last executing test programs: 31.72721788s ago: executing program 0 (id=416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="0174df"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 27.181922785s ago: executing program 0 (id=417): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r2, 0xfcff, 0x20000, 0x3) 21.247095722s ago: executing program 0 (id=428): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8100}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000380)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0xffffffd9, 0x0, 0x0, 0x2}}, 0x48) 21.246853723s ago: executing program 3 (id=429): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000001080)={[{@test_dummy_encryption_v1}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nodiscard}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x46c, &(0x7f0000000b00)="$eJzs289vFFUcAPDvTHcBAWlF/AGiVtHY+KOlBZWDF40mHjQx0QMea1sIslBDayKEyGoMHg2Jd2I8+S948mSMJxOvejWGhCgxAbm4ZnZnYHe7W2jZsoX9fJJl39t5M+99efN23s7rBDCwRrN/koitEfFbRAw3sq0FRhtvVy6dnvn30umZJGq1d/9K6uUuXzo9UxQt9tuSZ8bSiPSLJK+k1cLJU0enK5W5E3l+YvHYRxMLJ0+9cOTY9OG5w3PHpw4c2L9v8uWXpl7sSZxZmy7v+nR+98433z/39szBcx9satneHEevjGaB/12ra9/2dK8r67P/atfjTEr9bg03aygisu4q18f/cAzF9c4bjjc+72vjgDWVfWf/0f5h+VqqWgPuYkmsardY3W7A+lFc6LPfv8XrNk4/+u7iq40fQFncV/JXY0sp0vw/qLyG9Y9GxMHq1fPZK9ruQ9Q63DcAALhVP2Tzn+eXzv+SiHiwqVySrw2NRMR9EbE9Iu6PiB0R8UBe9qGIeHiF9bcvDS2df6YXVhnaTcnmf6/ka1ut87+0KDIylOfurcdfTg4dqcztjYhtETEW5Y1ZfrLTwYtDvP7rV93qb57/Haw22lHMBfODXChtbNrhzLeN9x5NSi9+FrGr1Cn+pL4SkEStlvX9zojYtbJDbysSR579bne3Qq3xXz2/NP5l9GCdqfZNxDON/q9GW/yFZPn1yYlNUZnbO1GcFUv9/MvZd7rVf0vx90DW/5tbz/+2EsP/JM3rtQsrr+Ps7192/U1ZumH8bed/RMxOL05vSN6rr1lvyD/7ZHpx8cRkxIbkrXq+5fOp6/sW+aJ8Fv/Yns7jf3u+Txb/IxGRncSPRsRjEfF43ndPRMSTEbFnmfh/eu2pD7ttWw/9P9vx++/a+T/S2v8rTwwd/fH7bvXfOP6s//fXU2P5J1n/N1KbusbVvTnFPqs9mwEAAODOk0bE1kjS8WvpNB0fb/y9/I7YnFbmFxafOzT/8fHZxjMCI1FOiztdw033QyeTan7ERn4qv1dcbN+X3zf+euieen58Zr4y2+fYYdBt6TL+M38O9bt1wJrzvBYMrvbxn/apHcDt5/oPg2u14988Ae58rv8wuDqN/zNteWsBcHdy/YfBZfzD4DL+YXAZ/zCQbuW5/rVKlJZ5el9ivSQiXbMqqusiwDs4UerB6O7zFxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B8AAP//gg7zQw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x18, r4, 0x1, 0x1, 0xfffffffd, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000000200)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.371283534s ago: executing program 3 (id=433): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000001800), 0x0, 0x8000) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000018c0)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000737d7a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac0c0080000000080000ff00000002000000"], 0x118) syz_open_dev$I2C(0x0, 0x7fffffffffffffff, 0x426400) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key(0x0, &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)="1540bf6f028b9e327570a94b18142155a977a035f17a98dc0702a8c4ea098cab4dcc7a68fc7cdb2a5a88415bc09a13b34232ed0d721568cedd852e4a7a1f728a3d19665bb0bad154aedc19758094a4c6c3291c79b747ed4713a5dbdb158ff8e3c9eabf00b50778fc2ace4f26035b631dbaded3e353a8b018df24395498fc890d494f06b8d25429f0eb8710a18d36fae22531e01a83e0ad02904257659fae52c6a1f67b1feca4ef8f3824f74105d6d3cbfe3d91bb7b2ad4652c5a3117f7d5645ddd1fe0f93a5270779e203037", 0xcc, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x80000000) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000000c0), 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000240)=""/161) ioprio_set$pid(0x3, 0x0, 0x0) 18.370066833s ago: executing program 1 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x20004040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) landlock_restrict_self(r5, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) landlock_restrict_self(r7, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)) 17.139704882s ago: executing program 3 (id=435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000002640)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40106e80, &(0x7f00000001c0)={0x2, 0x1, 0x3, 0x0, 0x0, 0x3, 0x2401}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) mkdir(0x0, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0), 0x0, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16]) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) chdir(&(0x7f0000000140)='./bus\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 17.115487505s ago: executing program 1 (id=436): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x1ce97bbf60ae786d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = getpid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x3}, @free_buffer], 0x38, 0x0, &(0x7f0000000400)="49db2abaecafa972fe58aa0a97f2d6d2d320d8c01e6503d235682062d8951a5574befa5a269b32cc4bae8c1dbe18e872211865055f5aa483"}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000044) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) 15.999866064s ago: executing program 1 (id=438): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) socket$nl_generic(0x10, 0x3, 0x10) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{}, {0x0, 0x2710}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 13.80552305s ago: executing program 3 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="0174df"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12.629088965s ago: executing program 4 (id=444): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x170, 0x2b8, 0x25c, 0x0, 0x7, 0x258, 0x3a8, 0x3a8, 0x258, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x108, 0x170, 0xa010000, {}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@ipv6={@local, @local, [], [], 'sit0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) 12.549930562s ago: executing program 2 (id=445): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) migrate_pages(0x0, 0x4, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xc0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bind$ax25(r1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1f) r5 = memfd_secret(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x56001, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) futimesat(r5, 0x0, 0x0) 12.511960935s ago: executing program 1 (id=446): syz_emit_ethernet(0x26e, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x238, 0x3a, 0xff, @local, @mcast2, {[@fragment={0xe4, 0x0, 0x75, 0x1, 0x0, 0x17, 0x66}, @hopopts={0x2b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x9}]}, @routing={0x11, 0x0, 0x2, 0x6}, @routing={0x0, 0xe, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x82, 0x2, 0x4, 0x1, 0x4f, 0x30, 0x5, [@loopback]}, @dstopts={0x3b, 0x2, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x8, {0x0, 0x0, 0x9, 0x19}}, @ra={0x5, 0x2, 0x9}]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x0, [{0x3, 0xa, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x1e, "77f902045490290b6e87f278e94724e20c43c95f9b49204a64d614d4cc9d0d46d954fda9a75d076993e3b87aa99b2454a86662e37b42678a74974ddd50b21e499efae61e3a816a367d019bc7f892d8975f1fc8a3e27139041cd21d2d12f30ee6f029d8d73f80f9b19d138598345b9c0feda226b333c55c668fb17b5b39603ee66b8534f1fbf97e139d35762307516482a1787d8f3bb76940602a0104ac045b59510dfd944672de5f77c0e6136c06847bbe70dd65236ef4d112e88fabc57d02a2a380eb697adf4e1d9090705f85ddf041bc076775f5d27555d3f60c44192fa92eee16828c1c4aa17f4a743e212cd2"}]}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="038000000000000004009a64080004003a010000140003006272696467655f736c6176655f31"], 0x40}}, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) getpriority(0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000001a40)}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001b00)=""/88, 0x58}, {&(0x7f0000001b80)=""/68, 0x44}, {&(0x7f0000001c00)=""/124, 0x7c}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)=""/146, 0x92}, {&(0x7f0000001d80)=""/37, 0x25}, {&(0x7f0000001dc0)=""/84, 0x54}], 0x7, &(0x7f0000001ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002000), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002080)=""/211, 0xd3}, {&(0x7f0000002180)=""/32, 0x20}, {&(0x7f00000021c0)=""/151, 0x97}, {&(0x7f0000002280)=""/63, 0x3f}], 0x4, &(0x7f0000002300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x3, 0x2001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22140, 0x18c) 11.259067915s ago: executing program 0 (id=447): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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") r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x400000000640, 0x0, 0x0, 0x400000000670, 0x4000000006a0], 0x0, 0x0, &(0x7f0000000640)=[{0x20, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, 0x0, 0x0, 0x404043000) 11.258916935s ago: executing program 4 (id=448): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40800) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000e3ae53e007adc435e55934d915ba4464753f24dec2667109ba0172602d0e352c91c7c9468cce6ae0e6a782a1b8b9262c1d9bb9c29f382ecf85c839aa1d0005f9c9e9c9c84b0f24248c5d08ab17e5e1803dea5da0532419ca55b611c521e7c6695060b3bbdbb314b8450c16043f074c7a9c699bfd767db0d688c2e1af", @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40) recvmsg(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee00, 0xee00) r4 = shmget$private(0x0, 0x1000, 0x40, &(0x7f000032a000/0x1000)=nil) setuid(0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3}, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}) shmctl$IPC_RMID(r4, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) setpriority(0x2, r5, 0x0) 9.321272611s ago: executing program 3 (id=449): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB='&\n'], 0x0}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[]) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60f3, &(0x7f0000000880)="$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") r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\t'], 0x28) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 9.320887411s ago: executing program 2 (id=450): ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000500)=ANY=[@ANYBLOB="0001", @ANYRES32]) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xc, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = dup(r5) getsockopt$inet6_buf(r6, 0x29, 0x32, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000500)=@v1={0x1000000, [{0xa6b5, 0xa}]}, 0xc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x20}], 0x1}, 0x300) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000847fff)="1f", 0x1, 0x48600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) 9.316067191s ago: executing program 4 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r5, 0xfd, 0x1) getdents64(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.292131323s ago: executing program 1 (id=452): socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22ffe6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x48b00, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x82) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000003fa8fcff00000000184200000000000000400000b7020000010000008500000084000000b70000009500000000000000004000"/124], &(0x7f0000000540)='syzkaller\x00', 0x1ff, 0x87, &(0x7f0000000980)=""/135, 0x40f00, 0x0, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2addb, 0xffffffffffffffff, 0x6, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x2, 0x1, 0x5, 0x8}, {0x2, 0x5, 0xd, 0x91e5e1e0bf26cf1e}, {0x0, 0x1, 0xd, 0x7}, {0x0, 0x5, 0xb, 0xa}, {0x1, 0x1, 0x3, 0x6}, {0x3, 0x1, 0x10, 0x9}], 0x10, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x2, 0x0, 0x1, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1], 0x0, 0x10, 0x9}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r8, @ANYRES64=r8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 8.188031272s ago: executing program 2 (id=453): r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x0, 0x28}, 0x0, &(0x7f0000000500)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, 0x0) openat$sequencer(0xffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 6.615489059s ago: executing program 0 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setitimer(0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r2, 0xffffffffffffffff, 0x0) 4.675371984s ago: executing program 4 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000022c0)='net/udplite6\x00') read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = syz_open_dev$video(&(0x7f00000002c0), 0x793e, 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000300)) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x106) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.436198833s ago: executing program 2 (id=456): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x7, 0x5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 3.492279939s ago: executing program 4 (id=457): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x60000, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(r3, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) openat$cgroup_int(r4, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x400000000000000) 3.490030909s ago: executing program 1 (id=458): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create(0xcbcc) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_setup(0x6dad, &(0x7f0000000180)={0x0, 0x4e5b, 0x400, 0x1, 0xce}, &(0x7f0000000080)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x1, 0x8, 0x5, 0x5, 0x1, 0x1}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0xc0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3.489531079s ago: executing program 2 (id=459): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'axA\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x10c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r1, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 3.466135361s ago: executing program 3 (id=460): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.201023033s ago: executing program 2 (id=461): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) membarrier(0x2, 0x0) connect$802154_dgram(r3, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r4, &(0x7f0000000140)=""/166) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 202.553683ms ago: executing program 4 (id=462): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x5, 0x3, 0x1, 0x0, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0xa, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x4, 0x5, 0x2, 0x0, 0x6, 0x9, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x1000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80000001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0xef, 0x8, 0xc61, 0x7, 0xd, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x2a01, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x80) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 0s ago: executing program 0 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101000028000000", @ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x22, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x710d94c4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x0, 0x7, 0x40, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x15, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 'id0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r5) mkdir(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. [ 70.911867][ T4172] cgroup: Unknown subsys name 'net' [ 71.026948][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.522322][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.530062][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.778131][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 74.853319][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 74.908991][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 75.049554][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 75.087574][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 75.114569][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.130594][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.141206][ T4192] device bridge_slave_0 entered promiscuous mode [ 75.151515][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.159967][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.168497][ T4183] device bridge_slave_0 entered promiscuous mode [ 75.178504][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.186867][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.197878][ T4183] device bridge_slave_1 entered promiscuous mode [ 75.226102][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.233925][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.242751][ T4192] device bridge_slave_1 entered promiscuous mode [ 75.295503][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.323201][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 75.333892][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.362036][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.397453][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.434688][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.444429][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.454752][ T4197] device bridge_slave_0 entered promiscuous mode [ 75.493313][ T4183] team0: Port device team_slave_0 added [ 75.502467][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.510827][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.521333][ T4197] device bridge_slave_1 entered promiscuous mode [ 75.544286][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.551848][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.560887][ T4184] device bridge_slave_0 entered promiscuous mode [ 75.571740][ T4183] team0: Port device team_slave_1 added [ 75.578788][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.586750][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.597418][ T4184] device bridge_slave_1 entered promiscuous mode [ 75.624899][ T4192] team0: Port device team_slave_0 added [ 75.663440][ T4192] team0: Port device team_slave_1 added [ 75.694272][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.706923][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.738114][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.745978][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.779146][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.794599][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.806929][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.840573][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.848157][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.877802][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.911998][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.920033][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.947018][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.958844][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.966746][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.976046][ T4199] device bridge_slave_0 entered promiscuous mode [ 76.010048][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.017449][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.044976][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.057296][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.064975][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.073417][ T4199] device bridge_slave_1 entered promiscuous mode [ 76.103561][ T4184] team0: Port device team_slave_0 added [ 76.113038][ T4197] team0: Port device team_slave_0 added [ 76.128735][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.152348][ T4184] team0: Port device team_slave_1 added [ 76.174129][ T4197] team0: Port device team_slave_1 added [ 76.183882][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.249090][ T4183] device hsr_slave_0 entered promiscuous mode [ 76.256860][ T4183] device hsr_slave_1 entered promiscuous mode [ 76.280949][ T4192] device hsr_slave_0 entered promiscuous mode [ 76.290138][ T4192] device hsr_slave_1 entered promiscuous mode [ 76.297721][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.306970][ T4192] Cannot create hsr debugfs directory [ 76.332878][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.340835][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.370583][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.384291][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.392720][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.421298][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.444611][ T4199] team0: Port device team_slave_0 added [ 76.460894][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.468513][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.497066][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 76.502532][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.504406][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 76.521614][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 76.524153][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.535641][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.562717][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 76.562752][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.587434][ T4199] team0: Port device team_slave_1 added [ 76.639069][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 76.672524][ T4197] device hsr_slave_0 entered promiscuous mode [ 76.680654][ T4197] device hsr_slave_1 entered promiscuous mode [ 76.687678][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.696775][ T4197] Cannot create hsr debugfs directory [ 76.739805][ T4184] device hsr_slave_0 entered promiscuous mode [ 76.748093][ T4184] device hsr_slave_1 entered promiscuous mode [ 76.757553][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.772269][ T4184] Cannot create hsr debugfs directory [ 76.781914][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.790456][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.819670][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.850990][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.859315][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.893989][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.043375][ T4199] device hsr_slave_0 entered promiscuous mode [ 77.051370][ T4199] device hsr_slave_1 entered promiscuous mode [ 77.058817][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.070200][ T4199] Cannot create hsr debugfs directory [ 77.310148][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.335498][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.355289][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.371341][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.385131][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.396042][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.407581][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.428284][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.497072][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.508079][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.529541][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.550756][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.668847][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.688415][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.703111][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.732005][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.741377][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.757841][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.781355][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.801895][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.809994][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.850713][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.868494][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.885265][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.897586][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.925054][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.935894][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.972073][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.985383][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.995113][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.005111][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.012610][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.024144][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.033869][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.044308][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.052631][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.062613][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.083109][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.110701][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.117870][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.127128][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.136279][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.144700][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.166651][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.176825][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.186164][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.194620][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.221568][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.230428][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.243737][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.253891][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.264781][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.276844][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.285326][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.295063][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.305859][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.315400][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.324606][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.334936][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.342660][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.351357][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.361152][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.388719][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.400565][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.414637][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.422499][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.433364][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.444160][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.455419][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.465437][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.478711][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.540048][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.557732][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.570202][ T4233] Bluetooth: hci2: command 0x041b tx timeout [ 78.576989][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 78.578347][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.595457][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.597071][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 78.606368][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.620061][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.629986][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.639714][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 78.647074][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.657463][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.679571][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.692638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.704680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.716493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.726126][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 78.739376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.754388][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.766878][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.781410][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.801246][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.813800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.824807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.833904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.845906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.854903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.865076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.878782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.891925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.902009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.911442][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.919078][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.957908][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.984841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.010568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.018712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.028564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.050330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.062804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.076933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.087766][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.097495][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.109343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.129629][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.148139][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.165192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.176779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.194634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.219747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.235865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.281580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.293225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.319851][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.327834][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.337769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.348828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.360499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.371274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.382253][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.390536][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.402176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.413401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.441684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.460980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.496380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.505863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.515943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.563760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.574327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.585576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.596146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.607152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.616536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.624494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.632868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.653191][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.674613][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.685824][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.696797][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.706946][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.717110][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.725302][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 79.740430][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.777775][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 79.791257][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.814119][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.827372][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.843817][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.859936][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.871634][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.882606][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.892315][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.931069][ T4183] device veth0_vlan entered promiscuous mode [ 79.954532][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.969877][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.011111][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.023543][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.041079][ T4183] device veth1_vlan entered promiscuous mode [ 80.056133][ T4197] device veth0_vlan entered promiscuous mode [ 80.072403][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.082539][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.094978][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.104777][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.115183][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.128085][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.138134][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.172049][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.186727][ T4197] device veth1_vlan entered promiscuous mode [ 80.211125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.225993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.235335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.248660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.282491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.291774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.301205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.311081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.350888][ T4192] device veth0_vlan entered promiscuous mode [ 80.374781][ T4183] device veth0_macvtap entered promiscuous mode [ 80.395428][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.407183][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.417768][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.427969][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.438997][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.448070][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.458256][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.467660][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.476557][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.488430][ T4197] device veth0_macvtap entered promiscuous mode [ 80.500766][ T4183] device veth1_macvtap entered promiscuous mode [ 80.510616][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.521723][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.532395][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.542654][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.560013][ T4199] device veth0_vlan entered promiscuous mode [ 80.567761][ T4192] device veth1_vlan entered promiscuous mode [ 80.578819][ T4197] device veth1_macvtap entered promiscuous mode [ 80.595897][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.630156][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.639620][ T4267] Bluetooth: hci2: command 0x040f tx timeout [ 80.646740][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 80.654393][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 80.677239][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.695418][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.711530][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.723496][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.724350][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 80.736171][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.750527][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.760534][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.771103][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.782658][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.791891][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.802334][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 80.811912][ T4199] device veth1_vlan entered promiscuous mode [ 80.840352][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.861733][ T4192] device veth0_macvtap entered promiscuous mode [ 80.876282][ T4192] device veth1_macvtap entered promiscuous mode [ 80.886611][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.896673][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.906451][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.916974][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.927191][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.940573][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.951303][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.963552][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.973199][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.982659][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.992070][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.006229][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020414][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.032797][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.043946][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053787][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062956][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.091561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.103046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.119221][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.128228][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.138499][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.147336][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.194040][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.205446][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.216726][ T4199] device veth0_macvtap entered promiscuous mode [ 81.246232][ T4199] device veth1_macvtap entered promiscuous mode [ 81.292515][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.304209][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.317577][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.328392][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.337650][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.348000][ T4184] device veth0_vlan entered promiscuous mode [ 81.371907][ T4184] device veth1_vlan entered promiscuous mode [ 81.379977][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.392624][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.404045][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.416376][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.428355][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.461183][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.472461][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.482609][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.492718][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.503266][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.513959][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.525235][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.536239][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.548154][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.581490][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.594559][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.606082][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.617409][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.628507][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.642514][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.656150][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.666134][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.676789][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.687075][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.696459][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.713149][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.719945][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.723615][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.740256][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.742040][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758526][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.782540][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.794181][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805386][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.816712][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.827238][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.837893][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.851494][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.860971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.872939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.882079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.950777][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.960109][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.968842][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.980668][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.003402][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.003468][ T4184] device veth0_macvtap entered promiscuous mode [ 82.015986][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.021800][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.036544][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.046129][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.055467][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.084808][ T4184] device veth1_macvtap entered promiscuous mode [ 82.092389][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.110768][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.130275][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.146882][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.241097][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.258708][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.271298][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.283296][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.294855][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.306184][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.316683][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.330278][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.342697][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.383349][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.392648][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.409805][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.427498][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.438782][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.506555][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.516520][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.529109][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.548812][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568667][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.587251][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.598389][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.610434][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.622640][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.633933][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.658373][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.674520][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.674560][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.684270][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.700870][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.714614][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.724321][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 82.730238][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.737020][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 82.741011][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 82.788785][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.799336][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 82.816738][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829075][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.939083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.950031][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.972926][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.005712][ T3010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.024833][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 83.053414][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.084315][ T4300] loop4: detected capacity change from 0 to 32768 [ 83.351482][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.675919][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.807651][ T4300] ERROR: (device loop4): diAllocAG: nfreeinos = 0, but iag on freelist [ 83.807651][ T4300] [ 83.842592][ T4300] ERROR: (device loop4): remounting filesystem as read-only [ 83.852528][ T4300] ialloc: diAlloc returned -5! [ 83.965801][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.021185][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.082640][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.089232][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.142192][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.239927][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.138770][ T4324] loop0: detected capacity change from 0 to 128 [ 85.340367][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7'. [ 85.374288][ T4324] EXT4-fs (loop0): Ignoring removed nobh option [ 85.745632][ T4324] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 86.009150][ T4324] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.417602][ T4309] loop2: detected capacity change from 0 to 32768 [ 86.468841][ T4338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.527977][ T4309] ======================================================= [ 86.527977][ T4309] WARNING: The mand mount option has been deprecated and [ 86.527977][ T4309] and is ignored by this kernel. Remove the mand [ 86.527977][ T4309] option from the mount to silence this warning. [ 86.527977][ T4309] ======================================================= [ 86.804132][ T4309] XFS (loop2): Mounting V5 Filesystem [ 86.882244][ T1346] cfg80211: failed to load regulatory.db [ 87.305831][ T4309] XFS (loop2): Ending clean mount [ 87.380202][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.743896][ T7] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 87.869879][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.928961][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.962476][ T4348] loop3: detected capacity change from 0 to 32768 [ 87.972247][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.984510][ T4309] XFS (loop2): Quotacheck needed: Please wait. [ 88.046689][ T4348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.11 (4348) [ 88.129371][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.180565][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.249005][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.269194][ T4309] XFS (loop2): Quotacheck: Done. [ 88.305250][ T4348] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 88.324749][ T4348] BTRFS info (device loop3): using free space tree [ 88.355762][ T4197] XFS (loop2): Unmounting Filesystem [ 88.369225][ T4348] BTRFS info (device loop3): has skinny extents [ 88.396592][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.413349][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.485247][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.559525][ T4267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.578598][ T4378] loop1: detected capacity change from 0 to 16 [ 88.610103][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.625732][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.707024][ T4378] erofs: (device loop1): mounted with root inode @ nid 36. [ 88.723090][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.869752][ T4348] BTRFS info (device loop3): enabling ssd optimizations [ 88.885521][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 88.915921][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 88.952932][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.053171][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.110940][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.162448][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.279453][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.362994][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.456583][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.599303][ T4267] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.620074][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 89.639000][ T4267] usb 5-1: config 0 has no interfaces? [ 89.666694][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 89.695613][ T4267] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.730855][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.735329][ T154] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 89.771874][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.972069][ T4267] usb 5-1: config 0 descriptor?? [ 89.989353][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 90.109309][ T7] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 90.123180][ T7] usb 1-1: Product: syz [ 90.128154][ T7] usb 1-1: Manufacturer: syz [ 90.136718][ T7] usb 1-1: SerialNumber: syz [ 90.405845][ T7] usb 1-1: config 0 descriptor?? [ 90.609677][ T7] usb 1-1: can't set config #0, error -71 [ 90.656244][ T4368] udc-core: couldn't find an available UDC or it's busy [ 90.693219][ T7] usb 1-1: USB disconnect, device number 2 [ 90.755388][ T4368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.766318][ T4368] udc-core: couldn't find an available UDC or it's busy [ 90.779019][ T4368] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.821787][ T4334] usb 5-1: USB disconnect, device number 2 [ 91.000417][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.109166][ T4334] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.128236][ T4398] loop2: detected capacity change from 0 to 32768 [ 92.145901][ T4422] loop1: detected capacity change from 0 to 128 [ 92.374716][ T4422] EXT4-fs (loop1): Ignoring removed nobh option [ 92.945676][ T4398] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist [ 92.945676][ T4398] [ 93.098700][ T4422] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 93.124953][ T4398] ERROR: (device loop2): remounting filesystem as read-only [ 93.169646][ T4422] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.199007][ T4398] ialloc: diAlloc returned -5! [ 93.519322][ T4438] netlink: 'syz.1.27': attribute type 10 has an invalid length. [ 93.625528][ T4438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.691037][ T4438] team0: Port device bond0 added [ 93.922589][ T4440] team0 (unregistering): Port device team_slave_0 removed [ 93.999327][ T4440] team0 (unregistering): Port device team_slave_1 removed [ 94.066712][ T4440] team0 (unregistering): Port device bond0 removed [ 94.154690][ T4426] loop3: detected capacity change from 0 to 32768 [ 94.288030][ T4426] XFS (loop3): Mounting V5 Filesystem [ 94.437672][ T4438] syz.1.27 (4438) used greatest stack depth: 20000 bytes left [ 94.450765][ T4426] XFS (loop3): Ending clean mount [ 94.687420][ T4458] loop1: detected capacity change from 0 to 16 [ 94.754692][ T4458] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.858014][ T4199] XFS (loop3): Unmounting Filesystem [ 96.719641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 98.558994][ T4419] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.133873][ T4419] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.330206][ T4419] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 99.408018][ T4419] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.461906][ T4498] loop2: detected capacity change from 0 to 64 [ 99.480675][ T4419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 99.760608][ T4419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 99.835384][ T4504] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 99.889748][ T4419] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.987316][ T4419] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.147308][ T4419] usb 2-1: Product: syz [ 100.681506][ T4419] usb 2-1: Manufacturer: syz [ 100.772923][ T4419] usb 2-1: can't set config #1, error -71 [ 100.790871][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.838609][ T4419] usb 2-1: USB disconnect, device number 2 [ 100.848125][ T4504] team0: Port device bond0 added [ 100.932257][ T4500] loop4: detected capacity change from 0 to 32768 [ 100.970089][ T4500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.40 (4500) [ 101.054235][ T4507] team0 (unregistering): Port device team_slave_0 removed [ 101.091934][ T4500] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 101.110034][ T4500] BTRFS info (device loop4): using free space tree [ 101.116876][ T4500] BTRFS info (device loop4): has skinny extents [ 101.136871][ T4507] team0 (unregistering): Port device team_slave_1 removed [ 101.190861][ T4507] team0 (unregistering): Port device bond0 removed [ 101.373799][ T4500] BTRFS info (device loop4): enabling ssd optimizations [ 101.462116][ T4502] loop3: detected capacity change from 0 to 32768 [ 101.502840][ T4537] loop0: detected capacity change from 0 to 16 [ 101.563354][ T4537] erofs: (device loop0): mounted with root inode @ nid 36. [ 101.582454][ T4502] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 101.582454][ T4502] [ 101.649233][ T4502] ERROR: (device loop3): remounting filesystem as read-only [ 101.671680][ T4508] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 101.718337][ T4540] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 101.718337][ T4540] [ 101.805095][ T4502] ialloc: diAlloc returned -5! [ 101.828020][ T4540] ialloc: diAlloc returned -5! [ 104.909353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 104.919422][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 104.938968][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 104.948453][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 104.957870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 104.967182][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 104.977052][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 104.986656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 104.996203][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 105.580985][ T26] audit: type=1326 audit(1754637786.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.369027][ T26] audit: type=1326 audit(1754637786.195:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.415959][ T26] audit: type=1326 audit(1754637786.965:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.492502][ T4586] loop3: detected capacity change from 0 to 16 [ 106.503872][ T4585] loop4: detected capacity change from 0 to 256 [ 106.567825][ T26] audit: type=1326 audit(1754637786.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.595891][ T4586] erofs: (device loop3): mounted with root inode @ nid 36. [ 106.625715][ T4585] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.702135][ T26] audit: type=1326 audit(1754637786.965:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.727784][ T4585] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 106.862195][ T4588] tipc: Started in network mode [ 106.872724][ T4588] tipc: Node identity 1eea7c4f64fb, cluster identity 4711 [ 106.880755][ T26] audit: type=1326 audit(1754637786.965:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 106.924912][ T4588] tipc: Enabled bearer , priority 0 [ 106.954171][ T4593] D: renamed from syzkaller0 [ 106.994530][ T26] audit: type=1326 audit(1754637786.965:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 107.030347][ T26] audit: type=1326 audit(1754637786.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80a4d2be9 code=0x7ffc0000 [ 107.070977][ T4585] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.132334][ T26] audit: type=1326 audit(1754637787.045:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80a4d1550 code=0x7ffc0000 [ 107.198744][ T26] audit: type=1326 audit(1754637787.045:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa80a4d4417 code=0x7ffc0000 [ 107.306999][ T4593] tipc: Disabling bearer [ 108.078378][ T4590] loop1: detected capacity change from 0 to 32768 [ 108.678335][ T4590] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist [ 108.678335][ T4590] [ 108.827092][ T4590] ERROR: (device loop1): remounting filesystem as read-only [ 108.839030][ T4590] ialloc: diAlloc returned -5! [ 109.394772][ T4267] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.421300][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 109.659104][ T4267] usb 4-1: Using ep0 maxpacket: 8 [ 109.789818][ T4267] usb 4-1: config 0 has no interfaces? [ 109.971180][ T4267] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 109.983760][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.000828][ T4267] usb 4-1: Product: syz [ 110.007300][ T4267] usb 4-1: Manufacturer: syz [ 110.020603][ T4267] usb 4-1: SerialNumber: syz [ 110.077425][ T4267] usb 4-1: config 0 descriptor?? [ 110.410313][ T4604] loop2: detected capacity change from 0 to 32768 [ 110.510240][ T4267] usb 4-1: USB disconnect, device number 2 [ 110.538807][ T4604] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.62 (4604) [ 110.645896][ T4604] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.669094][ T4604] BTRFS info (device loop2): using free space tree [ 110.708048][ T4604] BTRFS info (device loop2): has skinny extents [ 112.735320][ T4604] BTRFS error (device loop2): open_ctree failed: -12 [ 113.336236][ T4684] tipc: Started in network mode [ 113.361559][ T4684] tipc: Node identity e299809d26dc, cluster identity 4711 [ 113.480023][ T4684] tipc: Enabled bearer , priority 0 [ 113.639199][ T4684] device syzkaller0 entered promiscuous mode [ 114.052801][ T4679] tipc: Resetting bearer [ 114.110543][ T4679] tipc: Disabling bearer [ 114.254207][ T4692] Zero length message leads to an empty skb [ 114.369016][ T4296] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 114.851438][ T4296] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 114.871247][ T4296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.885444][ T4296] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.161226][ T4296] usb 2-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 115.804754][ T4701] loop0: detected capacity change from 0 to 8192 [ 115.813191][ T4296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.283565][ T4701] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 116.290112][ T4296] usb 2-1: Product: syz [ 116.305379][ T4296] usb 2-1: Manufacturer: syz [ 116.316309][ T4296] usb 2-1: SerialNumber: syz [ 116.351370][ T4701] REISERFS (device loop0): using ordered data mode [ 116.358324][ T4701] reiserfs: using flush barriers [ 116.384402][ T4701] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 116.404395][ T4296] usb 2-1: can't set config #1, error -71 [ 116.414274][ T4296] usb 2-1: USB disconnect, device number 3 [ 116.433182][ T4297] udevd[4297]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 116.471291][ T4701] REISERFS (device loop0): checking transaction log (loop0) [ 116.554258][ T4716] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 116.590524][ T4701] REISERFS (device loop0): Using r5 hash to sort names [ 116.622582][ T4701] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 119.124490][ T4739] loop4: detected capacity change from 0 to 4096 [ 119.193422][ T4739] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 119.367242][ T4751] [ 119.379303][ T4739] ntfs3: loop4: Failed to load $Extend. [ 119.582123][ T4759] loop3: detected capacity change from 0 to 1024 [ 122.761734][ T4799] kernel profiling enabled (shift: 17) [ 123.059071][ T4334] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 123.320826][ T4820] loop0: detected capacity change from 0 to 1024 [ 123.464385][ T4820] EXT4-fs (loop0): Ignoring removed bh option [ 123.471022][ T4820] EXT4-fs (loop0): inline encryption not supported [ 123.724122][ T4820] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.117: lblock 2 mapped to illegal pblock 2 (length 1) [ 123.743675][ T4820] __quota_error: 19 callbacks suppressed [ 123.743717][ T4820] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 123.758509][ T4820] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.117: lblock 0 mapped to illegal pblock 48 (length 1) [ 123.783197][ T4820] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 123.792733][ T4820] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.117: Failed to acquire dquot type 0 [ 123.806868][ T4820] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 123.826639][ T4820] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.117: mark_inode_dirty error [ 123.841895][ T4820] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 123.853113][ T4820] EXT4-fs (loop0): 1 orphan inode deleted [ 123.858990][ T4820] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 123.877902][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.978199][ T4711] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.230096][ T4711] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 124.294673][ T4825] process 'syz.2.118' launched './file1' with NULL argv: empty string added [ 124.319172][ T4711] EXT4-fs error (device loop0): ext4_release_dquot:6243: comm kworker/u4:14: Failed to release dquot type 0 [ 124.798861][ C1] sched: RT throttling activated [ 125.150525][ T4334] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.173783][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.212821][ T4334] usb 4-1: Product: syz [ 125.232601][ T4334] usb 4-1: Manufacturer: syz [ 125.252286][ T4334] usb 4-1: SerialNumber: syz [ 125.282403][ T4334] usb 4-1: config 0 descriptor?? [ 125.549370][ T4334] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.603577][ T4192] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 125.645348][ T4192] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 125.700197][ T4192] EXT4-fs error (device loop0): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 127.712907][ T4334] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 127.730024][ T4334] usb 4-1: USB disconnect, device number 3 [ 128.943655][ T4857] loop2: detected capacity change from 0 to 32768 [ 129.053853][ T4857] ialloc: diAlloc returned -5! [ 129.101311][ T4857] attempt to access beyond end of device [ 129.101311][ T4857] loop2: rw=1, want=4680040, limit=32768 [ 129.113954][ T4857] metapage_write_end_io: I/O error [ 129.142074][ T4857] blkno = 8ed2c, nblocks = 1 [ 129.146908][ T4857] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 129.146908][ T4857] [ 129.166473][ T4857] ERROR: (device loop2): remounting filesystem as read-only [ 129.833584][ T4861] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 4861 comm: syz.4.128) [ 129.852387][ T26] audit: type=1800 audit(1754637810.435:31): pid=4861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.128" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=34373 res=0 errno=0 [ 129.888789][ T4861] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.128' sets config #1 [ 129.938464][ T4862] loop0: detected capacity change from 0 to 1024 [ 130.154944][ T4862] EXT4-fs (loop0): Ignoring removed bh option [ 130.176633][ T4862] EXT4-fs (loop0): inline encryption not supported [ 130.479903][ T4862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 130.539326][ T4862] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 2: comm syz.0.127: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.559779][ T4862] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 130.568104][ T4862] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 48: comm syz.0.127: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.593065][ T278] blkno = 8ed2c, nblocks = 4 [ 130.597842][ T278] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 130.597842][ T278] [ 130.638738][ T4197] attempt to access beyond end of device [ 130.638738][ T4197] loop2: rw=1, want=4680040, limit=32768 [ 130.658317][ T4862] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 130.658920][ T4197] metapage_write_end_io: I/O error [ 130.688518][ T4862] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.127: Failed to acquire dquot type 0 [ 130.689401][ T4197] JFS: metapage_get_blocks failed [ 130.726438][ T4862] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 130.738556][ T4197] JFS: metapage_get_blocks failed [ 130.748678][ T4197] JFS: metapage_get_blocks failed [ 130.758826][ T4197] JFS: metapage_get_blocks failed [ 130.779804][ T4862] EXT4-fs error (device loop0): ext4_evict_inode:282: inode #11: comm syz.0.127: mark_inode_dirty error [ 130.804460][ T4862] EXT4-fs warning (device loop0): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 130.839663][ T4862] EXT4-fs (loop0): 1 orphan inode deleted [ 130.858937][ T4862] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback. [ 130.865707][ T144] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.905858][ T144] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 130.912798][ T4875] loop4: detected capacity change from 0 to 128 [ 130.949093][ T144] EXT4-fs error (device loop0): ext4_release_dquot:6243: comm kworker/u4:1: Failed to release dquot type 0 [ 130.989264][ T4875] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000032b,nobarrier,,errors=continue. Quota mode: none. [ 131.033425][ T4875] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.967233][ T4192] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 132.117842][ T4192] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 132.215875][ T4884] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.133: Invalid block bitmap block 0 in block_group 0 [ 132.232508][ T4307] udevd[4307]: incorrect ext4dev checksum on /dev/loop4 [ 132.240329][ T4881] device syzkaller0 entered promiscuous mode [ 132.266770][ T4884] EXT4-fs error (device loop4): ext4_discard_preallocations:5131: comm syz.4.133: Error -117 reading block bitmap for 0 [ 132.272644][ T4192] EXT4-fs error (device loop0): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 132.296378][ T4884] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.133: Invalid inode table block 0 in block_group 0 [ 132.313583][ T4894] input: syz1 as /devices/virtual/input/input5 [ 132.335473][ T4884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 132.360138][ T4884] EXT4-fs error (device loop4): ext4_ext_truncate:4456: inode #13: comm syz.4.133: mark_inode_dirty error [ 132.418340][ T4884] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz.4.133: Invalid inode table block 0 in block_group 0 [ 132.562198][ T4884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 132.633735][ T4884] EXT4-fs error (device loop4): ext4_truncate:4273: inode #13: comm syz.4.133: mark_inode_dirty error [ 132.685746][ T4304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 132.737376][ T4304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 132.960940][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970937][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.595380][ T4936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 135.895514][ T4937] loop0: detected capacity change from 0 to 256 [ 135.979866][ T4937] exfat: Deprecated parameter 'namecase' [ 135.987095][ T4937] exfat: Deprecated parameter 'utf8' [ 136.106577][ T4937] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 136.296552][ T4941] loop4: detected capacity change from 0 to 1024 [ 137.973578][ T4317] hfsplus: b-tree write err: -5, ino 4 [ 139.164238][ T4967] netlink: 'syz.2.158': attribute type 4 has an invalid length. [ 139.188732][ T4967] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.158'. [ 139.286522][ T4266] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 139.473148][ T4974] loop4: detected capacity change from 0 to 64 [ 139.646728][ T4266] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 141.901660][ T4983] loop2: detected capacity change from 0 to 1024 [ 142.683515][ T4983] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000000000055e,delalloc,abort,nodelalloc,,errors=continue. Quota mode: none. [ 142.795681][ T4998] loop1: detected capacity change from 0 to 16 [ 142.826327][ T4983] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.2.164: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1 [ 142.895161][ T4988] fido_id[4988]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.905407][ T4983] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 142.949246][ T4998] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.976714][ T4183] hfs: node 4:3 still has 2 user(s)! [ 142.981376][ T4983] EXT4-fs warning (device loop2): ext4_rename_delete:3792: inode #2: comm syz.2.164: Deleting old file: nlink 4, error=-117 [ 144.315856][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.356265][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.386079][ T5019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.457611][ T5019] device bridge_slave_0 left promiscuous mode [ 144.501269][ T5019] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.582381][ T5019] device bridge_slave_1 left promiscuous mode [ 144.606994][ T5019] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.658521][ T5019] bond0: (slave bond_slave_0): Releasing backup interface [ 144.748995][ T1346] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 144.804084][ T5019] bond0: (slave bond_slave_1): Releasing backup interface [ 144.924556][ T5019] team0: Failed to send options change via netlink (err -105) [ 144.942699][ T5019] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 144.958578][ T5019] team0: Port device team_slave_0 removed [ 144.986913][ T5019] team0: Failed to send options change via netlink (err -105) [ 145.006476][ T5019] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 145.020468][ T5019] team0: Port device team_slave_1 removed [ 145.028546][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.037159][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.067404][ T5019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.081911][ T5019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.207905][ T5021] team0: Failed to send options change via netlink (err -105) [ 145.219613][ T5021] team0: Mode changed to "loadbalance" [ 145.593630][ T1346] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.721039][ T1346] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 145.734345][ T1346] usb 3-1: can't read configurations, error -71 [ 146.918698][ T5050] loop1: detected capacity change from 0 to 8 [ 149.015906][ T4410] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.342611][ T5068] loop2: detected capacity change from 0 to 16 [ 149.454343][ T5068] erofs: (device loop2): mounted with root inode @ nid 36. [ 150.239608][ T4410] usb 5-1: Using ep0 maxpacket: 16 [ 150.389094][ T4410] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.416845][ T4410] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.433265][ T5085] block nbd0: shutting down sockets [ 151.349328][ T4410] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 151.378978][ T4410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.415796][ T4410] usb 5-1: Product: syz [ 151.427351][ T5096] loop0: detected capacity change from 0 to 512 [ 151.438965][ T4410] usb 5-1: Manufacturer: syz [ 151.453862][ T4410] usb 5-1: SerialNumber: syz [ 151.590333][ T5096] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 151.610542][ T4410] usb 5-1: config 0 descriptor?? [ 151.818997][ T4410] usb 5-1: can't set config #0, error -71 [ 151.835318][ T4410] usb 5-1: USB disconnect, device number 4 [ 151.851769][ T5096] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.191: casefold flag without casefold feature [ 153.347733][ T5096] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.191: couldn't read orphan inode 15 (err -117) [ 153.419904][ T5096] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 155.624857][ T1346] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.949042][ T1346] usb 2-1: Using ep0 maxpacket: 32 [ 156.011173][ T4410] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.968960][ T4410] usb 5-1: Using ep0 maxpacket: 8 [ 157.191207][ T4410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.209028][ T4410] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.222282][ T4410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.252577][ T4410] usb 5-1: config 0 descriptor?? [ 157.279110][ T1346] usb 2-1: device descriptor read/all, error -71 [ 158.490335][ T4410] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.816536][ T5131] udc-core: couldn't find an available UDC or it's busy [ 158.871044][ T5131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.887720][ T5167] binder: 5159:5167 ioctl c0306201 200000000c80 returned -14 [ 159.664898][ T5164] loop1: detected capacity change from 0 to 40427 [ 159.681453][ T5170] loop0: detected capacity change from 0 to 1024 [ 159.694972][ T5131] udc-core: couldn't find an available UDC or it's busy [ 159.722017][ T5164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 159.730811][ T5164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.740119][ T5131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.759122][ T5164] F2FS-fs (loop1): invalid crc value [ 159.772009][ T5172] loop3: detected capacity change from 0 to 2048 [ 159.791612][ T4246] usb 5-1: USB disconnect, device number 5 [ 159.815688][ T5164] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.859754][ T5177] loop2: detected capacity change from 0 to 128 [ 159.883808][ T5177] FAT-fs (loop2): Unrecognized mount option "s(öƒYg7>-#̘n•¤hortname=winnt" or missing value [ 159.901022][ T5172] NILFS (loop3): invalid segment: Magic number mismatch [ 159.908515][ T5172] NILFS (loop3): trying rollback from an earlier position [ 159.939800][ T5164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 159.947207][ T5164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 159.961196][ T5172] NILFS (loop3): recovery complete [ 160.209535][ T5179] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.447626][ T5189] loop2: detected capacity change from 0 to 16 [ 161.673324][ T5189] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.438982][ T4674] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.629295][ T4674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.688983][ T5185] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.713457][ T4674] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 164.830938][ T4674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.883480][ T4674] usb 1-1: config 0 descriptor?? [ 164.925369][ T4674] pwc: Askey VC010 type 2 USB webcam detected. [ 165.170349][ T5185] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.209075][ T5185] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 165.218187][ T5185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.264176][ T5185] usb 4-1: config 0 descriptor?? [ 165.322582][ T5185] pwc: Askey VC010 type 2 USB webcam detected. [ 165.349149][ T4674] pwc: recv_control_msg error -32 req 02 val 2b00 [ 165.389037][ T4674] pwc: recv_control_msg error -32 req 02 val 2700 [ 165.439141][ T4674] pwc: recv_control_msg error -32 req 02 val 2c00 [ 165.626791][ T4674] pwc: recv_control_msg error -32 req 04 val 1000 [ 165.669012][ T4674] pwc: recv_control_msg error -32 req 04 val 1300 [ 165.709221][ T4674] pwc: recv_control_msg error -32 req 04 val 1400 [ 165.761946][ T4674] pwc: recv_control_msg error -32 req 02 val 2000 [ 165.919073][ T4674] pwc: recv_control_msg error -32 req 02 val 2100 [ 165.967627][ T4674] pwc: recv_control_msg error -32 req 04 val 1500 [ 166.199034][ T4674] pwc: recv_control_msg error -32 req 02 val 2500 [ 166.256641][ T5185] pwc: recv_control_msg error -32 req 02 val 2b00 [ 166.369556][ T5185] pwc: recv_control_msg error -32 req 02 val 2700 [ 166.499376][ T5185] pwc: recv_control_msg error -32 req 02 val 2c00 [ 166.709780][ T5185] pwc: recv_control_msg error -32 req 04 val 1000 [ 166.899087][ T5185] pwc: recv_control_msg error -32 req 04 val 1300 [ 166.939156][ T5185] pwc: recv_control_msg error -32 req 04 val 1400 [ 167.006118][ T4674] pwc: recv_control_msg error -32 req 02 val 2400 [ 167.269347][ T4674] pwc: recv_control_msg error -71 req 02 val 2900 [ 167.329520][ T4674] pwc: recv_control_msg error -71 req 02 val 2800 [ 167.529353][ T4674] pwc: recv_control_msg error -71 req 04 val 1100 [ 167.669464][ T4674] pwc: recv_control_msg error -71 req 04 val 1200 [ 167.699051][ T5185] pwc: recv_control_msg error -32 req 02 val 2000 [ 167.851188][ T4674] pwc: Registered as video103. [ 167.881304][ T5185] pwc: recv_control_msg error -32 req 02 val 2100 [ 167.919251][ T4674] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 167.936853][ T5185] pwc: recv_control_msg error -32 req 04 val 1500 [ 168.388502][ T4674] usb 1-1: USB disconnect, device number 3 [ 169.079103][ T5185] pwc: recv_control_msg error -32 req 02 val 2500 [ 169.139207][ T5185] pwc: recv_control_msg error -32 req 02 val 2400 [ 169.299367][ T5185] pwc: recv_control_msg error -32 req 02 val 2600 [ 169.659255][ T5185] pwc: recv_control_msg error -71 req 02 val 2800 [ 170.185618][ T5263] loop3: detected capacity change from 0 to 256 [ 170.331044][ T5185] pwc: recv_control_msg error -71 req 04 val 1100 [ 170.358990][ T5185] pwc: recv_control_msg error -71 req 04 val 1200 [ 170.379482][ T5185] pwc: Registered as video103. [ 170.385574][ T5185] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 170.437855][ T5274] loop4: detected capacity change from 0 to 16 [ 170.441566][ T5185] usb 4-1: USB disconnect, device number 4 [ 170.500913][ T5263] FAT-fs (loop3): Directory bread(block 64) failed [ 170.528379][ T5263] FAT-fs (loop3): Directory bread(block 65) failed [ 171.299707][ T5274] erofs: (device loop4): mounted with root inode @ nid 36. [ 171.333806][ T5263] FAT-fs (loop3): Directory bread(block 66) failed [ 171.343480][ T5263] FAT-fs (loop3): Directory bread(block 67) failed [ 171.350306][ T5263] FAT-fs (loop3): Directory bread(block 68) failed [ 171.356869][ T5263] FAT-fs (loop3): Directory bread(block 69) failed [ 171.395937][ T5263] FAT-fs (loop3): Directory bread(block 70) failed [ 171.412951][ T5263] FAT-fs (loop3): Directory bread(block 71) failed [ 171.456882][ T5263] FAT-fs (loop3): Directory bread(block 72) failed [ 171.477079][ T5263] FAT-fs (loop3): Directory bread(block 73) failed [ 173.027800][ T5296] loop1: detected capacity change from 0 to 1024 [ 174.272695][ T5296] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.312779][ T5302] ODEBUG: Out of memory. ODEBUG disabled [ 174.382106][ T5306] loop3: detected capacity change from 0 to 512 [ 174.506865][ T5306] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 174.659275][ T5306] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.375843][ T5320] loop1: detected capacity change from 0 to 32768 [ 175.500772][ T5320] ialloc: diAlloc returned -5! [ 175.610100][ T5320] attempt to access beyond end of device [ 175.610100][ T5320] loop1: rw=1, want=4680040, limit=32768 [ 175.621423][ T5320] metapage_write_end_io: I/O error [ 175.633009][ T5320] blkno = 8ed2c, nblocks = 1 [ 175.637766][ T5320] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 175.637766][ T5320] [ 175.653076][ T5320] ERROR: (device loop1): remounting filesystem as read-only [ 176.161622][ T5306] EXT4-fs (loop3): shut down requested (0) [ 176.636058][ T4508] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 176.725060][ T5324] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 176.781147][ T5324] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 177.218595][ T5333] loop4: detected capacity change from 0 to 16 [ 177.699793][ T278] blkno = 8ed2c, nblocks = 4 [ 177.704454][ T278] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 177.704454][ T278] [ 177.704679][ T5337] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 5337 comm: syz.3.250) [ 177.730856][ T26] audit: type=1800 audit(1754637858.315:32): pid=5337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.250" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=35620 res=0 errno=0 [ 177.734495][ T4184] attempt to access beyond end of device [ 177.734495][ T4184] loop1: rw=1, want=4680040, limit=32768 [ 177.769327][ T5333] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.795560][ T5337] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.250' sets config #1 [ 177.988907][ T4184] metapage_write_end_io: I/O error [ 178.024666][ T4184] JFS: metapage_get_blocks failed [ 178.036723][ T5328] loop2: detected capacity change from 0 to 32768 [ 178.043623][ T4184] JFS: metapage_get_blocks failed [ 178.048718][ T4184] JFS: metapage_get_blocks failed [ 178.054370][ T4184] JFS: metapage_get_blocks failed [ 179.063026][ T5328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.246 (5328) [ 179.501316][ T5328] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 179.525923][ T5328] BTRFS info (device loop2): setting nodatacow, compression disabled [ 179.555340][ T5328] BTRFS info (device loop2): max_inline at 0 [ 179.576732][ T5350] loop4: detected capacity change from 0 to 256 [ 179.585242][ T5328] BTRFS info (device loop2): enabling disk space caching [ 179.609273][ T5328] BTRFS info (device loop2): turning off barriers [ 179.617481][ T5328] BTRFS info (device loop2): turning on flush-on-commit [ 180.949733][ T5328] BTRFS info (device loop2): doing ref verification [ 181.017705][ T5328] BTRFS info (device loop2): force clearing of disk cache [ 181.055781][ T5328] BTRFS info (device loop2): enabling ssd optimizations [ 181.078641][ T5328] BTRFS info (device loop2): max_inline at 4096 [ 181.085596][ T5328] BTRFS info (device loop2): disk space caching is enabled [ 181.094055][ T5328] BTRFS info (device loop2): has skinny extents [ 181.099249][ T4246] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 181.369006][ T4246] usb 1-1: Using ep0 maxpacket: 16 [ 181.559137][ T4246] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.583109][ T4246] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.646647][ T5381] loop3: detected capacity change from 0 to 8 [ 181.713298][ T5328] BTRFS error (device loop2): open_ctree failed: -12 [ 181.743527][ T4297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4297) [ 181.894755][ T4246] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.925554][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.988114][ T4246] usb 1-1: Product: syz [ 182.269356][ T5385] loop1: detected capacity change from 0 to 40427 [ 182.930153][ T4246] usb 1-1: Manufacturer: syz [ 182.934968][ T4246] usb 1-1: SerialNumber: syz [ 183.119886][ T5385] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 183.127760][ T5385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 183.159019][ T4246] usb 1-1: can't set config #1, error -71 [ 183.169185][ T4246] usb 1-1: USB disconnect, device number 4 [ 183.210140][ T5385] F2FS-fs (loop1): invalid crc value [ 185.642721][ T5385] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 186.848791][ T5407] loop0: detected capacity change from 0 to 32768 [ 186.919020][ T5407] ialloc: diAlloc returned -5! [ 186.929443][ T5407] attempt to access beyond end of device [ 186.929443][ T5407] loop0: rw=1, want=4680040, limit=32768 [ 186.941440][ T5407] metapage_write_end_io: I/O error [ 186.948309][ T5407] blkno = 8ed2c, nblocks = 1 [ 186.953003][ T5407] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 186.953003][ T5407] [ 186.963509][ T5407] ERROR: (device loop0): remounting filesystem as read-only [ 187.179586][ T277] blkno = 8ed2c, nblocks = 4 [ 187.184301][ T277] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 187.184301][ T277] [ 187.238593][ T4192] attempt to access beyond end of device [ 187.238593][ T4192] loop0: rw=1, want=4680040, limit=32768 [ 187.305543][ T4192] metapage_write_end_io: I/O error [ 187.319229][ T4192] JFS: metapage_get_blocks failed [ 187.324331][ T4192] JFS: metapage_get_blocks failed [ 187.999860][ T4192] JFS: metapage_get_blocks failed [ 188.004968][ T4192] JFS: metapage_get_blocks failed [ 188.643816][ T5432] loop4: detected capacity change from 0 to 1024 [ 189.807138][ T5432] EXT4-fs (loop4): Ignoring removed bh option [ 189.813812][ T5432] EXT4-fs (loop4): inline encryption not supported [ 190.056102][ T5432] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 2: comm syz.4.270: lblock 2 mapped to illegal pblock 2 (length 1) [ 190.072710][ T5432] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 190.081228][ T5432] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 48: comm syz.4.270: lblock 0 mapped to illegal pblock 48 (length 1) [ 190.100020][ T5432] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 190.109553][ T5432] EXT4-fs error (device loop4): ext4_acquire_dquot:6207: comm syz.4.270: Failed to acquire dquot type 0 [ 190.127417][ T5432] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 190.143567][ T5432] EXT4-fs error (device loop4): ext4_evict_inode:282: inode #11: comm syz.4.270: mark_inode_dirty error [ 190.155966][ T5432] EXT4-fs warning (device loop4): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 190.166753][ T5432] EXT4-fs (loop4): 1 orphan inode deleted [ 190.172655][ T5432] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x0000000000000001,nodelalloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 190.344727][ T4318] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 190.810463][ T4318] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 190.868981][ T4318] EXT4-fs error (device loop4): ext4_release_dquot:6243: comm kworker/u4:9: Failed to release dquot type 0 [ 191.914798][ T4183] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 192.189088][ T4183] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 192.237554][ T4183] EXT4-fs error (device loop4): ext4_quota_off:6513: inode #3: comm syz-executor: mark_inode_dirty error [ 194.413944][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420409][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.869059][ T4412] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 196.099437][ T5474] tipc: Enabling of bearer rejected, failed to enable media [ 196.466142][ T5474] device syzkaller0 entered promiscuous mode [ 196.472852][ T5474] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 196.498382][ T5481] tipc: Enabled bearer , priority 0 [ 196.538485][ T5481] device syzkaller0 entered promiscuous mode [ 196.576583][ T5481] tipc: Resetting bearer [ 196.657793][ T5480] tipc: Resetting bearer [ 196.809333][ T4412] usb 5-1: device not accepting address 6, error -71 [ 196.893547][ T5480] tipc: Disabling bearer [ 201.614436][ T5185] Bluetooth: hci4: command 0x0406 tx timeout [ 201.621279][ T5185] Bluetooth: hci2: command 0x0406 tx timeout [ 201.651446][ T5185] Bluetooth: hci0: command 0x0406 tx timeout [ 201.675474][ T5185] Bluetooth: hci3: command 0x0406 tx timeout [ 201.707141][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 203.778562][ T5536] loop2: detected capacity change from 0 to 256 [ 203.859340][ T5536] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.872879][ T5543] loop1: detected capacity change from 0 to 1024 [ 203.935303][ T5545] tipc: Enabled bearer , priority 0 [ 203.945463][ T5545] device syzkaller0 entered promiscuous mode [ 203.956948][ T5536] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 204.767998][ T5536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 204.836052][ T5555] tipc: Resetting bearer [ 204.925567][ T5544] tipc: Resetting bearer [ 205.050521][ T5544] tipc: Disabling bearer [ 205.882388][ T5563] delete_channel: no stack [ 206.803117][ T5563] loop1: detected capacity change from 0 to 2048 [ 206.873295][ T4563] tipc: Node number set to 3292889245 [ 206.934156][ T5563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.991879][ T26] audit: type=1800 audit(1754637887.575:33): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.309" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 207.382694][ T5570] loop3: detected capacity change from 0 to 2048 [ 207.537534][ T5573] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.606328][ T5570] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 207.626873][ T5570] Remounting filesystem read-only [ 208.936225][ T5580] loop2: detected capacity change from 0 to 16 [ 208.964939][ T5570] syz.3.311 (5570) used greatest stack depth: 19752 bytes left [ 209.064611][ T5580] erofs: (device loop2): mounted with root inode @ nid 36. [ 209.141446][ T5582] tipc: Started in network mode [ 209.146400][ T5582] tipc: Node identity 7ea860426392, cluster identity 4711 [ 209.223513][ T5583] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 209.242350][ T5583] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 209.256450][ T5583] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 209.275943][ T5582] tipc: Enabled bearer , priority 0 [ 209.495699][ T5584] device syzkaller0 entered promiscuous mode [ 210.164723][ T5589] tipc: Enabling of bearer rejected, failed to enable media [ 210.248777][ T5581] tipc: Resetting bearer [ 210.832187][ T4232] tipc: Node number set to 490364994 [ 210.943863][ T5581] tipc: Disabling bearer [ 211.251643][ T5609] loop4: detected capacity change from 0 to 16 [ 211.889529][ T5609] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.445014][ T5609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.446233][ T5620] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 213.463411][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 213.474841][ T5609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.484911][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 213.494828][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 213.504633][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 213.514207][ T5609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.523897][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 213.533391][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 213.544376][ T5609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.554210][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 213.563746][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 213.573154][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 213.583416][ T5609] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 213.619040][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 215.717141][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 215.726905][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 215.736397][ T5609] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 215.749649][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 215.760151][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 215.770395][ T5609] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 216.144704][ T5632] loop1: detected capacity change from 0 to 65536 [ 216.309677][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 216.338135][ T5609] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 216.365529][ T5632] XFS (loop1): Mounting V5 Filesystem [ 216.376313][ T5609] erofs: (device loop4): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 216.395382][ T5626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.412547][ T5609] attempt to access beyond end of device [ 216.412547][ T5609] loop4: rw=524288, want=848, limit=16 [ 216.428483][ T5609] attempt to access beyond end of device [ 216.428483][ T5609] loop4: rw=524288, want=13478624104, limit=16 [ 216.458215][ T5609] attempt to access beyond end of device [ 216.458215][ T5609] loop4: rw=524288, want=13478624080, limit=16 [ 216.492895][ T5632] XFS (loop1): Ending clean mount [ 216.686194][ T5609] attempt to access beyond end of device [ 216.686194][ T5609] loop4: rw=524288, want=32, limit=16 [ 216.710381][ T4193] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 218.193878][ T4184] XFS (loop1): Unmounting Filesystem [ 218.612680][ T5660] loop4: detected capacity change from 0 to 40427 [ 218.706642][ T5660] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 218.714631][ T5660] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 218.725928][ T5660] F2FS-fs (loop4): invalid crc value [ 218.789945][ T5660] F2FS-fs (loop4): Found nat_bits in checkpoint [ 218.851312][ T5660] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 218.858476][ T5660] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 219.489657][ T26] audit: type=1800 audit(1754637899.925:34): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.332" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 221.353741][ T5685] loop1: detected capacity change from 0 to 1024 [ 221.568433][ T5685] EXT4-fs (loop1): Ignoring removed nobh option [ 221.616228][ T5685] EXT4-fs (loop1): Ignoring removed bh option [ 222.103928][ T5685] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: writeback. [ 222.862403][ T5696] overlayfs: conflicting lowerdir path [ 224.676592][ T4331] attempt to access beyond end of device [ 224.676592][ T4331] loop4: rw=1, want=80848, limit=40427 [ 224.712820][ T4331] attempt to access beyond end of device [ 224.712820][ T4331] loop4: rw=1, want=81064, limit=40427 [ 226.785620][ T5704] loop0: detected capacity change from 0 to 32768 [ 227.280676][ T5725] loop4: detected capacity change from 0 to 40427 [ 227.333649][ T5725] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 227.341539][ T5725] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 227.358468][ T5725] F2FS-fs (loop4): invalid crc value [ 227.431085][ T5704] XFS (loop0): Mounting V5 Filesystem [ 227.485318][ T5725] F2FS-fs (loop4): Found nat_bits in checkpoint [ 227.587067][ T5704] XFS (loop0): Ending clean mount [ 227.593144][ T5725] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 227.600428][ T5725] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 227.618294][ T5704] XFS (loop0): Quotacheck needed: Please wait. [ 227.868912][ T5704] XFS (loop0): Quotacheck: Done. [ 229.896021][ T26] audit: type=1800 audit(1754637908.565:35): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.341" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 230.370602][ T4192] XFS (loop0): Unmounting Filesystem [ 230.686066][ T5746] tipc: Started in network mode [ 230.694381][ T5746] tipc: Node identity 16ad87b16f43, cluster identity 4711 [ 230.706009][ T5746] tipc: Enabled bearer , priority 0 [ 230.779280][ T5749] device syzkaller0 entered promiscuous mode [ 230.793629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.802531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.839971][ T5746] tipc: Resetting bearer [ 230.864032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.872290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.894505][ T5745] tipc: Resetting bearer [ 230.919880][ T5745] tipc: Disabling bearer [ 230.992161][ T5748] loop2: detected capacity change from 0 to 40427 [ 231.049788][ T5748] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 231.057614][ T5748] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.070269][ T5748] F2FS-fs (loop2): invalid crc value [ 231.413158][ T5748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.927277][ T4183] attempt to access beyond end of device [ 231.927277][ T4183] loop4: rw=2049, want=40968, limit=40427 [ 231.942826][ T5748] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.949953][ T5748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.209400][ T26] audit: type=1800 audit(1754637912.615:36): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.351" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 233.286526][ T5766] loop0: detected capacity change from 0 to 16 [ 233.531635][ T5766] erofs: (device loop0): mounted with root inode @ nid 36. [ 234.301351][ T4197] attempt to access beyond end of device [ 234.301351][ T4197] loop2: rw=2049, want=40968, limit=40427 [ 234.491545][ T5766] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 234.676736][ T5766] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 234.689594][ T5766] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 234.726156][ T5780] netlink: 'syz.3.361': attribute type 1 has an invalid length. [ 234.930312][ T5781] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 236.316095][ T5788] loop0: detected capacity change from 0 to 32768 [ 236.354316][ T5788] read_mapping_page failed! [ 236.359459][ T5788] diRead: read_metapage failed [ 236.579900][ T5792] loop1: detected capacity change from 0 to 64 [ 237.018665][ T5781] device veth3 entered promiscuous mode [ 237.041262][ T4401] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 237.049519][ T5783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.099230][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 237.233483][ T156] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 237.477386][ T5798] loop1: detected capacity change from 0 to 32768 [ 237.704098][ T5809] loop4: detected capacity change from 0 to 2048 [ 238.155399][ T5809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.969946][ T26] audit: type=1800 audit(1754637920.445:37): pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.367" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 240.259460][ T5828] loop4: detected capacity change from 0 to 512 [ 240.293987][ T5830] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 240.398719][ T5828] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 240.401536][ T5819] loop0: detected capacity change from 0 to 8192 [ 240.475643][ T5828] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 240.530834][ T5828] EXT4-fs (loop4): 1 truncate cleaned up [ 240.550500][ T5828] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="errors=continue,noload,nombcache,usrjquota="errors=continue,barrier,barrier,,errors=continue. Quota mode: writeback. [ 240.695737][ T5828] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 240.802722][ T5835] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 240.833314][ T5830] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 240.853516][ T5830] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 241.599924][ T5841] loop1: detected capacity change from 0 to 32768 [ 241.655368][ T5841] find_entry called with index >= next_index [ 241.658327][ T5843] loop3: detected capacity change from 0 to 256 [ 241.751042][ T5845] loop0: detected capacity change from 0 to 16 [ 241.775758][ T5845] erofs: (device loop0): mounted with root inode @ nid 36. [ 241.827119][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 241.837310][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 241.846465][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 241.857191][ T5845] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 241.866685][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 241.875826][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 241.885897][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 241.895192][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 241.905310][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 241.914464][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 241.923864][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 241.933171][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 241.943977][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 241.953128][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 241.962307][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 241.971436][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 241.981511][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 241.990804][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.000185][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 242.009317][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 242.019386][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 242.028579][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 242.037772][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 242.046907][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 242.056052][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 242.066116][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 242.077426][ T5845] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 242.086912][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 242.096208][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 242.106290][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 242.115423][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 242.125493][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 242.134833][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 242.144046][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 242.153149][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 242.162243][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.171677][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 242.180866][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 242.189959][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 242.199051][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 242.208219][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 242.217326][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 221183 of nid 36 [ 242.227662][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 242.237203][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 242.247330][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 242.256436][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 212991 of nid 36 [ 242.266478][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 242.268254][ T5843] FAT-fs (loop3): Unrecognized mount option "shortname=" or missing value [ 242.275570][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 242.294189][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 242.303284][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 204799 of nid 36 [ 242.313348][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 242.322478][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 242.333425][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 242.342684][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 242.352769][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 242.361861][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.371227][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 242.380330][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 242.389420][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 242.398561][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 242.407851][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.417192][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 242.426290][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 242.435942][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.445304][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 242.454395][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 242.463474][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 242.473053][ T5845] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 242.483003][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 242.492197][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 242.501289][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 242.510375][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 242.520414][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 242.529512][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 242.539237][ T5845] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 242.548761][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 242.558028][ T5845] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 242.567982][ T5845] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 242.577179][ T5845] attempt to access beyond end of device [ 242.577179][ T5845] loop0: rw=524288, want=848, limit=16 [ 242.588238][ T5845] attempt to access beyond end of device [ 242.588238][ T5845] loop0: rw=524288, want=13478624104, limit=16 [ 242.600017][ T5845] attempt to access beyond end of device [ 242.600017][ T5845] loop0: rw=524288, want=13478624080, limit=16 [ 242.611801][ T5845] attempt to access beyond end of device [ 242.611801][ T5845] loop0: rw=524288, want=40, limit=16 [ 242.622764][ T5845] attempt to access beyond end of device [ 242.622764][ T5845] loop0: rw=524288, want=96, limit=16 [ 242.633805][ T5845] attempt to access beyond end of device [ 242.633805][ T5845] loop0: rw=524288, want=32, limit=16 [ 243.960698][ T5853] netlink: 'syz.0.377': attribute type 1 has an invalid length. [ 245.572802][ T5860] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 245.725277][ T5868] tipc: Enabled bearer , priority 0 [ 245.864868][ T5868] device syzkaller0 entered promiscuous mode [ 247.089202][ T5873] tipc: Resetting bearer [ 247.238357][ T5867] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 247.297780][ T5867] tipc: Resetting bearer [ 247.395960][ T5867] tipc: Disabling bearer [ 248.072408][ T5898] delete_channel: no stack [ 248.094441][ T5898] loop2: detected capacity change from 0 to 2048 [ 248.330458][ T5898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.479136][ T26] audit: type=1800 audit(1754637929.005:38): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.386" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 250.060043][ T5912] bridge0: port 1(syz_tun) entered blocking state [ 250.066878][ T5912] bridge0: port 1(syz_tun) entered disabled state [ 250.075595][ T5912] device syz_tun entered promiscuous mode [ 250.083644][ T5912] bridge0: port 1(syz_tun) entered blocking state [ 250.090448][ T5912] bridge0: port 1(syz_tun) entered forwarding state [ 251.937372][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 254.056101][ T5927] loop2: detected capacity change from 0 to 128 [ 254.110303][ T5932] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 254.139524][ T5927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.151361][ T5927] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 254.222736][ T5937] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.885280][ T5927] fscrypt: Error allocating hmac(sha512): -2 [ 255.201858][ T5950] loop0: detected capacity change from 0 to 4096 [ 255.441696][ T5950] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 256.144792][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157731][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.636900][ T4192] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 258.754035][ T5997] netlink: 'syz.0.405': attribute type 1 has an invalid length. [ 258.849998][ T5997] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.025847][ T6015] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 260.035088][ T6021] loop1: detected capacity change from 0 to 1024 [ 261.243878][ T6028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.339707][ T4193] Bluetooth: hci0: Received unexpected HCI Event 00000000 [ 263.399579][ T6033] syz.2.410 sent an empty control message without MSG_MORE. [ 263.621010][ T6024] device veth3 entered promiscuous mode [ 264.499729][ T6057] loop0: detected capacity change from 0 to 16 [ 264.635321][ T6057] erofs: (device loop0): mounted with root inode @ nid 36. [ 264.657627][ T6061] loop2: detected capacity change from 0 to 512 [ 264.870125][ T6061] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 265.608454][ T6064] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.617938][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 265.627210][ T6064] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.636573][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 265.646319][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 265.655670][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 265.665015][ T6064] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.674514][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 265.684313][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 265.693740][ T6064] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.703234][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 265.712519][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 265.721823][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 265.731997][ T6064] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 265.741657][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 265.988400][ T6061] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 266.078965][ T6061] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 266.678901][ T6061] EXT4-fs (loop2): DAX unsupported by block device. [ 266.846922][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 267.012031][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 267.023161][ T6064] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 267.623793][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 268.558477][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 268.711161][ T6064] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 268.943514][ T6091] lo speed is unknown, defaulting to 1000 [ 268.965560][ T6091] lo speed is unknown, defaulting to 1000 [ 268.983991][ T6091] lo speed is unknown, defaulting to 1000 [ 268.985533][ T6092] ceph: No source [ 269.004423][ T6092] kAFS: unable to lookup cell '\/' [ 269.561823][ T6091] infiniband sz1: set active [ 269.567013][ T6091] infiniband sz1: added lo [ 269.666430][ T4246] lo speed is unknown, defaulting to 1000 [ 269.668492][ T6091] infiniband sz1: Couldn't open port 1 [ 269.709031][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 269.720183][ T6091] RDS/IB: sz1: added [ 269.724703][ T6091] smc: adding ib device sz1 with port count 1 [ 269.731123][ T6091] smc: ib device sz1 port 1 has pnetid [ 269.740584][ T6091] lo speed is unknown, defaulting to 1000 [ 269.811049][ T6091] lo speed is unknown, defaulting to 1000 [ 269.881650][ T6091] lo speed is unknown, defaulting to 1000 [ 269.950636][ T6091] lo speed is unknown, defaulting to 1000 [ 270.020911][ T6091] lo speed is unknown, defaulting to 1000 [ 270.156368][ T4296] lo speed is unknown, defaulting to 1000 [ 270.253521][ T6064] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 270.268989][ T6064] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 270.289086][ T6064] attempt to access beyond end of device [ 270.289086][ T6064] loop0: rw=524288, want=848, limit=16 [ 270.304333][ T6095] loop1: detected capacity change from 0 to 256 [ 270.311985][ T6064] attempt to access beyond end of device [ 270.311985][ T6064] loop0: rw=524288, want=13478624104, limit=16 [ 270.327790][ T6064] attempt to access beyond end of device [ 270.327790][ T6064] loop0: rw=524288, want=13478624080, limit=16 [ 270.343704][ T6064] attempt to access beyond end of device [ 270.343704][ T6064] loop0: rw=524288, want=32, limit=16 [ 270.355681][ T6097] netlink: 'syz.2.427': attribute type 1 has an invalid length. [ 270.369426][ T6095] exfat: Unknown parameter 'zero_size_dir' [ 270.396890][ T4193] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 270.486522][ T6101] loop3: detected capacity change from 0 to 512 [ 270.663216][ T6099] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 270.713501][ T6101] EXT4-fs (loop3): Test dummy encryption mode enabled [ 272.456594][ T6101] EXT4-fs (loop3): Can't change test_dummy_encryption on remount [ 274.833177][ T6149] loop3: detected capacity change from 0 to 2048 [ 276.506666][ T6149] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 276.593223][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 277.910743][ T6162] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.428362][ T6189] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 279.524674][ T6191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.860207][ T6196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 282.288764][ T6202] loop0: detected capacity change from 0 to 2048 [ 282.661475][ T6202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.999261][ T26] audit: type=1800 audit(1754637965.575:39): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.447" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 285.889546][ T6208] loop3: detected capacity change from 0 to 32768 [ 291.493570][ T6256] loop2: detected capacity change from 0 to 512 [ 291.679629][ C0] ================================================================== [ 291.688215][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 291.695719][ C0] Read of size 2 at addr ffff8880625d2c2a by task swapper/0/0 [ 291.703226][ C0] [ 291.705591][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.15.189-syzkaller #0 [ 291.713429][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.723543][ C0] Call Trace: [ 291.726851][ C0] [ 291.729717][ C0] dump_stack_lvl+0x168/0x230 [ 291.734435][ C0] ? show_regs_print_info+0x20/0x20 [ 291.739679][ C0] ? _printk+0xcc/0x110 [ 291.743868][ C0] ? rose_timer_expiry+0x470/0x490 [ 291.749015][ C0] ? load_image+0x3b0/0x3b0 [ 291.753673][ C0] print_address_description+0x60/0x2d0 [ 291.759261][ C0] ? rose_timer_expiry+0x470/0x490 [ 291.764427][ C0] kasan_report+0xdf/0x130 [ 291.768890][ C0] ? rose_timer_expiry+0x470/0x490 [ 291.774048][ C0] rose_timer_expiry+0x470/0x490 [ 291.779025][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 291.784079][ C0] call_timer_fn+0x16c/0x530 [ 291.788700][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 291.793759][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 291.799781][ C0] ? __run_timers+0x7c0/0x7c0 [ 291.804510][ C0] ? rcu_is_watching+0x11/0xa0 [ 291.809302][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 291.814533][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 291.819760][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 291.824823][ C0] __run_timers+0x525/0x7c0 [ 291.829379][ C0] ? detach_timer+0x2b0/0x2b0 [ 291.834089][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 291.840114][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 291.845083][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 291.850414][ C0] run_timer_softirq+0x63/0xf0 [ 291.855213][ C0] handle_softirqs+0x328/0x820 [ 291.860011][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 291.864894][ C0] ? do_softirq+0x200/0x200 [ 291.869431][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 291.874681][ C0] __irq_exit_rcu+0x12f/0x220 [ 291.879400][ C0] ? irq_exit_rcu+0x20/0x20 [ 291.883945][ C0] irq_exit_rcu+0x5/0x20 [ 291.888215][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 291.893878][ C0] [ 291.896832][ C0] [ 291.899787][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.905810][ C0] RIP: 0010:sched_core_balance+0x124/0xbb0 [ 291.911660][ C0] Code: 48 c7 c2 60 b8 0a 8a e8 6a 3f 4b 08 4c 89 74 24 18 e9 19 0a 00 00 48 8b 7c 24 20 e8 06 54 5f 08 e8 f1 9b 2b 00 fb 41 83 fe 08 <0f> 83 e6 09 00 00 48 8b 44 24 40 4c 8d 24 c5 20 e8 bb 8b 4c 89 e0 [ 291.931328][ C0] RSP: 0018:ffffffff8be079e0 EFLAGS: 00000293 [ 291.937441][ C0] RAX: 42bc242cc948a800 RBX: ffff8880b903b048 RCX: 42bc242cc948a800 [ 291.945447][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 291.953455][ C0] RBP: ffffffff8be07b30 R08: dffffc0000000000 R09: ffffed1017207461 [ 291.961465][ C0] R10: ffffed1017207461 R11: 1ffff11017207460 R12: 0000000000000000 [ 291.969469][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 291.977498][ C0] ? finish_task_switch+0x3c6/0x640 [ 291.982736][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 291.987789][ C0] ? queue_core_balance+0x340/0x340 [ 291.993033][ C0] ? queue_core_balance+0x340/0x340 [ 291.998274][ C0] finish_lock_switch+0x17b/0x280 [ 292.003351][ C0] finish_task_switch+0x12f/0x640 [ 292.008441][ C0] ? __switch_to_asm+0x34/0x60 [ 292.013233][ C0] __schedule+0x11c0/0x43b0 [ 292.017746][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 292.023742][ C0] ? lock_chain_count+0x20/0x20 [ 292.028605][ C0] ? tick_nohz_idle_exit+0x40c/0x540 [ 292.033903][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 292.039107][ C0] ? release_firmware_map_entry+0x190/0x190 [ 292.045008][ C0] ? flush_smp_call_function_from_idle+0x113/0x230 [ 292.051553][ C0] ? generic_smp_call_function_single_interrupt+0x10/0x10 [ 292.058684][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 292.064771][ C0] schedule_idle+0x4a/0x90 [ 292.069206][ C0] do_idle+0x556/0x5b0 [ 292.073308][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 292.078955][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 292.084168][ C0] ? do_idle+0xc/0x5b0 [ 292.088256][ C0] cpu_startup_entry+0x14/0x20 [ 292.093029][ C0] ? time_init+0x40/0x40 [ 292.097402][ C0] start_kernel+0x486/0x530 [ 292.101939][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 292.107943][ C0] [ 292.110969][ C0] [ 292.113310][ C0] Allocated by task 0: [ 292.117377][ C0] __kasan_kmalloc+0xb5/0xf0 [ 292.121986][ C0] __alloc_skb+0x22c/0x750 [ 292.126411][ C0] skb_copy+0x139/0x790 [ 292.130590][ C0] mac80211_hwsim_tx_frame_no_nl+0xcc7/0x15d0 [ 292.136665][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 292.142128][ C0] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 292.147672][ C0] __iterate_interfaces+0x243/0x500 [ 292.152882][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 292.159914][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 292.165115][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 292.170323][ C0] hrtimer_run_softirq+0x176/0x240 [ 292.175455][ C0] handle_softirqs+0x328/0x820 [ 292.180224][ C0] __irq_exit_rcu+0x12f/0x220 [ 292.185014][ C0] irq_exit_rcu+0x5/0x20 [ 292.189279][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 292.194916][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 292.200901][ C0] [ 292.203230][ C0] Freed by task 4317: [ 292.207207][ C0] kasan_set_track+0x4b/0x70 [ 292.211803][ C0] kasan_set_free_info+0x1f/0x40 [ 292.216749][ C0] ____kasan_slab_free+0xd5/0x110 [ 292.221778][ C0] slab_free_freelist_hook+0xea/0x170 [ 292.227158][ C0] kfree+0xef/0x2a0 [ 292.230968][ C0] skb_release_data+0x6fe/0x850 [ 292.235824][ C0] kfree_skb_reason+0xaf/0x110 [ 292.240587][ C0] ieee80211_iface_work+0x798/0xc60 [ 292.245790][ C0] process_one_work+0x863/0x1000 [ 292.250737][ C0] worker_thread+0xaa8/0x12a0 [ 292.255423][ C0] kthread+0x436/0x520 [ 292.259507][ C0] ret_from_fork+0x1f/0x30 [ 292.263932][ C0] [ 292.266262][ C0] The buggy address belongs to the object at ffff8880625d2c00 [ 292.266262][ C0] which belongs to the cache kmalloc-512 of size 512 [ 292.280407][ C0] The buggy address is located 42 bytes inside of [ 292.280407][ C0] 512-byte region [ffff8880625d2c00, ffff8880625d2e00) [ 292.293621][ C0] The buggy address belongs to the page: [ 292.299285][ C0] page:ffffea0001897400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x625d0 [ 292.309446][ C0] head:ffffea0001897400 order:2 compound_mapcount:0 compound_pincount:0 [ 292.317783][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 292.325788][ C0] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016841c80 [ 292.334477][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 292.343232][ C0] page dumped because: kasan: bad access detected [ 292.349677][ C0] page_owner tracks the page as allocated [ 292.355433][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4192, ts 77080761983, free_ts 23649638127 [ 292.374546][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 292.380106][ C0] __alloc_pages+0x1e1/0x470 [ 292.384701][ C0] new_slab+0xc0/0x4b0 [ 292.388780][ C0] ___slab_alloc+0x81e/0xdf0 [ 292.393375][ C0] __kmalloc+0x1cd/0x330 [ 292.397622][ C0] __register_sysctl_table+0xa1f/0x1230 [ 292.403174][ C0] __addrconf_sysctl_register+0x268/0x3d0 [ 292.408929][ C0] addrconf_sysctl_register+0x15c/0x1b0 [ 292.414476][ C0] ipv6_add_dev+0xbf3/0x1190 [ 292.419068][ C0] addrconf_notify+0x66f/0xf00 [ 292.423831][ C0] raw_notifier_call_chain+0xcb/0x160 [ 292.429212][ C0] register_netdevice+0x1275/0x16b0 [ 292.434450][ C0] macvlan_common_newlink+0x1058/0x17e0 [ 292.440016][ C0] macvtap_newlink+0x150/0x1d0 [ 292.444786][ C0] rtnl_newlink+0x114c/0x17d0 [ 292.449474][ C0] rtnetlink_rcv_msg+0x9b9/0xe60 [ 292.454422][ C0] page last free stack trace: [ 292.459104][ C0] free_unref_page_prepare+0x637/0x6c0 [ 292.464568][ C0] free_unref_page+0x94/0x280 [ 292.469246][ C0] free_contig_range+0x96/0xf0 [ 292.474016][ C0] destroy_args+0xef/0x8b0 [ 292.478441][ C0] debug_vm_pgtable+0x318/0x370 [ 292.483295][ C0] do_one_initcall+0x1ee/0x680 [ 292.488065][ C0] do_initcall_level+0x137/0x1f0 [ 292.493048][ C0] do_initcalls+0x4b/0x90 [ 292.497381][ C0] kernel_init_freeable+0x3ce/0x560 [ 292.502588][ C0] kernel_init+0x19/0x1b0 [ 292.506920][ C0] ret_from_fork+0x1f/0x30 [ 292.511340][ C0] [ 292.513662][ C0] Memory state around the buggy address: [ 292.519292][ C0] ffff8880625d2b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.527352][ C0] ffff8880625d2b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 292.535498][ C0] >ffff8880625d2c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.543560][ C0] ^ [ 292.548953][ C0] ffff8880625d2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.557016][ C0] ffff8880625d2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 292.565075][ C0] ================================================================== [ 292.573187][ C0] Disabling lock debugging due to kernel taint [ 292.579515][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 292.586722][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.15.189-syzkaller #0 [ 292.595920][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.605996][ C0] Call Trace: [ 292.609323][ C0] [ 292.612191][ C0] dump_stack_lvl+0x168/0x230 [ 292.616880][ C0] ? show_regs_print_info+0x20/0x20 [ 292.622111][ C0] ? load_image+0x3b0/0x3b0 [ 292.626635][ C0] panic+0x2c9/0x7f0 [ 292.630542][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 292.635073][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 292.640996][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 292.646895][ C0] ? _raw_spin_unlock+0x40/0x40 [ 292.651746][ C0] ? print_memory_metadata+0x314/0x400 [ 292.657213][ C0] ? rose_timer_expiry+0x470/0x490 [ 292.662423][ C0] check_panic_on_warn+0x80/0xa0 [ 292.667376][ C0] ? rose_timer_expiry+0x470/0x490 [ 292.672517][ C0] end_report+0x6d/0xf0 [ 292.676676][ C0] kasan_report+0x102/0x130 [ 292.681185][ C0] ? rose_timer_expiry+0x470/0x490 [ 292.686297][ C0] rose_timer_expiry+0x470/0x490 [ 292.691235][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 292.696264][ C0] call_timer_fn+0x16c/0x530 [ 292.700863][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 292.705885][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 292.711869][ C0] ? __run_timers+0x7c0/0x7c0 [ 292.716554][ C0] ? rcu_is_watching+0x11/0xa0 [ 292.721329][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 292.726542][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 292.731752][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 292.736791][ C0] __run_timers+0x525/0x7c0 [ 292.741313][ C0] ? detach_timer+0x2b0/0x2b0 [ 292.746020][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 292.752018][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 292.756870][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 292.762161][ C0] run_timer_softirq+0x63/0xf0 [ 292.766928][ C0] handle_softirqs+0x328/0x820 [ 292.771692][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 292.776548][ C0] ? do_softirq+0x200/0x200 [ 292.781057][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 292.786379][ C0] __irq_exit_rcu+0x12f/0x220 [ 292.791076][ C0] ? irq_exit_rcu+0x20/0x20 [ 292.795586][ C0] irq_exit_rcu+0x5/0x20 [ 292.799834][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 292.805477][ C0] [ 292.808408][ C0] [ 292.811346][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 292.817337][ C0] RIP: 0010:sched_core_balance+0x124/0xbb0 [ 292.823157][ C0] Code: 48 c7 c2 60 b8 0a 8a e8 6a 3f 4b 08 4c 89 74 24 18 e9 19 0a 00 00 48 8b 7c 24 20 e8 06 54 5f 08 e8 f1 9b 2b 00 fb 41 83 fe 08 <0f> 83 e6 09 00 00 48 8b 44 24 40 4c 8d 24 c5 20 e8 bb 8b 4c 89 e0 [ 292.842769][ C0] RSP: 0018:ffffffff8be079e0 EFLAGS: 00000293 [ 292.848844][ C0] RAX: 42bc242cc948a800 RBX: ffff8880b903b048 RCX: 42bc242cc948a800 [ 292.856852][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: ffffffff8a599340 [ 292.864825][ C0] RBP: ffffffff8be07b30 R08: dffffc0000000000 R09: ffffed1017207461 [ 292.872800][ C0] R10: ffffed1017207461 R11: 1ffff11017207460 R12: 0000000000000000 [ 292.880774][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 292.888758][ C0] ? finish_task_switch+0x3c6/0x640 [ 292.893969][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 292.898995][ C0] ? queue_core_balance+0x340/0x340 [ 292.904198][ C0] ? queue_core_balance+0x340/0x340 [ 292.909400][ C0] finish_lock_switch+0x17b/0x280 [ 292.914443][ C0] finish_task_switch+0x12f/0x640 [ 292.919504][ C0] ? __switch_to_asm+0x34/0x60 [ 292.924276][ C0] __schedule+0x11c0/0x43b0 [ 292.928794][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 292.934779][ C0] ? lock_chain_count+0x20/0x20 [ 292.939746][ C0] ? tick_nohz_idle_exit+0x40c/0x540 [ 292.945036][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 292.950272][ C0] ? release_firmware_map_entry+0x190/0x190 [ 292.956166][ C0] ? flush_smp_call_function_from_idle+0x113/0x230 [ 292.962670][ C0] ? generic_smp_call_function_single_interrupt+0x10/0x10 [ 292.969782][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 292.975853][ C0] schedule_idle+0x4a/0x90 [ 292.980269][ C0] do_idle+0x556/0x5b0 [ 292.984339][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 292.989981][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 292.995346][ C0] ? do_idle+0xc/0x5b0 [ 292.999419][ C0] cpu_startup_entry+0x14/0x20 [ 293.004310][ C0] ? time_init+0x40/0x40 [ 293.008548][ C0] start_kernel+0x486/0x530 [ 293.013146][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 293.019041][ C0] [ 293.022314][ C0] Kernel Offset: disabled [ 293.026651][ C0] Rebooting in 86400 seconds..