xb, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x82, 0x6, {0x0, 'nat\x00', 0x5c, 0x951, "e6ceb3cd40bd5e279856bd268d4c28d30d19461cd40f11bd769cf6a037e72d64aa812af92e4fd5e30440bf55e828ca8f01a397214bbc3de7d234c3ee37f0c9120711b4cd2770607b4413b9a76d0217987283410e2513761a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x99}]}, {0xd5, 0x6, "3abe92783e3f36500880a0ff49b487529612bd30d61e621a3c7b3b9c559bb19fd4c1e4afcce818dcba9527225d4ec8fdf89029f1d14ab9eade152eb67f2167a357b9ff1ce7fd09e02ebee0e0e2eab3671354044bd36eede68f3baba12a80b9c5c1b7346307d478bc30613c51832c04526bd00c30cad7a4546c0147efbe75d5206ce9f031287ed9b066b9df6a39779480189d64807cefd159f05e287f927afa50ddf9b4d8c81a21ff6558edc771e01ff48f7c0a18d6d6c2f84387a37405a891b87d6a44cf89c7ab4b7c5a3840a77f2afbb1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x84, 0x10, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x3}, 0x8}}]}, {0x35, 0x6, "b85db6d3deca486ddbb6724d79d7cee3bdb2cd364f2e25279500a600337970240a96e6eb3a7cd3a0fbbadb7db95ee2c008"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x120, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa6d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x8, 0xff, 0x2}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x98, 0x7, 0xffffffffffffffff, 0xd1, 0x510}, 0x2}}]}, {0xa3, 0x6, "dce437d82c332d8437f806ef2c4ecccb0e72311b60d16dccbabd9e895cf43089bd640667033737fd4e21570897367f34ad4cba0daf2732d12fb4b52323fdf17384ae2dc393aa8423a28f732337d083447501f036f7f38860352827dd49656f24429b4539dbe7ab37063c8a8e881f6e01cce4d597a39545f53e3a8c2cc979e68b58efa74a954fdfc28f30eaf468b22472b43fc8c21c0d77de6f68701a99746c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x398}}, 0x0) 33.626419211s ago: executing program 2 (id=3521): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {0x74}, {0x6, 0x0, 0x0, 0x7fff0000}]}) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x9dd903ca351a87d) 33.376563667s ago: executing program 33 (id=3521): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {0x74}, {0x6, 0x0, 0x0, 0x7fff0000}]}) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x9dd903ca351a87d) 32.610170943s ago: executing program 3 (id=3527): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2818082, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7f, 0x2bd, &(0x7f0000000240)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="0503222ed3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 32.067405074s ago: executing program 3 (id=3528): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20004040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 31.518419696s ago: executing program 3 (id=3534): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) get_mempolicy(&(0x7f0000000000), 0x0, 0xfffffffffffffffe, &(0x7f0000ffc000/0x1000)=nil, 0x4) 30.903780599s ago: executing program 3 (id=3535): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 30.175000554s ago: executing program 3 (id=3546): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200), 0x0, r0) 28.030330769s ago: executing program 3 (id=3557): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x5, 0xffffffff, 0x5, 0x3}) 27.839336053s ago: executing program 34 (id=3557): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x1b5) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x5, 0xffffffff, 0x5, 0x3}) 9.244997775s ago: executing program 5 (id=3618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r1, 0x0, 0xfffffffffffffec0, 0x240007bd, &(0x7f0000000400)={0x2, 0x4e23, @empty}, 0x10) 8.9917598s ago: executing program 1 (id=3621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2500}], 0x0, 0xa}, 0x20) 8.99042171s ago: executing program 5 (id=3623): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e20, 0xc0, @local, 0xc58e}, 0x1c) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee000000000000000002000000", 0xfc64}], 0x1) 8.807607594s ago: executing program 5 (id=3624): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1, 0xfffffffd}) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.805347285s ago: executing program 5 (id=3625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x8000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8881f5c0a000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r5 = socket$packet(0x11, 0x3, 0x300) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x5a2e}, 0x0, 0x0, 0x2, 0x8, 0xb0, 0x2, 0xffff, 0x3, 0x5, 0x5bfb, r0, r3}) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000000)={0x1, 0xfff, 0x2, 0x3}) 7.927578643s ago: executing program 1 (id=3628): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 6.14460239s ago: executing program 1 (id=3634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_devices(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) 6.030303993s ago: executing program 6 (id=3635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 5.475088075s ago: executing program 6 (id=3638): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0x7, 0x10, 0x7, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000080)) 5.24202136s ago: executing program 6 (id=3639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, &(0x7f00000000c0)="0f01c8c4c295985cfa02c421785a9b75000000b96b0a00000f326546153e7b0000c4c1c57d8e000000000f01f80f01b700a0000066b8db008ed8b974020000b800000000ba000001000f30", 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.112976722s ago: executing program 6 (id=3640): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd26, 0x25cfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x24000000) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={r5, 0x0, 0x0, 0x4}, 0x20) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'nat\x00', 0x0, [0x7fffffff, 0x10001, 0xd7, 0x8, 0xfffffff0]}, &(0x7f0000000400)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) 5.073993973s ago: executing program 0 (id=3641): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") io_setup(0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0xfc) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 4.570355914s ago: executing program 7 (id=3642): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000005, 0x10012, r0, 0xb7cf4000) 4.350088538s ago: executing program 5 (id=3643): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 4.229133661s ago: executing program 7 (id=3644): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x20084884) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 4.149793343s ago: executing program 6 (id=3645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r3) 3.155831204s ago: executing program 5 (id=3646): socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_TDX_CAPABILITIES(0xffffffffffffffff, 0xc008aeba, 0x0) r0 = syz_io_uring_setup(0x29f4, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x3) syz_usb_connect(0x3, 0xb2, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0xd8, 0xf3, 0x59, 0x40, 0xbaf, 0xf6, 0x34e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x7, 0x66, 0x40, 0x7, "", [{{0x9, 0x4, 0x21, 0x55, 0x4, 0x14, 0x41, 0x51, 0x34, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x5, 0x3, 0x6}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x1, 0x3, 0x89, [@generic={0x61, 0x6, "6311dec257c639db02ed5808804b9093cf504ed024b9e9d62c8372ac8570ef1421cfc8862ec1b95a3a2d04c329b85bff6e75181996dbba04f633802b796d40aa5e22fcfa881cafa3f46ab0896b5bff614679d8a710198e480e2bc13912219b"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xe, 0x7, 0xe}}, {{0x9, 0x5, 0xa, 0x3, 0x19f, 0x5, 0x0, 0xe, [@generic={0x9, 0x4, "785b2fb416cea5"}]}}]}}]}}]}}, &(0x7f0000001500)={0x0, 0x0, 0x29, 0x0}) 2.163375945s ago: executing program 0 (id=3647): r0 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x8b02) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000040)={0x5, "61a383835e0100d3f736592d0bd82a046f9c129000", 0x2, 0x3, 0x4, 0x320000, 0x0, 0x8}) 2.126996295s ago: executing program 1 (id=3648): syz_emit_ethernet(0x0, 0x0, 0x0) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendto$inet(r0, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) 2.058186827s ago: executing program 7 (id=3649): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0x7, 0x10, 0x7, 0x2, 0x0, 0x20, 0x1, 0x1, 0xffffffff, 0x0, 0x0, 0x0}) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000080)) 1.938134909s ago: executing program 1 (id=3650): mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x4001b, 0x0) 1.937437759s ago: executing program 7 (id=3651): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000002640)={0x0, 0x51, "7b25a1071dde8eea9b959f6e7282fa9a7d2fea7c2adb3f23ea0465240ed536d4844791878a1ef63b082d60ddcf1532ffa3ca84fff77ab6af6851ea71aec65ac794e1187ff57a329474cd560c68fdc059fd"}, &(0x7f00000026c0)=0x59) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0xf2590ec67595829d) r5 = socket(0x11, 0x2, 0x0) bind$packet(r5, 0x0, 0x0) 1.85440958s ago: executing program 0 (id=3652): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) 1.85415632s ago: executing program 1 (id=3653): socket(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r2, 0x0, 0x0, 0x4020, &(0x7f00000000c0)=@isdn={0x22, 0x1, 0x9, 0x5, 0xf8}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 1.814017432s ago: executing program 0 (id=3654): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) 1.739853613s ago: executing program 0 (id=3655): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd26, 0x25cfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x24000000) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000a00)={r5, 0x0, 0x0, 0x4}, 0x20) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'nat\x00', 0x0, [0x7fffffff, 0x10001, 0xd7, 0x8, 0xfffffff0]}, &(0x7f0000000400)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) 1.620170516s ago: executing program 6 (id=3656): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000306030000000000000000000100000305000005"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000001c0)=0x7, 0x4) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) 1.010705379s ago: executing program 7 (id=3657): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 1.56149ms ago: executing program 7 (id=3658): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") io_setup(0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000440)=ANY=[], 0xfc) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 0s ago: executing program 0 (id=3668): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) kernel console output (not intermixed with test programs): 500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.334215][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.359702][T14064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3053'. [ 830.394486][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.411893][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.544784][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.688767][T14018] device hsr_slave_0 entered promiscuous mode [ 830.719934][T14018] device hsr_slave_1 entered promiscuous mode [ 832.231160][T14104] loop1: detected capacity change from 0 to 512 [ 832.237979][ T4927] Bluetooth: hci5: command 0x041b tx timeout [ 832.313696][T14104] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 832.353584][T14104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 832.405529][ T4295] device hsr_slave_0 left promiscuous mode [ 832.413856][ T4295] device hsr_slave_1 left promiscuous mode [ 832.454178][T14104] EXT4-fs (loop1): 1 truncate cleaned up [ 832.462857][T14104] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,jqfmt=vfsv0,dax=never,errors=continue,noinit_itable,,errors=continue. Quota mode: none. [ 832.493827][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.561016][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.609714][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.617658][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.627328][ T4295] device bridge_slave_1 left promiscuous mode [ 832.634032][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.649783][ T4295] device bridge_slave_0 left promiscuous mode [ 832.656508][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.927672][ T4295] device veth1_macvtap left promiscuous mode [ 832.998340][ T4295] device veth0_macvtap left promiscuous mode [ 833.033956][ T4295] device veth0_vlan left promiscuous mode [ 833.919250][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 833.963136][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 834.294483][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3068'. [ 834.304901][ T4927] Bluetooth: hci5: command 0x040f tx timeout [ 834.511257][T14018] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 834.521646][T14018] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 834.554647][T14018] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 834.576961][T14018] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 834.748712][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.795335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 834.803408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 834.842582][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.890604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 834.909648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.335333][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.342506][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.436721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 835.451234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 835.495312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 835.524569][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.531753][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.804126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.059255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.413714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.428814][ T4922] Bluetooth: hci5: command 0x0419 tx timeout [ 836.487919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.523462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.587476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.621579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.655696][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.702215][T14018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.744448][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.785880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.810263][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.827812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 836.858556][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3082'. [ 836.996081][T14193] loop7: detected capacity change from 0 to 7 [ 837.033478][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.044813][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.069899][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.080909][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.094771][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.105754][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.144898][T14197] loop_set_block_size: loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) has still dirty pages (nrpages=1) [ 837.170642][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.181647][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.212956][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.223940][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.252440][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.263434][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.299488][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.310487][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.322368][T14193] ldm_validate_partition_table(): Disk read failed. [ 837.336623][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.353723][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.361548][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.365931][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.372509][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.434802][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.446064][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.454405][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 837.465377][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 837.502761][T14193] Dev loop7: unable to read RDB block 0 [ 837.535107][T14193] loop7: unable to read partition table [ 837.554942][T14193] loop7: partition table beyond EOD, truncated [ 837.610185][T14193] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 837.654607][ T3559] ldm_validate_partition_table(): Disk read failed. [ 837.702601][ T3559] Dev loop7: unable to read RDB block 0 [ 837.715749][ T3559] loop7: unable to read partition table [ 837.727490][ T3559] loop7: partition table beyond EOD, truncated [ 837.997306][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 838.015747][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.078017][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.095606][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.135805][T14018] device veth0_vlan entered promiscuous mode [ 838.146560][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.165386][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.180326][T14018] device veth1_vlan entered promiscuous mode [ 838.233545][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 838.243226][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 838.259305][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.272571][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.296106][T14018] device veth0_macvtap entered promiscuous mode [ 838.319517][T14018] device veth1_macvtap entered promiscuous mode [ 838.344389][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.362476][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.373943][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.393974][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.424722][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.444769][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.454631][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.490971][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.514733][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.534707][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.554114][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.573837][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.587337][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 838.595754][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 838.604445][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.616148][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.654785][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.674849][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.687612][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.698862][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.724410][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.742119][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.780293][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.794834][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.818750][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.836162][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.845426][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 838.861299][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.877670][T14018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.894116][T14018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.914418][T14018] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.923482][T14018] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.064988][T13930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.072861][T13930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.124078][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 839.156798][T13930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.177226][T13930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.195374][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 839.435795][T14255] net_ratelimit: 139 callbacks suppressed [ 839.435813][T14255] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.3.3098:14255 [ 842.039570][T14294] loop1: detected capacity change from 0 to 512 [ 842.244625][ T4295] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.294063][T14294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 842.334966][T14294] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.401262][ T4295] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.539541][T14279] chnl_net:caif_netlink_parms(): no params data found [ 842.629607][ T4295] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.779359][ T4295] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.386594][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.432803][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.725192][T14279] device bridge_slave_0 entered promiscuous mode [ 843.824932][ T4922] Bluetooth: hci1: command 0x0409 tx timeout [ 843.870019][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.887670][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.955437][T14279] device bridge_slave_1 entered promiscuous mode [ 844.086118][T14279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.179530][T14279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.361559][T14279] team0: Port device team_slave_0 added [ 844.406931][T14358] netlink: 'syz.1.3110': attribute type 4 has an invalid length. [ 844.547713][T14279] team0: Port device team_slave_1 added [ 844.620663][T14279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.684029][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.751174][T14279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.066706][T14279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.115550][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.660473][T14279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.828684][T14279] device hsr_slave_0 entered promiscuous mode [ 845.846297][T14279] device hsr_slave_1 entered promiscuous mode [ 845.871953][T14279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.898382][T14279] Cannot create hsr debugfs directory [ 845.913509][ T4922] Bluetooth: hci1: command 0x041b tx timeout [ 846.315190][ T4295] IPVS: stopping backup sync thread 10541 ... [ 846.657311][ T4295] device hsr_slave_0 left promiscuous mode [ 846.674385][ T4295] device hsr_slave_1 left promiscuous mode [ 846.695552][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.703717][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.745949][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.764451][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.788591][ T4295] device bridge_slave_1 left promiscuous mode [ 846.810514][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.835903][ T4295] device bridge_slave_0 left promiscuous mode [ 846.852853][T14419] loop4: detected capacity change from 0 to 512 [ 846.865469][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.969410][T14419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 846.982454][ T4295] device veth1_macvtap left promiscuous mode [ 847.005443][ T4295] device veth0_macvtap left promiscuous mode [ 847.035591][T14419] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 847.056792][ T4295] device veth1_vlan left promiscuous mode [ 847.076204][ T4295] device veth0_vlan left promiscuous mode [ 848.054996][ T4927] Bluetooth: hci1: command 0x040f tx timeout [ 848.679244][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 848.741196][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 850.084354][T14465] loop4: detected capacity change from 0 to 512 [ 850.154830][ T4923] Bluetooth: hci1: command 0x0419 tx timeout [ 850.172309][T14465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.185380][T14465] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.287848][T14279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 850.337342][T14279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 850.377732][T14279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 850.400675][T14279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 850.594188][T14279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.634289][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.643049][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.654385][T14279] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.670839][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.681180][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.695131][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.702218][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.722402][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.730991][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.740621][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.749775][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.756997][ T4298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.768965][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.781558][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.809652][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.827615][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.841573][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.863922][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.873031][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.886867][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.895613][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.908655][T14279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.920841][T14279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.929650][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.938934][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.099909][T14483] loop0: detected capacity change from 0 to 512 [ 851.382209][T14483] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 851.473381][T14483] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.565403][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.589119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.631605][T14279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.681229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 852.716110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.761551][T14279] device veth0_vlan entered promiscuous mode [ 852.785803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.801695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.823750][T14279] device veth1_vlan entered promiscuous mode [ 852.844038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.858188][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.878546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.956493][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 852.968927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.998995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.032731][T14279] device veth0_macvtap entered promiscuous mode [ 853.072091][T14279] device veth1_macvtap entered promiscuous mode [ 853.143294][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.172997][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.195379][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.217312][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.241357][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.270254][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.290152][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.311750][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.334286][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.364733][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.406428][T14279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.413812][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 853.451953][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 853.485415][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 853.505174][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 853.555078][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.584311][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.599164][ T26] audit: type=1326 audit(1786745289.385:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14520 comm="syz.0.3154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2c6a880d9 code=0x0 [ 853.614775][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.675948][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.754257][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 853.824557][T14522] crypto_alloc_aead failed rc=-4 [ 853.830151][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.982685][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.260961][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.577313][T14279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.590628][T14279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.612271][T14279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.876774][T14279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.321428][T14279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.378899][T14279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.424899][T14279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.487970][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 855.506772][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 855.720811][T14567] Restarting kernel threads ... done. [ 855.726960][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.746739][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.913458][T14569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 855.962494][T14569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 856.017967][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 856.033711][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3167'. [ 856.078443][T13699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.094768][T13699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.130004][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 857.549882][T14597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3173'. [ 857.591517][T14595] loop0: detected capacity change from 0 to 1764 [ 857.766763][T14595] ISOFS: Bad logical zone size 1280 [ 857.849735][T14605] loop2: detected capacity change from 0 to 4096 [ 857.875784][T14607] loop4: detected capacity change from 0 to 1024 [ 858.880071][T14607] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 858.906395][T14605] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 858.967795][T14607] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.049438][T14607] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.132743][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.151543][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 859.163146][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.195826][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.218976][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.237766][T14624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.248495][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.292233][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.316156][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.378516][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.402707][T14606] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #15: comm syz.4.3179: lblock 0 mapped to illegal pblock 0 (length 1) [ 859.420418][T14611] chnl_net:caif_netlink_parms(): no params data found [ 859.479462][T14629] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3183'. [ 859.533266][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.542004][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.581987][T14630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3183'. [ 859.742979][T14611] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.751477][T14611] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.759863][T14611] device bridge_slave_0 entered promiscuous mode [ 859.778417][T14611] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.785898][T14611] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.794758][T14611] device bridge_slave_1 entered promiscuous mode [ 859.847425][T14611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.859275][T14611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.901999][T14611] team0: Port device team_slave_0 added [ 859.954317][T14611] team0: Port device team_slave_1 added [ 859.989582][T14611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.860181][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.888093][ T4923] Bluetooth: hci3: command 0x0409 tx timeout [ 860.894336][T14611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.936432][T14611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.943440][T14611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.070909][T14611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.131970][ T4295] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.187503][T14656] netlink: 'syz.2.3192': attribute type 10 has an invalid length. [ 861.205981][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.227754][T14656] device bridge_slave_1 left promiscuous mode [ 861.241115][T14660] loop0: detected capacity change from 0 to 1024 [ 861.248914][T14656] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.567120][T14656] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 861.623301][T14660] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 861.877564][ T4295] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.897935][T14663] loop4: detected capacity change from 0 to 4096 [ 861.933583][T14660] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.041965][T14660] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.051247][T14663] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 862.070072][ T4295] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.070342][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.105197][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.132427][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.228097][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.247484][T14611] device hsr_slave_0 entered promiscuous mode [ 862.262176][T14611] device hsr_slave_1 entered promiscuous mode [ 862.276350][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.290773][T14667] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 862.315870][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.329394][T14611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.348816][T14611] Cannot create hsr debugfs directory [ 862.362236][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.376851][T14659] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #15: comm syz.0.3193: lblock 0 mapped to illegal pblock 0 (length 1) [ 862.378066][ T4295] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.504380][T14677] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 862.571896][T14677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.008828][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 863.634330][T14688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.759306][T14695] netlink: 'syz.4.3205': attribute type 10 has an invalid length. [ 863.979438][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.015943][T14695] device bridge_slave_1 left promiscuous mode [ 864.022253][T14695] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.065994][T14695] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 864.450126][ T26] audit: type=1326 audit(1786745300.235:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14689 comm="syz.2.3204" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91114ce0d9 code=0x7fc00000 [ 864.978885][T14711] loop1: detected capacity change from 0 to 4096 [ 864.992152][T14712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.056147][T14711] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 865.105095][ T4846] Bluetooth: hci3: command 0x040f tx timeout [ 865.283080][T14712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.356385][T14724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 865.413667][T14724] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.420879][T14724] bridge0: port 2(bridge_slave_1) entered listening state [ 865.428253][T14724] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.435394][T14724] bridge0: port 1(bridge_slave_0) entered listening state [ 865.458252][T14724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 865.477138][T14724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.602544][T14712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.731332][T14712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.812964][T14712] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.046217][T14712] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.400306][T14712] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.675417][T14712] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.822201][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 867.877539][ T4295] IPVS: stopping backup sync thread 10677 ... [ 867.883800][T14751] netlink: 'syz.4.3216': attribute type 2 has an invalid length. [ 867.905830][T14611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.955273][T14611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 867.957183][T14754] loop1: detected capacity change from 0 to 1024 [ 867.987726][T14611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.015732][T14611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.023552][T14760] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 868.170147][T14754] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 868.295002][T14754] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 868.345392][T14754] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.363213][ T4295] device hsr_slave_0 left promiscuous mode [ 868.391258][ T4295] device hsr_slave_1 left promiscuous mode [ 868.413048][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.427071][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.446853][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.464872][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.480587][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.499944][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.512352][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.526871][ T4295] device bridge_slave_1 left promiscuous mode [ 868.533687][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.542614][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.567005][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.610253][ T4295] device bridge_slave_0 left promiscuous mode [ 868.622997][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.634216][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.699862][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.723772][ T4295] device veth1_macvtap left promiscuous mode [ 868.738875][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 868.754690][ T4295] device veth0_macvtap left promiscuous mode [ 868.769244][ T4295] device veth1_vlan left promiscuous mode [ 868.790965][ T4295] device veth0_vlan left promiscuous mode [ 868.801743][T14753] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: comm syz.1.3212: lblock 0 mapped to illegal pblock 0 (length 1) [ 870.302508][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 870.312603][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.312687][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.353608][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 870.613175][T14794] netlink: 'syz.1.3222': attribute type 10 has an invalid length. [ 870.647176][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.665738][T14794] device bridge_slave_1 left promiscuous mode [ 870.673389][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.701386][T14794] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 870.750667][T14800] loop4: detected capacity change from 0 to 512 [ 870.779401][T14796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.886977][T14800] EXT4-fs (loop4): inline encryption not supported [ 870.901741][T14800] EXT4-fs (loop4): Test dummy encryption mode enabled [ 870.914979][T14800] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 870.948392][T14796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.981527][T14611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.982326][T14800] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.3225: bad orphan inode 131083 [ 871.005965][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 871.017513][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.024004][T14800] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,inlinecrypt,usrquota,discard,journal_ioprio=0x0000000000000003,min_batch_time=0x0000000000000007,test_dummy_encryption=v1,noblock_validity,,errors=continue. Quota mode: writeback. [ 871.095067][T14611] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.210691][T14796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.266929][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 871.297947][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 871.307350][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.314446][T14548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.358286][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 871.388243][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 871.472746][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.480001][T14548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.216527][T14611] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 872.286419][T14611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 872.388788][T14796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.423882][T14818] loop1: detected capacity change from 0 to 1024 [ 872.440805][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 872.462295][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.483242][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.493362][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.515605][T14818] EXT4-fs (loop1): Ignoring removed orlov option [ 872.573363][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 872.583866][T14818] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 872.600145][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 872.623384][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 872.656228][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 872.669109][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 872.679198][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 872.689681][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 872.700334][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 872.708768][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 872.829797][T14796] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.884541][T14796] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.924405][T14796] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.977874][T14796] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.127767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 873.144217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 873.163165][T14611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.188135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 873.198337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 873.440288][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 873.510041][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 873.650776][T14611] device veth0_vlan entered promiscuous mode [ 873.718089][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 873.783305][T13930] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.958552][T14611] device veth1_vlan entered promiscuous mode [ 874.134298][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 874.200234][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 874.257736][T14611] device veth0_macvtap entered promiscuous mode [ 874.569283][T14544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 874.669250][T14611] device veth1_macvtap entered promiscuous mode [ 875.226858][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.248384][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.274858][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.294025][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.304014][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.342430][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.380308][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.425188][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.444767][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.464594][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.504423][T14611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.555985][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 875.575210][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 875.597260][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.634498][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.654776][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.674687][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.694704][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.714705][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.734703][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.754695][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.774725][T14611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.804716][T14611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.817306][T14611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.838925][T14611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.855596][T14611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.864356][T14611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.894786][T14611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.965916][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 875.985282][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 876.159936][T14334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.193760][T14334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.246818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 876.263734][T14854] netlink: 'syz.0.3237': attribute type 10 has an invalid length. [ 876.317123][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.337789][T14854] device bridge_slave_1 left promiscuous mode [ 876.344145][T14854] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.355954][T14854] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 876.396096][T14334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.421277][T14334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.452959][ T8189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 876.504535][T14847] chnl_net:caif_netlink_parms(): no params data found [ 876.641669][T14867] loop2: detected capacity change from 0 to 512 [ 876.740302][T14867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 876.815904][T14867] System zones: 0-2, 18-18, 34-34 [ 876.822322][T14867] EXT4-fs (loop2): orphan cleanup on readonly fs [ 876.830555][T14847] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.859041][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.860534][T14867] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3242: bg 0: block 248: padding at end of block bitmap is not set [ 876.867385][T14847] device bridge_slave_0 entered promiscuous mode [ 876.890941][T14847] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.902092][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.914813][T14847] device bridge_slave_1 entered promiscuous mode [ 877.025930][T14867] Quota error (device loop2): write_blk: dquota write failed [ 877.152326][T14867] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 877.402212][T14867] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.3242: Failed to acquire dquot type 1 [ 877.595962][ T8752] Bluetooth: hci4: command 0x0409 tx timeout [ 877.634502][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.723405][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.742328][T14867] EXT4-fs (loop2): 1 truncate cleaned up [ 877.768798][T14847] team0: Port device team_slave_0 added [ 877.771419][T14867] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,nolazytime,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 877.777103][T14847] team0: Port device team_slave_1 added [ 877.837035][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.848506][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.166802][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.345305][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.418533][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.827438][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.901318][T14847] device hsr_slave_0 entered promiscuous mode [ 878.951833][T14847] device hsr_slave_1 entered promiscuous mode [ 878.994873][T14847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.025033][T14847] Cannot create hsr debugfs directory [ 879.111075][T14886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.328501][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 880.556538][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 880.761791][T14886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.152386][T14886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.583744][T14886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.592642][T14923] loop1: detected capacity change from 0 to 512 [ 881.645587][T14923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 881.654767][T14923] System zones: 0-2, 18-18, 34-34 [ 881.663423][T14923] EXT4-fs (loop1): orphan cleanup on readonly fs [ 881.682969][T14923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3261: bg 0: block 248: padding at end of block bitmap is not set [ 881.701301][T14923] Quota error (device loop1): write_blk: dquota write failed [ 881.709086][T14923] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 881.717251][T14886] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.719908][T14923] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3261: Failed to acquire dquot type 1 [ 881.746204][T14886] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.755733][T14923] EXT4-fs (loop1): 1 truncate cleaned up [ 881.769554][T14886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.784584][T14886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.790623][T14923] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,nolazytime,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 881.821826][ T4295] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.896541][T14923] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 881.922836][T14923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 881.954910][ T4295] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.986281][T14923] EXT4-fs error (device loop1): ext4_remount:6062: comm syz.1.3261: Abort forced by user [ 882.011987][T14923] EXT4-fs (loop1): Remounting filesystem read-only [ 882.026649][T14923] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 882.047395][T14923] ext4 filesystem being remounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 882.050147][ T4295] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.143953][ T4295] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.389732][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 882.496955][T14847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 882.540870][T14847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 882.633305][T14847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 882.665648][T14847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 883.715290][T14847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.754839][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 883.762919][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.815577][T14847] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.051457][T14981] loop2: detected capacity change from 0 to 164 [ 884.072017][T14969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.106316][T14981] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 884.125495][T14983] loop0: detected capacity change from 0 to 512 [ 884.475135][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 884.580770][T14983] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 884.832379][T14983] System zones: 0-2, 18-18, 34-34 [ 884.838926][T14983] EXT4-fs (loop0): orphan cleanup on readonly fs [ 884.903257][T14983] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3278: bg 0: block 248: padding at end of block bitmap is not set [ 884.968633][T14983] Quota error (device loop0): write_blk: dquota write failed [ 884.978773][T14983] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 884.988981][T14983] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.3278: Failed to acquire dquot type 1 [ 885.002080][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 885.006317][T14983] EXT4-fs (loop0): 1 truncate cleaned up [ 885.011355][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 885.024468][T14983] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,nolazytime,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 885.026405][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.051569][ T4298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.071831][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 885.133936][T14969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.144775][T14983] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 885.159271][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 885.168092][T14983] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 885.169362][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 885.185488][T14334] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.192580][T14334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.210166][T14983] EXT4-fs error (device loop0): ext4_remount:6062: comm syz.0.3278: Abort forced by user [ 885.221363][T14983] EXT4-fs (loop0): Remounting filesystem read-only [ 885.237353][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 885.246963][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 885.255496][T14983] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 885.266074][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 885.276356][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 885.284355][T14983] ext4 filesystem being remounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 885.296169][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 885.305665][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 885.357056][T14969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.379278][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 885.448350][T14969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.461916][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 885.473523][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 885.482505][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 885.491320][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 885.502103][T14847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 885.566079][T14969] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.598822][T14969] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.638765][T14969] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.654392][T14969] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.751548][ T4295] device hsr_slave_0 left promiscuous mode [ 885.771524][ T4295] device hsr_slave_1 left promiscuous mode [ 885.805443][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.837725][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.860966][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.895023][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.937795][ T4295] device bridge_slave_0 left promiscuous mode [ 885.947308][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.068606][ T4295] device veth1_macvtap left promiscuous mode [ 886.076020][ T4295] device veth0_macvtap left promiscuous mode [ 886.098390][ T4295] device veth1_vlan left promiscuous mode [ 886.147079][ T4295] device veth0_vlan left promiscuous mode [ 887.305385][T15030] loop1: detected capacity change from 0 to 164 [ 887.373487][T15030] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 888.524466][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 888.555390][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 888.579028][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.595673][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.612726][ T4295] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 888.688319][ T4295] bond0 (unregistering): Released all slaves [ 888.748896][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 888.758927][T15023] IPv6: NLM_F_CREATE should be specified when creating new route [ 888.792347][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 888.805108][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 888.877288][T14847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.897184][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 888.904051][T15048] loop3: detected capacity change from 0 to 512 [ 889.004337][T15048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 889.057419][T15048] System zones: 0-2, 18-18, 34-34 [ 889.063955][T15048] EXT4-fs (loop3): orphan cleanup on readonly fs [ 889.083175][T15048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3292: bg 0: block 248: padding at end of block bitmap is not set [ 889.177575][T15048] Quota error (device loop3): write_blk: dquota write failed [ 889.185781][T15048] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 889.198998][T15048] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3292: Failed to acquire dquot type 1 [ 889.254315][T15048] EXT4-fs (loop3): 1 truncate cleaned up [ 889.291962][T15048] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x000000000000acd3,nodiscard,lazytime,nolazytime,grpjquota=,acl,abort,debug,usrjquota=,,errors=continue. Quota mode: writeback. [ 889.431571][T15048] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 889.455787][T15048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0102] [ 889.517649][T15048] EXT4-fs error (device loop3): ext4_remount:6062: comm syz.3.3292: Abort forced by user [ 889.541771][T15048] EXT4-fs (loop3): Remounting filesystem read-only [ 889.565598][T15048] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 889.589490][T15048] ext4 filesystem being remounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 889.602251][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 889.623191][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 889.697452][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 889.717960][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 889.752360][T14847] device veth0_vlan entered promiscuous mode [ 889.794043][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 889.824457][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 889.881215][T14847] device veth1_vlan entered promiscuous mode [ 890.165365][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 890.183426][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 890.454107][T14847] device veth0_macvtap entered promiscuous mode [ 890.804374][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 890.895894][T14847] device veth1_macvtap entered promiscuous mode [ 891.030088][T15098] loop3: detected capacity change from 0 to 164 [ 891.059868][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.126904][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.163374][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.193316][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.232885][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.263556][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.293632][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.334274][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.353545][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.364529][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.386263][T14847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.398308][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3307'. [ 891.421252][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 891.440434][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 891.460858][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.481330][T15098] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 891.524820][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.562861][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.584952][T15123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3308'. [ 891.634717][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.675249][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.701258][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.737177][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.759994][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.787823][T14847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.818469][T14847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.849553][T14847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.880329][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 891.898637][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 892.004519][T14847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.037928][T14847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.057039][T14847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.081649][T14847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.375562][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.393331][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.422398][T14544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 892.474165][T14544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.519164][T14544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.563472][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 892.636740][T15153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3319'. [ 892.742312][T15160] loop0: detected capacity change from 0 to 164 [ 892.829826][T15162] loop5: detected capacity change from 0 to 1024 [ 892.847454][T15160] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 892.941784][T15162] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,journal_ioprio=0x0000000000000002,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,inode_readahead_blks=0x0000000000200000,,errors=continue. Quota mode: none. [ 892.970707][T15162] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.991051][T15162] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.123342][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.203771][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.273327][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.382097][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.436438][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.512433][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.566861][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.602733][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.635957][T15161] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #15: comm syz.5.3235: lblock 0 mapped to illegal pblock 0 (length 1) [ 893.710053][T15200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3331'. [ 893.734839][T15200] IPv6: NLM_F_CREATE should be specified when creating new route [ 895.125853][T15223] loop3: detected capacity change from 0 to 1024 [ 895.208485][T15223] EXT4-fs (loop3): Ignoring removed nobh option [ 895.237669][T15223] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 895.296458][T15223] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 895.315869][T15223] EXT4-fs (loop3): orphan cleanup on readonly fs [ 895.326259][T15223] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.3337: Freeing blocks not in datazone - block = 0, count = 4096 [ 895.446631][T15223] EXT4-fs (loop3): 1 orphan inode deleted [ 895.469710][T15223] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 895.772724][T15242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 895.914737][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.922056][ C0] bridge0: topology change detected, propagating [ 895.929876][T14544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 896.212698][T15255] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3345'. [ 897.753102][T15296] IPv6: NLM_F_CREATE should be specified when creating new route [ 899.022210][T15335] loop5: detected capacity change from 0 to 512 [ 899.103923][T15335] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 899.206137][T15335] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 899.233356][T15335] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3370: bg 0: block 248: padding at end of block bitmap is not set [ 899.394000][T15335] Quota error (device loop5): write_blk: dquota write failed [ 899.532951][T15335] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 899.543366][T15335] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.3370: Failed to acquire dquot type 1 [ 899.726971][T15335] EXT4-fs (loop5): 1 truncate cleaned up [ 899.879098][T15335] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 900.087377][ T4298] Quota error (device loop5): remove_tree: Getting block too big (0 >= 6) [ 900.118397][ T4298] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 1 [ 900.185217][T15357] loop3: detected capacity change from 0 to 512 [ 900.299079][T15357] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 900.391330][T15357] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.536480][ T26] audit: type=1800 audit(1786745336.325:212): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3378" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 902.191379][T15395] loop3: detected capacity change from 0 to 512 [ 902.338094][T15400] loop1: detected capacity change from 0 to 512 [ 902.346405][T15398] tipc: Started in network mode [ 902.363747][T15398] tipc: Node identity 7f000001, cluster identity 4711 [ 902.382970][T15402] loop5: detected capacity change from 0 to 1024 [ 902.400110][T15395] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 902.426250][T15400] FAT-fs (loop1): Directory bread(block 2080) failed [ 902.436315][T15398] tipc: New replicast peer: 127.0.0.1 [ 902.443196][T15398] tipc: Enabled bearer , priority 10 [ 902.450548][T15400] FAT-fs (loop1): Directory bread(block 2081) failed [ 902.460231][T15395] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 902.484574][T15400] FAT-fs (loop1): Directory bread(block 2082) failed [ 902.493615][T15400] FAT-fs (loop1): Directory bread(block 2083) failed [ 902.510655][T15402] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 902.558593][T15400] FAT-fs (loop1): Directory bread(block 2084) failed [ 902.564985][T15395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3385: bg 0: block 248: padding at end of block bitmap is not set [ 902.565663][T15400] FAT-fs (loop1): Directory bread(block 2085) failed [ 902.587063][T15400] FAT-fs (loop1): Directory bread(block 2086) failed [ 902.597142][T15400] FAT-fs (loop1): Directory bread(block 2087) failed [ 902.651076][T15395] Quota error (device loop3): write_blk: dquota write failed [ 902.687062][T15402] EXT4-fs (loop5): mounted filesystem without journal. Opts: noquota,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x0000000000000000,errors=continue,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 902.746703][T15395] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 902.757126][T15395] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.3385: Failed to acquire dquot type 1 [ 902.775752][T15395] EXT4-fs (loop3): 1 truncate cleaned up [ 902.825223][T15395] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 902.971319][T15402] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 902.987722][T15424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3394'. [ 903.025616][T15402] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 903.063674][T14548] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6) [ 903.084263][T14548] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:14: Failed to release dquot type 1 [ 903.448149][ T4261] tipc: Node number set to 2130706433 [ 904.821557][T15458] loop1: detected capacity change from 0 to 128 [ 904.902637][T15460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3406'. [ 905.018821][T15462] loop1: detected capacity change from 0 to 512 [ 905.080346][T15462] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 905.151690][T15462] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 905.184885][T15462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3407: bg 0: block 248: padding at end of block bitmap is not set [ 905.236007][T15462] Quota error (device loop1): write_blk: dquota write failed [ 905.244509][T15462] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 905.255283][T15462] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3407: Failed to acquire dquot type 1 [ 905.276554][T15462] EXT4-fs (loop1): 1 truncate cleaned up [ 905.282346][T15462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 905.472905][ T144] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 905.493409][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 1 [ 906.680106][T15486] device syzkaller0 entered promiscuous mode [ 906.748612][T15486] tipc: Enabled bearer , priority 0 [ 906.803599][T15486] tipc: Resetting bearer [ 906.854572][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 906.874403][T15485] tipc: Resetting bearer [ 906.925532][T15485] tipc: Disabling bearer [ 907.119127][T15508] loop0: detected capacity change from 0 to 512 [ 907.204951][T15508] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 907.364154][T15508] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 907.461239][T15508] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3423: bg 0: block 248: padding at end of block bitmap is not set [ 907.661232][T15508] Quota error (device loop0): write_blk: dquota write failed [ 907.701857][T15508] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 907.933054][T15508] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.3423: Failed to acquire dquot type 1 [ 908.164968][T15508] EXT4-fs (loop0): 1 truncate cleaned up [ 908.170679][T15508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 908.420003][T15536] loop5: detected capacity change from 0 to 4096 [ 908.438432][ T144] Quota error (device loop0): remove_tree: Getting block too big (0 >= 6) [ 908.459190][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 1 [ 908.596438][T15536] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 908.735533][T15536] loop_set_status: loop5 () has still dirty pages (nrpages=3) [ 908.842223][T15565] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3437'. [ 910.293085][T15589] loop0: detected capacity change from 0 to 512 [ 910.446338][T15589] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 910.474187][T15589] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.152919][T15610] loop5: detected capacity change from 0 to 8192 [ 911.335369][ T26] audit: type=1804 audit(1786745860.113:213): pid=15610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3452" name="/newroot/22/bus/bus" dev="loop5" ino=1048686 res=1 errno=0 [ 911.412174][ T26] audit: type=1800 audit(1786745860.113:214): pid=15610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3452" name="bus" dev="loop5" ino=1048686 res=0 errno=0 [ 911.990379][T15628] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 912.012502][T15630] loop1: detected capacity change from 0 to 512 [ 912.421871][T15630] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 912.720947][T15630] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 914.908986][T15690] loop2: detected capacity change from 0 to 512 [ 915.040464][T15693] ip_tables: iptables: counters copy to user failed while replacing table [ 915.082260][T15690] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 915.137643][T15690] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 915.398512][T15709] tipc: Started in network mode [ 915.416528][T15709] tipc: Node identity ac14140f, cluster identity 4711 [ 915.440255][T15709] tipc: New replicast peer: 255.255.255.255 [ 915.480837][T15709] tipc: Enabled bearer , priority 10 [ 915.721521][T15719] loop2: detected capacity change from 0 to 512 [ 915.894260][T15719] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 915.973351][T15719] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 916.729116][ T4923] tipc: Node number set to 2886997007 [ 916.897454][T15740] netlink: 'syz.0.3490': attribute type 1 has an invalid length. [ 917.031389][T15746] loop0: detected capacity change from 0 to 1024 [ 917.071380][T15749] loop3: detected capacity change from 0 to 512 [ 917.227326][T15746] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 917.281222][T15749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 917.338677][T15749] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 917.449563][T15746] EXT4-fs warning (device loop0): ext4_resize_fs:1981: can't read last block, resize aborted [ 917.748914][T15771] tipc: New replicast peer: 255.255.255.255 [ 917.795516][T15771] tipc: Enabled bearer , priority 10 [ 918.160485][T15786] loop2: detected capacity change from 0 to 512 [ 918.525298][T15786] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 918.688204][ T4232] Bluetooth: hci2: command 0x0406 tx timeout [ 918.873129][T15786] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.126042][T15786] loop_set_status: loop2 () has still dirty pages (nrpages=3) [ 919.336256][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.368796][T15814] loop5: detected capacity change from 0 to 512 [ 919.389978][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.434428][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.482128][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.542606][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.559676][T15814] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 919.590781][T15814] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.604130][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.618358][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.639210][T15824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3523'. [ 919.682077][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.701899][T15824] openvswitch: netlink: Message has 34 unknown bytes. [ 919.735230][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.769951][T14279] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 919.784886][T15826] tipc: Started in network mode [ 919.813385][T15826] tipc: Node identity ac14140f, cluster identity 4711 [ 919.853294][T15826] tipc: New replicast peer: 255.255.255.255 [ 919.868014][T15826] tipc: Enabled bearer , priority 10 [ 921.127195][ T4922] tipc: Node number set to 2886997007 [ 921.201314][T15855] loop0: detected capacity change from 0 to 512 [ 921.221152][T15854] loop1: detected capacity change from 0 to 512 [ 921.360213][T15855] FAT-fs (loop0): Directory bread(block 2080) failed [ 921.394902][T15854] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 921.407677][T15855] FAT-fs (loop0): Directory bread(block 2081) failed [ 921.414454][T15855] FAT-fs (loop0): Directory bread(block 2082) failed [ 921.435435][T15854] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.466235][ T4295] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.499401][T15855] FAT-fs (loop0): Directory bread(block 2083) failed [ 921.543661][T15855] FAT-fs (loop0): Directory bread(block 2084) failed [ 921.558106][ T4295] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.619801][T15855] FAT-fs (loop0): Directory bread(block 2085) failed [ 921.652833][T15855] FAT-fs (loop0): Directory bread(block 2086) failed [ 921.659609][T15855] FAT-fs (loop0): Directory bread(block 2087) failed [ 921.855878][ T4295] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.005726][ T4295] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.451309][T15889] loop3: detected capacity change from 0 to 256 [ 922.679977][ T4295] tipc: Disabling bearer [ 922.709677][ T4295] tipc: Left network mode [ 922.715753][T15889] device syzkaller0 entered promiscuous mode [ 922.824690][T15878] chnl_net:caif_netlink_parms(): no params data found [ 923.161582][T15908] tipc: Started in network mode [ 923.190924][T15908] tipc: Node identity ac14140f, cluster identity 4711 [ 923.207645][T15908] tipc: New replicast peer: 255.255.255.255 [ 923.234995][T15908] tipc: Enabled bearer , priority 10 [ 923.263378][T15878] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.277199][T15878] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.315533][T15878] device bridge_slave_0 entered promiscuous mode [ 923.442753][T15878] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.496997][T15878] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.520186][T15927] udc-core: couldn't find an available UDC or it's busy [ 923.530982][T15878] device bridge_slave_1 entered promiscuous mode [ 924.190846][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 924.275483][T15878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.322429][T15938] loop3: detected capacity change from 0 to 512 [ 924.359183][T15878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.402745][ T4231] tipc: Node number set to 2886997007 [ 924.526841][T15938] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 924.565504][T15938] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 924.702566][T15959] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 924.714028][T15878] team0: Port device team_slave_0 added [ 924.778664][T15878] team0: Port device team_slave_1 added [ 924.848881][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 924.884896][T15878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.903095][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.921686][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.002184][T15878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.043640][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.057664][T15973] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 925.079072][T15878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.083962][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.093256][T15878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.109780][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.171831][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.286926][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.332225][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.389569][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.410949][T14611] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 925.415243][T15878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.299203][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 926.406218][T15878] device hsr_slave_0 entered promiscuous mode [ 926.452449][T15878] device hsr_slave_1 entered promiscuous mode [ 926.877011][ T4295] device hsr_slave_0 left promiscuous mode [ 926.899774][ T4295] device hsr_slave_1 left promiscuous mode [ 926.908937][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.957158][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.994017][T16010] loop1: detected capacity change from 0 to 512 [ 927.002375][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.015638][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.021135][T16012] loop5: detected capacity change from 0 to 512 [ 927.089670][ T4295] device bridge_slave_0 left promiscuous mode [ 927.095938][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.115897][T16012] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 927.129403][T16012] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.150242][T16010] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,usrquota,,errors=continue. Quota mode: writeback. [ 927.164104][ T4295] device veth1_macvtap left promiscuous mode [ 927.173837][T16010] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 927.189849][ T4295] device veth0_macvtap left promiscuous mode [ 927.196036][ T4295] device veth1_vlan left promiscuous mode [ 927.202190][ T4295] device veth0_vlan left promiscuous mode [ 927.548245][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 927.974922][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 928.097883][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 928.340626][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 928.435395][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 928.763503][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.802978][ T4295] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 929.005900][ T4295] bond0 (unregistering): Released all slaves [ 929.050427][ T4232] Bluetooth: hci0: command 0x0406 tx timeout [ 929.595826][T15878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 929.659731][T15878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 929.704676][T15878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 929.836887][T15878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 929.872499][T16025] chnl_net:caif_netlink_parms(): no params data found [ 929.953885][ T4923] Bluetooth: hci3: command 0x0409 tx timeout [ 930.305322][T15878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.320344][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.359734][T16025] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.487549][T16025] device bridge_slave_0 entered promiscuous mode [ 930.504942][ T8752] Bluetooth: hci1: command 0x0419 tx timeout [ 930.544833][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 930.566210][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 930.607234][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.614555][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.701256][T16025] device bridge_slave_1 entered promiscuous mode [ 930.852342][T15878] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.180387][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 931.246966][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 931.308653][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.315817][T14548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.387173][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 931.418638][T16025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.813313][T16111] hub 8-0:1.0: USB hub found [ 931.824782][T16111] hub 8-0:1.0: 1 port detected [ 931.949843][T16113] loop1: detected capacity change from 0 to 512 [ 932.968302][ T4923] Bluetooth: hci3: command 0x041b tx timeout [ 932.974945][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.981312][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.993676][T16025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.032294][T16113] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 934.015505][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 934.793214][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 934.858558][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.865728][T14548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.906260][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.943146][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 934.952672][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 934.975938][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.002900][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.023711][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.032513][ T4927] Bluetooth: hci3: command 0x040f tx timeout [ 935.034023][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.061699][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 935.083339][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 935.103532][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 935.112110][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 935.209049][T16025] team0: Port device team_slave_0 added [ 935.244300][T16025] team0: Port device team_slave_1 added [ 935.380151][T16025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.409388][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.495511][T16025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.519102][T16025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.546966][T16025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.616349][T16025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.686772][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.717203][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 935.735656][T15878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.766029][T16025] device hsr_slave_0 entered promiscuous mode [ 935.789003][T16025] device hsr_slave_1 entered promiscuous mode [ 935.807648][T16025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 935.815265][T16025] Cannot create hsr debugfs directory [ 936.109521][T16025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 936.122721][T16025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 936.170697][T16025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 936.200375][T16025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 936.246303][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 936.261699][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 936.320799][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 936.333115][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 936.343650][T15878] device veth0_vlan entered promiscuous mode [ 936.374745][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 936.392178][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 936.429455][T15878] device veth1_vlan entered promiscuous mode [ 936.497155][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 936.506173][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 936.533340][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 936.554517][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 936.571706][T15878] device veth0_macvtap entered promiscuous mode [ 936.601309][T15878] device veth1_macvtap entered promiscuous mode [ 936.628296][T16025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.680340][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.700741][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.712550][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.733560][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.752889][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.773378][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.794843][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.814501][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.833595][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 936.853027][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.874108][T15878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.888431][T16025] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.900236][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 936.909630][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 936.918145][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 936.927491][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 936.937158][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.945525][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.955871][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 936.969563][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.983201][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.003961][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.024030][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.040129][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.050094][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.060575][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.070526][T15878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 937.081073][T15878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.092833][T15878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.109476][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 937.126513][ T4927] Bluetooth: hci3: command 0x0419 tx timeout [ 937.135083][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 937.150317][T15878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.159523][T15878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.168389][T15878] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.177152][T15878] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.193784][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 937.203264][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 937.212151][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.219295][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.244293][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.252987][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.262051][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.270755][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.277881][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.288158][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 937.297904][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 937.356344][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 937.374564][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.383990][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 937.393169][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 937.402833][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 937.412052][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.422282][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 937.454073][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 937.472889][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 937.487023][T16025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 937.502157][T14546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.516544][T14546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.528926][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.536789][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.544606][T14544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 937.564324][T13699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 937.588511][ T4295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.671860][ T4295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.816102][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 937.825903][T14543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 937.885868][ T4295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.936693][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 937.980972][ T4295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.496564][ T4295] tipc: Disabling bearer [ 938.501930][ T4295] tipc: Left network mode [ 939.450644][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 939.499707][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 939.615984][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 939.655062][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 939.672310][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 939.690718][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 939.711696][T16025] device veth0_vlan entered promiscuous mode [ 939.784900][T16025] device veth1_vlan entered promiscuous mode [ 939.867049][T16025] device veth0_macvtap entered promiscuous mode [ 939.889111][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 939.910128][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 939.940525][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 939.956583][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 939.981922][T16025] device veth1_macvtap entered promiscuous mode [ 940.028185][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 940.037665][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 940.073828][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.093432][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.110163][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.127077][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.137954][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.149630][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.159786][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.170646][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.182231][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.193074][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.210319][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 940.224784][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.242195][T16025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 940.273307][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 940.296836][T14548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 940.346213][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.363086][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.374119][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.389551][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.400818][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.443134][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.455089][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.465814][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.475773][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.487469][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.515263][T16025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 940.551477][T16025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 940.613365][T16025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.640848][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 940.678766][T14379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 940.906835][T16025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.036519][T16025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.239410][T16025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.428987][T16025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.692496][T14548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.718443][T14548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.738661][T14546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 941.778011][T14546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.820492][T14546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.862362][T14544] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 942.032571][T16262] loop5: detected capacity change from 0 to 512 [ 942.130952][T16262] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 942.153023][T16262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 942.889628][T16262] System zones: 0-1, 15-15, 18-18, 34-34 [ 942.900570][T16260] loop1: detected capacity change from 0 to 4096 [ 942.922998][T16262] EXT4-fs (loop5): orphan cleanup on readonly fs [ 942.932601][ T4295] device hsr_slave_0 left promiscuous mode [ 942.977174][T16262] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 942.998310][T16260] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 943.037011][T16262] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 943.071288][ T4295] device hsr_slave_1 left promiscuous mode [ 943.095754][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.107979][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.115437][T16262] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 943.131870][T16262] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.3610: bad orphan inode 16 [ 943.154168][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.168855][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.217849][T16262] ext4_test_bit(bit=15, block=18) = 1 [ 943.227304][ T4295] device bridge_slave_1 left promiscuous mode [ 943.249810][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.261945][T16262] is_bad_inode(inode)=0 [ 943.277053][ T4295] device bridge_slave_0 left promiscuous mode [ 943.286453][T16262] NEXT_ORPHAN(inode)=0 [ 943.296412][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.333676][T16262] max_ino=32 [ 943.344930][T16262] i_nlink=2 [ 943.354998][T16262] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 943.398164][ T4295] device veth1_macvtap left promiscuous mode [ 943.417602][ T4295] device veth0_macvtap left promiscuous mode [ 943.432725][T16262] sg_write: data in/out 1521783353/204 bytes for SCSI command 0xeb-- guessing data in; [ 943.432725][T16262] program syz.5.3610 not setting count and/or reply_len properly [ 943.457199][ T4295] device veth1_vlan left promiscuous mode [ 943.473417][ T4295] device veth0_vlan left promiscuous mode [ 944.152178][T16310] loop0: detected capacity change from 0 to 1764 [ 944.240617][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 944.250750][T16310] attempt to access beyond end of device [ 944.250750][T16310] loop0: rw=0, want=7180648576, limit=1764 [ 944.282259][T16310] buffer_io_error: 25 callbacks suppressed [ 944.282277][T16310] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 944.299028][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 944.328869][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.361011][T16310] attempt to access beyond end of device [ 944.361011][T16310] loop0: rw=0, want=7180648576, limit=1764 [ 944.381075][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.399995][T16310] Buffer I/O error on dev loop0, logical block 1795162143, async page read [ 944.430011][ T26] audit: type=1800 audit(1786745892.759:215): pid=16310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3611" name="file0" dev="loop0" ino=1923 res=0 errno=0 [ 944.616477][ T4295] bond0 (unregistering): Released all slaves [ 945.782774][T16331] ip_tables: iptables: counters copy to user failed while replacing table [ 945.790482][T16330] loop6: detected capacity change from 0 to 512 [ 945.959919][T16330] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 945.997733][T16330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 946.043502][T16330] System zones: 0-1, 15-15, 18-18, 34-34 [ 946.050725][T16330] EXT4-fs (loop6): orphan cleanup on readonly fs [ 946.108408][T16330] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 946.159226][T16330] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 946.203349][T16330] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 946.218763][T16330] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.3617: bad orphan inode 16 [ 946.351982][T16330] ext4_test_bit(bit=15, block=18) = 1 [ 946.445322][T16330] is_bad_inode(inode)=0 [ 946.598947][T16330] NEXT_ORPHAN(inode)=0 [ 946.796917][T16330] max_ino=32 [ 947.001987][T16330] i_nlink=2 [ 947.005255][T16330] EXT4-fs (loop6): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 947.103049][T16363] netlink: 'syz.0.3627': attribute type 5 has an invalid length. [ 947.144996][T16330] sg_write: data in/out 1521783353/204 bytes for SCSI command 0xeb-- guessing data in; [ 947.144996][T16330] program syz.6.3617 not setting count and/or reply_len properly [ 948.607468][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3631'. [ 949.193277][T16393] device syzkaller0 entered promiscuous mode [ 949.466182][T16399] loop7: detected capacity change from 0 to 8192 [ 949.556690][T16399] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 949.626281][ T26] audit: type=1800 audit(1786745897.942:216): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3637" name="file2" dev="loop7" ino=1048691 res=0 errno=0 [ 949.667905][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 949.748775][T16399] FAT-fs (loop7): Filesystem has been set read-only [ 949.780358][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 949.830033][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 949.930882][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 949.981204][T16415] loop0: detected capacity change from 0 to 512 [ 950.008040][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.075030][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.104404][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.147126][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.181235][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.213109][T16415] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 950.231410][T16415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 950.239581][T16415] System zones: 0-1, 15-15, 18-18, 34-34 [ 950.245490][T16399] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 950.318935][T16415] EXT4-fs (loop0): orphan cleanup on readonly fs [ 950.377093][T16415] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 950.460162][T16415] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 950.540505][T16415] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 950.548728][T16415] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3641: bad orphan inode 16 [ 950.625724][T16415] ext4_test_bit(bit=15, block=18) = 1 [ 950.658810][T16415] is_bad_inode(inode)=0 [ 950.714081][T16415] NEXT_ORPHAN(inode)=0 [ 950.718218][T16415] max_ino=32 [ 950.721435][T16415] i_nlink=2 [ 950.762871][T16415] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 951.806412][T16415] sg_write: data in/out 1521783353/204 bytes for SCSI command 0xeb-- guessing data in; [ 951.806412][T16415] program syz.0.3641 not setting count and/or reply_len properly [ 952.226584][ T4231] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 952.758348][ T4231] usb 6-1: unable to get BOS descriptor or descriptor too short [ 952.888323][ T4231] usb 6-1: config 7 has an invalid interface number: 33 but max is 0 [ 952.908778][ T4231] usb 6-1: config 7 has an invalid interface number: 120 but max is 0 [ 952.975681][ T4231] usb 6-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 953.022517][ T4231] usb 6-1: config 7 has no interface number 0 [ 953.068550][ T4231] usb 6-1: config 7 has no interface number 1 [ 953.098524][ T4231] usb 6-1: config 7 interface 33 altsetting 85 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 953.148852][ T4231] usb 6-1: config 7 interface 33 altsetting 85 has an invalid endpoint with address 0x80, skipping [ 953.191633][ T4231] usb 6-1: too many endpoints for config 7 interface 120 altsetting 91: 47, using maximum allowed: 30 [ 953.228422][ T4231] usb 6-1: config 7 interface 120 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 953.266199][ T4231] usb 6-1: config 7 interface 33 has no altsetting 0 [ 953.289952][ T4231] usb 6-1: config 7 interface 120 has no altsetting 0 [ 953.432204][T16473] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 953.519751][ T4231] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=34.e3 [ 953.544594][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.591929][ T4231] usb 6-1: Product: syz [ 953.602757][ T4231] usb 6-1: Manufacturer: syz [ 953.615910][ T4231] usb 6-1: SerialNumber: syz [ 953.930240][ T4922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 953.972159][ T4231] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0X34E3): Eagle I [ 954.992429][ T4922] usb 7-1: Using ep0 maxpacket: 16 [ 955.231528][ T4922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.251314][ T4922] usb 7-1: config 0 has no interfaces? [ 955.999755][ T4922] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 956.009530][ T4231] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 956.021285][T16494] loop7: detected capacity change from 0 to 512 [ 956.025005][ T4231] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 956.049237][ T4922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.088202][T16494] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 956.089184][ T4231] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0X34E3): Eagle I [ 956.116288][ T4922] usb 7-1: config 0 descriptor?? [ 956.121471][ T4231] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 956.130047][ T4231] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 956.149236][ T4231] usb 6-1: USB disconnect, device number 2 [ 956.196270][T16494] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 956.205530][T16494] System zones: 0-1, 15-15, 18-18, 34-34 [ 956.212445][T16494] EXT4-fs (loop7): orphan cleanup on readonly fs [ 956.220018][ T4923] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 956.225446][T16494] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 956.229523][ T4923] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 956.248847][ T4923] kobject_add_internal failed for firmware (error: -2 parent: 6-1) [ 956.258536][ T4923] firmware ueagle-atm!eagleI.fw: fw_load_sysfs_fallback: device_register failed [ 956.280204][ T4922] ================================================================== [ 956.288758][ T4922] BUG: KASAN: use-after-free in uea_upload_pre_firmware+0x89/0x7c0 [ 956.296925][ T4922] Read of size 8 at addr ffff888074b23070 by task kworker/0:14/4922 [ 956.304976][ T4922] [ 956.307341][ T4922] CPU: 0 PID: 4922 Comm: kworker/0:14 Not tainted syzkaller #0 [ 956.314953][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.315194][T16494] EXT4-fs warning (device loop7): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 956.325041][ T4922] Workqueue: events request_firmware_work_func [ 956.325200][ T4922] Call Trace: [ 956.325208][ T4922] [ 956.352095][ T4922] dump_stack_lvl+0x188/0x250 [ 956.356945][ T4922] ? show_regs_print_info+0x20/0x20 [ 956.362186][ T4922] ? load_image+0x410/0x410 [ 956.366757][ T4922] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 956.372302][ T4922] print_address_description+0x60/0x2d0 [ 956.377871][ T4922] ? uea_upload_pre_firmware+0x89/0x7c0 [ 956.383446][ T4922] kasan_report+0xdf/0x130 [ 956.387992][ T4922] ? uea_upload_pre_firmware+0x89/0x7c0 [ 956.393551][ T4922] uea_upload_pre_firmware+0x89/0x7c0 [ 956.398932][ T4922] ? uea_disconnect+0x2f0/0x2f0 [ 956.403792][ T4922] ? _request_firmware+0xffd/0x12b0 [ 956.409000][ T4922] ? uea_disconnect+0x2f0/0x2f0 [ 956.413853][ T4922] request_firmware_work_func+0xe8/0x1a0 [ 956.419491][ T4922] process_one_work+0x867/0xff0 [ 956.424436][ T4922] ? worker_detach_from_pool+0x240/0x240 [ 956.430073][ T4922] ? lockdep_hardirqs_off+0x70/0x100 [ 956.435378][ T4922] ? _raw_spin_lock_irq+0xb7/0xf0 [ 956.440403][ T4922] ? _raw_spin_lock_irqsave+0x100/0x100 [ 956.445958][ T4922] ? wq_worker_running+0x97/0x170 [ 956.450990][ T4922] worker_thread+0xad7/0x12a0 [ 956.455693][ T4922] kthread+0x42e/0x520 [ 956.459762][ T4922] ? rcu_lock_release+0x20/0x20 [ 956.464613][ T4922] ? kthread_blkcg+0xd0/0xd0 [ 956.469203][ T4922] ret_from_fork+0x1f/0x30 [ 956.473669][ T4922] [ 956.476728][ T4922] [ 956.479049][ T4922] Allocated by task 4231: [ 956.483389][ T4922] __kasan_kmalloc+0xaf/0xe0 [ 956.487984][ T4922] usb_set_configuration+0x3b6/0x2030 [ 956.493388][ T4922] usb_generic_driver_probe+0x89/0x150 [ 956.498883][ T4922] usb_probe_device+0x126/0x250 [ 956.503751][ T4922] really_probe+0x276/0xc70 [ 956.508287][ T4922] __driver_probe_device+0x1f5/0x390 [ 956.513571][ T4922] driver_probe_device+0x4f/0x420 [ 956.518597][ T4922] __device_attach_driver+0x2b0/0x500 [ 956.524061][ T4922] bus_for_each_drv+0x184/0x210 [ 956.528909][ T4922] __device_attach+0x2a7/0x480 [ 956.533696][ T4922] bus_probe_device+0xba/0x1d0 [ 956.538473][ T4922] device_add+0xbcf/0x1050 [ 956.542889][ T4922] usb_new_device+0x9f6/0x15d0 [ 956.547654][ T4922] hub_event+0x2b8d/0x5260 [ 956.552069][ T4922] process_one_work+0x867/0xff0 [ 956.556928][ T4922] worker_thread+0xad7/0x12a0 [ 956.561880][ T4922] kthread+0x42e/0x520 [ 956.565953][ T4922] ret_from_fork+0x1f/0x30 [ 956.570368][ T4922] [ 956.572689][ T4922] Freed by task 4231: [ 956.576664][ T4922] kasan_set_track+0x4b/0x70 [ 956.581254][ T4922] kasan_set_free_info+0x1f/0x40 [ 956.586196][ T4922] ____kasan_slab_free+0xd5/0x110 [ 956.591219][ T4922] slab_free_freelist_hook+0xec/0x170 [ 956.596615][ T4922] kfree+0xef/0x2a0 [ 956.600426][ T4922] device_release+0x92/0x1c0 [ 956.605015][ T4922] kobject_put+0x217/0x450 [ 956.609507][ T4922] usb_disable_device+0x612/0x8a0 [ 956.614530][ T4922] usb_disconnect+0x33c/0x8a0 [ 956.619204][ T4922] hub_event+0x1d64/0x5260 [ 956.623628][ T4922] process_one_work+0x867/0xff0 [ 956.628494][ T4922] worker_thread+0xd93/0x12a0 [ 956.633180][ T4922] kthread+0x42e/0x520 [ 956.637259][ T4922] ret_from_fork+0x1f/0x30 [ 956.641682][ T4922] [ 956.644014][ T4922] Last potentially related work creation: [ 956.649901][ T4922] kasan_save_stack+0x35/0x60 [ 956.654578][ T4922] kasan_record_aux_stack+0xb8/0x100 [ 956.659866][ T4922] call_rcu+0x189/0x900 [ 956.664123][ T4922] dev_shutdown+0x19e/0x700 [ 956.668690][ T4922] unregister_netdevice_many+0xa59/0x1a40 [ 956.674443][ T4922] ieee80211_remove_interfaces+0x44b/0x700 [ 956.680311][ T4922] ieee80211_unregister_hw+0x55/0x220 [ 956.685705][ T4922] mac80211_hwsim_del_radio+0x282/0x470 [ 956.691325][ T4922] hwsim_exit_net+0x589/0x650 [ 956.696010][ T4922] cleanup_net+0x703/0xba0 [ 956.700459][ T4922] process_one_work+0x867/0xff0 [ 956.705311][ T4922] worker_thread+0xad7/0x12a0 [ 956.709989][ T4922] kthread+0x42e/0x520 [ 956.714062][ T4922] ret_from_fork+0x1f/0x30 [ 956.718476][ T4922] [ 956.720798][ T4922] Second to last potentially related work creation: [ 956.727389][ T4922] kasan_save_stack+0x35/0x60 [ 956.732067][ T4922] kasan_record_aux_stack+0xb8/0x100 [ 956.737356][ T4922] kvfree_call_rcu+0x105/0x7f0 [ 956.742117][ T4922] drop_sysctl_table+0x359/0x4e0 [ 956.747108][ T4922] unregister_sysctl_table+0x87/0x130 [ 956.752480][ T4922] devinet_exit_net+0xe2/0x220 [ 956.757269][ T4922] cleanup_net+0x703/0xba0 [ 956.761684][ T4922] process_one_work+0x867/0xff0 [ 956.766531][ T4922] worker_thread+0xad7/0x12a0 [ 956.771207][ T4922] kthread+0x42e/0x520 [ 956.775275][ T4922] ret_from_fork+0x1f/0x30 [ 956.779692][ T4922] [ 956.782038][ T4922] The buggy address belongs to the object at ffff888074b23000 [ 956.782038][ T4922] which belongs to the cache kmalloc-2k of size 2048 [ 956.796141][ T4922] The buggy address is located 112 bytes inside of [ 956.796141][ T4922] 2048-byte region [ffff888074b23000, ffff888074b23800) [ 956.809500][ T4922] The buggy address belongs to the page: [ 956.815129][ T4922] page:ffffea0001d2c800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74b20 [ 956.825282][ T4922] head:ffffea0001d2c800 order:3 compound_mapcount:0 compound_pincount:0 [ 956.833602][ T4922] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 956.841590][ T4922] raw: 00fff00000010200 ffffea0001993400 0000000300000003 ffff888016c42000 [ 956.850171][ T4922] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 956.858746][ T4922] page dumped because: kasan: bad access detected [ 956.865151][ T4922] page_owner tracks the page as allocated [ 956.870861][ T4922] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 63631493176, free_ts 63629778276 [ 956.890064][ T4922] get_page_from_freelist+0x24f6/0x2670 [ 956.895687][ T4922] __alloc_pages+0x1ee/0x480 [ 956.900271][ T4922] new_slab+0xc0/0x4b0 [ 956.904335][ T4922] ___slab_alloc+0x807/0xdd0 [ 956.908916][ T4922] kmem_cache_alloc_trace+0xf9/0x290 [ 956.914193][ T4922] netdev_init+0x103/0x1f0 [ 956.918607][ T4922] ops_init+0x360/0x5f0 [ 956.922759][ T4922] setup_net+0x39e/0xa10 [ 956.926993][ T4922] copy_net_ns+0x33e/0x5b0 [ 956.931417][ T4922] create_new_namespaces+0x3ce/0x700 [ 956.936701][ T4922] unshare_nsproxy_namespaces+0x116/0x160 [ 956.942424][ T4922] ksys_unshare+0x4f6/0x8e0 [ 956.946962][ T4922] __x64_sys_unshare+0x34/0x40 [ 956.951722][ T4922] do_syscall_64+0x4c/0xa0 [ 956.956136][ T4922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 956.962116][ T4922] page last free stack trace: [ 956.966781][ T4922] free_unref_page_prepare+0x637/0x6c0 [ 956.972239][ T4922] free_unref_page+0x8f/0x2a0 [ 956.976913][ T4922] free_nonslab_page+0xde/0x150 [ 956.981761][ T4922] skb_release_data+0x667/0x830 [ 956.986645][ T4922] consume_skb+0xa2/0x100 [ 956.990970][ T4922] skb_free_datagram+0x25/0xe0 [ 956.995743][ T4922] netlink_recvmsg+0x5dd/0xe50 [ 957.000659][ T4922] ____sys_recvmsg+0x2ca/0x5b0 [ 957.005500][ T4922] ___sys_recvmsg+0x213/0x5c0 [ 957.010191][ T4922] __x64_sys_recvmsg+0x201/0x2d0 [ 957.015143][ T4922] do_syscall_64+0x4c/0xa0 [ 957.019566][ T4922] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 957.025473][ T4922] [ 957.027797][ T4922] Memory state around the buggy address: [ 957.033480][ T4922] ffff888074b22f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 957.041540][ T4922] ffff888074b22f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 957.049607][ T4922] >ffff888074b23000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.057666][ T4922] ^ [ 957.065383][ T4922] ffff888074b23080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.073450][ T4922] ffff888074b23100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 957.081518][ T4922] ================================================================== [ 957.089588][ T4922] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 957.144992][T16494] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 957.175503][ T4923] usb 6-1: [UEAGLE-ATM] firmware is not available [ 957.186592][T16494] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.3658: bad orphan inode 16 [ 957.216291][ T4923] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 957.228233][ T4923] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 957.236670][ T4923] CPU: 0 PID: 4923 Comm: kworker/0:15 Tainted: G B syzkaller #0 [ 957.245630][ T4923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.255714][ T4923] Workqueue: events request_firmware_work_func [ 957.258549][T16494] ext4_test_bit(bit=15, block=18) = 1 [ 957.261899][ T4923] RIP: 0010:do_raw_spin_lock+0x70/0x2f0 [ 957.272931][ T4923] Code: c7 44 24 30 e0 2d 5e 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 ee 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 957.288051][T16494] is_bad_inode(inode)=0 [ 957.292603][ T4923] RSP: 0018:ffffc9000322f980 EFLAGS: 00010003 [ 957.297386][T16494] NEXT_ORPHAN(inode)=0 [ 957.302828][ T4923] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 6f0cca41e56bf900 [ 957.314873][ T4923] RDX: dffffc0000000000 RSI: ffffffff8a7a41e0 RDI: 0000000000000008 [ 957.322869][ T4923] RBP: ffffc9000322fa30 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 957.328114][T16494] max_ino=32 [ 957.330865][ T4923] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 1ffff92000645f34 [ 957.330884][ T4923] R13: ffff88807e2b0760 R14: 000000000000000c R15: 1ffff92000645f48 [ 957.330898][ T4923] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 957.330914][ T4923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.330928][ T4923] CR2: 000020000030f030 CR3: 0000000023bcd000 CR4: 00000000003506f0 [ 957.330948][ T4923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 957.330959][ T4923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 957.330973][ T4923] Call Trace: [ 957.330980][ T4923] [ 957.330988][ T4923] ? read_lock_is_recursive+0x10/0x10 [ 957.334327][T16494] i_nlink=2 [ 957.342192][ T4923] ? __rwlock_init+0x140/0x140 [ 957.342212][ T4923] ? __dev_printk+0x131/0x190 [ 957.342232][ T4923] ? _dev_err+0x11b/0x170 [ 957.342252][ T4923] _raw_spin_lock_irqsave+0xbc/0x100 [ 957.342270][ T4923] ? _raw_spin_lock+0x40/0x40 [ 957.388745][T16494] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 957.389769][ T4923] complete+0x23/0xa0 [ 957.445347][ T4923] uea_upload_pre_firmware+0x32a/0x7c0 [ 957.450845][ T4923] ? uea_disconnect+0x2f0/0x2f0 [ 957.455718][ T4923] ? _request_firmware+0xffd/0x12b0 [ 957.460940][ T4923] ? uea_disconnect+0x2f0/0x2f0 [ 957.465805][ T4923] request_firmware_work_func+0xe8/0x1a0 [ 957.471444][ T4923] process_one_work+0x867/0xff0 [ 957.476304][ T4923] ? worker_detach_from_pool+0x240/0x240 [ 957.481938][ T4923] ? lockdep_hardirqs_off+0x70/0x100 [ 957.487225][ T4923] ? _raw_spin_lock_irq+0xb7/0xf0 [ 957.492248][ T4923] ? _raw_spin_lock_irqsave+0x100/0x100 [ 957.497790][ T4923] ? wq_worker_running+0x97/0x170 [ 957.502826][ T4923] worker_thread+0xad7/0x12a0 [ 957.507528][ T4923] kthread+0x42e/0x520 [ 957.511595][ T4923] ? rcu_lock_release+0x20/0x20 [ 957.516442][ T4923] ? kthread_blkcg+0xd0/0xd0 [ 957.521029][ T4923] ret_from_fork+0x1f/0x30 [ 957.525451][ T4923] [ 957.528469][ T4923] Modules linked in: [ 957.532365][ T4923] ---[ end trace dc26b5346b3e4b56 ]--- [ 957.537822][ T4923] RIP: 0010:do_raw_spin_lock+0x70/0x2f0 [ 957.543469][ T4923] Code: c7 44 24 30 e0 2d 5e 81 4c 8d 64 24 20 49 c1 ec 03 48 b8 f1 f1 f1 f1 f8 f3 f3 f3 49 89 04 14 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 ee 01 00 00 41 8b 06 3d ad 4e ad de 0f 85 [ 957.563073][ T4923] RSP: 0018:ffffc9000322f980 EFLAGS: 00010003 [ 957.569146][ T4923] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 6f0cca41e56bf900 [ 957.577201][ T4923] RDX: dffffc0000000000 RSI: ffffffff8a7a41e0 RDI: 0000000000000008 [ 957.585171][ T4923] RBP: ffffc9000322fa30 R08: ffffffff8d8b0def R09: 1ffffffff1b161bd [ 957.593140][ T4923] R10: dffffc0000000000 R11: fffffbfff1b161be R12: 1ffff92000645f34 [ 957.601112][ T4923] R13: ffff88807e2b0760 R14: 000000000000000c R15: 1ffff92000645f48 [ 957.609183][ T4923] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 957.618197][ T4923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 957.624778][ T4923] CR2: 000020000030f030 CR3: 0000000023bcd000 CR4: 00000000003506f0 [ 957.632842][ T4923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 957.640829][ T4923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 957.648854][ T4923] Kernel panic - not syncing: Fatal exception [ 957.655084][ T4923] Kernel Offset: disabled [ 957.659517][ T4923] Rebooting in 86400 seconds..