last executing test programs: 54.011920148s ago: executing program 0 (id=1447): set_mempolicy(0x2, &(0x7f0000000040)=0x471, 0x6) getpid() r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x100000001) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000180)=0x3) recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 51.97019849s ago: executing program 0 (id=1450): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x401) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000080)="000000000000004088fae7df591fe6f51d37ce5f9084ff6943b8000000f80000a101b28a9c680028e200000100864104bfeacd1f63dd65dd530700a2e99f1f9c856d24196a983326f58afa9fa492bf8cec4529e4", 0x54, r4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg(r3, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 48.748150604s ago: executing program 0 (id=1467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300), 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000040)={0x0, r6, r5}) socket$kcm(0x2, 0xd, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 38.793401573s ago: executing program 0 (id=1470): syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x20800c4e, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000011,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00ce6fb92f3b6892859719d513fb2b724d78e448737550f435f5dc50947a837ac494c7c5eb9c5beb42ba26aa26d209487904b0dd87d0e214ea5f0d0f93cd17bbcd11398e4f3de48c458ac42a36d259c1947b981eec266c1568a7b1911a194200b826832913e757be58730ef2d7f818c529bc84b3566eff9e"], 0x1, 0x14f5, &(0x7f0000001580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getcwd(0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='stack\x00') read$FUSE(r3, &(0x7f0000000440)={0x2020}, 0x2020) 37.425888711s ago: executing program 0 (id=1473): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x51a, &(0x7f00000008c0)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/shm\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000064d564b"]) 35.727350122s ago: executing program 0 (id=1477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 34.941567316s ago: executing program 2 (id=1480): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x400, 0x4e22, 0x8}}}}}, 0x0) 33.172032522s ago: executing program 2 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") creat(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f8) sendfile(r4, r4, 0x0, 0x100000008) 30.33556023s ago: executing program 2 (id=1486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000f00)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r3 = request_key(&(0x7f0000000b00)='.request_key_auth\x00', &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000d40)='GPL\x00', 0xfffffffffffffffc) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)='\x00', r3) r4 = fsopen(&(0x7f0000000780)='reiserfs\x00', 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000007c0)) stat(0x0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000001040)={&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000014c0)="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", 0xdf8}, {0x0}, {&(0x7f00000024c0)}, {&(0x7f0000000940)="12f5cb640889f389e9da2087f111eed9b9331b", 0x13}, {0x0}, {&(0x7f0000000b40)="e016838a09c7455de0da48f5cd38320507ab9376f2951e7af4a3b14fd1fd8488497d9678a9c9be8c354ec1f89e716802cda769397b1f4136f3", 0x39}], 0x6, &(0x7f0000000f40)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000003000000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000001f700618f4abbd77f000000010000000000000000", @ANYRES32, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x40010}, 0x840) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 28.501948113s ago: executing program 2 (id=1488): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000500)={[{@dioread_lock}, {@usrjquota}, {@noblock_validity}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noquota}, {@grpquota}, {@i_version}, {@resuid={'resuid', 0x3d, 0xee00}}, {@jqfmt_vfsold}]}, 0x45, 0x7c2, &(0x7f0000002040)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0x0, 0x0, 0x4003) fcntl$getownex(r3, 0x10, 0x0) syz_clone3(&(0x7f0000001fc0)={0x51687997e904d800, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0xe}, &(0x7f0000000c80)=""/4096, 0x1000, 0x0, 0x0, 0x0, {r0}}, 0x58) 26.691947594s ago: executing program 2 (id=1490): epoll_wait(0xffffffffffffffff, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x398, 0xffffffff, 0x228, 0x0, 0x228, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xf, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x20) 24.699830201s ago: executing program 3 (id=1493): clock_settime(0x84e2a3b0917b724b, &(0x7f0000001fc0)={0x77359400}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1fe], [0x0, 0xfdfdffff], [0x8002]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {0x40}], '\x00', 0x300}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000001008500000001000000181100", @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) dup2(r4, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000331000/0x3000)=nil, 0x4cb000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) r8 = syz_usbip_server_init(0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x180}, {0xffffffffffffffff, 0x220a}, {0xffffffffffffffff, 0x4500}, {0xffffffffffffffff, 0x1000}, {r2, 0x1c02a}, {r3, 0x1161}, {r4, 0x8021}, {r8}], 0x8, 0x0, &(0x7f0000000080)={[0x2]}, 0x8) 19.798534903s ago: executing program 2 (id=1495): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xca, &(0x7f0000000300), 0xff, 0x463, &(0x7f00000009c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x30}, 0x0) mmap$snddsp_status(&(0x7f0000843000/0xa000)=nil, 0x1000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x82000000) fchdir(0xffffffffffffffff) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') 18.000334153s ago: executing program 3 (id=1503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") creat(0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f8) sendfile(r4, r4, 0x0, 0x100000008) 16.75789089s ago: executing program 3 (id=1499): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.506079552s ago: executing program 4 (id=1501): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) pipe(0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x100, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {0x1b}, {}, 0x0, 0x400, 0xa, 0x0, 0xff}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x100}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x88, r4, 0x20, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1bae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1800000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x69e0}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x96e2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xee}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x922, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 13.330488403s ago: executing program 3 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40020000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.718929654s ago: executing program 1 (id=1507): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ptrace$setregs(0xd, r1, 0x7, &(0x7f00000005c0)="4c7325bc5c844c896a61df4c55bcb0ba07f93831dd917c085372691150639ebf71830b4bbef488622731e7f65fb6cda5f3323009a851464b1976aafb08cec2be1c767768cfe4bc6e23c916450f951bfb81add7c9d4e4331c013e2b3603c6b3e0a0bd48207048347bc3367bd0e510ed1aceac1403a82878c0a00f22d651a9f29a0d200013cf74") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 8.754340074s ago: executing program 1 (id=1508): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) open(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB="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"], 0x1c8}}, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff8f) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 7.516089241s ago: executing program 1 (id=1509): r0 = msgget(0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000280)=""/110) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) msgsnd(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="030000000000725c568c76eedec4bc59aafe1c990ebb9449142ab8661ed028a7e71378e74f796b5bff86a73dde"], 0x94, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) msgsnd(0x0, &(0x7f0000000240)=ANY=[], 0x8, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000024c0)=@raw={'raw\x00', 0x8, 0x3, 0x1480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x13b0, 0xffffffff, 0xffffffff, 0x13b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x40, 0x0, 0x0, './cgroup.net/syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'veth1_macvtap\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00'}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00'}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x14e0) 6.47341328s ago: executing program 1 (id=1511): memfd_create(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @val=@tracing}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='target PCI:0:0:16.1'], 0x15) remap_file_pages(&(0x7f000013e000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.211444034s ago: executing program 4 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) 5.099614609s ago: executing program 4 (id=1513): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.803869381s ago: executing program 3 (id=1514): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x210400, 0x0) memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r6}, 0x38) 3.237428434s ago: executing program 1 (id=1515): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0xd6c9, 0x8001, 0x8, 0x100, 0x1, 0xfffffff7, '\x00', 0x0, r0, 0x0, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x400454a4, 0xfffffffffffffffe) 2.205994112s ago: executing program 3 (id=1516): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000200)={0x18, 0x2, {0x1, @remote}}, 0x1e) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "3ba1ce57"}, @main=@item_012={0x2, 0x0, 0x0, "9048"}, @main=@item_012={0x1, 0x0, 0xb, "c8"}, @main=@item_4={0x3, 0x0, 0x0, "40021ddb"}]}}, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x1, 0xa}) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/100, 0x64}], 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0ce) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400192340834b80040d96560a067ff6fffe000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004", 0x49}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.204856832s ago: executing program 1 (id=1524): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet(0x2, 0x2, 0x1) socket$packet(0x11, 0xa, 0x300) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCDISCONN(r6, 0x7439) 2.064896195s ago: executing program 4 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0xca800, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "71aebd58"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) r4 = openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) 956.220419ms ago: executing program 4 (id=1518): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x82e0, 0xff39, 0x3) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x40, @any, 0x100, 0x1}, 0xe) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r3, 0x0, 0x8800) close(r3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4084) 0s ago: executing program 4 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000200000000000000000006000000000000000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000105000500008000000a00000000000000fe8000000000000000000000000000aa000000000000000005000600004700000a0000000000000000000000000000000000ffffac1414aa0000000000000000eb433152"], 0xa0}}, 0x0) sendto$inet6(r4, 0x0, 0x4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 700.441247][ T4206] usb 5-1: config 0 has too many interfaces: 98, using maximum allowed: 32 [ 700.498722][ T4206] usb 5-1: config 0 has an invalid interface number: 153 but max is 97 [ 700.517909][ T4206] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 98 [ 700.535186][ T4206] usb 5-1: config 0 has no interface number 0 [ 700.709169][T10514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.908634][ T26] audit: type=1804 audit(1727232678.690:109): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1241" name="/newroot/48/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 701.360764][ T4206] usb 5-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 701.370069][ T4206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.378249][ T4206] usb 5-1: Product: syz [ 701.383055][ T4206] usb 5-1: Manufacturer: syz [ 701.389490][ T4206] usb 5-1: SerialNumber: syz [ 701.397428][ T4206] usb 5-1: config 0 descriptor?? [ 701.455349][ T9384] EXT4-fs (loop2): unmounting filesystem. [ 701.458632][ T4206] sierra 5-1:0.153: Sierra USB modem converter detected [ 701.627851][ T9] tipc: Left network mode [ 701.755926][T10614] loop2: detected capacity change from 0 to 256 [ 702.511000][T10585] loop4: detected capacity change from 0 to 1764 [ 702.651631][T10585] loop4: detected capacity change from 0 to 512 [ 702.686300][T10585] EXT4-fs: Ignoring removed oldalloc option [ 702.869845][T10514] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 702.892146][T10514] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 702.905604][T10585] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1240: Parent and EA inode have the same ino 15 [ 702.929166][T10514] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 702.939672][T10514] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 702.989934][T10585] EXT4-fs (loop4): Remounting filesystem read-only [ 703.065588][T10625] loop2: detected capacity change from 0 to 8 [ 703.105778][T10585] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.1240: couldn't truncate inode 15 (err -30) [ 703.236796][T10625] SQUASHFS error: Failed to read block 0x730: -5 [ 703.243545][T10625] SQUASHFS error: Unable to read metadata cache entry [72e] [ 703.387759][T10585] EXT4-fs (loop4): 1 orphan inode deleted [ 703.515318][T10585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 705.327020][ T4206] usb 5-1: USB disconnect, device number 18 [ 705.333381][ T4206] sierra 5-1:0.153: device disconnected [ 706.116216][T10157] EXT4-fs (loop4): unmounting filesystem. [ 707.017777][T10641] loop3: detected capacity change from 0 to 512 [ 707.581242][T10514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.671247][T10514] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.033408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.052182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.084166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.116124][T10641] EXT4-fs (loop3): 1 orphan inode deleted [ 708.154554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.164681][T10641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 708.193627][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.200964][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.217137][T10641] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 708.239031][ T49] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 708.277259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.286153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.287923][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:3: Failed to release dquot type 1 [ 708.295263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.312878][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.321683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 709.395943][T10268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.509967][T10268] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.713680][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 709.735955][T10268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.831830][T10268] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.864880][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 709.884375][T10268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.918751][T10268] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 709.946652][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 709.966497][T10268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 710.068124][T10268] EXT4-fs error (device loop3): ext4_empty_dir:3143: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 710.109660][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.123330][T10268] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /3/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 710.154208][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.167148][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.908569][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.929627][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 710.939601][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 710.947708][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.948975][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 710.979186][T10268] EXT4-fs warning (device loop3): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.' [ 711.149682][T10514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 711.160493][T10514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.190425][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.319072][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 712.111047][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 712.188311][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 712.198508][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 712.208155][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 712.222037][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 712.247649][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 712.261030][T10677] loop4: detected capacity change from 0 to 1024 [ 712.272478][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 712.283682][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 712.300286][T10677] EXT4-fs: Ignoring removed nobh option [ 712.316039][T10677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 712.457681][T10677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 713.264581][T10694] loop2: detected capacity change from 0 to 256 [ 713.406112][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.431872][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.445816][T10157] EXT4-fs (loop4): unmounting filesystem. [ 713.510182][T10514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.523579][T10268] EXT4-fs (loop3): unmounting filesystem. [ 713.598744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 713.634281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 713.671458][T10530] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 713.963306][T10530] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 713.999922][T10530] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 714.036224][T10514] device veth0_vlan entered promiscuous mode [ 714.065944][T10530] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.077787][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 714.094488][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 714.115365][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 714.125253][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 714.146101][T10514] device veth1_vlan entered promiscuous mode [ 714.254933][T10716] loop2: detected capacity change from 0 to 512 [ 714.353599][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1261: corrupted inode contents [ 714.381206][T10716] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #3: comm syz.2.1261: mark_inode_dirty error [ 714.408970][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 714.442023][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1261: corrupted inode contents [ 714.454750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 714.458261][ T3658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 714.474288][ T3655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 714.474527][T10716] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1261: mark_inode_dirty error [ 714.490893][ T3658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 714.501220][ T3658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 714.529805][ T3658] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 714.531591][T10716] Quota error (device loop2): write_blk: dquota write failed [ 714.546481][ T3658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 714.581593][T10716] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 714.592497][T10716] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1261: Failed to acquire dquot type 0 [ 714.606238][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1261: corrupted inode contents [ 714.619245][T10716] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #16: comm syz.2.1261: mark_inode_dirty error [ 714.637819][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1261: corrupted inode contents [ 714.667386][T10716] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1261: mark_inode_dirty error [ 714.689505][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1261: corrupted inode contents [ 714.708494][T10716] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 714.719152][T10716] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1261: corrupted inode contents [ 714.732891][T10716] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.1261: mark_inode_dirty error [ 714.748222][T10716] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 714.769886][T10716] EXT4-fs (loop2): 1 truncate cleaned up [ 714.775689][T10716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 714.786408][T10716] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff) [ 714.793038][T10514] device veth0_macvtap entered promiscuous mode [ 714.980430][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 714.991828][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 715.788008][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.078979][T10514] device veth1_macvtap entered promiscuous mode [ 716.339511][ T9] device hsr_slave_0 left promiscuous mode [ 716.359804][ T9] device hsr_slave_1 left promiscuous mode [ 716.380763][ T9384] EXT4-fs (loop2): unmounting filesystem. [ 716.387445][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.395005][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.404281][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.434144][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.473742][T10728] loop4: detected capacity change from 0 to 1024 [ 716.503253][ T9] device bridge_slave_1 left promiscuous mode [ 716.523301][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.585332][ T9] device bridge_slave_0 left promiscuous mode [ 716.592894][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.666870][ T3661] Bluetooth: hci0: command tx timeout [ 717.754328][ T3661] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 717.770579][ T3661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 717.779771][ T3661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 717.790482][ T3661] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 717.798379][ T3661] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 717.805685][ T3661] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 717.950889][T10735] loop4: detected capacity change from 0 to 1024 [ 717.971591][T10735] hfsplus: invalid attributes max_key_len 0 [ 717.978188][T10735] hfsplus: failed to load attributes file [ 718.011684][ T9] device hsr_slave_0 left promiscuous mode [ 718.020313][ T8479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.031121][ T9] device hsr_slave_1 left promiscuous mode [ 718.174137][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 718.189132][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.197303][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.566273][ T9] device veth1_macvtap left promiscuous mode [ 718.601533][ T9] device veth0_macvtap left promiscuous mode [ 718.627760][ T9] device veth1_vlan left promiscuous mode [ 718.650007][ T9] device veth0_vlan left promiscuous mode [ 718.682404][ T9] device veth1_macvtap left promiscuous mode [ 718.703739][ T9] device veth0_macvtap left promiscuous mode [ 718.733359][ T9] device veth1_vlan left promiscuous mode [ 718.772273][ T9] device veth0_vlan left promiscuous mode [ 719.092972][ T3661] Bluetooth: hci0: command tx timeout [ 719.478439][ T3871] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 719.767013][ T9] team0 (unregistering): Port device team_slave_1 removed [ 719.835522][ T9] team0 (unregistering): Port device team_slave_0 removed [ 719.847948][ T3871] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 719.860629][ T3661] Bluetooth: hci3: command tx timeout [ 719.866444][ T3871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.887381][ T3871] usb 5-1: config 0 descriptor?? [ 719.924207][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 719.928165][ T3871] cp210x 5-1:0.0: cp210x converter detected [ 719.939677][ T9] device bond_slave_1 left promiscuous mode [ 719.997132][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.006898][ T9] device bond_slave_0 left promiscuous mode [ 720.583474][ T3871] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 720.591543][ T3871] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 720.616794][ T3871] usb 5-1: cp210x converter now attached to ttyUSB0 [ 720.635303][ T3871] usb 5-1: USB disconnect, device number 19 [ 720.643252][ T3871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 720.655547][ T3871] cp210x 5-1:0.0: device disconnected [ 720.812874][ T9] bond0 (unregistering): Released all slaves [ 721.126742][ T3661] Bluetooth: hci0: command tx timeout [ 721.585493][T10743] autofs4:pid:10743:autofs_fill_super: called with bogus options [ 722.288845][ T3661] Bluetooth: hci3: command tx timeout [ 723.619405][T10747] loop4: detected capacity change from 0 to 32768 [ 723.634301][ T3661] Bluetooth: hci0: command tx timeout [ 723.706192][T10747] XFS (loop4): Mounting V5 Filesystem [ 723.724575][ T9] team0 (unregistering): Port device team_slave_1 removed [ 723.783369][T10747] XFS (loop4): Ending clean mount [ 723.814034][T10747] XFS (loop4): Quotacheck needed: Please wait. [ 723.816880][ T9] team0 (unregistering): Port device team_slave_0 removed [ 723.915014][T10747] XFS (loop4): Quotacheck: Done. [ 723.933091][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.001402][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.218636][T10157] XFS (loop4): Unmounting Filesystem [ 724.337073][ T3661] Bluetooth: hci3: command tx timeout [ 725.042765][ T9] bond0 (unregistering): Released all slaves [ 725.250530][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.265521][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.276700][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.288116][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.302304][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.313428][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.326143][T10514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.353636][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 725.364004][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 725.376845][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.390128][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.400631][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.411237][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.421112][T10514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.432951][T10514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.444677][T10514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.470280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 725.479415][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 725.529712][T10530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.538988][T10514] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.548804][T10514] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.559446][T10514] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.570932][T10514] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.719965][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 725.728017][ T5422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.812547][T10767] loop4: detected capacity change from 0 to 256 [ 726.438710][ T3661] Bluetooth: hci3: command tx timeout [ 726.623569][ T8479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 726.653647][T10530] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.776780][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 726.785577][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.814306][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.821509][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.975239][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.000116][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.061739][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 727.071564][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 727.080459][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 727.089343][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.096760][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.105450][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 727.119435][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 727.158549][T10719] chnl_net:caif_netlink_parms(): no params data found [ 727.867508][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.874731][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.892765][T10719] device bridge_slave_0 entered promiscuous mode [ 727.904298][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.917603][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.957872][T10719] device bridge_slave_1 entered promiscuous mode [ 727.995940][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 728.039675][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.059451][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 728.073763][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.130042][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 728.157021][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.168887][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 728.214054][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 728.313392][T10782] vivid-004: disconnect [ 728.321549][T10782] vivid-004: reconnect [ 728.410448][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 728.562991][T10732] chnl_net:caif_netlink_parms(): no params data found [ 728.935028][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.942408][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.963266][T10732] device bridge_slave_0 entered promiscuous mode [ 728.990917][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.998870][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.027208][T10732] device bridge_slave_1 entered promiscuous mode [ 729.055680][T10530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 729.239734][T10530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.012580][T10790] loop0: detected capacity change from 0 to 512 [ 730.019729][T10790] ext4: Unknown parameter '.' [ 730.050722][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.073902][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 730.081530][ T8479] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 730.115659][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 730.145229][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 730.155442][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 730.184002][T10796] loop0: detected capacity change from 0 to 1024 [ 730.201504][T10796] EXT4-fs: Ignoring removed nobh option [ 730.215578][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.244997][T10794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1276'. [ 730.247446][T10796] /dev/loop0: Can't open blockdev [ 730.292831][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 730.304906][T10732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.539339][T10732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.572329][T10719] team0: Port device team_slave_0 added [ 731.204344][T10719] team0: Port device team_slave_1 added [ 731.251497][T10732] team0: Port device team_slave_0 added [ 731.327407][T10732] team0: Port device team_slave_1 added [ 731.695900][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.703427][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.847972][T10810] loop4: detected capacity change from 0 to 1764 [ 731.887573][T10810] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 732.087182][ T3661] Bluetooth: hci2: command tx timeout [ 732.308576][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.358158][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.376781][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.479905][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.500868][T10732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.546825][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.602106][T10732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.735447][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.798570][T10732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.805600][T10732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.894461][T10732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.895267][T10819] loop4: detected capacity change from 0 to 512 [ 733.009477][T10819] EXT4-fs (loop4): Test dummy encryption mode enabled [ 733.031484][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.062839][T10819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 733.180850][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.248420][T10719] device hsr_slave_0 entered promiscuous mode [ 733.281785][T10719] device hsr_slave_1 entered promiscuous mode [ 733.293378][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.301721][T10719] Cannot create hsr debugfs directory [ 733.323660][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 733.335434][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 733.380224][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.412880][T10732] device hsr_slave_0 entered promiscuous mode [ 733.422900][T10732] device hsr_slave_1 entered promiscuous mode [ 733.430708][T10732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.441824][T10732] Cannot create hsr debugfs directory [ 733.480214][T10530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.661172][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.671124][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.800654][T10530] device veth0_vlan entered promiscuous mode [ 733.823676][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 733.845253][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 733.877737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 733.897933][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 734.010107][T10530] device veth1_vlan entered promiscuous mode [ 734.304970][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.534764][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.563735][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 734.584989][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 734.599352][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 734.612769][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 734.627875][T10530] device veth0_macvtap entered promiscuous mode [ 734.790020][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.804320][T10834] loop0: detected capacity change from 0 to 1024 [ 734.813125][T10157] EXT4-fs (loop4): unmounting filesystem. [ 734.827412][T10834] EXT4-fs: Ignoring removed orlov option [ 734.873565][T10530] device veth1_macvtap entered promiscuous mode [ 734.880864][T10834] /dev/loop0: Can't open blockdev [ 734.917802][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 734.927133][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 737.018586][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.075621][T10847] loop4: detected capacity change from 0 to 256 [ 737.097801][T10847] FAT-fs (loop4): Unrecognized mount option "shortname=mixeîF¶dir" or missing value [ 737.161418][ T8479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 737.187532][T10847] syz.4.1284[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.187642][T10847] syz.4.1284[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.209064][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.266330][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.286080][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.297488][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.316257][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.335508][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.374932][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.428095][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.465211][T10530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.603537][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 737.693745][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 737.790995][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 737.950499][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.092313][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.177452][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.216613][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.235833][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.246569][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.262427][T10530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 738.273755][T10530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 738.286933][T10530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.305065][T10530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.314385][T10530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.327202][T10530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.336216][T10530] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.414529][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 738.424087][ T7365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 738.516891][ T5296] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 738.927521][ T5296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.969006][ T5296] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 739.092461][ T5296] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 739.157314][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.283972][ T5296] usb 5-1: config 0 descriptor?? [ 739.669590][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.746804][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.774756][T10732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 739.816000][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 740.759817][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.888966][T10732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 740.893873][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.042295][T10883] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 742.123370][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 742.134280][T10732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 742.170042][T10732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 744.238916][T10942] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 744.595925][T10944] loop1: detected capacity change from 0 to 1024 [ 744.660541][T10732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.686934][ T3969] usb 5-1: USB disconnect, device number 20 [ 744.883845][T10719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 744.909294][T10719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 744.931294][T10719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.698352][T10732] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.716301][T10719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.728639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.748292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.897957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.939717][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.980276][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.987502][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.082927][T10955] loop0: detected capacity change from 0 to 164 [ 746.127239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 746.205879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.224532][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.231729][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.210394][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.217233][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.396121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 747.438204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 747.577815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 747.585959][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 747.593356][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 747.597516][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 747.598440][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 747.601371][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 747.604887][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 747.605649][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 747.610627][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 747.611441][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 747.633289][T10732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 747.820589][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.159670][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 748.206188][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.227904][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.238945][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.296830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.306134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.363266][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.370505][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.431500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.472151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.519172][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.526396][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.745090][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1298'. [ 749.549328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 749.570070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 749.598568][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 749.610471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 749.623535][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 749.634436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 749.655701][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 749.675103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 749.712544][T10732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.732757][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 749.746889][ T41] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 749.748403][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 749.774189][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 749.784087][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 749.802032][ T9] device hsr_slave_0 left promiscuous mode [ 749.814154][ T9] device hsr_slave_1 left promiscuous mode [ 749.820974][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.829903][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.839012][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.846512][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.854480][ T9] device bridge_slave_1 left promiscuous mode [ 749.861117][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.924366][T10980] loop4: detected capacity change from 0 to 64 [ 750.137175][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.160234][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 750.193984][ T41] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 750.214567][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.284452][ T41] usb 2-1: config 0 descriptor?? [ 750.390948][ T9] device bridge_slave_0 left promiscuous mode [ 750.398719][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.435396][ T9] device hsr_slave_0 left promiscuous mode [ 750.442312][ T9] device hsr_slave_1 left promiscuous mode [ 750.455710][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.463466][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.472094][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.480396][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.488443][ T9] device bridge_slave_1 left promiscuous mode [ 750.494682][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.507389][ T9] device bridge_slave_0 left promiscuous mode [ 750.513707][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.631370][ T9] device dummy0 left promiscuous mode [ 750.649372][ T9] device veth1_macvtap left promiscuous mode [ 750.656952][ T9] device veth0_macvtap left promiscuous mode [ 750.663095][ T9] device veth1_vlan left promiscuous mode [ 750.669234][ T9] device veth0_vlan left promiscuous mode [ 750.677384][ T9] device veth1_macvtap left promiscuous mode [ 750.683541][ T9] device veth0_macvtap left promiscuous mode [ 750.690016][ T9] device veth1_vlan left promiscuous mode [ 750.695985][ T9] device veth0_vlan left promiscuous mode [ 751.053139][ T41] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 751.101626][ T41] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 751.141720][ T41] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 751.199147][ T41] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 751.361756][ T41] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 751.390205][ T41] usb 2-1: USB disconnect, device number 16 [ 751.516124][T10988] loop4: detected capacity change from 0 to 2048 [ 751.562249][T10988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.868595][T10994] loop0: detected capacity change from 0 to 128 [ 753.034557][ T9] team0 (unregistering): Port device vlan2 removed [ 753.223006][T10990] loop1: detected capacity change from 0 to 40427 [ 753.242510][T10990] F2FS-fs (loop1): invalid crc value [ 753.427695][T10990] F2FS-fs (loop1): Found nat_bits in checkpoint [ 754.210124][T10990] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 755.112844][T10530] syz-executor: attempt to access beyond end of device [ 755.112844][T10530] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 757.119801][ T9] team0 (unregistering): Port device team_slave_1 removed [ 757.199695][ T9] team0 (unregistering): Port device team_slave_0 removed [ 757.225349][T11019] loop4: detected capacity change from 0 to 40427 [ 757.258146][T11019] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 757.277740][T11019] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 757.311336][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.329099][T11019] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 757.416621][T11019] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 757.427404][T11019] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 757.469229][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.852351][T11029] syz.4.1310: attempt to access beyond end of device [ 757.852351][T11029] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 757.871936][T11029] syz.4.1310: attempt to access beyond end of device [ 757.871936][T11029] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 758.377420][T10157] syz-executor: attempt to access beyond end of device [ 758.377420][T10157] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 759.361888][ T9] bond0 (unregistering): Released all slaves [ 759.528311][ T3661] Bluetooth: hci1: command 0x0406 tx timeout [ 760.015011][ T9] team0 (unregistering): Port device team_slave_1 removed [ 760.078519][ T9] team0 (unregistering): Port device team_slave_0 removed [ 760.135637][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.199174][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.890386][ T9] bond0 (unregistering): Released all slaves [ 761.007922][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 761.016388][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 761.051905][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 761.108143][T11014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 761.117820][T11014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 761.125657][T11014] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 761.133359][T11014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.140923][T11014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 761.146976][T11014] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 761.154320][T11014] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 761.160364][T11014] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 761.166352][T11014] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 761.175127][T11014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.181136][T11014] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 761.187200][T11014] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 761.194401][T11014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.200465][T11014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 761.206610][T11014] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 761.324948][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 761.540177][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.287289][T11037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.339159][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 762.361264][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 762.497446][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.513960][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.526483][T10732] device veth0_vlan entered promiscuous mode [ 762.534612][T11040] loop0: detected capacity change from 0 to 512 [ 763.417234][T11040] /dev/loop0: Can't open blockdev [ 763.458107][T10732] device veth1_vlan entered promiscuous mode [ 763.652988][ T3658] Bluetooth: hci1: command 0x0406 tx timeout [ 763.659450][ T3661] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.659493][ T3655] Bluetooth: hci0: command 0x0c1a tx timeout [ 763.672237][ T3655] Bluetooth: hci5: command 0x0c1a tx timeout [ 763.676621][ T3658] Bluetooth: hci2: command 0x0c1a tx timeout [ 764.478685][ T8479] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 764.516780][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 764.558911][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 764.587144][T10732] device veth0_macvtap entered promiscuous mode [ 764.646054][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 764.659436][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 764.683451][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 764.900267][T11060] loop4: detected capacity change from 0 to 32768 [ 764.927207][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.938131][T10732] device veth1_macvtap entered promiscuous mode [ 765.070633][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.124659][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.135211][T11060] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 765.144503][T11060] XFS (loop4): Mounting V5 Filesystem [ 765.154012][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.156253][T11070] loop0: detected capacity change from 0 to 1024 [ 765.164815][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.164835][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.191867][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.220320][T10732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.236700][T11060] XFS (loop4): totally zeroed log [ 765.252611][T11060] XFS (loop4): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 765.268474][T11060] XFS (loop4): log mount/recovery failed: error -22 [ 765.276022][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 765.351938][T11060] XFS (loop4): log mount failed [ 765.375371][T11070] loop0: detected capacity change from 0 to 128 [ 765.382850][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 765.411200][T11070] /dev/loop0: Can't open blockdev [ 765.465407][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 765.475315][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.488061][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 765.632410][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.643612][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.654935][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.668207][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.679669][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.687035][T11053] Bluetooth: hci5: command 0x0c1a tx timeout [ 765.690972][T10732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.695530][T11053] Bluetooth: hci1: command 0x0406 tx timeout [ 765.706682][ T3660] Bluetooth: hci0: command 0x0c1a tx timeout [ 765.712449][ T3658] Bluetooth: hci2: command 0x0c1a tx timeout [ 765.718130][ T3660] Bluetooth: hci3: command 0x0c1a tx timeout [ 766.735313][T10732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.828316][T10732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.868952][T10719] device veth0_vlan entered promiscuous mode [ 766.891294][T10719] device veth1_vlan entered promiscuous mode [ 766.933839][T10719] device veth0_macvtap entered promiscuous mode [ 766.994736][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 767.014570][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 767.065597][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 767.074722][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 767.083781][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 767.092914][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 767.114020][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 767.134462][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 767.144398][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 767.279828][T10732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.289924][T10732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.299282][T10732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.309248][T10732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.322596][T10719] device veth1_macvtap entered promiscuous mode [ 768.410058][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.892286][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.902418][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.914405][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.924410][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.976132][T11096] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 771.145094][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.156627][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.288911][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.325733][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.454249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 772.589606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 772.641839][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.683004][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.716637][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.881707][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.902431][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.923307][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.942592][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.962599][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.995886][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.007009][T11110] loop1: detected capacity change from 0 to 8 [ 773.723180][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 773.732158][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 773.772624][T10719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.797827][T10719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.807838][T10719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.818593][T10719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.672372][T11114] tipc: Started in network mode [ 774.679543][T11114] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 774.687594][T11114] tipc: Enabled bearer , priority 10 [ 774.721825][T11114] tipc: Resetting bearer [ 775.022610][T11104] loop4: detected capacity change from 0 to 40427 [ 775.208153][T11104] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 775.215170][T11104] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 775.347255][T11104] F2FS-fs (loop4): invalid crc value [ 775.365856][T11114] tipc: Disabling bearer [ 775.410026][T11104] F2FS-fs (loop4): Found nat_bits in checkpoint [ 775.554809][T11104] F2FS-fs (loop4): Start checkpoint disabled! [ 775.721068][ T3712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.798181][ T3712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.920434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 775.931856][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.941688][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.046473][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 776.200443][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 776.216456][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 776.228464][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 776.262387][T11053] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 776.270293][T11053] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 776.280569][T11053] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 776.728215][ T4206] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 777.118159][ T4206] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 777.211754][ T4206] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 777.497721][ T4206] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 777.566602][ T4206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.646423][T11127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 777.662625][T11121] loop1: detected capacity change from 0 to 40427 [ 777.706655][T11121] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 777.723448][T11121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 777.742133][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.392465][ T3658] Bluetooth: hci4: command tx timeout [ 778.584649][T11121] F2FS-fs (loop1): Found nat_bits in checkpoint [ 778.655146][T11148] loop4: detected capacity change from 0 to 512 [ 778.673770][ T4206] usb 3-1: USB disconnect, device number 19 [ 779.031298][T11149] input: syz0 as /devices/virtual/input/input12 [ 779.045004][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.599696][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.406716][ T3658] Bluetooth: hci4: command tx timeout [ 781.064113][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.754449][ T3658] Bluetooth: hci4: command tx timeout [ 783.862294][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'. [ 783.906095][T11124] chnl_net:caif_netlink_parms(): no params data found [ 784.226822][T11191] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 784.943451][ T3658] Bluetooth: hci4: command tx timeout [ 785.302953][T11198] loop1: detected capacity change from 0 to 512 [ 785.320994][T11198] EXT4-fs (loop1): Test dummy encryption mode enabled [ 786.088757][T11198] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1341: inline data xattr refers to an external xattr inode [ 786.194405][T11198] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.1341: couldn't read orphan inode 12 (err -117) [ 786.210108][T11198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 786.368060][T11208] loop2: detected capacity change from 0 to 512 [ 787.520666][T11208] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 787.530880][T11208] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 787.599065][T11216] loop0: detected capacity change from 0 to 1024 [ 787.606354][T11216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 787.623000][T11216] /dev/loop0: Can't open blockdev [ 787.700475][T10732] EXT4-fs (loop2): unmounting filesystem. [ 787.732600][T11216] loop0: detected capacity change from 0 to 512 [ 787.759704][T10530] EXT4-fs (loop1): unmounting filesystem. [ 787.804087][T11216] /dev/loop0: Can't open blockdev [ 787.904463][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.978772][T11124] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.009180][T11124] device bridge_slave_0 entered promiscuous mode [ 788.884286][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.891723][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.905666][T11124] device bridge_slave_1 entered promiscuous mode [ 789.103529][T11124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.203877][T11124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.306768][ T5792] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 789.410081][T11124] team0: Port device team_slave_0 added [ 789.492576][T11124] team0: Port device team_slave_1 added [ 789.719042][T11124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.750834][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.777866][ T5792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.777898][ T5792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.876999][ T5792] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 789.896495][ T5792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.903792][T11124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.916578][ T5792] usb 2-1: SerialNumber: syz [ 790.042337][T11220] loop4: detected capacity change from 0 to 40427 [ 790.065090][T11220] F2FS-fs (loop4): invalid crc value [ 790.109334][T11124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.117884][T11124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.163151][T11124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.175124][T11220] F2FS-fs (loop4): Found nat_bits in checkpoint [ 790.266388][ T5792] usb 2-1: 0:2 : does not exist [ 790.282713][ T5792] usb 2-1: unit 255 not found! [ 790.323562][ T49] device hsr_slave_0 left promiscuous mode [ 790.337153][ T49] device hsr_slave_1 left promiscuous mode [ 790.344572][T11220] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 790.352747][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.365914][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.370083][T11220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 790.398468][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.464962][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.487078][ T49] device bridge_slave_1 left promiscuous mode [ 790.507997][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.519492][ T49] device bridge_slave_0 left promiscuous mode [ 790.531453][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.553925][ T5792] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 790.595250][T10157] syz-executor: attempt to access beyond end of device [ 790.595250][T10157] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 790.627948][ T49] device veth1_macvtap left promiscuous mode [ 790.638693][ T49] device veth0_macvtap left promiscuous mode [ 790.648867][ T49] device veth1_vlan left promiscuous mode [ 790.655222][ T49] device veth0_vlan left promiscuous mode [ 790.751026][ T5792] usb 2-1: USB disconnect, device number 17 [ 790.851396][T11248] loop2: detected capacity change from 0 to 512 [ 790.927178][T11248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 790.963813][T11248] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 791.058432][T11248] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 791.248031][T11253] binder: 11247:11253 ioctl 4018620d 0 returned -22 [ 791.338486][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 791.348296][T11253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 792.842945][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.901075][T11264] loop4: detected capacity change from 0 to 64 [ 793.989288][T11260] loop0: detected capacity change from 0 to 32768 [ 794.047950][T11152] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 794.081684][T11270] loop4: detected capacity change from 0 to 128 [ 794.143665][T11270] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 794.224686][T11270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 794.530755][T11259] loop0: detected capacity change from 0 to 128 [ 794.538012][T11259] EXT4-fs: Ignoring removed mblk_io_submit option [ 794.544706][T11259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 794.551659][T11259] /dev/loop0: Can't open blockdev [ 795.117382][ T49] team0 (unregistering): Port device team_slave_1 removed [ 795.128113][T11152] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.211063][ T49] team0 (unregistering): Port device team_slave_0 removed [ 795.275253][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.343166][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.895582][T11275] loop0: detected capacity change from 0 to 512 [ 795.907581][T11275] /dev/loop0: Can't open blockdev [ 795.973474][T11152] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 796.273731][ T49] bond0 (unregistering): Released all slaves [ 796.890328][T11124] device hsr_slave_0 entered promiscuous mode [ 796.907872][T11124] device hsr_slave_1 entered promiscuous mode [ 796.934132][T11124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.958995][T11124] Cannot create hsr debugfs directory [ 797.833038][T11244] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1357'. [ 798.379783][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 799.190674][T11304] loop1: detected capacity change from 0 to 1024 [ 799.260513][T11304] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 800.823655][T11308] loop2: detected capacity change from 0 to 8192 [ 800.854702][T11304] EXT4-fs (loop1): invalid journal inode [ 801.027317][T11304] EXT4-fs (loop1): can't get journal size [ 801.228073][T11304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 802.920918][T10530] EXT4-fs (loop1): unmounting filesystem. [ 803.366254][T11333] loop2: detected capacity change from 0 to 512 [ 803.489673][T11334] loop1: detected capacity change from 0 to 64 [ 803.677985][T11333] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 805.803601][T11124] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 805.829401][T11124] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 805.867013][T11124] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 805.903720][T11124] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 807.007562][T11359] loop4: detected capacity change from 0 to 128 [ 808.108581][T11361] loop2: detected capacity change from 0 to 4096 [ 808.196063][T11361] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 808.278798][T11361] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 808.291078][T11124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.328234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 808.344881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 808.405299][T11124] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.472947][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 808.636808][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 808.648806][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.655179][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.373164][T10732] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 809.409618][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.416811][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.461598][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 809.498110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 809.531382][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.570203][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.577556][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.599648][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 809.617768][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 809.656721][ T3970] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 809.685003][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 809.730410][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 809.779603][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 809.809229][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 809.844678][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 809.900258][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 809.915617][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 809.926715][ T3970] usb 5-1: Using ep0 maxpacket: 16 [ 809.941493][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 809.973105][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 809.998310][T11124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.066783][ T3970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.110696][ T3970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.145523][ T3970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 810.193111][ T3970] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 810.222408][ T3970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.223792][T11369] loop1: detected capacity change from 0 to 32768 [ 810.268100][ T3970] usb 5-1: config 0 descriptor?? [ 810.746936][ T3658] Bluetooth: hci2: command 0x0c1a tx timeout [ 810.758989][ T3970] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 810.797746][ T3970] microsoft 0003:045E:07DA.0009: item 0 4 0 8 parsing failed [ 810.864310][ T3970] microsoft 0003:045E:07DA.0009: parse failed [ 811.828765][ T3970] microsoft: probe of 0003:045E:07DA.0009 failed with error -22 [ 812.579846][ T3970] usb 5-1: USB disconnect, device number 21 [ 813.185348][T11124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.289589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.318121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 813.373027][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 813.415984][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 813.540826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 813.589136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 813.616667][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.237792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 814.280935][T11422] loop4: detected capacity change from 0 to 512 [ 814.289035][T11124] device veth0_vlan entered promiscuous mode [ 814.307570][T11422] ext4: Unknown parameter 'noacl' [ 814.393271][T11124] device veth1_vlan entered promiscuous mode [ 815.510698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 816.080083][T11124] device veth0_macvtap entered promiscuous mode [ 816.090191][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 816.102680][T11434] loop4: detected capacity change from 0 to 2048 [ 816.159353][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 816.191339][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 816.270071][ T3658] Bluetooth: hci5: command 0x0c1a tx timeout [ 816.290251][T11124] device veth1_macvtap entered promiscuous mode [ 816.307707][T11434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 816.338764][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.485166][ T41] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 816.522454][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.546677][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.919670][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 817.036859][ T41] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 817.062475][ T41] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 817.071842][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.093717][ T41] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 817.117445][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.151337][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.177768][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.211524][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.268655][T11124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.269550][T10157] EXT4-fs (loop4): unmounting filesystem. [ 817.283462][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 817.292720][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 817.303171][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 817.320468][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.336867][ T41] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.356049][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.374768][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.376690][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.385880][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.412219][ T41] usb 3-1: Product: syz [ 817.416815][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.425244][ T41] usb 3-1: Manufacturer: syz [ 817.436683][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.439995][ T41] usb 3-1: SerialNumber: syz [ 817.456829][T11124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 817.475189][T11124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.516734][T11124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.523561][ T41] cdc_ncm 3-1:1.0: skipping garbage [ 817.527682][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 817.537840][ T41] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 817.568970][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 817.577885][ T41] cdc_ncm 3-1:1.0: bind() failure [ 817.602868][T11124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.650360][T11124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.666610][T11124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.685570][T11124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.743237][T11453] loop4: detected capacity change from 0 to 4096 [ 817.764903][T11453] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 817.870288][T11453] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 817.945610][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.007900][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.051346][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.090362][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.126705][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 818.163924][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 819.193260][T10157] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 821.486662][ T41] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 823.156619][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 823.406685][ T41] usb 2-1: device descriptor read/all, error -71 [ 827.954463][T11520] loop1: detected capacity change from 0 to 512 [ 828.067677][T11520] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 828.371887][T11534] loop2: detected capacity change from 0 to 32768 [ 828.381192][ T155] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 828.387035][T11520] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038 (0x7fffffff) [ 828.418734][T11530] loop0: detected capacity change from 0 to 16 [ 828.438155][T11530] /dev/loop0: Can't open blockdev [ 828.506370][T11153] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 828.522934][T11534] XFS (loop2): Mounting V5 Filesystem [ 828.561138][T11529] loop3: detected capacity change from 0 to 4096 [ 828.571345][T11529] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 828.666611][ T155] usb 5-1: Using ep0 maxpacket: 16 [ 828.718595][T11536] loop0: detected capacity change from 0 to 128 [ 828.739852][T11529] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 828.759438][T11534] XFS (loop2): Ending clean mount [ 828.774740][T11534] XFS (loop2): Quotacheck needed: Please wait. [ 828.787308][ T155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.851624][ T155] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.940100][ T155] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 829.149045][ T155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.183908][T11152] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 829.881126][T11124] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 829.922025][ T155] usb 5-1: config 0 descriptor?? [ 829.982618][T11534] XFS (loop2): Quotacheck: Done. [ 830.043770][T10530] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /30/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 830.934907][T10732] XFS (loop2): Unmounting Filesystem [ 831.029767][ T155] microsoft 0003:045E:07DA.000A: invalid report_size 413955073 [ 831.055073][ T155] microsoft 0003:045E:07DA.000A: item 0 4 1 7 parsing failed [ 831.064397][ T155] microsoft 0003:045E:07DA.000A: parse failed [ 831.071258][ T155] microsoft: probe of 0003:045E:07DA.000A failed with error -22 [ 831.106606][ T3971] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 831.200147][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'. [ 831.236351][T11565] device dummy0 entered promiscuous mode [ 831.266882][T11565] device macvtap1 entered promiscuous mode [ 831.308712][ T41] usb 5-1: USB disconnect, device number 22 [ 831.472925][ T3971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.494751][ T3971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.520689][ T3971] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 831.547740][ T3971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.574825][ T3971] usb 4-1: config 0 descriptor?? [ 832.072576][ T3971] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 832.186457][ T3971] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 832.204592][ T3971] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 832.956810][ T3971] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 832.964532][ T3971] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 833.108447][ T3971] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 834.407829][ T41] usb 4-1: USB disconnect, device number 17 [ 834.693556][T11608] loop0: detected capacity change from 0 to 128 [ 835.497725][T11152] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 836.991700][T11625] loop2: detected capacity change from 0 to 164 [ 838.146823][ T5293] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 838.244691][T11660] loop4: detected capacity change from 0 to 16 [ 838.288918][T11660] erofs: (device loop4): mounted with root inode @ nid 36. [ 838.577846][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.577890][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.577930][ T5293] usb 4-1: New USB device found, idVendor=046d, idProduct=c141, bcdDevice= 0.00 [ 838.577959][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.581352][ T5293] usb 4-1: config 0 descriptor?? [ 838.842476][T11618] loop3: detected capacity change from 0 to 8 [ 838.876335][ T5293] usb 4-1: USB disconnect, device number 18 [ 839.171625][ T3658] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 839.221241][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 839.243402][T11669] device dummy0 entered promiscuous mode [ 839.243557][T11669] device macvtap1 entered promiscuous mode [ 841.413860][T11678] hub 9-0:1.0: USB hub found [ 841.426076][T11678] hub 9-0:1.0: 8 ports detected [ 841.467880][ T3658] Bluetooth: hci3: command 0x0c1a tx timeout [ 843.346311][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 843.417437][ T3658] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 843.426868][ T3658] Bluetooth: hci2: Injecting HCI hardware error event [ 843.446152][T11053] Bluetooth: hci2: hardware error 0x00 [ 843.468121][T11685] loop4: detected capacity change from 0 to 8192 [ 843.500175][T11699] loop0: detected capacity change from 0 to 1024 [ 844.385143][ T26] audit: type=1326 audit(1727232822.290:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11700 comm="syz.3.1425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f558197def9 code=0x0 [ 844.517772][ T3655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.530379][ T3655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.539478][ T3655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.550024][ T3655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.558302][ T3655] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 844.567945][ T3655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.331037][T10530] EXT4-fs (loop1): unmounting filesystem. [ 845.526886][T11053] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 845.603414][ T4201] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.660172][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1428'. [ 845.697794][T11726] loop0: detected capacity change from 0 to 2048 [ 845.785829][T11721] device dummy0 entered promiscuous mode [ 845.827008][T11721] device macvtap1 entered promiscuous mode [ 846.695716][T11053] Bluetooth: hci0: command tx timeout [ 847.297033][ T41] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 847.987210][ T4201] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.126665][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 848.783079][T11053] Bluetooth: hci0: command tx timeout [ 848.872434][T11710] chnl_net:caif_netlink_parms(): no params data found [ 849.181065][ T4201] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.236806][ T41] usb 4-1: unable to read config index 0 descriptor/all [ 849.256602][ T41] usb 4-1: can't read configurations, error -71 [ 850.508621][ T4201] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.608256][T11710] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.646828][T11710] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.667413][T11710] device bridge_slave_0 entered promiscuous mode [ 850.819000][T11710] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.979844][T11710] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.306748][T11777] delete_channel: no stack [ 853.710709][T11053] Bluetooth: hci0: command tx timeout [ 853.751284][T11710] device bridge_slave_1 entered promiscuous mode [ 853.934834][T11782] loop3: detected capacity change from 0 to 256 [ 854.049842][T11782] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 854.074787][T11710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.102699][T11785] loop4: detected capacity change from 0 to 512 [ 854.167672][T11782] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 854.187466][T11710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.325193][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1442: corrupted inode contents [ 854.339132][T11794] loop2: detected capacity change from 0 to 1024 [ 854.351664][T11794] hfsplus: request for non-existent node 3 in B*Tree [ 854.358850][T11794] hfsplus: request for non-existent node 3 in B*Tree [ 854.426000][T11785] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.1442: mark_inode_dirty error [ 854.905460][T11710] team0: Port device team_slave_0 added [ 854.955020][T11710] team0: Port device team_slave_1 added [ 854.977987][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1442: corrupted inode contents [ 855.019968][T11785] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1442: mark_inode_dirty error [ 855.165752][T11785] Quota error (device loop4): write_blk: dquota write failed [ 855.189221][T11785] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 855.219321][T11785] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1442: Failed to acquire dquot type 0 [ 855.310638][T11710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.324861][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1442: corrupted inode contents [ 855.345337][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.384310][T11710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.384342][T11785] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.1442: mark_inode_dirty error [ 855.417907][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1442: corrupted inode contents [ 855.450545][T11785] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1442: mark_inode_dirty error [ 855.515934][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1442: corrupted inode contents [ 855.562049][T11785] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 855.607260][T11785] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1442: corrupted inode contents [ 855.629262][T11785] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.1442: mark_inode_dirty error [ 855.641571][T11710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.922594][ T3658] Bluetooth: hci0: command tx timeout [ 855.936603][T11710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.969802][T11785] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 856.014097][T11785] EXT4-fs (loop4): 1 truncate cleaned up [ 856.020228][T11785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 856.035028][T11785] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff) [ 856.050304][T11710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.240361][T11803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1445'. [ 856.331827][T11818] input: syz1 as /devices/virtual/input/input13 [ 856.830016][T10157] EXT4-fs (loop4): unmounting filesystem. [ 857.191339][T11826] loop4: detected capacity change from 0 to 16 [ 857.235118][T11826] erofs: (device loop4): mounted with root inode @ nid 36. [ 857.737607][T11826] syz.4.1448: attempt to access beyond end of device [ 857.737607][T11826] loop4: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 858.123117][T11826] syz.4.1448: attempt to access beyond end of device [ 858.123117][T11826] loop4: rw=524288, sector=34359738360, nr_sectors = 984 limit=16 [ 858.175206][T11710] device hsr_slave_0 entered promiscuous mode [ 858.237007][T11710] device hsr_slave_1 entered promiscuous mode [ 858.287420][T11710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 858.295130][T11710] Cannot create hsr debugfs directory [ 858.317888][T11826] erofs: (device loop4): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 858.374937][T11826] syz.4.1448: attempt to access beyond end of device [ 858.374937][T11826] loop4: rw=524288, sector=34359739352, nr_sectors = 984 limit=16 [ 858.536946][T11841] loop2: detected capacity change from 0 to 512 [ 858.546763][ T3871] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 858.555826][T11841] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 858.580920][T11841] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 858.591840][T11841] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 858.692009][T11841] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 858.702402][T11841] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 858.711611][T11841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 858.728563][T11841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1453: bg 0: block 34: padding at end of block bitmap is not set [ 858.761986][T11841] Quota error (device loop2): write_blk: dquota write failed [ 858.776666][T11841] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 858.796895][T11841] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1453: Failed to acquire dquot type 1 [ 858.828565][T11841] EXT4-fs (loop2): 1 truncate cleaned up [ 858.845788][T11841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 858.950214][ T3871] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 858.972062][ T3871] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 858.994248][ T3871] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 859.012286][ T3871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.056900][T11831] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 859.092306][T10732] EXT4-fs (loop2): unmounting filesystem. [ 859.405786][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 859.987056][ T3871] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 860.087013][ T3871] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input14 [ 860.195251][ T3871] usb 5-1: USB disconnect, device number 23 [ 860.196157][T11843] loop3: detected capacity change from 0 to 40427 [ 860.201313][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 860.240748][T11843] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 860.286944][T11843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 860.520109][T11843] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 860.857111][ T3871] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 860.898101][ T3871] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 861.062083][ T3871] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 861.328258][T11843] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 861.335468][T11843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 862.309829][T11881] syz.3.1454: attempt to access beyond end of device [ 862.309829][T11881] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 862.324378][T11881] syz.3.1454: attempt to access beyond end of device [ 862.324378][T11881] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 862.932857][T11124] syz-executor: attempt to access beyond end of device [ 862.932857][T11124] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 862.966652][ T4201] device hsr_slave_0 left promiscuous mode [ 863.026707][ T4201] device hsr_slave_1 left promiscuous mode [ 863.049366][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.053227][T11885] loop2: detected capacity change from 0 to 256 [ 863.071251][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.111181][ T4201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.126042][ T4201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.154431][ T4201] device bridge_slave_1 left promiscuous mode [ 863.306766][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.341590][ T4201] device bridge_slave_0 left promiscuous mode [ 863.373035][T11872] loop4: detected capacity change from 0 to 32768 [ 863.665044][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.150320][T11889] loop2: detected capacity change from 0 to 512 [ 864.236337][ T4201] device veth1_macvtap left promiscuous mode [ 864.261947][ T4201] device veth0_macvtap left promiscuous mode [ 864.314399][ T4201] device veth1_vlan left promiscuous mode [ 864.323704][ T4201] device veth0_vlan left promiscuous mode [ 864.331989][T11889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 864.354394][T11889] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 864.399624][T11889] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1460: Directory hole found for htree leaf block 0 [ 864.815325][T11899] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1460: Directory hole found for htree leaf block 0 [ 865.207154][T11900] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1460: Directory hole found for htree leaf block 0 [ 865.427834][T11898] loop3: detected capacity change from 0 to 512 [ 865.448955][T11898] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 865.526637][T11152] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 866.416716][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.449922][ C1] vkms_vblank_simulate: vblank timer overrun [ 866.662413][ T4201] team0 (unregistering): Port device team_slave_1 removed [ 866.780449][ T4201] team0 (unregistering): Port device team_slave_0 removed [ 866.863126][ T4201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.814682][T10732] EXT4-fs (loop2): unmounting filesystem. [ 867.858767][ T4201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.130990][ T4210] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 869.076816][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 869.433121][ T4210] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 869.442630][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.451161][ T4210] usb 4-1: Product: syz [ 869.455446][ T4210] usb 4-1: Manufacturer: syz [ 869.460899][ T4210] usb 4-1: SerialNumber: syz [ 869.476147][ T4210] usb 4-1: config 0 descriptor?? [ 869.508787][ T4201] bond0 (unregistering): Released all slaves [ 869.632505][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 870.100628][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.116455][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.229231][T11926] loop4: detected capacity change from 0 to 1024 [ 871.252941][T11926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 871.292297][T11710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 871.296717][ T4210] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 871.389733][T11710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 871.438764][T11926] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 871.494541][ T5296] usb 4-1: USB disconnect, device number 21 [ 871.509726][T11710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 871.566465][T11933] loop0: detected capacity change from 0 to 256 [ 871.646929][T11933] /dev/loop0: Can't open blockdev [ 871.657850][T11710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.681078][T11936] loop3: detected capacity change from 0 to 1024 [ 871.688701][T11936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 871.699661][T11936] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 871.728347][T11152] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 871.728378][T11936] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 871.892079][T11710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.964555][T11941] sp0: Synchronizing with TNC [ 872.034747][T11944] sp0: Found TNC [ 872.088610][T11939] [U] è` [ 872.184391][T11936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 872.449526][T11710] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.702953][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 872.757215][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 872.771519][T10157] EXT4-fs (loop4): unmounting filesystem. [ 872.803210][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 872.880770][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 872.923888][T10926] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.931063][T10926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.954675][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 873.122566][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 873.145982][T10926] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.153199][T10926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.384586][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 873.911097][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 873.944509][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 874.003232][T11958] loop4: detected capacity change from 0 to 1024 [ 874.163912][T11963] loop2: detected capacity change from 0 to 512 [ 874.175844][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 874.195863][T11958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 874.241654][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 874.274028][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 874.279904][T11958] 9pnet_fd: Insufficient options for proto=fd [ 874.328309][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 874.363323][T11963] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 874.371392][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 874.387566][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 874.402596][T11963] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 874.429602][T11710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.464678][T11963] System zones: 0-2, 18-18, 34-35 [ 874.480348][T11710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 874.511816][T11963] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 874.535605][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 874.558388][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 874.608284][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 874.917286][T11963] EXT4-fs (loop2): shut down requested (0) [ 875.044395][T11973] loop4: detected capacity change from 0 to 2048 [ 875.100176][ T3697] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.104402][T11973] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 875.126654][T10732] EXT4-fs (loop2): unmounting filesystem. [ 875.144872][T11973] UDF-fs: Scanning with blocksize 512 failed [ 875.231221][T11973] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x7d != 0x7e [ 875.268042][T11973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 875.369766][ T26] audit: type=1326 audit(1727232853.280:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11976 comm="syz.2.1480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3b037def9 code=0x0 [ 875.957089][ T3697] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.183271][ T3697] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.261631][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 876.423908][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 876.809667][ T3697] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.241467][T11053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.270641][T11053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.279654][T11053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.290465][T11053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.298238][T11053] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 877.305660][T11053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 877.435326][T11710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.275362][T11999] loop2: detected capacity change from 0 to 1024 [ 878.385378][T11999] EXT4-fs: Ignoring removed nobh option [ 878.440862][T11999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 878.471764][T11710] device veth0_vlan entered promiscuous mode [ 878.519841][T11710] device veth1_vlan entered promiscuous mode [ 878.545722][T11999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 878.642092][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 878.696454][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 878.718558][T11124] EXT4-fs (loop3): unmounting filesystem. [ 878.738570][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 878.764646][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 878.787320][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 878.809650][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 878.830934][T11053] Bluetooth: hci1: unexpected event for opcode 0x080e [ 878.922213][T12012] device nlmon0 entered promiscuous mode [ 878.947717][T12012] device vlan2 entered promiscuous mode [ 879.435113][T11053] Bluetooth: hci2: command tx timeout [ 879.731139][T12012] device nlmon0 left promiscuous mode [ 879.739701][T10732] EXT4-fs (loop2): unmounting filesystem. [ 880.696897][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 881.248502][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 881.338053][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 881.414637][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 881.446789][ T3658] Bluetooth: hci2: command tx timeout [ 881.669601][T11710] device veth0_macvtap entered promiscuous mode [ 881.689151][T11710] device veth1_macvtap entered promiscuous mode [ 881.751444][T12039] loop2: detected capacity change from 0 to 2048 [ 881.769094][T12039] EXT4-fs: Ignoring removed i_version option [ 881.794634][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 881.834059][T12039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 881.863295][T12041] loop4: detected capacity change from 0 to 512 [ 881.895613][T12041] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 881.926702][T12007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 882.185857][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.199867][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.256623][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.283368][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.321312][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.342888][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.353007][T10732] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 883.392469][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.431414][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.454671][T10732] EXT4-fs error (device loop2): ext4_empty_dir:3175: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 883.489281][T11710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.527046][ T3658] Bluetooth: hci2: command tx timeout [ 883.596763][T10732] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 883.662283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 883.698969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 883.730368][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.767020][T10732] EXT4-fs error (device loop2): ext4_empty_dir:3175: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 883.775858][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.835116][T10732] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 883.859122][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.891336][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.908022][T10732] EXT4-fs error (device loop2): ext4_empty_dir:3175: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 883.916157][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.959264][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.970153][T10732] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 883.980688][T11710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.037198][T10732] EXT4-fs error (device loop2): ext4_empty_dir:3175: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 884.042468][T11710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.084659][T11710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.108325][T10732] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /51/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 884.114788][T11710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.145941][T12065] loop3: detected capacity change from 0 to 1024 [ 884.147566][T11710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.170978][T11710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.194547][T11710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.215974][T11989] chnl_net:caif_netlink_parms(): no params data found [ 884.231543][T12065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 884.247179][T12065] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 884.284963][ T3697] tipc: Left network mode [ 884.290587][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 884.318020][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 884.523665][T11989] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.553237][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.562511][T11989] device bridge_slave_0 entered promiscuous mode [ 885.400206][T11124] EXT4-fs (loop3): unmounting filesystem. [ 885.439512][T11456] EXT4-fs (loop2): unmounting filesystem. [ 885.502207][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.538578][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.570092][T11989] device bridge_slave_1 entered promiscuous mode [ 885.606769][ T3658] Bluetooth: hci2: command tx timeout [ 885.929755][T11989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.021250][ T3688] usb 3-1: USB disconnect, device number 20 [ 890.314715][T11989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.144663][T11989] team0: Port device team_slave_0 added [ 892.177128][T12087] loop3: detected capacity change from 0 to 1024 [ 892.194536][T12087] EXT4-fs: Ignoring removed nobh option [ 892.227561][T10932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.257613][T10932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.268966][T12087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 892.356749][T12087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 892.383393][T11989] team0: Port device team_slave_1 added [ 892.488235][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 893.068431][T11053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 893.080201][T11053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 893.089380][T11053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 893.107329][ T3655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 893.115114][ T3655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 893.126712][ T3655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 893.201420][T11989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.223793][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.292482][T11989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.315132][T11124] EXT4-fs (loop3): unmounting filesystem. [ 893.351457][ T3712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.398151][ T3712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.459111][T11989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.473458][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.561205][T11989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.648551][ T3712] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 893.929442][T12111] loop1: detected capacity change from 0 to 128 [ 893.987034][T12111] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 894.660000][T11989] device hsr_slave_0 entered promiscuous mode [ 894.692404][T11989] device hsr_slave_1 entered promiscuous mode [ 894.739493][T11989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.754445][T11989] Cannot create hsr debugfs directory [ 895.206736][ T3658] Bluetooth: hci3: command tx timeout [ 895.262509][T12099] chnl_net:caif_netlink_parms(): no params data found [ 895.454826][ T3697] device hsr_slave_0 left promiscuous mode [ 895.487916][ T3697] device hsr_slave_1 left promiscuous mode [ 895.524634][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.540391][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.582885][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.603666][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.624751][ T3697] device bridge_slave_1 left promiscuous mode [ 895.646695][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.718062][ T3697] device bridge_slave_0 left promiscuous mode [ 895.724499][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.738811][T12129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 895.864512][ T3697] device dummy0 left promiscuous mode [ 896.758211][ T3697] device veth1_macvtap left promiscuous mode [ 896.764378][ T3697] device veth0_macvtap left promiscuous mode [ 896.811655][ T3697] device veth1_vlan left promiscuous mode [ 896.817848][ T3697] device veth0_vlan left promiscuous mode [ 897.288096][ T3658] Bluetooth: hci3: command tx timeout [ 897.846247][T12141] loop1: detected capacity change from 0 to 1024 [ 899.366711][ T3655] Bluetooth: hci3: command tx timeout [ 899.626041][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 899.871564][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 900.015060][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.345596][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.564893][T12152] ipt_ECN: cannot use operation on non-tcp rule [ 901.446655][T11053] Bluetooth: hci3: command tx timeout [ 902.886907][T12163] xt_cgroup: path and classid specified [ 902.896631][T11053] Bluetooth: hci4: command 0x0406 tx timeout [ 903.598746][ T3697] bond0 (unregistering): Released all slaves [ 905.233398][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.252076][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.285811][T12099] device bridge_slave_0 entered promiscuous mode [ 905.367428][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.434134][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.474919][T12099] device bridge_slave_1 entered promiscuous mode [ 905.908896][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.950735][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.081478][T12099] team0: Port device team_slave_0 added [ 906.118056][T12099] team0: Port device team_slave_1 added [ 906.355026][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.386886][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.454177][T12196] loop3: detected capacity change from 0 to 512 [ 906.517700][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.530171][T12196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 906.547036][T12196] System zones: 0-2, 18-18, 34-34 [ 906.645441][T12196] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1514: bg 0: block 248: padding at end of block bitmap is not set [ 906.681952][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.691461][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.750519][T12196] Quota error (device loop3): write_blk: dquota write failed [ 906.783046][T12196] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 906.788343][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.866672][T12196] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.1514: Failed to acquire dquot type 1 [ 906.904627][T12196] EXT4-fs (loop3): 1 truncate cleaned up [ 906.918090][T12196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 906.957200][T12196] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 906.986793][T12099] device hsr_slave_0 entered promiscuous mode [ 907.041261][T12204] loop1: detected capacity change from 0 to 2048 [ 907.118118][T12204] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 907.135609][T12099] device hsr_slave_1 entered promiscuous mode [ 907.171685][T11989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 907.213384][T11989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 907.235223][T11989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 907.488815][T11989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 907.685368][ T3697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.798048][T11710] EXT4-fs (loop1): unmounting filesystem. [ 907.838957][T11124] EXT4-fs (loop3): unmounting filesystem. [ 908.042594][ T3697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.214838][T11989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.266303][ T3697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.296248][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 908.305707][T10926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.313038][ T4210] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 908.737941][ T4206] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 908.939525][ T3697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.965993][T11989] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.985362][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 909.008527][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 909.023559][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.030772][T10932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.057868][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 909.074727][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 909.083753][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 909.130961][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.138280][T10932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.202592][ T4210] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 909.217516][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 909.256767][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.293105][ T4206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.325328][ T4206] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.453305][ T4210] usb 2-1: config 0 descriptor?? [ 909.467549][ T4206] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.468991][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 909.488629][ T4206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.699684][ T4210] cp210x 2-1:0.0: cp210x converter detected [ 909.892393][ T4206] usb 4-1: config 0 descriptor?? [ 910.038519][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 910.087067][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 910.099326][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 910.109933][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 910.135505][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 910.149234][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 910.160059][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 910.169697][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 910.179175][T10932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 910.194312][T11989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 910.219241][T12211] [ 910.221622][T12211] ===================================================== [ 910.228660][T12211] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 910.237005][T12211] 6.1.111-syzkaller #0 Not tainted [ 910.242159][T12211] ----------------------------------------------------- [ 910.249101][T12211] syz.1.1524/12211 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 910.256852][T12211] ffff88806449add0 (&ppp->rlock){+...}-{2:2}, at: ppp_disconnect_channel+0x9a/0x2d0 [ 910.266295][T12211] [ 910.266295][T12211] and this task is already holding: [ 910.273679][T12211] ffff88806449ae10 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 910.283225][T12211] which would create a new lock dependency: [ 910.289153][T12211] (&ppp->wlock){+...}-{2:2} -> (&ppp->rlock){+...}-{2:2} [ 910.296320][T12211] [ 910.296320][T12211] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 910.306216][T12211] (&pch->upl){++.-}-{2:2} [ 910.306242][T12211] [ 910.306242][T12211] ... which became SOFTIRQ-READ-irq-safe at: [ 910.318796][T12211] lock_acquire+0x1f8/0x5a0 [ 910.323411][T12211] _raw_read_lock_bh+0x39/0x50 [ 910.328268][T12211] ppp_input+0x3ca/0xa00 [ 910.332767][T12211] ppp_async_process+0x7b/0x140 [ 910.337705][T12211] tasklet_action_common+0x3cb/0x4a0 [ 910.343166][T12211] handle_softirqs+0x2ee/0xa40 [ 910.348026][T12211] __irq_exit_rcu+0x157/0x240 [ 910.352792][T12211] irq_exit_rcu+0x5/0x20 [ 910.357156][T12211] sysvec_apic_timer_interrupt+0x91/0xb0 [ 910.362898][T12211] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 910.368985][T12211] __tasklet_schedule_common+0x1f9/0x260 [ 910.374889][T12211] ppp_asynctty_receive+0x1ea2/0x2000 [ 910.380376][T12211] tty_ldisc_receive_buf+0x121/0x160 [ 910.385760][T12211] tty_port_default_receive_buf+0x6a/0x90 [ 910.391572][T12211] flush_to_ldisc+0x2f4/0x840 [ 910.396345][T12211] process_one_work+0x8a9/0x11d0 [ 910.401376][T12211] worker_thread+0xa47/0x1200 [ 910.406142][T12211] kthread+0x28d/0x320 [ 910.410298][T12211] ret_from_fork+0x1f/0x30 [ 910.414805][T12211] [ 910.414805][T12211] to a SOFTIRQ-READ-irq-unsafe lock: [ 910.422261][T12211] (&pch->downl){+.+.}-{2:2} [ 910.422287][T12211] [ 910.422287][T12211] ... which became SOFTIRQ-READ-irq-unsafe at: [ 910.435295][T12211] ... [ 910.435304][T12211] lock_acquire+0x1f8/0x5a0 [ 910.442480][T12211] _raw_spin_lock+0x2a/0x40 [ 910.447073][T12211] ppp_input+0x185/0xa00 [ 910.451400][T12211] pppoe_rcv_core+0x112/0x300 [ 910.456168][T12211] __release_sock+0x198/0x4b0 [ 910.460944][T12211] release_sock+0x5d/0x1c0 [ 910.465448][T12211] pppoe_sendmsg+0xd1/0x740 [ 910.470058][T12211] ____sys_sendmsg+0x5a5/0x8f0 [ 910.474951][T12211] __sys_sendmmsg+0x3ab/0x730 [ 910.479730][T12211] __x64_sys_sendmmsg+0x9c/0xb0 [ 910.484708][T12211] do_syscall_64+0x3b/0xb0 [ 910.489313][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.495333][T12211] [ 910.495333][T12211] other info that might help us debug this: [ 910.495333][T12211] [ 910.505681][T12211] Chain exists of: [ 910.505681][T12211] &pch->upl --> &ppp->wlock --> &pch->downl [ 910.505681][T12211] [ 910.517693][T12211] Possible interrupt unsafe locking scenario: [ 910.517693][T12211] [ 910.526046][T12211] CPU0 CPU1 [ 910.531439][T12211] ---- ---- [ 910.536820][T12211] lock(&pch->downl); [ 910.541087][T12211] local_irq_disable(); [ 910.547854][T12211] lock(&pch->upl); [ 910.554289][T12211] lock(&ppp->wlock); [ 910.560889][T12211] [ 910.564599][T12211] lock(&pch->upl); [ 910.568788][T12211] [ 910.568788][T12211] *** DEADLOCK *** [ 910.568788][T12211] [ 910.577128][T12211] 2 locks held by syz.1.1524/12211: [ 910.582363][T12211] #0: ffffffff8dd6c148 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x10e/0x1c90 [ 910.591081][T12211] #1: ffff88806449ae10 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 910.600959][T12211] [ 910.600959][T12211] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 910.611812][T12211] -> (&pch->upl){++.-}-{2:2} { [ 910.616694][T12211] HARDIRQ-ON-W at: [ 910.620776][T12211] lock_acquire+0x1f8/0x5a0 [ 910.627184][T12211] _raw_write_lock_bh+0x31/0x40 [ 910.633884][T12211] ppp_disconnect_channel+0x2f/0x2d0 [ 910.641002][T12211] ppp_unregister_channel+0xb5/0x2f0 [ 910.648117][T12211] ppp_asynctty_close+0xed/0x180 [ 910.654882][T12211] tty_ldisc_kill+0xa6/0x1a0 [ 910.661333][T12211] tty_ldisc_release+0x19d/0x200 [ 910.668105][T12211] tty_release_struct+0x27/0xd0 [ 910.674825][T12211] tty_release+0xcfb/0x12a0 [ 910.681418][T12211] __fput+0x3f6/0x8d0 [ 910.687249][T12211] task_work_run+0x246/0x300 [ 910.693690][T12211] exit_to_user_mode_loop+0xde/0x100 [ 910.700808][T12211] exit_to_user_mode_prepare+0xb1/0x140 [ 910.708296][T12211] syscall_exit_to_user_mode+0x60/0x270 [ 910.715762][T12211] do_syscall_64+0x47/0xb0 [ 910.722143][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.729981][T12211] HARDIRQ-ON-R at: [ 910.734048][T12211] lock_acquire+0x1f8/0x5a0 [ 910.740389][T12211] _raw_read_lock_bh+0x39/0x50 [ 910.747069][T12211] ppp_channel_push+0x2c/0x220 [ 910.753719][T12211] ppp_write+0x294/0x3a0 [ 910.759883][T12211] vfs_write+0x2d9/0xbc0 [ 910.766057][T12211] ksys_write+0x19c/0x2c0 [ 910.772304][T12211] do_syscall_64+0x3b/0xb0 [ 910.778553][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.786277][T12211] IN-SOFTIRQ-R at: [ 910.790518][T12211] lock_acquire+0x1f8/0x5a0 [ 910.796872][T12211] _raw_read_lock_bh+0x39/0x50 [ 910.803525][T12211] ppp_input+0x3ca/0xa00 [ 910.809600][T12211] ppp_async_process+0x7b/0x140 [ 910.816368][T12211] tasklet_action_common+0x3cb/0x4a0 [ 910.823515][T12211] handle_softirqs+0x2ee/0xa40 [ 910.830131][T12211] __irq_exit_rcu+0x157/0x240 [ 910.836748][T12211] irq_exit_rcu+0x5/0x20 [ 910.842868][T12211] sysvec_apic_timer_interrupt+0x91/0xb0 [ 910.850512][T12211] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 910.858329][T12211] __tasklet_schedule_common+0x1f9/0x260 [ 910.865798][T12211] ppp_asynctty_receive+0x1ea2/0x2000 [ 910.873088][T12211] tty_ldisc_receive_buf+0x121/0x160 [ 910.880476][T12211] tty_port_default_receive_buf+0x6a/0x90 [ 910.888120][T12211] flush_to_ldisc+0x2f4/0x840 [ 910.894626][T12211] process_one_work+0x8a9/0x11d0 [ 910.901544][T12211] worker_thread+0xa47/0x1200 [ 910.908064][T12211] kthread+0x28d/0x320 [ 910.913986][T12211] ret_from_fork+0x1f/0x30 [ 910.920243][T12211] INITIAL USE at: [ 910.924229][T12211] lock_acquire+0x1f8/0x5a0 [ 910.930626][T12211] _raw_write_lock_bh+0x31/0x40 [ 910.937234][T12211] ppp_disconnect_channel+0x2f/0x2d0 [ 910.944280][T12211] ppp_unregister_channel+0xb5/0x2f0 [ 910.951321][T12211] ppp_asynctty_close+0xed/0x180 [ 910.958004][T12211] tty_ldisc_kill+0xa6/0x1a0 [ 910.964424][T12211] tty_ldisc_release+0x19d/0x200 [ 910.971103][T12211] tty_release_struct+0x27/0xd0 [ 910.977709][T12211] tty_release+0xcfb/0x12a0 [ 910.984058][T12211] __fput+0x3f6/0x8d0 [ 910.989880][T12211] task_work_run+0x246/0x300 [ 910.996320][T12211] exit_to_user_mode_loop+0xde/0x100 [ 911.003358][T12211] exit_to_user_mode_prepare+0xb1/0x140 [ 911.010684][T12211] syscall_exit_to_user_mode+0x60/0x270 [ 911.018084][T12211] do_syscall_64+0x47/0xb0 [ 911.024281][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.031937][T12211] INITIAL READ USE at: [ 911.036369][T12211] lock_acquire+0x1f8/0x5a0 [ 911.043074][T12211] _raw_read_lock_bh+0x39/0x50 [ 911.050132][T12211] ppp_channel_push+0x2c/0x220 [ 911.057109][T12211] ppp_write+0x294/0x3a0 [ 911.063545][T12211] vfs_write+0x2d9/0xbc0 [ 911.070087][T12211] ksys_write+0x19c/0x2c0 [ 911.076605][T12211] do_syscall_64+0x3b/0xb0 [ 911.083228][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.091312][T12211] } [ 911.093893][T12211] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 911.103274][T12211] -> (&ppp->wlock){+...}-{2:2} { [ 911.108253][T12211] HARDIRQ-ON-W at: [ 911.112240][T12211] lock_acquire+0x1f8/0x5a0 [ 911.118406][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.124821][T12211] ppp_get_stats64+0xbf/0x290 [ 911.131237][T12211] dev_get_stats+0xa7/0x490 [ 911.137407][T12211] rtnl_fill_stats+0x47/0x880 [ 911.143743][T12211] rtnl_fill_ifinfo+0x18aa/0x2090 [ 911.150425][T12211] rtmsg_ifinfo_build_skb+0xdc/0x180 [ 911.157451][T12211] rtmsg_ifinfo+0x71/0x120 [ 911.163521][T12211] register_netdevice+0x13dc/0x1720 [ 911.170376][T12211] ppp_dev_configure+0x850/0xab0 [ 911.176982][T12211] ppp_ioctl+0x702/0x1c90 [ 911.183086][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.189337][T12211] do_syscall_64+0x3b/0xb0 [ 911.195420][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.202975][T12211] INITIAL USE at: [ 911.206876][T12211] lock_acquire+0x1f8/0x5a0 [ 911.212993][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.219491][T12211] ppp_get_stats64+0xbf/0x290 [ 911.225842][T12211] dev_get_stats+0xa7/0x490 [ 911.232020][T12211] rtnl_fill_stats+0x47/0x880 [ 911.238275][T12211] rtnl_fill_ifinfo+0x18aa/0x2090 [ 911.244885][T12211] rtmsg_ifinfo_build_skb+0xdc/0x180 [ 911.251763][T12211] rtmsg_ifinfo+0x71/0x120 [ 911.257967][T12211] register_netdevice+0x13dc/0x1720 [ 911.264788][T12211] ppp_dev_configure+0x850/0xab0 [ 911.271396][T12211] ppp_ioctl+0x702/0x1c90 [ 911.277303][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.283482][T12211] do_syscall_64+0x3b/0xb0 [ 911.289481][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.297046][T12211] } [ 911.299563][T12211] ... key at: [] ppp_dev_configure.__key.65+0x0/0x20 [ 911.308446][T12211] ... acquired at: [ 911.312265][T12211] lock_acquire+0x1f8/0x5a0 [ 911.317059][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.322020][T12211] ppp_connect_channel+0x170/0x640 [ 911.327308][T12211] ppp_ioctl+0xbe5/0x1c90 [ 911.331812][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.336582][T12211] do_syscall_64+0x3b/0xb0 [ 911.341202][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.347281][T12211] [ 911.349600][T12211] [ 911.349600][T12211] the dependencies between the lock to be acquired [ 911.349609][T12211] and SOFTIRQ-READ-irq-unsafe lock: [ 911.363545][T12211] -> (&pch->downl){+.+.}-{2:2} { [ 911.368623][T12211] HARDIRQ-ON-W at: [ 911.372703][T12211] lock_acquire+0x1f8/0x5a0 [ 911.379049][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.385729][T12211] ppp_unregister_channel+0x78/0x2f0 [ 911.392862][T12211] ppp_asynctty_close+0xed/0x180 [ 911.399630][T12211] tty_ldisc_kill+0xa6/0x1a0 [ 911.406056][T12211] tty_ldisc_release+0x19d/0x200 [ 911.412832][T12211] tty_release_struct+0x27/0xd0 [ 911.419527][T12211] tty_release+0xcfb/0x12a0 [ 911.425861][T12211] __fput+0x3f6/0x8d0 [ 911.431690][T12211] task_work_run+0x246/0x300 [ 911.438218][T12211] exit_to_user_mode_loop+0xde/0x100 [ 911.445342][T12211] exit_to_user_mode_prepare+0xb1/0x140 [ 911.452817][T12211] syscall_exit_to_user_mode+0x60/0x270 [ 911.460297][T12211] do_syscall_64+0x47/0xb0 [ 911.466554][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.474412][T12211] SOFTIRQ-ON-W at: [ 911.478597][T12211] lock_acquire+0x1f8/0x5a0 [ 911.484967][T12211] _raw_spin_lock+0x2a/0x40 [ 911.491315][T12211] ppp_input+0x185/0xa00 [ 911.497408][T12211] pppoe_rcv_core+0x112/0x300 [ 911.503924][T12211] __release_sock+0x198/0x4b0 [ 911.510525][T12211] release_sock+0x5d/0x1c0 [ 911.516870][T12211] pppoe_sendmsg+0xd1/0x740 [ 911.523310][T12211] ____sys_sendmsg+0x5a5/0x8f0 [ 911.529913][T12211] __sys_sendmmsg+0x3ab/0x730 [ 911.536433][T12211] __x64_sys_sendmmsg+0x9c/0xb0 [ 911.543137][T12211] do_syscall_64+0x3b/0xb0 [ 911.549423][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.557192][T12211] INITIAL USE at: [ 911.561218][T12211] lock_acquire+0x1f8/0x5a0 [ 911.567477][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.573983][T12211] ppp_unregister_channel+0x78/0x2f0 [ 911.581182][T12211] ppp_asynctty_close+0xed/0x180 [ 911.587865][T12211] tty_ldisc_kill+0xa6/0x1a0 [ 911.594202][T12211] tty_ldisc_release+0x19d/0x200 [ 911.601000][T12211] tty_release_struct+0x27/0xd0 [ 911.607597][T12211] tty_release+0xcfb/0x12a0 [ 911.613843][T12211] __fput+0x3f6/0x8d0 [ 911.619567][T12211] task_work_run+0x246/0x300 [ 911.625914][T12211] exit_to_user_mode_loop+0xde/0x100 [ 911.632997][T12211] exit_to_user_mode_prepare+0xb1/0x140 [ 911.640287][T12211] syscall_exit_to_user_mode+0x60/0x270 [ 911.647605][T12211] do_syscall_64+0x47/0xb0 [ 911.653802][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.661534][T12211] } [ 911.664202][T12211] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 911.673698][T12211] ... acquired at: [ 911.677617][T12211] lock_acquire+0x1f8/0x5a0 [ 911.682301][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.687276][T12211] ppp_connect_channel+0x190/0x640 [ 911.692583][T12211] ppp_ioctl+0xbe5/0x1c90 [ 911.697104][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.701900][T12211] do_syscall_64+0x3b/0xb0 [ 911.706503][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.712595][T12211] [ 911.714914][T12211] -> (&ppp->rlock){+...}-{2:2} { [ 911.719902][T12211] HARDIRQ-ON-W at: [ 911.723889][T12211] lock_acquire+0x1f8/0x5a0 [ 911.730053][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.736489][T12211] ppp_get_stats64+0x2f/0x290 [ 911.742832][T12211] dev_get_stats+0xa7/0x490 [ 911.749005][T12211] rtnl_fill_stats+0x47/0x880 [ 911.755342][T12211] rtnl_fill_ifinfo+0x18aa/0x2090 [ 911.762092][T12211] rtmsg_ifinfo_build_skb+0xdc/0x180 [ 911.769144][T12211] rtmsg_ifinfo+0x71/0x120 [ 911.775252][T12211] register_netdevice+0x13dc/0x1720 [ 911.782238][T12211] ppp_dev_configure+0x850/0xab0 [ 911.788879][T12211] ppp_ioctl+0x702/0x1c90 [ 911.795018][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.801269][T12211] do_syscall_64+0x3b/0xb0 [ 911.807347][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.814898][T12211] INITIAL USE at: [ 911.818798][T12211] lock_acquire+0x1f8/0x5a0 [ 911.824921][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.831361][T12211] ppp_get_stats64+0x2f/0x290 [ 911.837610][T12211] dev_get_stats+0xa7/0x490 [ 911.843792][T12211] rtnl_fill_stats+0x47/0x880 [ 911.850043][T12211] rtnl_fill_ifinfo+0x18aa/0x2090 [ 911.856652][T12211] rtmsg_ifinfo_build_skb+0xdc/0x180 [ 911.863617][T12211] rtmsg_ifinfo+0x71/0x120 [ 911.869639][T12211] register_netdevice+0x13dc/0x1720 [ 911.876426][T12211] ppp_dev_configure+0x850/0xab0 [ 911.882935][T12211] ppp_ioctl+0x702/0x1c90 [ 911.888839][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.895099][T12211] do_syscall_64+0x3b/0xb0 [ 911.901094][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.908564][T12211] } [ 911.911059][T12211] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 911.919564][T12211] ... acquired at: [ 911.923369][T12211] lock_acquire+0x1f8/0x5a0 [ 911.928105][T12211] _raw_spin_lock_bh+0x31/0x40 [ 911.933068][T12211] ppp_disconnect_channel+0x9a/0x2d0 [ 911.938532][T12211] ppp_ioctl+0x2eb/0x1c90 [ 911.943394][T12211] __se_sys_ioctl+0xf1/0x160 [ 911.948294][T12211] do_syscall_64+0x3b/0xb0 [ 911.952894][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.958981][T12211] [ 911.961301][T12211] [ 911.961301][T12211] stack backtrace: [ 911.967191][T12211] CPU: 0 PID: 12211 Comm: syz.1.1524 Not tainted 6.1.111-syzkaller #0 [ 911.975338][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 911.985434][T12211] Call Trace: [ 911.988727][T12211] [ 911.991657][T12211] dump_stack_lvl+0x1e3/0x2cb [ 911.996363][T12211] ? nf_tcp_handle_invalid+0x642/0x642 [ 912.001874][T12211] ? panic+0x764/0x764 [ 912.005970][T12211] ? print_shortest_lock_dependencies+0xee/0x150 [ 912.012318][T12211] validate_chain+0x4d16/0x5950 [ 912.017189][T12211] ? reacquire_held_locks+0x660/0x660 [ 912.022593][T12211] ? reacquire_held_locks+0x660/0x660 [ 912.027966][T12211] ? do_syscall_64+0x3b/0xb0 [ 912.032572][T12211] ? mark_lock+0x9a/0x340 [ 912.036924][T12211] ? __lock_acquire+0x125b/0x1f80 [ 912.041990][T12211] ? mark_lock+0x9a/0x340 [ 912.046326][T12211] __lock_acquire+0x125b/0x1f80 [ 912.051209][T12211] lock_acquire+0x1f8/0x5a0 [ 912.055735][T12211] ? ppp_disconnect_channel+0x9a/0x2d0 [ 912.061208][T12211] ? read_lock_is_recursive+0x10/0x10 [ 912.066610][T12211] ? ppp_disconnect_channel+0x9a/0x2d0 [ 912.072097][T12211] ? __bpf_trace_softirq+0x10/0x10 [ 912.077234][T12211] ? __rwlock_init+0x140/0x140 [ 912.082024][T12211] ? ppp_disconnect_channel+0x9a/0x2d0 [ 912.087500][T12211] _raw_spin_lock_bh+0x31/0x40 [ 912.092291][T12211] ? ppp_disconnect_channel+0x9a/0x2d0 [ 912.097755][T12211] ppp_disconnect_channel+0x9a/0x2d0 [ 912.103052][T12211] ppp_ioctl+0x2eb/0x1c90 [ 912.107390][T12211] ? ppp_poll+0x240/0x240 [ 912.111742][T12211] ? __fget_files+0x28/0x4a0 [ 912.116337][T12211] ? __fget_files+0x435/0x4a0 [ 912.121032][T12211] ? __fget_files+0x28/0x4a0 [ 912.125632][T12211] ? bpf_lsm_file_ioctl+0x5/0x10 [ 912.130588][T12211] ? security_file_ioctl+0x7d/0xa0 [ 912.135786][T12211] ? ppp_poll+0x240/0x240 [ 912.140132][T12211] __se_sys_ioctl+0xf1/0x160 [ 912.144741][T12211] do_syscall_64+0x3b/0xb0 [ 912.149164][T12211] ? clear_bhb_loop+0x45/0xa0 [ 912.153847][T12211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.159754][T12211] RIP: 0033:0x7fa3bad7def9 [ 912.164204][T12211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.183936][T12211] RSP: 002b:00007fa3bbc3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.192465][T12211] RAX: ffffffffffffffda RBX: 00007fa3baf35f80 RCX: 00007fa3bad7def9 [ 912.200450][T12211] RDX: 0000000000000000 RSI: 0000000000007439 RDI: 000000000000000a [ 912.208457][T12211] RBP: 00007fa3badf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 912.216433][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.224452][T12211] R13: 0000000000000000 R14: 00007fa3baf35f80 R15: 00007ffd654ce068 [ 912.232542][T12211] [ 912.767562][ T4206] usbhid 4-1:0.0: can't add hid device: -71 [ 912.774701][ T4206] usbhid: probe of 4-1:0.0 failed with error -71 [ 912.786726][ T4210] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 912.795770][ T4206] usb 4-1: USB disconnect, device number 22 [ 912.802122][ T4210] cp210x 2-1:0.0: querying part number failed [ 912.815771][ T4210] usb 2-1: cp210x converter now attached to ttyUSB0 [ 912.840983][ T4210] usb 2-1: USB disconnect, device number 20 [ 912.859470][ T4210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 912.880636][ T4210] cp210x 2-1:0.0: device disconnected [ 912.926619][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.934087][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.955708][T11989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.985930][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 912.998043][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 913.052802][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 913.070898][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 913.081778][T11989] device veth0_vlan entered promiscuous mode [ 913.095896][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.103880][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.119129][T11989] device veth1_vlan entered promiscuous mode [ 913.139761][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 913.149585][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 913.158749][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 913.177385][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 913.192518][T11989] device veth0_macvtap entered promiscuous mode [ 913.211136][T11989] device veth1_macvtap entered promiscuous mode [ 913.236047][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.247877][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.258340][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.269517][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.281017][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.292440][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.302397][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.313095][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.324186][T11989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.331994][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 913.341915][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 913.350969][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 913.359800][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 913.384648][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.395459][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.406175][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.417850][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.429340][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.440218][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.450167][T11989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.460716][T11989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.471707][T11989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 913.488393][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 913.498087][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 913.509628][T11989] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.519061][T11989] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.528558][T11989] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.538602][T11989] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.573510][T11989] ieee80211 phy91: Selected rate control algorithm 'minstrel_ht' [ 913.611844][ T6435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.617688][T11989] ieee80211 phy92: Selected rate control algorithm 'minstrel_ht' [ 913.629360][ T6435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.645844][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 913.674405][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.718495][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.802328][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 913.833149][T12099] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 913.851481][T12099] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 913.892286][ T3697] device hsr_slave_0 left promiscuous mode [ 913.899699][ T3697] device hsr_slave_1 left promiscuous mode [ 913.906345][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.914288][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.922286][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.929871][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.937724][ T3697] device bridge_slave_1 left promiscuous mode [ 913.944016][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.954686][ T3697] device bridge_slave_0 left promiscuous mode [ 913.961510][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.974954][ T3697] device dummy0 left promiscuous mode [ 913.980852][ T3697] device veth1_macvtap left promiscuous mode [ 913.989315][ T3697] device veth0_macvtap left promiscuous mode [ 913.995574][ T3697] device veth1_vlan left promiscuous mode [ 914.003983][ T3697] device veth0_vlan left promiscuous mode [ 914.222177][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 914.233493][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 914.269914][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.282614][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.383104][ T3697] bond0 (unregistering): Released all slaves [ 914.422919][T12099] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 914.435535][T12099] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 914.527295][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.565487][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 914.573499][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 914.586968][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.598288][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 914.607333][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 914.616128][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.623261][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.632331][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.655156][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 914.665298][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 914.674637][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.681801][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.707985][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 914.718982][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.732131][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.741265][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.750309][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.763634][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.772485][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.783528][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.808645][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.830112][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.840265][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.849506][T12099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.973097][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 914.980818][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.994736][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.011951][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.020910][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.041090][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.050807][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.060806][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.069103][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.079728][T12099] device veth0_vlan entered promiscuous mode [ 915.090478][T12099] device veth1_vlan entered promiscuous mode [ 915.107405][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 915.115661][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 915.125257][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.134417][ T6435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.145800][T12099] device veth0_macvtap entered promiscuous mode [ 915.156146][T12099] device veth1_macvtap entered promiscuous mode [ 915.169894][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.180439][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.190727][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.201463][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.211526][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.222034][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.232284][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.243033][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.253951][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.263829][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 915.272257][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.282031][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 915.291321][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 915.304173][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.314819][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.326585][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.337483][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.347513][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.358163][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.372087][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.382646][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.393535][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.401631][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 915.410555][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 915.422100][T12099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.430914][T12099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.440122][T12099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.449418][T12099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.479742][T12099] ieee80211 phy93: Selected rate control algorithm 'minstrel_ht' [ 915.502752][T10929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.503744][T12099] ieee80211 phy94: Selected rate control algorithm 'minstrel_ht' [ 915.515678][T10929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.535234][ T6435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 915.544019][ T6435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.546760][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 915.560801][T10929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready