last executing test programs: 1m35.986162771s ago: executing program 3 (id=507): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="05030500d3fc030000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @random="46510dd2725f"}, 0x14) 1m35.717718942s ago: executing program 3 (id=511): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="67284a439e", 0x5}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0x4}}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 1m34.64543341s ago: executing program 3 (id=518): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1m34.045513944s ago: executing program 3 (id=526): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000340)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x102e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@nojournal_checksum}]}, 0x3, 0x452, &(0x7f0000002080)="$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") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0/file0\x00', 0x200000, &(0x7f0000000280)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@sysvgroups}, {@oldalloc}, {@nojournal_checksum}, {@orlov}, {@debug}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_nolock}]}, 0x3, 0x570, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet6(0xffffffffffffffff, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m33.510932187s ago: executing program 3 (id=537): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000280)={[{@resuid}]}, 0x1, 0x5a3, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1m32.994549051s ago: executing program 3 (id=542): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x8}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 1m32.140461286s ago: executing program 32 (id=542): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x8}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) 55.746962813s ago: executing program 0 (id=799): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010100, 0x0) 55.737636423s ago: executing program 0 (id=800): timer_create(0x2, &(0x7f00000002c0)={0x0, 0x4, 0x4}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(0xffffffffffffffff, &(0x7f0000000080)="08008edf773c8000", 0xfd) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000000c0)=""/150}], 0x10000000000000b6) 55.618890684s ago: executing program 0 (id=802): socket(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(0x3) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000001}) 55.603347554s ago: executing program 0 (id=803): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 54.061643294s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 53.19048924s ago: executing program 0 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x8, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x44004) 52.895383172s ago: executing program 33 (id=828): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0x1b6dd91e85e94ce1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x8, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x44004) 10.28403752s ago: executing program 1 (id=1092): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x20000000000409) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB], 0x102) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 8.714841701s ago: executing program 4 (id=1099): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x6}, {}, {0xd645d28e815807f6}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0xc5, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x5}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x9, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x54, 0x4}, {0x5, 0x2, 0x4, 0x1}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8005}, {0x1, 0x1800000, 0xa528}]}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 8.276243854s ago: executing program 1 (id=1113): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x20000000000409) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB], 0x102) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 8.208900334s ago: executing program 4 (id=1104): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket$can_raw(0x1d, 0x3, 0x1) 6.891035133s ago: executing program 4 (id=1109): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\nm'], 0xa) 6.749528324s ago: executing program 4 (id=1111): timer_create(0x2, &(0x7f00000002c0)={0x0, 0x4, 0x4}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000080)="08008edf", 0x4) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/238, 0xee}, {&(0x7f00000000c0)=""/150}], 0x10000000000000b6) 6.309590837s ago: executing program 1 (id=1116): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0xd645d28e815807f6}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x6}}, @TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0xc5, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x5}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x9, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x54, 0x4}, {0x5, 0x2, 0x4, 0x1}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8005}, {0x1, 0x1800000, 0xa528}]}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 6.213293508s ago: executing program 1 (id=1119): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @broadcast}, 0x212, 0x0, 0x0, 0x0, 0xac6, &(0x7f0000000000)='veth1_to_team\x00', 0x40, 0x4, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f0000000000000000000000080004000100", 0x22) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 6.130324168s ago: executing program 1 (id=1120): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@sysvgroups}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) 5.85585408s ago: executing program 4 (id=1125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 5.851939401s ago: executing program 2 (id=1126): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x20000000000409) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r1}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB], 0x102) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 4.47569002s ago: executing program 6 (id=1127): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x5, 0xfffa, &(0x7f0000000b00)=""/243}) 4.298873371s ago: executing program 6 (id=1128): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)={[{@usrquota}, {@noblock_validity}, {@bh}, {@noblock_validity}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}]}, 0x1, 0x600, &(0x7f0000000c00)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x8, 0x4}) 3.927623283s ago: executing program 5 (id=1137): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a101e, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.922023523s ago: executing program 4 (id=1138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x569) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 3.845677634s ago: executing program 2 (id=1139): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.731111624s ago: executing program 5 (id=1140): close(0x3) 3.645097085s ago: executing program 5 (id=1141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e20, @broadcast}, 0x212, 0x0, 0x0, 0x0, 0xac6, &(0x7f0000000000)='veth1_to_team\x00', 0x40, 0x4, 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x10000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000000008000400010000", 0x23) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 3.447260986s ago: executing program 2 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 2.570704003s ago: executing program 2 (id=1143): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket$can_raw(0x1d, 0x3, 0x1) 2.568290202s ago: executing program 5 (id=1144): syz_usb_connect$uac1(0x0, 0x93, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x4, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x52b9, 0xe}, [@feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0x0, 0x0, 0x9, 0x3, 0x1, 0x2], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe0, 0x6f, 0x0, {0x7, 0x25, 0x1, 0x81, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0xf, 0x1002}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xe, 0x2, 0xf5, 0x39}]}, {{0x9, 0x5, 0x82, 0x9, 0x334db7e30b252876, 0x5, 0x5, 0x4, {0x7, 0x25, 0x1, 0x0, 0x2, 0x1c00}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 2.498882403s ago: executing program 6 (id=1145): r0 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) readv(r0, &(0x7f0000001480)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000340)=""/11, 0xb}], 0x2) 2.464540983s ago: executing program 1 (id=1146): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x460, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2.403621153s ago: executing program 2 (id=1147): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0xffffffffffffffff, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) 2.252668274s ago: executing program 2 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.173425315s ago: executing program 6 (id=1149): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'w\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tm\nm'], 0xa) 2.066857926s ago: executing program 6 (id=1150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) 1.840205458s ago: executing program 5 (id=1151): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x3e, 0x17d, &(0x7f00000004c0)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 1.051353373s ago: executing program 6 (id=1152): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x4e, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[], 0x0) 0s ago: executing program 5 (id=1153): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)=ANY=[], 0x3c}, {&(0x7f0000000400)=ANY=[], 0x498}], 0x2}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): SS network, BSSID 50:50:50:50:50:50 [ 50.072258][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.074910][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.087959][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.092787][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.123358][ T4022] device veth0_macvtap entered promiscuous mode [ 50.133394][ T4102] pim6reg: tun_chr_ioctl cmd 2148553947 [ 50.171586][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.174492][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.186441][ T4022] device veth1_macvtap entered promiscuous mode [ 50.189142][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.192523][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.195336][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.198014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.288380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.306011][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.333415][ T4023] device veth0_macvtap entered promiscuous mode [ 50.360380][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.371818][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.374837][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.377499][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.380288][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.396408][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.399340][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.408980][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.411060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.425034][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.429089][ T4023] device veth1_macvtap entered promiscuous mode [ 50.454246][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.457019][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.459566][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.465283][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.476973][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.479630][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.496726][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.499524][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.537947][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.543015][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.547250][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.564281][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.567050][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.577131][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.579842][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.586946][ T4022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.589806][ T4022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.608945][ T4022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.614126][ T1600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.616214][ T1600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.631824][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.634560][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.637173][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.655162][ T4022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.657553][ T4022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.679792][ T4022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.700274][ T4022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.718977][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.724225][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.729804][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.733616][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.736413][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.739501][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.742899][ T4023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.745918][ T4023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.752646][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.780774][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.784936][ T4084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.839602][ T4023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.844804][ T4023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.847296][ T4023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.849849][ T4023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.062645][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.066897][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.161718][ T4068] Bluetooth: hci4: command 0x040f tx timeout [ 51.163535][ T4068] Bluetooth: hci3: command 0x040f tx timeout [ 51.165287][ T4068] Bluetooth: hci0: command 0x040f tx timeout [ 51.166969][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 51.171442][ T4068] Bluetooth: hci1: command 0x040f tx timeout [ 51.252051][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.479945][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.491934][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.495036][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.563486][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.565802][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.576898][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.619476][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.631852][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.634914][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.687838][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.690394][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.698107][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.597345][ T4201] loop3: detected capacity change from 0 to 512 [ 52.608863][ T4205] netlink: 'syz.0.50': attribute type 12 has an invalid length. [ 52.617033][ T4205] netlink: 'syz.0.50': attribute type 29 has an invalid length. [ 52.631555][ T4205] netlink: 148 bytes leftover after parsing attributes in process `syz.0.50'. [ 52.633962][ T4205] netlink: 'syz.0.50': attribute type 1 has an invalid length. [ 52.635999][ T4205] netlink: 'syz.0.50': attribute type 2 has an invalid length. [ 52.638073][ T4205] netlink: 39 bytes leftover after parsing attributes in process `syz.0.50'. [ 52.677452][ T4201] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.681006][ T4201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.747474][ T4201] EXT4-fs (loop3): 1 truncate cleaned up [ 52.749040][ T4201] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.712116][ T4228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.714696][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.716886][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.734416][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 53.741624][ T1534] Bluetooth: hci1: command 0x0419 tx timeout [ 53.743472][ T1534] Bluetooth: hci2: command 0x0419 tx timeout [ 53.746321][ T1534] Bluetooth: hci0: command 0x0419 tx timeout [ 53.748166][ T1534] Bluetooth: hci3: command 0x0419 tx timeout [ 53.749833][ T1534] Bluetooth: hci4: command 0x0419 tx timeout [ 53.785555][ T4234] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.59'. [ 53.890100][ T4238] device bond_slave_0 entered promiscuous mode [ 53.892106][ T4238] device bond_slave_1 entered promiscuous mode [ 53.924433][ T4238] device vlan2 entered promiscuous mode [ 53.926475][ T4238] device bond0 entered promiscuous mode [ 53.956617][ T4238] device bond0 left promiscuous mode [ 53.958650][ T4238] device bond_slave_0 left promiscuous mode [ 53.960419][ T4238] device bond_slave_1 left promiscuous mode [ 54.115166][ T4263] loop0: detected capacity change from 0 to 512 [ 54.175465][ T4263] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.213628][ T4263] EXT4-fs (loop0): 1 truncate cleaned up [ 54.215206][ T4263] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 55.245000][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 55.549490][ T4317] syz.2.88 uses obsolete (PF_INET,SOCK_PACKET) [ 55.589860][ T4318] loop4: detected capacity change from 0 to 512 [ 55.684086][ T4318] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.713402][ T4318] EXT4-fs (loop4): 1 truncate cleaned up [ 55.714967][ T4318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.712959][ T4345] netlink: 'syz.2.99': attribute type 4 has an invalid length. [ 57.157277][ T4369] netlink: 'syz.1.109': attribute type 29 has an invalid length. [ 57.159939][ T4369] netlink: 'syz.1.109': attribute type 29 has an invalid length. [ 57.234363][ T4377] loop0: detected capacity change from 0 to 512 [ 57.258975][ T4382] netlink: 'syz.2.113': attribute type 2 has an invalid length. [ 57.286585][ T4377] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.301058][ T4377] EXT4-fs (loop0): 1 truncate cleaned up [ 57.310549][ T4377] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.459987][ T4391] Zero length message leads to an empty skb [ 57.466197][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 58.416852][ T4409] tipc: Started in network mode [ 58.418348][ T4409] tipc: Node identity 62c0502cf1a7, cluster identity 4711 [ 58.425590][ T4409] tipc: Enabled bearer , priority 0 [ 58.431656][ T4417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 58.461055][ T4409] device syzkaller0 entered promiscuous mode [ 58.569947][ T4408] tipc: Resetting bearer [ 58.624989][ T4408] tipc: Disabling bearer [ 58.759006][ T4434] loop4: detected capacity change from 0 to 512 [ 58.810888][ T4436] device ipip0 entered promiscuous mode [ 58.844612][ T4434] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.858212][ T4434] EXT4-fs (loop4): 1 truncate cleaned up [ 58.859806][ T4434] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.929039][ T4450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.983368][ T4468] lo speed is unknown, defaulting to 1000 [ 59.985312][ T4468] lo speed is unknown, defaulting to 1000 [ 59.988120][ T4468] lo speed is unknown, defaulting to 1000 [ 60.014693][ T4468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.020440][ T4468] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.066230][ T4471] netlink: set zone limit has 8 unknown bytes [ 60.189108][ T4468] lo speed is unknown, defaulting to 1000 [ 60.196616][ T4468] lo speed is unknown, defaulting to 1000 [ 60.198951][ T4468] lo speed is unknown, defaulting to 1000 [ 60.205679][ T4468] lo speed is unknown, defaulting to 1000 [ 60.212315][ T4468] lo speed is unknown, defaulting to 1000 [ 60.319958][ T4071] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 60.322634][ T4071] hid-generic 0005:04F3:0009.0001: unknown main item tag 0x0 [ 60.332379][ T4071] hid-generic 0005:04F3:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 60.480243][ T4501] netlink: zone id is out of range [ 60.605150][ T4509] device ipip0 entered promiscuous mode [ 60.648052][ T4513] tipc: Enabling of bearer rejected, failed to enable media [ 61.074651][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 61.444084][ T4572] device ipip0 entered promiscuous mode [ 61.543210][ T4582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 61.689983][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 61.835710][ T4602] tipc: Enabled bearer , priority 0 [ 61.904005][ T4602] device syzkaller0 entered promiscuous mode [ 62.037231][ T4595] tipc: Resetting bearer [ 62.109323][ T4595] tipc: Disabling bearer [ 62.284507][ T4617] device ipip0 entered promiscuous mode [ 62.484791][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 62.491055][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 62.495810][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.210'. [ 62.500166][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 62.746284][ T4646] bridge0: port 3(syz_tun) entered blocking state [ 62.763807][ T4646] bridge0: port 3(syz_tun) entered disabled state [ 62.775787][ T4646] device syz_tun entered promiscuous mode [ 62.778131][ T4646] bridge0: port 3(syz_tun) entered blocking state [ 62.780178][ T4646] bridge0: port 3(syz_tun) entered forwarding state [ 62.963590][ T4661] netlink: 'syz.0.222': attribute type 13 has an invalid length. [ 63.022974][ T4667] netlink: 10 bytes leftover after parsing attributes in process `syz.3.224'. [ 63.060433][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 63.311780][ T4686] device syzkaller1 entered promiscuous mode [ 63.519854][ T4698] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 63.535089][ T4698] netlink: 224 bytes leftover after parsing attributes in process `syz.2.237'. [ 63.804673][ T4716] device ipip0 entered promiscuous mode [ 63.915165][ T4720] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 64.073641][ T4726] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 64.372656][ T4739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.449887][ T4739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.167035][ T4898] __nla_validate_parse: 5 callbacks suppressed [ 67.167051][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 68.600885][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 69.356148][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 69.372325][ T4987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.441525][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.465109][ T4995] bridge0: port 3(veth0_to_bridge) entered blocking state [ 69.467631][ T4995] bridge0: port 3(veth0_to_bridge) entered disabled state [ 69.477846][ T4995] device veth0_to_bridge entered promiscuous mode [ 69.480123][ T4995] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 69.488586][ T4995] bridge0: port 3(veth0_to_bridge) entered blocking state [ 69.490610][ T4995] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 69.645968][ T1982] cfg80211: failed to load regulatory.db [ 69.649902][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.651895][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.343174][ T5024] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.346146][ T5024] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.048372][ T5043] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 71.373059][ T5024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.087817][ T5024] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.090191][ T5024] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.092826][ T5024] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.095462][ T5024] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.314297][ T5034] device vlan2 entered promiscuous mode [ 72.319279][ T5034] device bond0 entered promiscuous mode [ 72.320745][ T5034] device bond_slave_0 entered promiscuous mode [ 72.323823][ T5034] device bond_slave_1 entered promiscuous mode [ 72.366463][ T5034] device bond0 left promiscuous mode [ 72.367998][ T5034] device bond_slave_0 left promiscuous mode [ 72.369684][ T5034] device bond_slave_1 left promiscuous mode [ 72.388799][ T5036] netlink: 'syz.2.377': attribute type 39 has an invalid length. [ 72.393075][ T5036] device veth0_macvtap left promiscuous mode [ 72.688970][ T5070] tipc: Started in network mode [ 72.696227][ T5070] tipc: Node identity a2c34c73e16f, cluster identity 4711 [ 72.700618][ T5070] tipc: Enabled bearer , priority 0 [ 72.753648][ T5070] device syzkaller0 entered promiscuous mode [ 72.764850][ T5069] tipc: Resetting bearer [ 72.807433][ T5069] tipc: Disabling bearer [ 73.394071][ T5088] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 73.658204][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 74.534738][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 74.682418][ T5141] loop4: detected capacity change from 0 to 512 [ 74.746081][ T5141] EXT4-fs (loop4): 1 orphan inode deleted [ 74.747804][ T5141] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.993248][ T5150] loop1: detected capacity change from 0 to 1024 [ 75.164241][ T5150] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc,barrier=0x0000000000000000,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 75.687762][ T5171] sock: sock_set_timeout: `syz.1.427' (pid 5171) tries to set negative timeout [ 75.821773][ T1534] kernel write not supported for file /snd/seq (pid: 1534 comm: kworker/1:2) [ 76.359317][ T5189] loop0: detected capacity change from 0 to 128 [ 76.581997][ T5189] ======================================================= [ 76.581997][ T5189] WARNING: The mand mount option has been deprecated and [ 76.581997][ T5189] and is ignored by this kernel. Remove the mand [ 76.581997][ T5189] option from the mount to silence this warning. [ 76.581997][ T5189] ======================================================= [ 76.609250][ T5189] EXT4-fs (loop0): Test dummy encryption mode enabled [ 76.612157][ T5189] EXT4-fs (loop0): Test dummy encryption mode enabled [ 76.683432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.687122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.690909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.694628][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.698171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.701708][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.705363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.708892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.710652][ T5189] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 76.712573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 76.719746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 77.278046][ T5192] loop1: detected capacity change from 0 to 128 [ 77.831193][ C1] sched: RT throttling activated [ 77.995803][ T5192] FAT-fs (loop1): Directory bread(block 32) failed [ 78.010759][ T5192] FAT-fs (loop1): Directory bread(block 33) failed [ 78.028752][ T5192] FAT-fs (loop1): Directory bread(block 34) failed [ 78.030642][ T5192] FAT-fs (loop1): Directory bread(block 35) failed [ 78.044657][ T5192] FAT-fs (loop1): Directory bread(block 36) failed [ 78.046500][ T5192] FAT-fs (loop1): Directory bread(block 37) failed [ 78.048301][ T5192] FAT-fs (loop1): Directory bread(block 38) failed [ 78.103891][ T5192] FAT-fs (loop1): Directory bread(block 39) failed [ 78.105879][ T5192] FAT-fs (loop1): Directory bread(block 40) failed [ 78.107686][ T5192] FAT-fs (loop1): Directory bread(block 41) failed [ 78.925083][ T5204] loop2: detected capacity change from 0 to 128 [ 80.036263][ T5204] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 80.157594][ T5224] loop1: detected capacity change from 0 to 512 [ 80.201236][ T5204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.215893][ T5228] loop4: detected capacity change from 0 to 16 [ 80.269026][ T5228] erofs: (device loop4): mounted with root inode @ nid 36. [ 81.278569][ T5229] ptrace attach of "./syz-executor exec"[5233] was attempted by "./syz-executor exec"[5229] [ 81.341606][ T5234] loop2: detected capacity change from 0 to 1024 [ 81.526185][ T5234] EXT4-fs (loop2): Ignoring removed nobh option [ 81.528741][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 81.531766][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.592208][ T5224] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.594004][ T5224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.743186][ C1] net_ratelimit: 2227 callbacks suppressed [ 81.743201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.748297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.752543][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 81.756248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.759785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.763353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.767509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 81.771001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 81.774587][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.778034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 81.814687][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.831584][ T5234] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz.2.448: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 82.534803][ T5234] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.448: couldn't read orphan inode 11 (err -117) [ 82.542966][ T5224] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.445: bad orphan inode 131083 [ 82.550440][ T5234] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 82.564846][ T5224] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 84.494904][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 84.675238][ T5293] udc-core: couldn't find an available UDC or it's busy [ 84.677259][ T5293] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 84.729835][ T5296] loop4: detected capacity change from 0 to 128 [ 84.772569][ T5300] loop1: detected capacity change from 0 to 128 [ 84.812537][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.814772][ T5300] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.820135][ T5300] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 84.896608][ T5296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.969478][ T5306] loop1: detected capacity change from 0 to 128 [ 85.104506][ T5308] loop4: detected capacity change from 0 to 1024 [ 85.297350][ T5312] loop2: detected capacity change from 0 to 1024 [ 85.343568][ T5312] EXT4-fs (loop2): Ignoring removed orlov option [ 85.345569][ T5312] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 85.347483][ T5312] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.387586][ T5317] udc-core: couldn't find an available UDC or it's busy [ 85.399031][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.403272][ T5317] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.407184][ T5312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 85.409954][ T5312] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,sysvgroups,norecovery,dioread_nolock,orlov,debug,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 85.469228][ T5320] loop4: detected capacity change from 0 to 512 [ 85.512635][ T21] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.515466][ T21] usb 1-1: config 1 has no interface number 1 [ 85.517108][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.520448][ T21] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8310, setting to 1024 [ 85.545363][ T5320] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.587043][ T5320] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.606812][ T5320] EXT4-fs (loop4): 1 truncate cleaned up [ 85.613147][ T5320] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 85.718866][ T5323] netlink: 136 bytes leftover after parsing attributes in process `syz.2.480'. [ 85.724907][ T21] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.727591][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.729634][ T21] usb 1-1: Product: syz [ 85.730795][ T21] usb 1-1: Manufacturer: syz [ 85.732785][ T21] usb 1-1: SerialNumber: syz [ 85.837566][ T5328] udc-core: couldn't find an available UDC or it's busy [ 85.839559][ T5328] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.979611][ T5334] udc-core: couldn't find an available UDC or it's busy [ 86.003003][ T5334] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.170645][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 86.173396][ T5342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.179332][ T5342] device batadv_slave_0 entered promiscuous mode [ 86.179436][ T21] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 86.194168][ T21] usb 1-1: 2:1 : sample bitwidth 245 in over sample bytes 2 [ 86.196407][ T21] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 86.260160][ T21] usb 1-1: USB disconnect, device number 2 [ 86.462380][ T5340] udc-core: couldn't find an available UDC or it's busy [ 86.464415][ T5340] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.569262][ T5354] loop4: detected capacity change from 0 to 512 [ 86.635552][ T5359] loop1: detected capacity change from 0 to 256 [ 86.734245][ T5354] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.737878][ T5354] EXT4-fs error (device loop4): ext4_find_extent:929: inode #4: comm syz.4.494: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 86.757242][ T5354] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 86.760139][ T5354] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 86.787126][ T5354] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 86.788889][ T5354] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 86.799479][ C1] net_ratelimit: 5395 callbacks suppressed [ 86.799496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.804809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.809273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 86.812876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.816526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.820034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.824322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 86.827835][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.831354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.834902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 86.872341][ T5367] lo speed is unknown, defaulting to 1000 [ 86.887036][ T26] audit: type=1326 audit(86.840:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5365 comm="syz.0.500" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd189d28 code=0x0 [ 87.114769][ T5378] udc-core: couldn't find an available UDC or it's busy [ 87.121278][ T5378] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.461743][ T5396] loop4: detected capacity change from 0 to 2048 [ 88.764450][ T5396] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.095619][ T5437] loop3: detected capacity change from 0 to 512 [ 89.159319][ T5441] loop0: detected capacity change from 0 to 1024 [ 89.214797][ T5441] EXT4-fs (loop0): Ignoring removed bh option [ 89.233254][ T5441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 89.248394][ T5441] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 2: comm syz.0.528: lblock 2 mapped to illegal pblock 2 (length 1) [ 89.266645][ T5441] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 89.269155][ T5441] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 48: comm syz.0.528: lblock 0 mapped to illegal pblock 48 (length 1) [ 89.299560][ T5441] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 89.302923][ T5441] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.528: Failed to acquire dquot type 0 [ 89.321401][ T5437] EXT4-fs (loop3): Invalid want_extra_isize 4142 [ 89.346121][ T5441] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 89.400307][ T5441] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.528: mark_inode_dirty error [ 89.454022][ T5441] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 89.456937][ T5441] EXT4-fs (loop0): 1 orphan inode deleted [ 89.458524][ T5441] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,noblock_validity,debug,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 89.499683][ T5441] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.528: Invalid inode table block 1 in block_group 0 [ 89.511364][ T1600] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 89.571247][ T1600] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 89.573662][ T1600] EXT4-fs error (device loop0): ext4_release_dquot:6220: comm kworker/u4:5: Failed to release dquot type 0 [ 89.596653][ T5441] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 89.699819][ T4029] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 89.711470][ T4029] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 89.716016][ T4029] EXT4-fs error (device loop0): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 90.805494][ T5468] loop1: detected capacity change from 0 to 512 [ 90.984736][ T5468] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.049627][ T5468] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.541: invalid indirect mapped block 4294967295 (level 1) [ 91.080764][ T5468] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.541: invalid indirect mapped block 4294967295 (level 1) [ 91.103540][ T5477] capability: warning: `syz.4.545' uses deprecated v2 capabilities in a way that may be insecure [ 91.120069][ T5468] EXT4-fs (loop1): 2 truncates cleaned up [ 91.130191][ T5468] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 91.402166][ T5483] lo speed is unknown, defaulting to 1000 [ 91.738002][ T5498] udc-core: couldn't find an available UDC or it's busy [ 91.739910][ T5498] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.802189][ C1] net_ratelimit: 4244 callbacks suppressed [ 91.802207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 91.807617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.811323][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.814817][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.818987][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 91.822737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 91.823759][ T5499] udc-core: couldn't find an available UDC or it's busy [ 91.826397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.828127][ T5499] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.831475][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 91.837391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 91.840806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 92.054329][ T5486] lo speed is unknown, defaulting to 1000 [ 92.369454][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 93.583622][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.585663][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.588558][ T5486] device bridge_slave_0 entered promiscuous mode [ 93.610779][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.612867][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.615623][ T5486] device bridge_slave_1 entered promiscuous mode [ 93.641316][ T4069] Bluetooth: hci4: command 0x0409 tx timeout [ 93.645172][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.649927][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.695233][ T5486] team0: Port device team_slave_0 added [ 93.699030][ T5486] team0: Port device team_slave_1 added [ 93.791536][ T5528] loop1: detected capacity change from 0 to 512 [ 93.792691][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.797746][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.832298][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.843965][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.845960][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.911395][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.939323][ T5528] EXT4-fs (loop1): 1 orphan inode deleted [ 93.940883][ T5528] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.023121][ T5533] loop0: detected capacity change from 0 to 2048 [ 94.090382][ T5536] udc-core: couldn't find an available UDC or it's busy [ 94.093040][ T5536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 94.097359][ T5528] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 94.131381][ T5533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.721170][ T5539] loop2: detected capacity change from 0 to 1024 [ 94.770284][ T5486] device hsr_slave_0 entered promiscuous mode [ 94.861241][ T5539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.926026][ T5486] device hsr_slave_1 entered promiscuous mode [ 94.976774][ T5486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.978986][ T5486] Cannot create hsr debugfs directory [ 95.168896][ T5566] udc-core: couldn't find an available UDC or it's busy [ 95.171036][ T5566] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 95.516980][ T5486] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 95.721950][ T1982] Bluetooth: hci4: command 0x041b tx timeout [ 96.529628][ T5486] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.563860][ T5486] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.602444][ T5486] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.937651][ C1] net_ratelimit: 3034 callbacks suppressed [ 96.937669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 96.942949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.946436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.949779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.954000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 96.957420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.960819][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.964384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.968374][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 96.971911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 97.778922][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.817629][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 97.821544][ T4052] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.834396][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.837044][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.873527][ T5583] loop2: detected capacity change from 0 to 512 [ 97.893863][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.918269][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.921404][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.924273][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.926350][ T4283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.938298][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.980424][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.986457][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.991463][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.993509][ T4283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.023390][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.028879][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.055483][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.071257][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.104235][ T5585] loop4: detected capacity change from 0 to 1024 [ 98.130903][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.133892][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.137011][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.149836][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.153110][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.155962][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.177918][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.185893][ T5486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.241738][ T4052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.391348][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.393660][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.399196][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.431665][ T4052] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 98.434187][ T4052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.436639][ T4052] usb 1-1: Product: syz [ 98.437744][ T4052] usb 1-1: Manufacturer: syz [ 98.438948][ T4052] usb 1-1: SerialNumber: syz [ 98.454722][ T4052] usb 1-1: config 0 descriptor?? [ 98.511351][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.577: corrupted inode contents [ 98.537664][ T5583] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.577: mark_inode_dirty error [ 98.589484][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.577: corrupted inode contents [ 98.593589][ T5583] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.577: mark_inode_dirty error [ 98.598422][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.577: corrupted inode contents [ 98.656299][ T5583] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 98.672789][ T5583] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.577: corrupted inode contents [ 98.734210][ T5583] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.577: mark_inode_dirty error [ 98.737719][ T5583] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 98.757785][ T5583] EXT4-fs (loop2): 1 truncate cleaned up [ 98.759349][ T5583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.852000][ T5603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.854351][ T5603] IPv6: NLM_F_CREATE should be set when creating new route [ 98.888673][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.892727][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.911496][ T4052] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 98.914402][ T4052] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 98.917920][ T4052] asix: probe of 1-1:0.0 failed with error -71 [ 98.942364][ T4052] usb 1-1: USB disconnect, device number 3 [ 98.946256][ T5486] device veth0_vlan entered promiscuous mode [ 98.948720][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.952289][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.965752][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.988799][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.017450][ T5607] loop4: detected capacity change from 0 to 1024 [ 99.026944][ T5486] device veth1_vlan entered promiscuous mode [ 99.092259][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.095173][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.098132][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.118553][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.131358][ T5486] device veth0_macvtap entered promiscuous mode [ 99.136449][ T5486] device veth1_macvtap entered promiscuous mode [ 99.157809][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.160602][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.172481][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.175452][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.178121][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.180857][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.236716][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.240660][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.252189][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.257466][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.280503][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.285858][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 99.290740][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.293871][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.296495][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.299494][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.303542][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.306567][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.309400][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.321105][ T5486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.347919][ T5486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.350240][ T5486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.354911][ T5486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.377309][ T5615] loop1: detected capacity change from 0 to 256 [ 99.513722][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.516051][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.520362][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.536490][ T5607] EXT4-fs (loop4): Ignoring removed nobh option [ 99.538224][ T5607] EXT4-fs (loop4): Ignoring removed bh option [ 99.539801][ T5607] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.542564][ T5615] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 99.585534][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.587769][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.592950][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.819670][ T5607] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,journal_ioprio=0x0000000000000001,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,noblock_validity,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 99.867093][ T5623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.874353][ T5607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 99.900996][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 100.114119][ T5630] mmap: syz.1.591 (5630): VmData 37494784 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 100.340018][ T5640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 100.355166][ T5640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.492530][ T5640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.504535][ T5648] loop5: detected capacity change from 0 to 256 [ 101.785553][ T5673] loop0: detected capacity change from 0 to 128 [ 101.847741][ T5648] exfat: Deprecated parameter 'namecase' [ 101.863042][ T5674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.877645][ T5648] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 101.941252][ C1] net_ratelimit: 4381 callbacks suppressed [ 101.941271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.947150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 101.950597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.954309][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.957831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.962168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 101.965742][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.969315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.973104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.977224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 102.100534][ T5673] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.138055][ T5673] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 102.208588][ T5677] loop5: detected capacity change from 0 to 1024 [ 102.266358][ T5673] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 102.368954][ T5677] EXT4-fs (loop5): inline encryption not supported [ 102.376522][ T5677] EXT4-fs (loop5): inline encryption not supported [ 102.440696][ T5677] EXT4-fs (loop5): mounted filesystem without journal. Opts: commit=0x0000000000000034,i_version,usrquota,commit=0x0000000000000005,inlinecrypt,stripe=0x00000000000099ae,inlinecrypt,data_err=abort,,errors=continue. Quota mode: writeback. [ 102.489372][ T5693] udc-core: couldn't find an available UDC or it's busy [ 102.510116][ T5693] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 102.603928][ T5698] loop2: detected capacity change from 0 to 512 [ 102.609538][ T5696] loop0: detected capacity change from 0 to 512 [ 102.652804][ T5698] EXT4-fs (loop2): Ignoring removed orlov option [ 102.714522][ T5698] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.614: inode #1: comm syz.2.614: iget: illegal inode # [ 102.737814][ T5698] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.614: error while reading EA inode 1 err=-117 [ 102.750776][ T5696] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.615: invalid block [ 102.785176][ T5698] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.614: inode #1: comm syz.2.614: iget: illegal inode # [ 102.791254][ T5696] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.615: invalid indirect mapped block 10 (level 1) [ 102.811431][ T5698] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.614: error while reading EA inode 1 err=-117 [ 102.841248][ T5696] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.615: invalid indirect mapped block 8 (level 1) [ 103.018159][ T5698] EXT4-fs (loop2): 1 orphan inode deleted [ 103.020092][ T5698] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,orlov,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 103.020911][ T5696] EXT4-fs (loop0): 1 truncate cleaned up [ 103.042286][ T5696] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.880984][ T5723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.106778][ T5728] overlayfs: unrecognized mount option "\']*=GPL" or missing value [ 105.502556][ T5744] loop5: detected capacity change from 0 to 164 [ 105.693099][ T5744] blk_update_request: I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 105.716494][ T5744] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 105.919957][ T5754] netlink: 996 bytes leftover after parsing attributes in process `syz.5.630'. [ 106.062240][ T4071] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.076878][ T5766] udc-core: couldn't find an available UDC or it's busy [ 106.092549][ T5766] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.209449][ T5770] loop5: detected capacity change from 0 to 2048 [ 106.331300][ T4071] usb 1-1: Using ep0 maxpacket: 16 [ 106.589383][ T5770] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.611624][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.615650][ T4071] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.619133][ T4071] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.709757][ T4071] usb 1-1: New USB device found, idVendor=045e, idProduct=17f1, bcdDevice= 0.00 [ 106.771819][ T4071] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.714747][ T4071] usb 1-1: config 0 descriptor?? [ 107.731822][ C1] net_ratelimit: 5064 callbacks suppressed [ 107.731836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.737407][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.740970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.744512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 107.747911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 107.751441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.754982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.759038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.762657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 107.766179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 107.800387][ T5770] fs-verity: sha512 using implementation "sha512-arm64" [ 108.272367][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.274491][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.276462][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.326792][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.328876][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.345309][ T5812] loop5: detected capacity change from 0 to 512 [ 108.357554][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.359613][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.375353][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.377341][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.393035][ T5812] EXT4-fs (loop5): Ignoring removed orlov option [ 108.405495][ T4071] hid-generic 0003:045E:17F1.0002: unknown main item tag 0x0 [ 108.443356][ T4071] hid-generic 0003:045E:17F1.0002: hidraw0: USB HID v0.00 Device [HID 045e:17f1] on usb-dummy_hcd.0-1/input0 [ 108.507265][ T5812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.644: inode #1: comm syz.5.644: iget: illegal inode # [ 108.522861][ T4071] usb 1-1: USB disconnect, device number 4 [ 108.528785][ T5812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.644: error while reading EA inode 1 err=-117 [ 108.581910][ T5812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.644: inode #1: comm syz.5.644: iget: illegal inode # [ 108.602024][ T5812] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.644: error while reading EA inode 1 err=-117 [ 108.646160][ T5812] EXT4-fs (loop5): 1 orphan inode deleted [ 108.647829][ T5812] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,orlov,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,acl,usrjquota=,grpjquota=,usrquota,dioread_lock,,errors=continue. Quota mode: writeback. [ 108.667813][ T5822] loop4: detected capacity change from 0 to 164 [ 108.843323][ T5828] loop1: detected capacity change from 0 to 128 [ 108.999824][ T5832] loop5: detected capacity change from 0 to 1024 [ 109.166010][ T5839] netlink: 'syz.4.652': attribute type 4 has an invalid length. [ 109.395481][ T5843] loop1: detected capacity change from 0 to 512 [ 109.447105][ T5845] loop0: detected capacity change from 0 to 512 [ 109.683442][ T5845] EXT4-fs (loop0): 1 truncate cleaned up [ 109.687162][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.695522][ T5845] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.753499][ T5843] Quota error (device loop1): find_tree_dqentry: Getting block too big (67174403 >= 6) [ 109.771602][ T5843] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 109.789125][ T5843] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.653: Failed to acquire dquot type 0 [ 110.082317][ T5876] device bond_slave_0 entered promiscuous mode [ 110.082615][ T5875] loop0: detected capacity change from 0 to 2048 [ 110.084207][ T5876] device bond_slave_1 entered promiscuous mode [ 110.136764][ T5876] device vlan2 entered promiscuous mode [ 110.146998][ T5876] device bond0 entered promiscuous mode [ 110.164557][ T5876] device bond0 left promiscuous mode [ 110.166692][ T5876] device bond_slave_0 left promiscuous mode [ 110.168391][ T5876] device bond_slave_1 left promiscuous mode [ 110.463766][ T5893] loop4: detected capacity change from 0 to 128 [ 110.609809][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 110.673286][ T5875] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 110.712833][ T5908] udc-core: couldn't find an available UDC or it's busy [ 110.714914][ T5908] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 111.267096][ T5921] netlink: 'syz.5.670': attribute type 4 has an invalid length. [ 111.329713][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.384940][ T5930] loop4: detected capacity change from 0 to 1024 [ 112.545894][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.677'. [ 112.548524][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 112.563957][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 112.567230][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 112.709680][ T5960] device bond_slave_0 entered promiscuous mode [ 112.711490][ T5960] device bond_slave_1 entered promiscuous mode [ 112.722762][ T5960] device vlan2 entered promiscuous mode [ 112.724822][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.727732][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.730400][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.731288][ T5960] device bond0 entered promiscuous mode [ 112.736842][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.739430][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.749562][ T21] usb 1-1: config 0 descriptor?? [ 112.752370][ C1] net_ratelimit: 6467 callbacks suppressed [ 112.752383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.757654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.761304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.764852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 112.768442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.772098][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.775632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.779191][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 112.783786][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 112.787297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.795230][ T5960] device bond0 left promiscuous mode [ 112.797092][ T5960] device bond_slave_0 left promiscuous mode [ 112.798751][ T5960] device bond_slave_1 left promiscuous mode [ 112.811748][ T5967] udc-core: couldn't find an available UDC or it's busy [ 112.813628][ T5967] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.841167][ T5970] udc-core: couldn't find an available UDC or it's busy [ 112.843173][ T5970] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 112.888560][ T5972] loop2: detected capacity change from 0 to 128 [ 113.372159][ T21] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 113.394727][ T21] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 113.482227][ T5990] loop5: detected capacity change from 0 to 128 [ 113.530693][ T5992] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 113.617168][ T5992] netlink: 'syz.1.688': attribute type 4 has an invalid length. [ 113.771044][ T25] usb 1-1: USB disconnect, device number 5 [ 114.034595][ T6004] loop5: detected capacity change from 0 to 164 [ 114.216355][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.694'. [ 114.313789][ T6015] loop5: detected capacity change from 0 to 1024 [ 114.411965][ T6015] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.558616][ T6026] loop0: detected capacity change from 0 to 512 [ 114.565330][ T6023] loop2: detected capacity change from 0 to 2048 [ 114.653064][ T6033] udc-core: couldn't find an available UDC or it's busy [ 114.655237][ T6033] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 114.720795][ T6023] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.939622][ T6031] loop5: detected capacity change from 0 to 256 [ 115.029535][ T6031] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.037828][ T6031] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 115.061237][ T6031] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 115.070568][ T6046] loop2: detected capacity change from 0 to 1024 [ 115.081342][ T6026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.124229][ T6026] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.698: bad orphan inode 131083 [ 115.127966][ T6026] EXT4-fs (loop0): Remounting filesystem read-only [ 115.129738][ T6026] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noload,grpquota,errors=remount-ro,grpjquota=,acl,. Quota mode: writeback. [ 115.200898][ T6046] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.248003][ T6053] loop4: detected capacity change from 0 to 164 [ 115.427662][ T6059] loop4: detected capacity change from 0 to 256 [ 115.440162][ T6061] loop1: detected capacity change from 0 to 512 [ 115.473468][ T6064] loop2: detected capacity change from 0 to 16 [ 115.479662][ T6059] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 115.744509][ T6078] device bond_slave_0 entered promiscuous mode [ 115.746258][ T6078] device bond_slave_1 entered promiscuous mode [ 115.748996][ T6078] device vlan2 entered promiscuous mode [ 115.750452][ T6078] device bond0 entered promiscuous mode [ 115.760306][ T6078] device bond0 left promiscuous mode [ 115.784001][ T6064] erofs: (device loop2): mounted with root inode @ nid 36. [ 115.801159][ T6078] device bond_slave_0 left promiscuous mode [ 115.802905][ T6078] device bond_slave_1 left promiscuous mode [ 115.818725][ T6064] attempt to access beyond end of device [ 115.818725][ T6064] loop2: rw=524288, want=32, limit=16 [ 115.826439][ T6061] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.828167][ T6061] EXT4-fs error (device loop1): ext4_quota_enable:6384: comm syz.1.711: Bad quota inum: 1, type: 0 [ 115.834173][ T6061] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 115.838034][ T6061] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 115.839744][ T6061] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,noblock_validity,journal_dev=0x0000000000000003,journal_dev=0x000000000000000b,barrier=0x0000000000000081,minixdf,inode_readahead_blks=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 115.872699][ T6064] attempt to access beyond end of device [ 115.872699][ T6064] loop2: rw=524288, want=24, limit=16 [ 115.877212][ T6064] attempt to access beyond end of device [ 115.877212][ T6064] loop2: rw=0, want=24, limit=16 [ 117.011798][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.085339][ T6096] loop4: detected capacity change from 0 to 1024 [ 117.122446][ T6099] loop0: detected capacity change from 0 to 164 [ 117.155658][ T6101] loop1: detected capacity change from 0 to 1024 [ 117.334990][ T6096] EXT4-fs (loop4): Ignoring removed nobh option [ 117.336880][ T6096] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.393379][ T6096] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nobh,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nogrpid,barrier=0x0000000000000007,delalloc,. Quota mode: none. [ 117.533062][ T6113] loop5: detected capacity change from 0 to 128 [ 117.548536][ T6101] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.573908][ T153] device hsr_slave_0 left promiscuous mode [ 117.662097][ T6113] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 117.662097][ T6113] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 117.662097][ T6113] [ 117.684982][ T153] device hsr_slave_1 left promiscuous mode [ 117.692459][ T6113] EXT4-fs (loop5): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: none. [ 117.927547][ C1] net_ratelimit: 6310 callbacks suppressed [ 117.927561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.932876][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.936588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.940257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 117.943878][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.947496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.951046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.954758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 117.959336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 117.963164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.836477][ T6133] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 118.865410][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.876272][ T153] device bridge_slave_1 left promiscuous mode [ 118.879180][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.001849][ T6139] loop0: detected capacity change from 0 to 1024 [ 119.053959][ T153] device bridge_slave_0 left promiscuous mode [ 119.063496][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.280249][ T6143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.458383][ T6150] loop0: detected capacity change from 0 to 2048 [ 119.596819][ T6150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.606415][ T153] team0 (unregistering): Port device team_slave_1 removed [ 119.651128][ T153] team0 (unregistering): Port device team_slave_0 removed [ 119.680293][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.781809][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.087761][ T153] bond0 (unregistering): Released all slaves [ 120.248276][ T6159] loop0: detected capacity change from 0 to 256 [ 121.738379][ T6190] loop2: detected capacity change from 0 to 2048 [ 121.889386][ T6195] loop1: detected capacity change from 0 to 1024 [ 121.956500][ T6195] EXT4-fs (loop1): Ignoring removed nobh option [ 121.958398][ T6195] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.008345][ T6195] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,nobh,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nogrpid,barrier=0x0000000000000007,delalloc,. Quota mode: none. [ 122.483826][ T6190] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.931670][ C1] net_ratelimit: 5126 callbacks suppressed [ 122.931687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.937079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.940816][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.944721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 122.948308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.951796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.955207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 122.958664][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 122.963732][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.967194][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 123.120605][ T6247] loop5: detected capacity change from 0 to 256 [ 123.297114][ T6252] loop4: detected capacity change from 0 to 2048 [ 123.537187][ T6252] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.597126][ T6274] loop1: detected capacity change from 0 to 512 [ 123.667407][ T6277] loop0: detected capacity change from 0 to 1024 [ 123.709422][ T6274] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 123.822900][ T6277] EXT4-fs (loop0): Ignoring removed nobh option [ 123.824905][ T6277] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.873146][ T6296] siw: device registration error -23 [ 123.885171][ T6274] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.771: corrupted in-inode xattr [ 123.890649][ T6274] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.771: couldn't read orphan inode 15 (err -117) [ 123.925182][ T6274] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,data_err=abort,auto_da_alloc=0x0000000000000007,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 123.982782][ T6277] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nobh,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,nogrpid,barrier=0x0000000000000007,delalloc,. Quota mode: none. [ 124.428406][ T6321] loop2: detected capacity change from 0 to 2048 [ 124.473925][ T6327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.784'. [ 124.654378][ T6321] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.971305][ T6348] loop5: detected capacity change from 0 to 1024 [ 127.456765][ T6396] loop4: detected capacity change from 0 to 2048 [ 127.556290][ T6401] loop0: detected capacity change from 0 to 764 [ 127.603263][ T6396] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.781605][ T6348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.910737][ T6412] loop4: detected capacity change from 0 to 2048 [ 127.941270][ C1] net_ratelimit: 3591 callbacks suppressed [ 127.941286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.946697][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.950283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 127.954024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.957563][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.961052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.964814][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 127.969522][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 127.973226][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.976855][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 127.985911][ T6412] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 128.324349][ T6430] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 128.588730][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.812'. [ 128.711383][ T6457] loop4: detected capacity change from 0 to 2048 [ 128.779365][ T6457] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.849008][ T6463] loop2: detected capacity change from 0 to 2048 [ 128.927252][ T6463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.936755][ T6401] rock: directory entry would overflow storage [ 128.938384][ T6401] rock: sig=0x4654, size=5, remaining=4 [ 129.164514][ T6470] loop1: detected capacity change from 0 to 512 [ 129.191086][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.804'. [ 129.195791][ T6474] loop2: detected capacity change from 0 to 2048 [ 129.197759][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.804'. [ 129.200404][ T6472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.804'. [ 129.213239][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.804'. [ 129.299176][ T6478] loop4: detected capacity change from 0 to 256 [ 129.419165][ T4029] bridge0: port 3(syz_tun) entered disabled state [ 129.468925][ T4029] device syz_tun left promiscuous mode [ 129.470509][ T4029] bridge0: port 3(syz_tun) entered disabled state [ 129.649701][ T6489] udc-core: couldn't find an available UDC or it's busy [ 129.659244][ T6489] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 129.840723][ T6474] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 129.976690][ T6470] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 130.276957][ T6499] loop1: detected capacity change from 0 to 2048 [ 130.360442][ T6505] loop4: detected capacity change from 0 to 256 [ 130.633728][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'. [ 130.672119][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'. [ 130.674541][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.837'. [ 130.725747][ T6499] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.761836][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 130.831971][ T6527] loop5: detected capacity change from 0 to 512 [ 130.969474][ T6508] lo speed is unknown, defaulting to 1000 [ 131.092993][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.094853][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.135974][ T6527] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 131.408150][ T6556] loop5: detected capacity change from 0 to 1024 [ 131.465475][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 131.538883][ T6556] EXT4-fs (loop5): Ignoring removed oldalloc option [ 131.611655][ T6556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f000c01c, mo2=0002] [ 131.614041][ T6556] System zones: 0-1, 3-36 [ 131.676977][ T6556] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000087,quota,resuid=0x0000000000000000,oldalloc,lazytime,debug,data_err=abort,noquota,,errors=continue. Quota mode: writeback. [ 131.701596][ T6556] EXT4-fs (loop5): Ignoring removed oldalloc option [ 131.716362][ T6556] EXT4-fs (loop5): Cannot change quota options when quota turned on [ 131.734778][ T6571] loop2: detected capacity change from 0 to 256 [ 131.749631][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.752034][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.758712][ T6508] device bridge_slave_0 entered promiscuous mode [ 131.799979][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.816148][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.828613][ T6508] device bridge_slave_1 entered promiscuous mode [ 131.942565][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.947768][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.010127][ T6582] loop1: detected capacity change from 0 to 2048 [ 132.023602][ T6508] team0: Port device team_slave_0 added [ 132.027328][ T6508] team0: Port device team_slave_1 added [ 132.066577][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.068455][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.096064][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.118039][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.132451][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.161588][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.231926][ T6582] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 132.531344][ T1982] Bluetooth: hci2: command 0x0409 tx timeout [ 132.630924][ T6605] loop1: detected capacity change from 0 to 256 [ 132.744260][ T6607] loop2: detected capacity change from 0 to 512 [ 132.848372][ T6508] device hsr_slave_0 entered promiscuous mode [ 132.951725][ C1] net_ratelimit: 7589 callbacks suppressed [ 132.951744][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.957014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.960523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.964307][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 132.967843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.971501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.974962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 132.978504][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 132.983096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 132.986664][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 133.037906][ T6508] device hsr_slave_1 entered promiscuous mode [ 133.080949][ T6508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.083131][ T6508] Cannot create hsr debugfs directory [ 133.323697][ T6607] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 133.598502][ T6508] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.691274][ T6508] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.746421][ T6641] loop1: detected capacity change from 0 to 256 [ 133.776749][ T6508] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.904082][ T6650] loop2: detected capacity change from 0 to 1024 [ 133.936849][ T6508] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.287147][ T6508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.339884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.347532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.497277][ T6508] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.503270][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.511662][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.514300][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.516285][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.523028][ T6684] loop5: detected capacity change from 0 to 256 [ 134.525566][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.531166][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.534376][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.537034][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.539018][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.793000][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.324306][ T1534] Bluetooth: hci2: command 0x041b tx timeout [ 135.361668][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.364984][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.376389][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.379279][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.382497][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.385352][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.388070][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.408223][ T6508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.411761][ T6508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.414514][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.417006][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.419634][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.472445][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 135.475061][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.554597][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.678528][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.681070][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.700951][ T6508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.949191][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.952126][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.987865][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.990630][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.011662][ T6508] device veth0_vlan entered promiscuous mode [ 136.014578][ T6650] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 136.020271][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.025354][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.029182][ T6508] device veth1_vlan entered promiscuous mode [ 136.084647][ T6508] device veth0_macvtap entered promiscuous mode [ 136.089519][ T6508] device veth1_macvtap entered promiscuous mode [ 136.099433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.102523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.105683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.123870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.126780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.139350][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.158613][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.161458][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.164293][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.166943][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.169712][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.197163][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.200255][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.228829][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.231657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.234683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.237671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.248530][ T6508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.260747][ T6508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.281344][ T6508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.283653][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.286722][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.339281][ T6508] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.344311][ T6508] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.346718][ T6508] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.349006][ T6508] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.540634][ T6747] loop1: detected capacity change from 0 to 1024 [ 136.574343][ T4084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.578094][ T4084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.594782][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.677260][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.679737][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.699313][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.406503][ T6781] udc-core: couldn't find an available UDC or it's busy [ 137.425111][ T4068] Bluetooth: hci2: command 0x040f tx timeout [ 137.444785][ T6781] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.480412][ T6783] usb usb8: usbfs: process 6783 (syz.6.891) did not claim interface 0 before use [ 137.968047][ C1] net_ratelimit: 5125 callbacks suppressed [ 137.968065][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 137.974405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.978111][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.981713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.985280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 137.988770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 137.992352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.995778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.999336][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 138.004048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 138.423814][ T6747] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.626953][ T6813] udc-core: couldn't find an available UDC or it's busy [ 138.628841][ T6813] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.150651][ T4067] Bluetooth: hci2: command 0x0419 tx timeout [ 140.291393][ T6836] loop4: detected capacity change from 0 to 2048 [ 140.355564][ T6836] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 140.828291][ T6863] udc-core: couldn't find an available UDC or it's busy [ 140.830824][ T6863] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 140.996467][ T6865] binder: 6864:6865 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 141.002324][ T6865] binder: 6865 RLIMIT_NICE not set [ 141.052050][ T6869] binder: 6864:6869 tried to acquire reference to desc 0, got 1 instead [ 141.058522][ T6865] binder: 6865 RLIMIT_NICE not set [ 141.067444][ T4071] binder: release 6864:6869 transaction 5 out, still active [ 141.070500][ T4071] binder: undelivered TRANSACTION_COMPLETE [ 141.118122][ T21] binder: release 6864:6865 transaction 5 in, still active [ 141.120354][ T21] binder: send failed reply for transaction 5, target dead [ 142.123038][ T6901] loop4: detected capacity change from 0 to 2048 [ 142.165488][ T6914] loop2: detected capacity change from 0 to 256 [ 142.256883][ T6901] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 142.457275][ T6921] udc-core: couldn't find an available UDC or it's busy [ 142.467374][ T6921] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 142.977513][ C1] net_ratelimit: 4491 callbacks suppressed [ 142.977528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.982871][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.986319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 142.989959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 142.994682][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 142.998203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.001824][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.005272][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 143.008694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.012243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 143.574663][ T6915] mac80211_hwsim hwsim14 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.678442][ T6948] udc-core: couldn't find an available UDC or it's busy [ 143.680366][ T6948] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 143.760245][ T6951] loop4: detected capacity change from 0 to 2048 [ 143.767486][ T6952] loop2: detected capacity change from 0 to 256 [ 143.854696][ T6958] mac80211_hwsim hwsim13 wlan1: refused to change device tx_queue_len [ 144.076373][ T6969] loop6: detected capacity change from 0 to 512 [ 144.099186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 144.456030][ T6986] loop5: detected capacity change from 0 to 256 [ 144.459160][ T6983] loop1: detected capacity change from 0 to 512 [ 144.702037][ T6996] loop5: detected capacity change from 0 to 1024 [ 144.823719][ T6996] EXT4-fs (loop5): Ignoring removed orlov option [ 144.825587][ T6996] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 145.799487][ T6996] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 146.034757][ T6951] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 146.193779][ T5713] wlan0: Trigger new scan to find an IBSS to join [ 147.251274][ T6969] EXT4-fs warning (device loop6): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop6. [ 147.362098][ T6983] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 147.365091][ T6983] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 147.390823][ T6983] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 147.427337][ T6983] EXT4-fs: failed to create workqueue [ 147.432311][ T6983] EXT4-fs (loop1): mount failed [ 147.677663][ T7023] loop1: detected capacity change from 0 to 256 [ 148.002711][ T7037] loop5: detected capacity change from 0 to 128 [ 149.693257][ C1] net_ratelimit: 4757 callbacks suppressed [ 149.693274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 149.698556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.702140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.705594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.709278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 149.713962][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 149.717619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.721318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 149.725903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 149.729440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 150.753097][ T7041] loop4: detected capacity change from 0 to 2048 [ 151.179548][ T9] wlan0: Creating new IBSS network, BSSID aa:78:25:e1:ce:65 [ 152.434263][ T7041] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.563383][ T7063] loop6: detected capacity change from 0 to 256 [ 152.565894][ T7061] loop1: detected capacity change from 0 to 2048 [ 152.661631][ T7061] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 153.732499][ T7084] loop4: detected capacity change from 0 to 512 [ 153.919795][ T7084] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.921828][ T7084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.709714][ T7089] loop1: detected capacity change from 0 to 2048 [ 154.721050][ T7094] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 154.725044][ T7084] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1002: bad orphan inode 131083 [ 154.729901][ T7084] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 154.748430][ C1] net_ratelimit: 1299 callbacks suppressed [ 154.748445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.753750][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.757418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.760883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 154.764444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.767918][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.771370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 154.774970][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 154.779613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 154.783254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.288377][ T7112] loop2: detected capacity change from 0 to 1024 [ 156.347462][ T7112] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,errors=remount-ro,discard,lazytime,data_err=ignore,usrquota,noauto_da_alloc,. Quota mode: writeback. [ 156.453028][ T7089] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.605325][ T7126] loop5: detected capacity change from 0 to 2048 [ 157.615554][ T7128] loop2: detected capacity change from 0 to 256 [ 157.634698][ T7130] loop6: detected capacity change from 0 to 1024 [ 157.644363][ T7132] loop4: detected capacity change from 0 to 512 [ 157.695556][ T7126] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 157.700820][ T7130] EXT4-fs (loop6): Ignoring removed nobh option [ 157.732590][ T7132] EXT4-fs (loop4): Test dummy encryption mode enabled [ 157.734404][ T7132] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 157.775739][ T7132] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.1020: bad orphan inode 131083 [ 157.779071][ T7132] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 157.779516][ T7130] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.1019: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 157.791401][ T7130] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1019: couldn't read orphan inode 11 (err -117) [ 157.812230][ T7130] EXT4-fs (loop6): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 160.082424][ C1] net_ratelimit: 2472 callbacks suppressed [ 160.082441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.087586][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 160.091053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.094783][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.098301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.101915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 160.106529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.110074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.114269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 160.117828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 162.206733][ T7169] loop5: detected capacity change from 0 to 512 [ 162.281148][ T7169] EXT4-fs (loop5): Test dummy encryption mode enabled [ 162.283900][ T7169] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.307229][ T7173] loop4: detected capacity change from 0 to 2048 [ 162.309967][ T7169] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.1034: bad orphan inode 131083 [ 162.330747][ T7169] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 162.367620][ T7173] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature [ 162.638698][ T7184] loop4: detected capacity change from 0 to 1024 [ 162.720032][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1039'. [ 162.835100][ T7184] EXT4-fs (loop4): Ignoring removed nobh option [ 162.851855][ T7184] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz.4.1038: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 162.859324][ T7184] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1038: couldn't read orphan inode 11 (err -117) [ 162.866414][ T7184] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 163.923336][ T7198] loop2: detected capacity change from 0 to 2048 [ 165.168407][ T7217] loop5: detected capacity change from 0 to 2048 [ 165.178699][ C1] net_ratelimit: 2196 callbacks suppressed [ 165.178716][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.184204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.187847][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.191535][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 165.195096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.198958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.202714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.206277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 165.210910][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 165.214623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 165.945806][ T7217] EXT4-fs (loop5): test_dummy_encryption requires encrypt feature [ 166.146036][ T7198] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.045722][ T7235] udc-core: couldn't find an available UDC or it's busy [ 167.047691][ T7235] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.178200][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'. [ 169.217911][ T4067] Bluetooth: hci1: command 0x0406 tx timeout [ 169.223424][ T4067] Bluetooth: hci0: command 0x0406 tx timeout [ 169.231296][ T4067] Bluetooth: hci3: command 0x0406 tx timeout [ 169.384632][ T7273] loop6: detected capacity change from 0 to 2048 [ 170.343453][ C1] net_ratelimit: 2091 callbacks suppressed [ 170.343470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 170.348705][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.352515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.356079][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.359644][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 170.363953][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.367592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.371254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 170.374704][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.378185][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 170.455571][ T7273] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.531607][ T7295] loop6: detected capacity change from 0 to 2048 [ 171.915119][ T7315] loop2: detected capacity change from 0 to 512 [ 172.597886][ T7295] EXT4-fs (loop6): test_dummy_encryption requires encrypt feature [ 172.685567][ T7325] loop1: detected capacity change from 0 to 2048 [ 172.777864][ T7325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.458786][ T7315] EXT4-fs (loop2): Test dummy encryption mode enabled [ 174.460746][ T7315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.478472][ T7315] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.1085: bad orphan inode 131083 [ 174.530367][ T7315] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 175.899109][ C1] net_ratelimit: 3249 callbacks suppressed [ 175.899127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.904199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 175.907555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.910903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.914286][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.917723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 175.921961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.925303][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 175.928950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.932297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.059472][ T7376] loop2: detected capacity change from 0 to 1024 [ 176.219417][ T7376] EXT4-fs (loop2): Ignoring removed bh option [ 176.324851][ T7376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 176.418339][ T7395] loop5: detected capacity change from 0 to 2048 [ 176.435923][ T7376] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 2: comm syz.2.1106: lblock 2 mapped to illegal pblock 2 (length 1) [ 176.450718][ T7376] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 176.453199][ T7376] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 48: comm syz.2.1106: lblock 0 mapped to illegal pblock 48 (length 1) [ 176.474158][ T7376] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 176.476821][ T7376] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.1106: Failed to acquire dquot type 0 [ 176.500674][ T7376] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 176.532773][ T7376] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.1106: mark_inode_dirty error [ 176.548452][ T7376] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 176.551477][ T7376] EXT4-fs (loop2): 1 orphan inode deleted [ 176.553584][ T7376] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,noblock_validity,debug,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 176.577878][ T5713] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 176.584148][ T5713] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 176.593694][ T7395] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.616446][ T5713] EXT4-fs error (device loop2): ext4_release_dquot:6220: comm kworker/u4:10: Failed to release dquot type 0 [ 176.673753][ T7376] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz.2.1106: Invalid inode table block 1 in block_group 0 [ 176.750360][ T7376] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 176.852651][ T4031] EXT4-fs error (device loop2): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 176.900581][ T4031] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 176.918846][ T4031] EXT4-fs error (device loop2): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 177.008527][ T7413] loop1: detected capacity change from 0 to 512 [ 178.656726][ T7436] loop6: detected capacity change from 0 to 2048 [ 178.722173][ T7436] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.867873][ T7443] loop6: detected capacity change from 0 to 1024 [ 178.967237][ T7413] EXT4-fs (loop1): Ignoring removed orlov option [ 179.242007][ T7443] EXT4-fs (loop6): Ignoring removed bh option [ 179.273834][ T7413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1120: inode #1: comm syz.1.1120: iget: illegal inode # [ 179.278157][ T7413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1120: error while reading EA inode 1 err=-117 [ 179.308981][ T7413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.1120: inode #1: comm syz.1.1120: iget: illegal inode # [ 179.314027][ T7443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 179.321984][ T7443] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 2: comm syz.6.1128: lblock 2 mapped to illegal pblock 2 (length 1) [ 179.329725][ T7413] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1120: error while reading EA inode 1 err=-117 [ 179.353194][ T7413] EXT4-fs (loop1): 1 orphan inode deleted [ 179.354786][ T7413] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,orlov,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 179.379954][ T7443] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 179.382379][ T7443] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 48: comm syz.6.1128: lblock 0 mapped to illegal pblock 48 (length 1) [ 179.428369][ T7443] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 179.430788][ T7443] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1128: Failed to acquire dquot type 0 [ 179.617508][ T7443] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 179.637074][ T7443] EXT4-fs error (device loop6): ext4_evict_inode:282: inode #11: comm syz.6.1128: mark_inode_dirty error [ 179.655061][ T7443] EXT4-fs warning (device loop6): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 179.657904][ T7443] EXT4-fs (loop6): 1 orphan inode deleted [ 179.659420][ T7443] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,noblock_validity,debug,resgid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 180.138520][ T153] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 180.466566][ T153] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 180.468818][ T153] EXT4-fs error (device loop6): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 0 [ 180.549249][ T7480] udc-core: couldn't find an available UDC or it's busy [ 180.561263][ T7480] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.654900][ T6508] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 180.660612][ T6508] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 180.665681][ T6508] EXT4-fs error (device loop6): ext4_quota_off:6486: inode #3: comm syz-executor: mark_inode_dirty error [ 180.841920][ T7487] loop1: detected capacity change from 0 to 512 [ 180.925173][ C1] net_ratelimit: 3696 callbacks suppressed [ 180.925189][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.930474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.934358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.938378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.942107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.945831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 180.949321][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 180.953003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.956559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 180.960186][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 181.206925][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 182.042355][ T7499] loop5: detected capacity change from 0 to 16 [ 182.068149][ T7501] loop6: detected capacity change from 0 to 256 [ 182.096845][ T7499] erofs: (device loop5): mounted with root inode @ nid 36. [ 183.074223][ T7487] EXT4-fs (loop1): Test dummy encryption mode enabled [ 183.076250][ T7487] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.152241][ T7487] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.1146: bad orphan inode 131083 [ 183.167738][ T7487] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 183.205479][ T7506] [ 183.206147][ T7506] ====================================================== [ 183.207982][ T7506] WARNING: possible circular locking dependency detected [ 183.209845][ T7506] 5.15.178-syzkaller #0 Not tainted [ 183.211232][ T7506] ------------------------------------------------------ [ 183.213182][ T7506] syz.5.1153/7506 is trying to acquire lock: [ 183.214822][ T7506] ffff0000cc576e70 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_device_down+0x130/0x710 [ 183.217464][ T7506] [ 183.217464][ T7506] but task is already holding lock: [ 183.219455][ T7506] ffff800016dea618 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xac/0x710 [ 183.221993][ T7506] [ 183.221993][ T7506] which lock already depends on the new lock. [ 183.221993][ T7506] [ 183.224868][ T7506] [ 183.224868][ T7506] the existing dependency chain (in reverse order) is: [ 183.227382][ T7506] [ 183.227382][ T7506] -> #2 (nr_node_list_lock){+...}-{2:2}: [ 183.229493][ T7506] _raw_spin_lock_bh+0x124/0x1c4 [ 183.231002][ T7506] nr_rt_device_down+0xac/0x710 [ 183.232491][ T7506] nr_device_event+0x134/0x160 [ 183.233919][ T7506] raw_notifier_call_chain+0xd4/0x164 [ 183.235553][ T7506] __dev_notify_flags+0x2ac/0x534 [ 183.237021][ T7506] dev_change_flags+0xc8/0x154 [ 183.238544][ T7506] dev_ifsioc+0x140/0xfe4 [ 183.239814][ T7506] dev_ioctl+0x4e0/0xd3c [ 183.241111][ T7506] sock_do_ioctl+0x1dc/0x2dc [ 183.242526][ T7506] sock_ioctl+0x4f0/0x8ac [ 183.243865][ T7506] __arm64_sys_ioctl+0x14c/0x1c8 [ 183.245402][ T7506] invoke_syscall+0x98/0x2b8 [ 183.246811][ T7506] el0_svc_common+0x138/0x258 [ 183.248262][ T7506] do_el0_svc+0x58/0x14c [ 183.249641][ T7506] el0_svc+0x7c/0x1f0 [ 183.250915][ T7506] el0t_64_sync_handler+0x84/0xe4 [ 183.252440][ T7506] el0t_64_sync+0x1a0/0x1a4 [ 183.253764][ T7506] [ 183.253764][ T7506] -> #1 (nr_neigh_list_lock){+...}-{2:2}: [ 183.255977][ T7506] _raw_spin_lock_bh+0x124/0x1c4 [ 183.257460][ T7506] nr_remove_neigh+0x30/0xec [ 183.258824][ T7506] nr_add_node+0x17e4/0x1fc4 [ 183.260236][ T7506] nr_rt_ioctl+0xe58/0x18c8 [ 183.261593][ T7506] nr_ioctl+0x14c/0x4b0 [ 183.262840][ T7506] sock_do_ioctl+0x134/0x2dc [ 183.264303][ T7506] sock_ioctl+0x4f0/0x8ac [ 183.265669][ T7506] __arm64_sys_ioctl+0x14c/0x1c8 [ 183.267128][ T7506] invoke_syscall+0x98/0x2b8 [ 183.268509][ T7506] el0_svc_common+0x138/0x258 [ 183.269914][ T7506] do_el0_svc+0x58/0x14c [ 183.271292][ T7506] el0_svc+0x7c/0x1f0 [ 183.272514][ T7506] el0t_64_sync_handler+0x84/0xe4 [ 183.274040][ T7506] el0t_64_sync+0x1a0/0x1a4 [ 183.275467][ T7506] [ 183.275467][ T7506] -> #0 (&nr_node->node_lock){+...}-{2:2}: [ 183.277693][ T7506] __lock_acquire+0x32d4/0x7638 [ 183.279226][ T7506] lock_acquire+0x240/0x77c [ 183.280638][ T7506] _raw_spin_lock_bh+0x124/0x1c4 [ 183.282157][ T7506] nr_rt_device_down+0x130/0x710 [ 183.283597][ T7506] nr_device_event+0x134/0x160 [ 183.285060][ T7506] raw_notifier_call_chain+0xd4/0x164 [ 183.286661][ T7506] __dev_notify_flags+0x2ac/0x534 [ 183.288238][ T7506] dev_change_flags+0xc8/0x154 [ 183.289775][ T7506] dev_ifsioc+0x140/0xfe4 [ 183.291111][ T7506] dev_ioctl+0x4e0/0xd3c [ 183.292438][ T7506] sock_do_ioctl+0x1dc/0x2dc [ 183.293806][ T7506] sock_ioctl+0x4f0/0x8ac [ 183.295203][ T7506] __arm64_sys_ioctl+0x14c/0x1c8 [ 183.296725][ T7506] invoke_syscall+0x98/0x2b8 [ 183.298198][ T7506] el0_svc_common+0x138/0x258 [ 183.299599][ T7506] do_el0_svc+0x58/0x14c [ 183.300909][ T7506] el0_svc+0x7c/0x1f0 [ 183.302179][ T7506] el0t_64_sync_handler+0x84/0xe4 [ 183.303696][ T7506] el0t_64_sync+0x1a0/0x1a4 [ 183.305084][ T7506] [ 183.305084][ T7506] other info that might help us debug this: [ 183.305084][ T7506] [ 183.307880][ T7506] Chain exists of: [ 183.307880][ T7506] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 183.307880][ T7506] [ 183.311767][ T7506] Possible unsafe locking scenario: [ 183.311767][ T7506] [ 183.313948][ T7506] CPU0 CPU1 [ 183.315478][ T7506] ---- ---- [ 183.316914][ T7506] lock(nr_node_list_lock); [ 183.318154][ T7506] lock(nr_neigh_list_lock); [ 183.320088][ T7506] lock(nr_node_list_lock); [ 183.322027][ T7506] lock(&nr_node->node_lock); [ 183.323290][ T7506] [ 183.323290][ T7506] *** DEADLOCK *** [ 183.323290][ T7506] [ 183.325399][ T7506] 3 locks held by syz.5.1153/7506: [ 183.326820][ T7506] #0: ffff800016cb4be8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 183.329153][ T7506] #1: ffff800016dea5b8 (nr_neigh_list_lock){+...}-{2:2}, at: nr_rt_device_down+0x38/0x710 [ 183.331841][ T7506] #2: ffff800016dea618 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_device_down+0xac/0x710 [ 183.334545][ T7506] [ 183.334545][ T7506] stack backtrace: [ 183.336144][ T7506] CPU: 0 PID: 7506 Comm: syz.5.1153 Not tainted 5.15.178-syzkaller #0 [ 183.338375][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.341147][ T7506] Call trace: [ 183.342045][ T7506] dump_backtrace+0x0/0x530 [ 183.343285][ T7506] show_stack+0x2c/0x3c [ 183.344388][ T7506] dump_stack_lvl+0x108/0x170 [ 183.345646][ T7506] dump_stack+0x1c/0x58 [ 183.346746][ T7506] print_circular_bug+0x150/0x1b8 [ 183.348167][ T7506] check_noncircular+0x2cc/0x378 [ 183.349450][ T7506] __lock_acquire+0x32d4/0x7638 [ 183.350751][ T7506] lock_acquire+0x240/0x77c [ 183.351977][ T7506] _raw_spin_lock_bh+0x124/0x1c4 [ 183.353282][ T7506] nr_rt_device_down+0x130/0x710 [ 183.354579][ T7506] nr_device_event+0x134/0x160 [ 183.355859][ T7506] raw_notifier_call_chain+0xd4/0x164 [ 183.357336][ T7506] __dev_notify_flags+0x2ac/0x534 [ 183.358745][ T7506] dev_change_flags+0xc8/0x154 [ 183.360068][ T7506] dev_ifsioc+0x140/0xfe4 [ 183.361255][ T7506] dev_ioctl+0x4e0/0xd3c [ 183.362409][ T7506] sock_do_ioctl+0x1dc/0x2dc [ 183.363650][ T7506] sock_ioctl+0x4f0/0x8ac [ 183.364834][ T7506] __arm64_sys_ioctl+0x14c/0x1c8 [ 183.366133][ T7506] invoke_syscall+0x98/0x2b8 [ 183.367402][ T7506] el0_svc_common+0x138/0x258 [ 183.368685][ T7506] do_el0_svc+0x58/0x14c [ 183.369888][ T7506] el0_svc+0x7c/0x1f0 [ 183.371020][ T7506] el0t_64_sync_handler+0x84/0xe4 [ 183.372441][ T7506] el0t_64_sync+0x1a0/0x1a4 [ 185.931212][ C1] net_ratelimit: 11024 callbacks suppressed [ 185.931229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.936291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 185.940484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.944142][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.947927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.951979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.955481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.958934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 185.962489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 185.965879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.941832][ C1] net_ratelimit: 19432 callbacks suppressed [ 190.941849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.947067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.950777][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.954871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.958512][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.962082][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 190.965520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.968884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 190.972387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:32:6a:f3:de:de:fa, vlan:0) [ 190.975833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 192.523455][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.525195][ T2057] ieee802154 phy1 wpan1: encryption failed: -22