last executing test programs: 13.33373335s ago: executing program 1 (id=1498): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=""/132, 0x84, 0x0, &(0x7f0000000180)=""/41, 0x29}}, 0x10) r0 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) writev(r2, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) fsetxattr(r0, &(0x7f0000000280)=@known='trusted.syz\x00', &(0x7f00000002c0)='*-\x00', 0x3, 0x3) 13.134257433s ago: executing program 1 (id=1500): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 12.049219469s ago: executing program 1 (id=1502): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000002500", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) 11.482178794s ago: executing program 1 (id=1504): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup(0xffffffffffffffff) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 11.365823488s ago: executing program 3 (id=1507): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) renameat2(r0, 0x0, r0, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x2084, 0x0) 8.289890113s ago: executing program 3 (id=1510): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0xe, &(0x7f00000002c0)={@local, @multicast, @void}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4090000001900006910ae0000000000c4090000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @local}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_CONTROLLER=0xfe}) 8.208547822s ago: executing program 1 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x4, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x40e, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000200), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0xee00], 0x12c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0xf0, 0x12, 0x0, 0x0, 0x0, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@empty}, @in6=@local}}, 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 7.333944003s ago: executing program 4 (id=1514): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 7.244865803s ago: executing program 3 (id=1515): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001bc0)=@s={0x5, @generic}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0xa060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c5a29b}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ftruncate(0xffffffffffffffff, 0x4008c0d) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="c8", 0x1) 6.389806272s ago: executing program 4 (id=1516): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x38) fstat(r0, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000700)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r1, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@ll={0x11, 0x4, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)="027ef3ed4e8f588be27a38bce5a614212726593cced225eb1afa45c790e12f3d65de594288ba", 0x26}, {&(0x7f0000000500)}, {&(0x7f0000000540)="f2d6fc2fda13a53d2ba5871e6589188b291890ed6a16daaea28396a6401cad5fff8ed52240783e86a0476c7a58c9673af9fd931636994a8b66cfbd696012f4708f77646e751bc4cb42e237c589fd2dab31c637680a74be14ecb5e9cebcaa79371e4cfbbe2e4d6ba1d43f4dc5c027b8384b0e271775078c259bd94f27ae8be53779538c0f1d46dd7c9d3814473b1301324881ce5a745c035b318e8a7e02746133b74d7c9cdf95825e9554ac1b4e88588f4328a82c66240425c5262999fe6ff9a0dc92090c721a17ed06d2be19656ec656", 0xd0}, {&(0x7f0000000640)="d3fdcef673d7", 0x6}], 0x4, &(0x7f0000000980)=[{0xd8, 0x38, 0xffffffff, "b16b2eaec5617b336abd440ee3593c8870f0cbe617bcb9341cd5444c0a97fbc07f26020cc6bbb521ee814de7f1912ce0a191e721ca3af94be070e1a9df3d9e4fd5e886c20fde5b527d44b50d1b9fec767e45a21d6f7a55f96fe1d909ff03c943c43a4352421a7044454592cc71a09b77ae9607358a7f48cfe75fc5c727cf953a5aafb95ad935d369b147c8645504518e16326c7159c15ea0930be80187fb1d30496d79999fc7080baf30c3a4425a65db1545e0487f8434847bb6bb1d35cba4538a357d"}, {0x40, 0x3a, 0x0, "b02095973b386ad40cedf87f22391f2f9e4b838e693073cfd8704b20de82e002537d59813991942debdcecd04e4881"}, {0xd0, 0x10d, 0x8000, "1e75c9112b71092cfadc6ebe7451f9cda6f82ff971ff97bcc1434feb67c61b14be0b3f334e9fdbdf0d2c810fb14b868f0c0b0ef40f20cdf02140adacb53207c616f5cb0663f78ba3bbacae2ad8a1190d26e44a817e45b806007264c4bef1c961b8d538da166e80efe0cb71a7a389cf6e5e23badcb77526511a9ddbca9cf62fe6ed9aea6747d3c1faf626d531ff3ba4ab455b7a8b9d9b1a7c012adabad4531023824d6ffc16e2fb8c4fb05f29c435b7e0f6fa0d4dce24f001fbc9163c2fad"}, {0x70, 0x102, 0x1, "75cbf314dddc4b1ce68b8f0ce3bbd6bb6ee763e7f6b943674c0b3156650d1be9bca2b06b87d10bb9ccee39f73d06aeafe70cb793098f1e933a4dea271794b16e9595f8b492b124d1e7c6a230353096cf5224766d2e6ef1d65faf05a11388"}, {0x1010, 0x116, 0x3a7, "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"}, {0x88, 0x116, 0xffffffff, "f849ddf83d239ac8c2982217decb7f326d04739856bc38947949ac04500615433c2593af9ce24ff054fc955270d90e6cc0a0bc888e944d2adebec3e99ea9f15219cbd555f7b79e8073d5b8b6592ad3d2294ab0859e4b953dd1b9b7b7e8d15c801ced94a8de7d8047caa75b05a52a428449ad19"}, {0x80, 0x3a, 0xf1d, "d17324b942695ca97927f14aba2482655ac0423f38aca1a586e0a8fec15747f5a7d3caeeaeac749a00bbfd6a41966ae7dca513e816bf320927070f273bdfa004d11556a692ceab717bbde981f5574adf9485b4934a6fdcc279bfd1152995133fd2519b34fd9d8587df"}], 0x1370}, 0x0, 0xc0, 0x1, {0x0, r4}}) syz_io_uring_setup(0x516c, &(0x7f0000000200), &(0x7f0000000100)=0x0, &(0x7f0000000000)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0xd207}, 0x0, {0x0, r6}}) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x30, r0, 0x10000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r0, 0x0, &(0x7f00000002c0)="a30cfcb33e804268a9de7f78fe6443e3454a904daa4b203ea60d60efd85f5e5cd8e40abfb1b52771709ad5085d908546c3367ed6825be1a557e19e8e6cecc0f1c5a940858f68256e641aed2784b8", 0x4e, 0x60, 0x1, {0x0, r8}}) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000017000000000000000800090017000000", 0x24) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x3}, 0x78}) 6.289631684s ago: executing program 4 (id=1518): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="cc", 0x1}, {&(0x7f0000000140)="1a", 0x1}, {&(0x7f0000000700)="e6", 0x1}, {&(0x7f00000009c0)='A', 0x1}, {&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000ac0)='=', 0x1}, {&(0x7f0000000e00)="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", 0x201}], 0x7, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf7, 0x2, 0x0, 0x5, 0x1ff, 0x7f}, 0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200000007400000000000000000000005"], 0x38}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) 6.091471227s ago: executing program 4 (id=1520): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) r2 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r2, 0x4, 0xb, &(0x7f0000000080)=""/41) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100ff0100000000001c0004fd0c00010001000100200000000c002eaf12c948c61892080008000500", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000240)=0x6, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x1, 0x1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x0, 0x0}, 0x8) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32=r5], 0x0) unshare(0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000010c0)=r6, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000074000000060a010400000000000000000100000008000b40000000004c00048034000180090001007866726d000000002400028008000440000000000500030000000000080001400000000008000240000000031400019b0b0001007470726f78790000040002800900010073797a30"], 0xe8}}, 0x0) sendto$packet(r0, &(0x7f0000000380)="363c8f3f8a5d66571e583e7c88a8de0688a823e786ddf81a454ccc473f0255f005ba2f6dd5e070cbaf7e9a0cca798338a735ab15f45beb0fa9f8bae1deff", 0x3e, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.083543053s ago: executing program 0 (id=1521): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xa0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@statistic={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_connect_call\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r5 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 5.082560893s ago: executing program 1 (id=1522): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000000), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc) r5 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r5, 0x0, 0x0) r6 = accept4$rose(r1, &(0x7f00000001c0)=@full={0xb, @remote, @remote, 0x0, [@default, @remote, @rose, @netrom, @null, @null]}, &(0x7f0000000380)=0x40, 0x800) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000044c0)='./file0\x00', 0x10001, &(0x7f0000000a40)={[{@noacl}, {@atime_quantum={'atime_quantum', 0x3d, 0xffffffffffffffff}}, {@data_ordered}, {@acl}, {@journal_async_commit}, {@commit={'commit', 0x3d, 0x2}}, {@heartbeat_local}, {@localflocks}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}]}, 0x0, 0x446f, &(0x7f0000008c00)="$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") 4.920065632s ago: executing program 2 (id=1524): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 4.699030817s ago: executing program 0 (id=1525): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x140, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2b442, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = syz_io_uring_setup(0x42e9, &(0x7f0000000200)={0x0, 0xfe3a, 0x0, 0x3, 0x20000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0}, 0x20) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 4.640955024s ago: executing program 0 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) mlockall(0x1) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088f7ffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) read$FUSE(r3, &(0x7f0000002e40)={0x2020}, 0x2020) 3.240225326s ago: executing program 3 (id=1527): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r5, &(0x7f0000004540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000100), 0x40000c4, 0x7ffffff7) 3.239622056s ago: executing program 2 (id=1528): socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r3}, 0x38) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd"], 0xfdef) write$cgroup_subtree(r0, 0x0, 0x36) 2.365145357s ago: executing program 0 (id=1529): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x114) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000200000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 2.265298818s ago: executing program 3 (id=1530): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="24002d80080002000300000005000100000000000500040000000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000002500", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) 2.153057171s ago: executing program 4 (id=1531): add_key(&(0x7f0000000200)='asymmetric\x00', 0x0, &(0x7f0000000340)="303e303b0202d6dcb70ad83a51335fe66c7ae888746b02cfe670a5882a1cd79716584e6b04b7f62e04d842c642f679fb2c14cff6942f8b3edac751880f00002f", 0x40, 0xfffffffffffffffc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b0000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x0, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f00000004c0)={[{@balloc_noborder}, {@noattrs}, {@grpquota}, {@resize_auto, 0x0}, {@notail, 0x3d}, {@balloc_noborder}, {@grpjquota}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_gt}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@measure}, {@measure}]}, 0x3, 0x1112, &(0x7f0000002440)="$eJzs2TFrFEEUB/D/7J2X605WsFwEGwsJCQf2FhGutbaTdKmSShDyZfw4kso+pLKyCFjYrWSdPUEColkNB78fzPDm7c7OTDn7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPPQ/+oSdofiQdDX5Kuu9hcJenGVx9+nDUpeX28OTs6Xb86SzJLcpNrUpo6Le3h02W7btft4V6yqHNPTo5Pa1jS5fJ6iOZTnqTU/dxqmZRvU64GAAAAu6O/s9Wvn/yjO/3d1wcAAAB+Z9KfCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/oV/9jNt5DZokJem6i81Vku6+NgcAAABMoqTJm9Vt+eTF4+1wkTzPp1UZ8mP7WpImB/kwzN/7r/sGAACA3TIW3Re18L61HYz37ZvEs8zT9/35+OxJ5tnfH8LlmPvyMpm9O8rBeCevRf7z6/dvL2sr/exfHwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAPYKAAD//3YV1+E=") 1.935805386s ago: executing program 3 (id=1532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv4_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x18, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES64=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x62040200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) socket(0x28, 0x0, 0x0) r4 = socket(0x0, 0x5, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000bc0)) pselect6(0x40, &(0x7f0000000280)={0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff0}, &(0x7f00000003c0)={0x9, 0xffffffffffffffff, 0x80000001}, 0x0, &(0x7f0000000580)={0x77359400}, &(0x7f0000000680)={&(0x7f00000005c0)={[0x8]}, 0x8}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x48) listen(r4, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x1d0, 0x11, 0x148, 0x1d0, 0x0, 0x2f0, 0x2a8, 0x2a8, 0x2f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'geneve0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r6 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) 1.244351736s ago: executing program 0 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1.243314666s ago: executing program 2 (id=1534): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_ttl={{0x14}}], 0x18}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 971.187848ms ago: executing program 2 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6(0xa, 0x0, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x7ffffffff002, 0x7ffffffff002, 0x0, &(0x7f0000000000/0x4000)=nil) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc000, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 970.144148ms ago: executing program 4 (id=1536): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001bc0)=@s={0x5, @generic}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") open(&(0x7f00009e1000)='./file0\x00', 0xa060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c5a29b}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ftruncate(0xffffffffffffffff, 0x4008c0d) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="c8", 0x1) 759.345432ms ago: executing program 2 (id=1537): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) tkill(0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) 158.667842ms ago: executing program 2 (id=1538): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0xc8e, 0x0) dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x4004662b, &(0x7f0000000180)={@desc={0x1, 0x2000000, @desc3}}) 0s ago: executing program 0 (id=1539): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x4, 0x1, 0x5}}, 0x14) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x3a7) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)='~', 0x1}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x1d4c, 0x0, 0x0) kernel console output (not intermixed with test programs): ETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.869229][ T7118] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 335.952591][ T7118] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 335.981679][ T7118] netlink: 'syz.3.776': attribute type 7 has an invalid length. [ 336.172741][ T26] audit: type=1107 audit(1729788937.636:15): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='63\m!iN͋E~8*ԎFE@P7+k' [ 336.999240][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.037767][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.148414][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 337.249671][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.268011][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.293773][ T7145] Error parsing options; rc = [-22] [ 337.356404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.548218][ T7159] loop2: detected capacity change from 0 to 512 [ 338.740356][ T7159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 339.075631][ T7159] EXT4-fs (loop2): 1 truncate cleaned up [ 339.114351][ T7159] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 339.811355][ T7174] loop1: detected capacity change from 0 to 64 [ 340.005920][ T7174] hfs: unable to locate alternate MDB [ 340.011345][ T7174] hfs: continuing without an alternate MDB [ 342.686745][ T7185] loop1: detected capacity change from 0 to 1024 [ 342.763634][ T7185] EXT4-fs (loop1): Ignoring removed orlov option [ 342.830944][ T7185] EXT4-fs (loop1): filesystem is read-only [ 342.849793][ T7185] EXT4-fs (loop1): #clusters per group too big: 8193 [ 344.626175][ T7208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.549241][ T7208] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 345.629316][ T7221] loop1: detected capacity change from 0 to 512 [ 345.671014][ T7221] EXT4-fs (loop1): Test dummy encryption mode enabled [ 345.748332][ T7221] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.799: casefold flag without casefold feature [ 345.800156][ T7221] EXT4-fs (loop1): get root inode failed [ 345.806718][ T7221] EXT4-fs (loop1): mount failed [ 345.855741][ T7225] device syzkaller0 entered promiscuous mode [ 347.995435][ T7227] loop2: detected capacity change from 0 to 8192 [ 348.843733][ T7227] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.125308][ T7253] loop0: detected capacity change from 0 to 1024 [ 350.203882][ T7274] netlink: 'syz.1.813': attribute type 1 has an invalid length. [ 350.222445][ T7274] netlink: 'syz.1.813': attribute type 8 has an invalid length. [ 350.244612][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.813'. [ 352.901625][ T4891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 353.151527][ T4891] usb 5-1: Using ep0 maxpacket: 8 [ 353.201506][ T4494] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 353.228896][ T7350] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 353.271823][ T4891] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 353.280866][ T4891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.333697][ T4891] usb 5-1: config 0 descriptor?? [ 353.575817][ T4494] usb 2-1: config 0 has no interfaces? [ 353.581387][ T4494] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.631420][ T4494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.647644][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 353.668897][ T4494] usb 2-1: config 0 descriptor?? [ 353.713852][ T7310] device dummy0 entered promiscuous mode [ 353.738241][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 353.797919][ T7370] device dummy0 left promiscuous mode [ 353.849758][ T3744] usb 5-1: USB disconnect, device number 4 [ 353.930895][ T6644] usb 2-1: USB disconnect, device number 4 [ 354.246501][ T7375] loop2: detected capacity change from 0 to 2048 [ 354.346910][ T7375] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 354.488526][ T7382] loop0: detected capacity change from 0 to 512 [ 354.594912][ T7382] EXT4-fs (loop0): orphan cleanup on readonly fs [ 354.656008][ T7382] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.835: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 355.704861][ T7382] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.835: Bad quota inode: 4, type: 1 [ 356.030001][ T7382] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 356.442160][ T7382] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 356.480515][ T7382] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.691625][ T3576] Bluetooth: hci5: ACL packet for unknown connection handle 212 [ 357.148576][ T7418] netlink: 'syz.3.844': attribute type 3 has an invalid length. [ 357.442731][ T7418] netlink: 'syz.3.844': attribute type 3 has an invalid length. [ 358.085847][ T7426] loop4: detected capacity change from 0 to 1024 [ 358.230548][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 358.338944][ T7418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.844'. [ 359.208616][ T7439] loop0: detected capacity change from 0 to 8192 [ 359.302804][ T7439] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 359.316137][ T7439] REISERFS (device loop0): using ordered data mode [ 359.323180][ T7439] reiserfs: using flush barriers [ 359.332352][ T7439] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 359.357558][ T7439] REISERFS (device loop0): checking transaction log (loop0) [ 359.369109][ T7439] REISERFS (device loop0): Using rupasov hash to sort names [ 359.398171][ T7439] REISERFS (device loop0): using 3.5.x disk format [ 359.427553][ T7439] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 359.550937][ T7439] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 359.587953][ T7439] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 359.958682][ T7439] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 360.131756][ T3930] Bluetooth: hci5: command 0x0405 tx timeout [ 361.251032][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 361.744553][ T7461] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 361.757571][ T7461] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 364.247991][ T7502] raw_sendmsg: syz.1.876 forgot to set AF_INET. Fix it! [ 364.410881][ T7510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.422677][ T7511] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 364.430320][ T7511] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.876'. [ 364.457280][ T7504] device syzkaller0 entered promiscuous mode [ 364.794050][ T7523] loop2: detected capacity change from 0 to 8 [ 364.880305][ T7523] unable to read xattr id index table [ 365.424276][ T7541] loop0: detected capacity change from 0 to 1024 [ 365.541743][ T3647] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 365.653321][ T4890] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 365.668260][ T4890] Bluetooth: hci4: Injecting HCI hardware error event [ 365.690862][ T3576] Bluetooth: hci4: hardware error 0x00 [ 366.012136][ T3647] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.089901][ T3647] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.444101][ T3647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 366.491593][ T3647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.552203][ T3647] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 366.593043][ T3676] hfsplus: b-tree write err: -5, ino 4 [ 366.765494][ T3647] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 366.808871][ T3647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.277377][ T3647] usb 3-1: Product: syz [ 367.281752][ T3647] usb 3-1: Manufacturer: syz [ 368.762684][ T3647] usb 3-1: SerialNumber: syz [ 368.797307][ T3647] usb 3-1: config 0 descriptor?? [ 368.955671][ T3647] usb 3-1: can't set config #0, error -71 [ 368.966054][ T3647] usb 3-1: USB disconnect, device number 8 [ 370.182668][ T7561] device syzkaller0 entered promiscuous mode [ 370.235390][ T7575] loop0: detected capacity change from 0 to 2048 [ 370.520852][ T7575] NILFS (loop0): invalid segment: Sequence number mismatch [ 370.528169][ T7575] NILFS (loop0): trying rollback from an earlier position [ 370.544354][ T7575] NILFS (loop0): invalid segment: Checksum error in segment payload [ 370.552437][ T7575] NILFS (loop0): error -22 while searching super root [ 371.231837][ T7584] loop0: detected capacity change from 0 to 1024 [ 371.640131][ T7584] hfsplus: bad catalog entry type [ 371.830428][ T3647] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 371.891591][ T3647] Bluetooth: hci3: Injecting HCI hardware error event [ 371.941944][ T3572] Bluetooth: hci3: hardware error 0x00 [ 371.981252][ T5722] hfsplus: b-tree write err: -5, ino 4 [ 372.353962][ T7596] loop2: detected capacity change from 0 to 1024 [ 372.873242][ T7593] device syzkaller0 entered promiscuous mode [ 373.107532][ T7582] infiniband syz1: set down [ 373.157788][ T7582] infiniband syz1: added ipvlan1 [ 373.857673][ T7582] infiniband syz1: Couldn't open port 1 [ 374.450037][ T7582] RDS/IB: syz1: added [ 374.454561][ T7582] smc: adding ib device syz1 with port count 1 [ 374.481173][ T7582] smc: ib device syz1 port 1 has pnetid [ 374.553520][ T5722] hfsplus: b-tree write err: -5, ino 4 [ 374.754983][ T7610] loop2: detected capacity change from 0 to 1024 [ 376.720550][ T7631] xt_l2tp: v2 doesn't support IP mode [ 379.508147][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.514523][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.702994][ T7641] loop2: detected capacity change from 0 to 2048 [ 379.786343][ T7641] NILFS (loop2): invalid segment: Sequence number mismatch [ 379.868979][ T7641] NILFS (loop2): trying rollback from an earlier position [ 380.192153][ T7641] NILFS (loop2): invalid segment: Checksum error in segment payload [ 380.460377][ T7641] NILFS (loop2): error -22 while searching super root [ 380.771852][ T3930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 380.858306][ T7640] loop2: detected capacity change from 0 to 1024 [ 380.929315][ T7640] hfsplus: bad catalog entry type [ 381.170156][ T4383] hfsplus: b-tree write err: -5, ino 4 [ 381.204395][ T7653] device syzkaller0 entered promiscuous mode [ 381.469632][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 381.982655][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 382.161786][ T3930] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 382.213905][ T3930] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 382.238626][ T3930] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 382.258572][ T3930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.973511][ T7671] loop0: detected capacity change from 0 to 1024 [ 383.188168][ T3624] device hsr_slave_0 left promiscuous mode [ 383.207962][ T26] audit: type=1326 audit(1729788984.676:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.239872][ T26] audit: type=1326 audit(1729788984.706:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.251755][ T4891] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 383.271520][ T26] audit: type=1326 audit(1729788984.706:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.273194][ T3624] device hsr_slave_1 left promiscuous mode [ 383.341643][ T3930] usb 2-1: string descriptor 0 read error: -22 [ 383.348383][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.357600][ T26] audit: type=1326 audit(1729788984.706:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.374862][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.395125][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.406068][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.417320][ T3624] device bridge_slave_1 left promiscuous mode [ 383.427425][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.436490][ T26] audit: type=1326 audit(1729788984.706:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.462639][ T3624] device bridge_slave_0 left promiscuous mode [ 383.465241][ T26] audit: type=1326 audit(1729788984.706:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.468814][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.491373][ T26] audit: type=1326 audit(1729788984.706:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.530253][ T26] audit: type=1326 audit(1729788984.706:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.551724][ T13] usb 2-1: USB disconnect, device number 5 [ 383.574681][ T4891] usb 4-1: Using ep0 maxpacket: 8 [ 383.582007][ T26] audit: type=1326 audit(1729788984.766:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.615931][ T7679] loop0: detected capacity change from 0 to 512 [ 383.623067][ T26] audit: type=1326 audit(1729788984.766:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7674 comm="syz.2.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 383.656623][ T7679] EXT4-fs (loop0): Test dummy encryption mode enabled [ 383.672298][ T4494] Bluetooth: hci2: command 0x0409 tx timeout [ 383.680479][ T7679] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #12: comm syz.0.914: inline data xattr refers to an external xattr inode [ 383.691613][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 383.701889][ T7679] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.914: couldn't read orphan inode 12 (err -117) [ 383.707008][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.724637][ T7679] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,inode_readahead_blks=0x0000000000200000,sb=0x0000000000000001,prjquota,usrquota,usrjquota=,nojournal_checksum,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 383.727859][ T4891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.765221][ T4891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 383.775049][ T4891] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 383.793872][ T4891] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 383.804616][ T4891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.814795][ T4891] usb 4-1: config 0 descriptor?? [ 383.831607][ T4891] usb 4-1: can't set config #0, error -71 [ 383.839779][ T4890] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 383.847552][ T4891] usb 4-1: USB disconnect, device number 5 [ 383.959657][ T3624] device veth1_macvtap left promiscuous mode [ 383.981629][ T3624] device veth0_macvtap left promiscuous mode [ 383.988217][ T3624] device veth1_vlan left promiscuous mode [ 383.994315][ T3624] device veth0_vlan left promiscuous mode [ 384.749034][ T7688] loop1: detected capacity change from 0 to 256 [ 384.771662][ T4890] usb 3-1: Using ep0 maxpacket: 8 [ 384.891770][ T4890] usb 3-1: config 0 has no interfaces? [ 384.897476][ T4890] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 384.913268][ T4890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.985955][ T4890] usb 3-1: config 0 descriptor?? [ 385.852370][ T3773] Bluetooth: hci2: command 0x041b tx timeout [ 386.325867][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 386.418512][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 386.467927][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.538089][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.741655][ T3624] bond0 (unregistering): Released all slaves [ 387.138175][ T7656] chnl_net:caif_netlink_parms(): no params data found [ 388.368879][ T4890] usb 3-1: USB disconnect, device number 9 [ 388.482316][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.489389][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.638193][ T4676] Bluetooth: hci2: command 0x040f tx timeout [ 388.675902][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 388.689520][ T7723] loop1: detected capacity change from 0 to 2048 [ 388.700129][ T7656] device bridge_slave_0 entered promiscuous mode [ 388.805420][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.946200][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.961375][ T7723] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 389.101295][ T7656] device bridge_slave_1 entered promiscuous mode [ 389.521091][ T7656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.574029][ T7656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.742484][ T7656] team0: Port device team_slave_0 added [ 389.766691][ T7656] team0: Port device team_slave_1 added [ 389.799133][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.832227][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.934169][ T7656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.055666][ T7656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.142603][ T7719] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 390.159138][ T7719] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 390.171706][ T7719] EXT4-fs (loop1): This should not happen!! Data will be lost [ 390.171706][ T7719] [ 390.181333][ T7719] EXT4-fs (loop1): Total free blocks count 0 [ 390.187338][ T7719] EXT4-fs (loop1): Free/Dirty block details [ 390.193382][ T7719] EXT4-fs (loop1): free_blocks=66060288 [ 390.198984][ T7719] EXT4-fs (loop1): dirty_blocks=16 [ 390.204143][ T7719] EXT4-fs (loop1): Block reservation details [ 390.210112][ T7719] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 390.241475][ T7656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.350017][ T7656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.498113][ T7656] device hsr_slave_0 entered promiscuous mode [ 390.551401][ T7656] device hsr_slave_1 entered promiscuous mode [ 390.696077][ T7656] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.701870][ T3773] Bluetooth: hci2: command 0x0419 tx timeout [ 390.767896][ T7656] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.840714][ T7656] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.928594][ T7750] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 391.739217][ T7656] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.354341][ T7766] loop0: detected capacity change from 0 to 512 [ 393.012908][ T7766] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.085813][ T7766] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.132847][ T7656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.183032][ T7656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.219194][ T7656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.248934][ T7656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.935740][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.009902][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.253776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.314914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.569591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.774059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.838326][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.845430][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.091701][ T4890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 395.508248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.531649][ T4890] usb 4-1: Using ep0 maxpacket: 32 [ 395.543041][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 395.580782][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 395.604409][ T3988] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.611532][ T3988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.655339][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 395.672339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 395.700820][ T4890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 395.713635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 395.724811][ T4890] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 395.734235][ T4890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.752866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 395.758404][ T4890] usb 4-1: config 0 descriptor?? [ 395.781899][ T7803] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 395.784936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 395.807628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 395.822850][ T4890] hub 4-1:0.0: USB hub found [ 395.828057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 395.848069][ T7792] loop1: detected capacity change from 0 to 40427 [ 395.855546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.875003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.882937][ T4676] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 395.897996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.912327][ T7656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.939780][ T7792] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 395.952127][ T7656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.963582][ T7792] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 395.976103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.001877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.041744][ T4890] hub 4-1:0.0: 2 ports detected [ 396.087588][ T7792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 396.141886][ T4676] usb 3-1: Using ep0 maxpacket: 8 [ 396.155853][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.167984][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.223904][ T7656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.397966][ T7792] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 396.401742][ T4890] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 396.418987][ T4890] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 396.419621][ T7792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 396.553005][ T4890] usbhid 4-1:0.0: can't add hid device: -71 [ 396.617617][ T4890] usbhid: probe of 4-1:0.0 failed with error -71 [ 396.863594][ T4890] usb 4-1: USB disconnect, device number 6 [ 397.185732][ T4676] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 397.195959][ T4676] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 397.206022][ T4676] usb 3-1: Product: syz [ 397.210473][ T4676] usb 3-1: Manufacturer: syz [ 397.215132][ T4676] usb 3-1: SerialNumber: syz [ 397.216543][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 397.235963][ T4676] usb 3-1: config 0 descriptor?? [ 397.252690][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.274851][ T4676] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 397.319330][ T3624] tipc: Left network mode [ 397.344371][ T7656] device veth0_vlan entered promiscuous mode [ 397.385638][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.402189][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.423502][ T7656] device veth1_vlan entered promiscuous mode [ 397.454360][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.465806][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.473936][ T7813] ucma_write: process 125 (syz.2.952) changed security contexts after opening file descriptor, this is not allowed. [ 397.490582][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 397.546646][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 397.558132][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.567607][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.603927][ T7656] device veth0_macvtap entered promiscuous mode [ 397.618022][ T7656] device veth1_macvtap entered promiscuous mode [ 397.654432][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.673066][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.688602][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.700999][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.711649][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.725802][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.736036][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.749808][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.751583][ T4676] gspca_zc3xx: reg_r err -71 [ 397.759807][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.770590][ T4676] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 397.777830][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.791019][ T4676] usb 3-1: USB disconnect, device number 10 [ 397.802376][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.840733][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 397.858972][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 397.869820][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 397.879332][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.987958][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.998849][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.008691][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.019160][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.028992][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.039493][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.049977][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.061171][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.071763][ T7656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.082978][ T7656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.121633][ T7656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.145986][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.235560][ T3988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.427746][ T7656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.444516][ T7656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.457371][ T7656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.489881][ T7656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.343452][ T6644] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 400.363313][ T6644] Bluetooth: hci5: Injecting HCI hardware error event [ 400.370470][ T3572] Bluetooth: hci5: hardware error 0x00 [ 401.863620][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.944102][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.990893][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.020381][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.237834][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 402.252257][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 402.965329][ T7884] loop0: detected capacity change from 0 to 8192 [ 403.501878][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 403.501910][ T26] audit: type=1800 audit(1729789004.966:89): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.972" name="bus" dev="loop0" ino=1048623 res=0 errno=0 [ 403.721382][ T7893] loop4: detected capacity change from 0 to 1024 [ 404.565113][ T3624] device hsr_slave_0 left promiscuous mode [ 404.591799][ T3624] device hsr_slave_1 left promiscuous mode [ 404.604314][ T7906] loop1: detected capacity change from 0 to 512 [ 404.743464][ T144] hfsplus: b-tree write err: -5, ino 4 [ 404.749600][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.772236][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.781334][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.801590][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.803627][ T7906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.073731][ T3624] device bridge_slave_1 left promiscuous mode [ 405.177975][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.218412][ T7906] EXT4-fs (loop1): 1 truncate cleaned up [ 405.286395][ T7906] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 405.502131][ T3624] device bridge_slave_0 left promiscuous mode [ 405.514121][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.612020][ T7917] loop4: detected capacity change from 0 to 64 [ 405.629178][ T3624] device veth1_macvtap left promiscuous mode [ 405.641547][ T3624] device veth0_macvtap left promiscuous mode [ 405.697001][ T3624] device veth1_vlan left promiscuous mode [ 405.752112][ T3624] device veth0_vlan left promiscuous mode [ 405.880114][ T7901] loop2: detected capacity change from 0 to 512 [ 406.054782][ T7901] EXT4-fs (loop2): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 406.101019][ T7901] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 406.116059][ T7901] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.126797][ T7901] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 406.136850][ T7901] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 406.294934][ T5722] smc: removing ib device syz1 [ 406.473636][ T3624] team0 (unregistering): Port device team_slave_1 removed [ 406.556069][ T3624] team0 (unregistering): Port device team_slave_0 removed [ 406.592845][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.639225][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.804094][ T3624] bond0 (unregistering): Released all slaves [ 406.884846][ T7914] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 409.245432][ T7942] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 412.513051][ T7964] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 412.577172][ T7964] xt_recent: hitcount (39939) is larger than allowed maximum (255) [ 412.651172][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.665421][ T7977] xt_TCPMSS: Only works on TCP SYN packets [ 413.218371][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.883648][ T7994] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1002'. [ 414.655554][ T7996] loop0: detected capacity change from 0 to 2048 [ 415.457479][ T7996] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 416.118266][ T4891] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 416.191618][ T4890] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 416.602081][ T4891] usb 3-1: Using ep0 maxpacket: 8 [ 416.852113][ T4891] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 416.931944][ T4890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.962224][ T4891] usb 3-1: config 0 has no interface number 0 [ 417.018295][ T4890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.057490][ T4891] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 417.148944][ T4890] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09 [ 417.166751][ T4891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.206395][ T4890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.239956][ T4891] usb 3-1: config 0 descriptor?? [ 417.282086][ T4890] usb 2-1: config 0 descriptor?? [ 417.431640][ T4891] viperboard 3-1:0.143: version 0.00 found at bus 003 address 011 [ 417.481813][ T8045] loop4: detected capacity change from 0 to 512 [ 417.504873][ T8013] ALSA: seq fatal error: cannot create timer (-22) [ 417.520954][ T8013] ALSA: seq fatal error: cannot create timer (-22) [ 417.531579][ T4891] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 417.550531][ T4891] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 417.607081][ T8045] EXT4-fs (loop4): 1 orphan inode deleted [ 417.615987][ T8045] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 417.624199][ T4891] usb 3-1: USB disconnect, device number 11 [ 417.628657][ T8045] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.811580][ T4890] usbhid 2-1:0.0: can't add hid device: -71 [ 418.817578][ T4890] usbhid: probe of 2-1:0.0 failed with error -71 [ 418.851826][ T4890] usb 2-1: USB disconnect, device number 6 [ 420.155201][ T8079] loop4: detected capacity change from 0 to 1024 [ 420.268436][ T8075] loop1: detected capacity change from 0 to 4096 [ 420.286999][ T8079] EXT4-fs (loop4): Ignoring removed orlov option [ 420.321830][ T8079] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 420.602625][ T8091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 420.926875][ T8096] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 421.530085][ T8067] loop2: detected capacity change from 0 to 40427 [ 421.685619][ T8067] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 421.690909][ T8107] loop1: detected capacity change from 0 to 256 [ 421.727484][ T8067] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 421.768754][ T8067] F2FS-fs (loop2): invalid crc value [ 421.795998][ T8067] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4) [ 421.953710][ T26] audit: type=1800 audit(1729789023.426:90): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1028" name="bus" dev="loop1" ino=1048624 res=0 errno=0 [ 422.837532][ T8120] loop1: detected capacity change from 0 to 1024 [ 423.035178][ T8120] hfsplus: failed to load root directory [ 423.821244][ T8125] loop0: detected capacity change from 0 to 8192 [ 423.920262][ T8135] loop1: detected capacity change from 0 to 16 [ 423.959013][ T8125] REISERFS warning (device loop0): sh-2012 read_super_block: found unknown format "1282" of reiserfs with non-standard magic [ 424.004735][ T8125] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 424.029464][ T8135] erofs: (device loop1): mounted with root inode @ nid 36. [ 424.840922][ T8149] loop2: detected capacity change from 0 to 512 [ 424.933840][ T8151] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:aa to non-existent VLAN 2304 [ 424.952755][ T4889] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 424.953514][ T8149] EXT4-fs (loop2): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 425.088797][ T8155] device syzkaller0 entered promiscuous mode [ 425.327050][ T4890] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 425.347701][ T4889] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.368218][ T4889] usb 2-1: config 179 has no interface number 0 [ 425.368337][ T8125] loop0: detected capacity change from 0 to 32768 [ 425.375147][ T4889] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 425.396736][ T4889] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 425.453492][ T8125] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.1034 (8125) [ 425.710763][ T8161] ODEBUG: Out of memory. ODEBUG disabled [ 425.871718][ T8125] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 425.895673][ T8125] BTRFS info (device loop0): using free space tree [ 425.924845][ T8125] BTRFS info (device loop0): has skinny extents [ 425.972829][ T4889] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 425.984119][ T4889] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 426.022389][ T4889] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 426.041539][ T4889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.072285][ T8135] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 426.079690][ T8135] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 426.098604][ T4889] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9 [ 426.197716][ T8125] BTRFS info (device loop0): enabling ssd optimizations [ 426.334474][ T4890] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 426.357693][ T4890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.374158][ T4890] usb 5-1: config 0 descriptor?? [ 426.407872][ T13] usb 2-1: USB disconnect, device number 7 [ 426.413757][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 426.444720][ T13] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 426.935109][ T8153] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 427.192671][ T8194] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.218654][ T8153] VFS: Can't find a romfs filesystem on dev nullb0. [ 427.218654][ T8153] [ 427.364300][ T8196] input: syz0 as /devices/virtual/input/input10 [ 427.491643][ T4890] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 427.500174][ T4890] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 427.542033][ T8211] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.571672][ T4890] [drm:udl_init] *ERROR* Selecting channel failed [ 427.581856][ T8212] xt_bpf: check failed: parse error [ 427.600560][ T4890] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 427.622223][ T4890] [drm] Initialized udl on minor 2 [ 427.647014][ T4890] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.673209][ T4890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 427.696000][ T4890] usb 5-1: USB disconnect, device number 5 [ 427.927898][ T8228] syz.0.1059[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.927980][ T8228] syz.0.1059[8228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.116987][ T8233] loop4: detected capacity change from 0 to 16 [ 428.218482][ T8236] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 262144 (only 8 groups) [ 428.562833][ T8233] erofs: (device loop4): mounted with root inode @ nid 36. [ 428.935406][ T8235] loop0: detected capacity change from 0 to 1024 [ 429.904443][ T8220] loop1: detected capacity change from 0 to 40427 [ 430.521736][ T8220] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 430.559495][ T8220] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 430.897072][ T8220] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 433.004411][ T8285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1076'. [ 433.064392][ T8290] loop0: detected capacity change from 0 to 512 [ 433.930828][ T8290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 433.983992][ T8298] loop4: detected capacity change from 0 to 64 [ 434.005082][ T8290] EXT4-fs (loop0): 1 orphan inode deleted [ 434.010820][ T8290] EXT4-fs (loop0): 1 truncate cleaned up [ 434.047022][ T8290] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 434.150265][ T8298] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 434.171518][ T8298] MINIX-fs: bad superblock or unable to read bitmaps [ 435.016203][ T8315] loop1: detected capacity change from 0 to 2048 [ 435.734425][ T8315] EXT4-fs error (device loop1): ext4_fill_super:4841: inode #2: comm syz.1.1084: casefold flag without casefold feature [ 435.768829][ T8315] EXT4-fs (loop1): get root inode failed [ 435.783619][ T8315] EXT4-fs (loop1): mount failed [ 437.418664][ T8325] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1087'. [ 437.460441][ T8337] loop4: detected capacity change from 0 to 512 [ 437.481848][ T8325] netlink: zone id is out of range [ 437.495660][ T8325] netlink: zone id is out of range [ 437.535220][ T8325] netlink: zone id is out of range [ 437.540398][ T8325] netlink: zone id is out of range [ 437.550075][ T8325] netlink: zone id is out of range [ 437.560752][ T8325] netlink: zone id is out of range [ 437.571810][ T8325] netlink: zone id is out of range [ 437.577000][ T8337] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.589860][ T8325] netlink: zone id is out of range [ 437.596106][ T8325] netlink: zone id is out of range [ 438.810798][ T8325] netlink: zone id is out of range [ 439.144644][ T8353] block nbd0: NBD_DISCONNECT [ 439.256592][ T8337] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 439.282747][ T8357] block nbd0: Disconnected due to user request. [ 439.297462][ T8353] device bond0 entered promiscuous mode [ 439.326347][ T8357] block nbd0: shutting down sockets [ 439.352621][ T8363] loop2: detected capacity change from 0 to 1024 [ 439.363501][ T8337] EXT4-fs (loop4): 1 truncate cleaned up [ 439.369664][ T8353] device bond_slave_0 entered promiscuous mode [ 439.371603][ T8337] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.376835][ T8353] device bond_slave_1 entered promiscuous mode [ 440.035274][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.035383][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.267046][ T8353] device wlan1 entered promiscuous mode [ 440.936428][ T8352] device bond0 left promiscuous mode [ 441.019232][ T8352] device bond_slave_0 left promiscuous mode [ 441.076620][ T8352] device bond_slave_1 left promiscuous mode [ 441.082753][ T8352] device wlan1 left promiscuous mode [ 441.161402][ T8374] loop1: detected capacity change from 0 to 4096 [ 441.206336][ T26] audit: type=1800 audit(1729789042.678:91): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1097" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 441.360304][ T8374] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 442.043789][ T8391] loop0: detected capacity change from 0 to 16 [ 442.092100][ T8391] erofs: Unknown parameter 'user_pattr' [ 443.517556][ T8411] net_ratelimit: 14 callbacks suppressed [ 443.517573][ T8411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.823397][ T8414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.212177][ T8417] loop4: detected capacity change from 0 to 512 [ 444.268298][ T8423] loop2: detected capacity change from 0 to 512 [ 444.544878][ T8423] UDF-fs: bad mount option "a" or missing value [ 444.570756][ T8417] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 445.001910][ T8417] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.372296][ T8435] 9pnet_virtio: no channels available for device syz [ 446.703255][ T8448] loop2: detected capacity change from 0 to 1024 [ 447.020500][ T8448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 447.052403][ T8448] netem: change failed [ 447.139172][ T8459] loop4: detected capacity change from 0 to 190 [ 447.145315][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1117'. [ 447.186236][ T8459] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 447.212231][ T8459] ntfs: (device loop4): ntfs_read_inode_mount(): Failed to load the complete runlist for $MFT/$DATA. Driver bug or corrupt $MFT. Run chkdsk. [ 447.229163][ T8459] ntfs: (device loop4): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 447.238446][ T8459] ntfs: (device loop4): ntfs_fill_super(): Failed to load essential metadata. [ 448.139926][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.193303][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.216684][ T8470] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1121'. [ 448.225901][ T8468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.239721][ T8459] loop4: detected capacity change from 0 to 4096 [ 448.287267][ T8459] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 448.505681][ T8456] dccp_close: ABORT with 80 bytes unread [ 449.381874][ T8480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1125'. [ 449.384307][ T8483] trusted_key: encrypted_key: keyword '$]&@' not recognized [ 449.405531][ T8487] loop4: detected capacity change from 0 to 512 [ 449.885312][ T8487] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 450.202564][ T8483] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1127'. [ 450.221997][ T8483] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 450.249039][ T8487] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 450.261118][ T8483] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 450.261587][ T8487] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 450.339692][ T8487] EXT4-fs (loop4): 1 truncate cleaned up [ 450.365139][ T8487] EXT4-fs (loop4): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 451.254958][ T8507] loop1: detected capacity change from 0 to 256 [ 451.266396][ C1] dccp_check_seqno: Step 6 failed for CLOSEREQ packet, (LSWL(39454773608394) <= P.seqno(39454773608393) <= S.SWH(39454773608417)) and (P.ackno exists or LAWL(142425681308351) <= P.ackno(142425681308351) <= S.AWH(142425681308351), sending SYNC... [ 451.516362][ T8514] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 453.807667][ T8526] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1135'. [ 453.901000][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1137'. [ 454.340198][ T8537] loop1: detected capacity change from 0 to 512 [ 454.569245][ T8542] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 455.874150][ T8537] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 455.910674][ T8537] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.484569][ T8558] xt_CT: No such helper "syz0" [ 458.675430][ T26] audit: type=1326 audit(1729789060.148:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.1.1147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8932b2ff9 code=0x0 [ 459.669188][ T8574] netlink: 'syz.3.1149': attribute type 3 has an invalid length. [ 459.743526][ T8574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1149'. [ 461.549438][ T3988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.335971][ T3988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.444161][ T3988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.494489][ T8644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 464.345756][ T8652] xt_l2tp: v2 doesn't support IP mode [ 464.754273][ T8657] loop1: detected capacity change from 0 to 512 [ 464.770856][ T3988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.799952][ T26] audit: type=1326 audit(1729789066.268:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 464.928431][ T8657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 464.942755][ T8657] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.963922][ T26] audit: type=1326 audit(1729789066.268:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.197122][ T26] audit: type=1326 audit(1729789066.268:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.313853][ T26] audit: type=1326 audit(1729789066.268:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.413383][ T26] audit: type=1326 audit(1729789066.268:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.464787][ T26] audit: type=1326 audit(1729789066.328:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.556450][ T26] audit: type=1326 audit(1729789066.328:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 465.617381][ T26] audit: type=1326 audit(1729789066.328:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 466.126615][ T26] audit: type=1326 audit(1729789066.328:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 466.343611][ T26] audit: type=1326 audit(1729789066.328:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.2.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb9c5bff9 code=0x7ffc0000 [ 466.359103][ T8690] loop4: detected capacity change from 0 to 1024 [ 466.488400][ T8656] syz.2.1170 (8656): drop_caches: 2 [ 466.580622][ T8690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 467.587801][ T6645] Bluetooth: hci0: command 0x0409 tx timeout [ 468.067131][ T8685] netem: change failed [ 468.145350][ T8714] loop2: detected capacity change from 0 to 256 [ 469.391283][ T8667] chnl_net:caif_netlink_parms(): no params data found [ 469.873141][ T4676] Bluetooth: hci0: command 0x041b tx timeout [ 470.057255][ T8744] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1184'. [ 470.605079][ T8667] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.638747][ T8667] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.946060][ T8667] device bridge_slave_0 entered promiscuous mode [ 471.151302][ T8667] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.179150][ T8667] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.219407][ T8667] device bridge_slave_1 entered promiscuous mode [ 471.231323][ T8770] loop2: detected capacity change from 0 to 256 [ 471.567931][ T8781] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1193'. [ 472.927306][ T8780] fuse: Bad value for 'fd' [ 473.165537][ T3773] Bluetooth: hci0: command 0x040f tx timeout [ 473.269085][ T8667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.357679][ T8667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.525206][ T8667] team0: Port device team_slave_0 added [ 473.604812][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1198'. [ 474.476323][ T8803] xt_CT: No such helper "syz0" [ 474.652467][ T8806] loop0: detected capacity change from 0 to 128 [ 474.714927][ T8667] team0: Port device team_slave_1 added [ 474.771726][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.778657][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.817612][ T8806] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 474.839469][ T8812] loop1: detected capacity change from 0 to 256 [ 474.847007][ T8806] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.097722][ T8667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.210682][ T8667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.225038][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.251938][ T6645] Bluetooth: hci0: command 0x0419 tx timeout [ 475.371156][ T8818] syz.0.1202 (8818) used greatest stack depth: 19008 bytes left [ 475.390142][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.476058][ T8821] device syzkaller0 entered promiscuous mode [ 475.643691][ T3988] device hsr_slave_0 left promiscuous mode [ 475.665401][ T3988] device hsr_slave_1 left promiscuous mode [ 475.680279][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.691597][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.716172][ T3988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.731269][ T3988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.746609][ T3988] device bridge_slave_1 left promiscuous mode [ 475.761580][ T3988] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.769478][ T3988] device bridge_slave_0 left promiscuous mode [ 475.781570][ T3988] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.796378][ T3988] device veth1_macvtap left promiscuous mode [ 475.802735][ T3988] device veth0_macvtap left promiscuous mode [ 475.809489][ T3988] device veth1_vlan left promiscuous mode [ 475.821215][ T3988] device veth0_vlan left promiscuous mode [ 476.114999][ T3988] team0 (unregistering): Port device team_slave_1 removed [ 476.130133][ T3988] team0 (unregistering): Port device team_slave_0 removed [ 476.316822][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 476.331107][ T8850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1207'. [ 476.366348][ T8667] device hsr_slave_0 entered promiscuous mode [ 476.389800][ T8667] device hsr_slave_1 entered promiscuous mode [ 476.396463][ T8855] xt_TPROXY: Can be used only with -p tcp or -p udp [ 476.427990][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.467567][ T8667] Cannot create hsr debugfs directory [ 476.753324][ T8867] input: syz0 as /devices/virtual/input/input11 [ 476.831594][ T6645] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 477.841766][ T6645] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.879668][ T6645] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 477.915941][ T6645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.965520][ T6645] usb 5-1: config 0 descriptor?? [ 478.144911][ T8667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 478.158498][ T8667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.181290][ T8667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.201640][ T8667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.380597][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.399978][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.412432][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.423697][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.433569][ T6645] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 478.440617][ T6645] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 478.450284][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.459083][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.467295][ T6645] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 478.474778][ T3749] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.481871][ T3749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.489479][ T6645] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 478.496634][ T6645] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 478.520534][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 478.531925][ T6645] corsair 0003:1B1C:1B3E.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 478.543879][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.552725][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.561056][ T3749] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.568150][ T3749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.579711][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.589186][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.609858][ T8667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.620955][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.640112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.659822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.667977][ T3773] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 478.685221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.700660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.722161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 478.742021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.764007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 478.777617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.797489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.804923][ T8202] usb 5-1: USB disconnect, device number 6 [ 478.806953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.020753][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.029406][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.043629][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.077701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.093255][ T3773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 479.112858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.125651][ T3773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 479.136138][ T3773] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 479.145692][ T3773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.154908][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.173656][ T3773] usb 2-1: config 0 descriptor?? [ 479.182308][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.212774][ T8667] device veth0_vlan entered promiscuous mode [ 479.218934][ T3773] gspca_main: spca561-2.14.0 probing abcd:cdee [ 479.219786][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.242669][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.265711][ T8667] device veth1_vlan entered promiscuous mode [ 479.327319][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 479.339114][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 479.360161][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.396536][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.408393][ T8667] device veth0_macvtap entered promiscuous mode [ 479.424362][ T8901] udc-core: couldn't find an available UDC or it's busy [ 479.431603][ T8901] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 479.443625][ T8667] device veth1_macvtap entered promiscuous mode [ 479.488378][ T8931] loop4: detected capacity change from 0 to 2048 [ 479.494957][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.522578][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.544322][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.568506][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.579277][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.590119][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.600652][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.611515][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.625032][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.636686][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 479.646302][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 479.677563][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.701280][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.724036][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.729227][ T8931] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 479.742413][ T8931] UDF-fs: Scanning with blocksize 512 failed [ 479.749018][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.754115][ T8931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.767839][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.809066][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.820541][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.832118][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.842167][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.853097][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.865627][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.966890][ T3773] spca561: probe of 2-1:0.0 failed with error -22 [ 479.982615][ T3773] usb 2-1: MIDIStreaming interface descriptor not found [ 479.992976][ T8667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.165787][ T8667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.371561][ T8667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.579460][ T8667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.622926][ T8203] usb 2-1: USB disconnect, device number 8 [ 480.650355][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.684993][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.805034][ T8958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 480.921104][ T3749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.945696][ T3749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.590049][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.712385][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.721547][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.760662][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 484.007230][ T8977] loop1: detected capacity change from 0 to 4096 [ 484.072086][ T8977] ntfs3: loop1: ino=3, Correct links count -> 2. [ 484.974618][ T9015] loop2: detected capacity change from 0 to 512 [ 485.026544][ T9013] device syzkaller0 entered promiscuous mode [ 486.301972][ T9015] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 486.331674][ T9015] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.386008][ T9031] loop0: detected capacity change from 0 to 2048 [ 486.400593][ T9029] loop1: detected capacity change from 0 to 512 [ 486.482450][ T9029] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.503762][ T9031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.588695][ T9029] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 486.619399][ T9029] EXT4-fs (loop1): 1 truncate cleaned up [ 486.651598][ T9029] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 487.946329][ T9049] input: syz0 as /devices/virtual/input/input12 [ 487.989896][ T9049] loop4: detected capacity change from 0 to 512 [ 488.042844][ T9049] UDF-fs: bad mount option "18446744073709551615" or missing value [ 488.120981][ T9056] loop1: detected capacity change from 0 to 1024 [ 488.235702][ T9056] EXT4-fs (loop1): Ignoring removed orlov option [ 488.273109][ T9056] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 489.104017][ T9066] loop0: detected capacity change from 0 to 16 [ 489.151688][ T9066] erofs: (device loop0): mounted with root inode @ nid 36. [ 489.167937][ T9068] device syzkaller0 entered promiscuous mode [ 489.298992][ T1518] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.868373][ T9064] loop4: detected capacity change from 0 to 8192 [ 490.218342][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 490.218355][ T26] audit: type=1800 audit(1729789091.688:119): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1253" name="bus" dev="loop4" ino=1048630 res=0 errno=0 [ 490.269927][ T1518] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.309648][ T26] audit: type=1800 audit(1729789091.728:120): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1253" name="bus" dev="loop4" ino=1048630 res=0 errno=0 [ 490.970219][ T1518] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.012329][ T3773] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 491.191988][ T9083] loop0: detected capacity change from 0 to 256 [ 491.205103][ T1518] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.421562][ T3773] usb 5-1: Using ep0 maxpacket: 8 [ 491.701763][ T3773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.892458][ T3773] usb 5-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 492.002363][ T3773] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 492.219597][ T3773] usb 5-1: Manufacturer: syz [ 492.312156][ T3773] usb 5-1: config 0 descriptor?? [ 492.346543][ T3773] usb 5-1: can't set config #0, error -71 [ 492.355871][ T9074] chnl_net:caif_netlink_parms(): no params data found [ 492.434859][ T3773] usb 5-1: USB disconnect, device number 7 [ 492.457574][ T9096] loop0: detected capacity change from 0 to 512 [ 492.492606][ T3585] Bluetooth: hci0: command 0x0409 tx timeout [ 492.579072][ T9096] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 492.688807][ T9096] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 492.716303][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.734646][ T9096] EXT4-fs (loop0): 1 truncate cleaned up [ 492.740554][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.754826][ T9096] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 492.770516][ T9074] device bridge_slave_0 entered promiscuous mode [ 492.800873][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.834619][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.848194][ T9074] device bridge_slave_1 entered promiscuous mode [ 492.890199][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.919938][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.599598][ T9074] team0: Port device team_slave_0 added [ 493.677026][ T9074] team0: Port device team_slave_1 added [ 493.746567][ T9126] input: syz0 as /devices/virtual/input/input13 [ 493.865671][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.901484][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.226924][ T9126] loop2: detected capacity change from 0 to 512 [ 494.519817][ T9126] UDF-fs: bad mount option "18446744073709551615" or missing value [ 494.592278][ T4676] Bluetooth: hci0: command 0x041b tx timeout [ 494.601920][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.419424][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.452582][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.095173][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.546874][ T9074] device hsr_slave_0 entered promiscuous mode [ 496.568899][ T9074] device hsr_slave_1 entered promiscuous mode [ 496.726137][ T3773] Bluetooth: hci0: command 0x040f tx timeout [ 496.777832][ T9074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.269210][ T9074] Cannot create hsr debugfs directory [ 497.607688][ T9180] loop4: detected capacity change from 0 to 4096 [ 497.756092][ T9180] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 499.341142][ T8202] Bluetooth: hci0: command 0x0419 tx timeout [ 500.243706][ T9226] loop4: detected capacity change from 0 to 256 [ 500.278397][ T9217] device syzkaller0 entered promiscuous mode [ 500.329115][ T1518] device hsr_slave_0 left promiscuous mode [ 500.392191][ T1518] device hsr_slave_1 left promiscuous mode [ 500.458084][ T1518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.518579][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.657435][ T1518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.723799][ T1518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.814719][ T1518] device bridge_slave_1 left promiscuous mode [ 500.871258][ T1518] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.010611][ T1518] device bridge_slave_0 left promiscuous mode [ 501.040448][ T1518] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.102751][ T1518] device veth1_macvtap left promiscuous mode [ 501.114297][ T1518] device veth0_macvtap left promiscuous mode [ 501.134991][ T1518] device veth1_vlan left promiscuous mode [ 501.162551][ T1518] device veth0_vlan left promiscuous mode [ 501.263075][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.269411][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.126769][ T9254] loop2: detected capacity change from 0 to 128 [ 502.203043][ T1518] team0 (unregistering): Port device team_slave_1 removed [ 502.217614][ T1518] team0 (unregistering): Port device team_slave_0 removed [ 502.233884][ T1518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.310322][ T1518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.024327][ T1518] bond0 (unregistering): Released all slaves [ 504.208485][ T9266] loop4: detected capacity change from 0 to 512 [ 504.250500][ T9074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 504.263890][ T9074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.390386][ T9274] loop0: detected capacity change from 0 to 256 [ 505.874770][ T9074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 505.892434][ T9274] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 505.902530][ T9266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 505.915555][ T9266] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 505.932096][ T9273] attempt to access beyond end of device [ 505.932096][ T9273] loop0: rw=524288, want=524409, limit=256 [ 505.946376][ T9273] attempt to access beyond end of device [ 505.946376][ T9273] loop0: rw=0, want=524409, limit=256 [ 505.971864][ T26] audit: type=1800 audit(1729789107.428:121): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1296" name="file1" dev="loop0" ino=1048633 res=0 errno=0 [ 506.283106][ T9282] loop2: detected capacity change from 0 to 32768 [ 507.052533][ T9282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1298 (9282) [ 507.157369][ T9282] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 507.166531][ T9282] BTRFS info (device loop2): using free space tree [ 507.173114][ T9282] BTRFS info (device loop2): has skinny extents [ 507.199933][ T9074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.316561][ T9282] BTRFS info (device loop2): enabling ssd optimizations [ 508.411984][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.505724][ T9074] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.548241][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.561901][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.850704][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.995965][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.207830][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.214957][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.441862][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.486981][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.520780][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.527938][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.653455][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.702307][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 509.729654][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 509.766656][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 509.826117][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 509.854815][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 509.893704][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 509.945724][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 509.982376][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 510.015467][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 510.058388][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 510.103171][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 510.204470][ T9349] device syzkaller0 entered promiscuous mode [ 510.233522][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 510.529653][ T9362] loop0: detected capacity change from 0 to 512 [ 510.636763][ T9362] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 510.699126][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 510.707150][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 510.748330][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.760703][ T9362] EXT4-fs (loop0): 1 truncate cleaned up [ 510.791524][ T9362] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 510.875343][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 510.907670][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 511.720701][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 511.734279][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 511.865572][ T9074] device veth0_vlan entered promiscuous mode [ 511.897538][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 511.962927][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 512.636548][ T9384] loop4: detected capacity change from 0 to 128 [ 512.929318][ T9074] device veth1_vlan entered promiscuous mode [ 513.041896][ T9074] device veth0_macvtap entered promiscuous mode [ 513.063127][ T9074] device veth1_macvtap entered promiscuous mode [ 513.087941][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.157917][ T9395] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 513.168848][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.362408][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.487438][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.759022][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.819226][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.869936][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.905886][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.018644][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.113203][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.123330][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.137205][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.334012][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.402709][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.483118][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.499338][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.514391][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.589505][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.604491][ T9439] loop2: detected capacity change from 0 to 512 [ 517.674846][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.721484][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.741490][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.770361][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.169166][ T9439] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.201882][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.420824][ T9439] EXT4-fs (loop2): 1 truncate cleaned up [ 518.464806][ T9439] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback. [ 518.487966][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 518.496221][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.510213][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.535841][ T9074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.545035][ T9074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.581551][ T9074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.598592][ T9452] loop1: detected capacity change from 0 to 16 [ 518.641587][ T9074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.729525][ T9452] erofs: (device loop1): mounted with root inode @ nid 36. [ 519.808899][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.871582][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.923905][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.022007][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.115164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.201777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 521.165971][ T9478] loop2: detected capacity change from 0 to 512 [ 521.436808][ T9478] EXT4-fs (loop2): 1 orphan inode deleted [ 521.461696][ T9478] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 521.507096][ T9478] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.935783][ T9546] overlayfs: './file0' not a directory [ 528.519038][ T8205] Bluetooth: hci1: command 0x0409 tx timeout [ 530.657190][ T3647] Bluetooth: hci1: command 0x041b tx timeout [ 532.237141][ T9570] device syzkaller0 entered promiscuous mode [ 532.364868][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.411331][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 532.546646][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.695483][ T9593] fuse: Bad value for 'fd' [ 532.701599][ T3647] Bluetooth: hci1: command 0x040f tx timeout [ 532.716239][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.014022][ T9599] loop2: detected capacity change from 0 to 512 [ 533.044447][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.825438][ T9599] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.839159][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.874713][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.212791][ T9599] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 535.315084][ T6645] Bluetooth: hci1: command 0x0419 tx timeout [ 535.342560][ T9599] EXT4-fs (loop2): 1 truncate cleaned up [ 535.348278][ T9599] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.400058][ T9524] device bridge_slave_0 entered promiscuous mode [ 535.435245][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.477756][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.519156][ T9524] device bridge_slave_1 entered promiscuous mode [ 536.085587][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.115234][ T9629] device syzkaller0 entered promiscuous mode [ 536.269530][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.345375][ T9631] device syzkaller0 entered promiscuous mode [ 536.449360][ T9643] fuse: Bad value for 'fd' [ 536.502091][ T9524] team0: Port device team_slave_0 added [ 536.540548][ T9524] team0: Port device team_slave_1 added [ 536.805713][ T144] batman_adv: batadv0: Removing interface: ip6gretap1 [ 537.497619][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.504961][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.541506][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.584403][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.591371][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.649449][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.751035][ T9663] loop1: detected capacity change from 0 to 128 [ 537.868840][ T9524] device hsr_slave_0 entered promiscuous mode [ 537.883556][ T9661] loop2: detected capacity change from 0 to 4096 [ 537.907123][ T9663] EXT4-fs (loop1): Test dummy encryption mode enabled [ 537.920376][ T9524] device hsr_slave_1 entered promiscuous mode [ 538.387534][ T9663] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 538.419912][ T9524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.473683][ T9661] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 538.481656][ T9663] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 538.500467][ T9524] Cannot create hsr debugfs directory [ 539.674818][ T9663] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 539.724146][ T9684] device syzkaller0 entered promiscuous mode [ 540.587862][ T9706] device syzkaller0 entered promiscuous mode [ 542.094227][ T144] IPVS: stopping backup sync thread 6768 ... [ 542.157009][ T144] bond0: (slave wlan1): Releasing backup interface [ 542.299113][ T9524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 542.323869][ T9524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 542.373712][ T144] device hsr_slave_0 left promiscuous mode [ 542.392783][ T144] device hsr_slave_1 left promiscuous mode [ 542.399266][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.407047][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.415317][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.428255][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.437606][ T144] device bridge_slave_1 left promiscuous mode [ 542.449401][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.459391][ T144] device bridge_slave_0 left promiscuous mode [ 542.465963][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.478325][ T144] device veth1_macvtap left promiscuous mode [ 542.489717][ T144] device veth0_macvtap left promiscuous mode [ 542.499297][ T144] device veth1_vlan left promiscuous mode [ 542.510451][ T144] device veth0_vlan left promiscuous mode [ 543.282418][ T9751] loop2: detected capacity change from 0 to 4096 [ 543.480731][ T9751] ntfs3: loop2: ino=3, Correct links count -> 2. [ 543.621231][ T144] team0 (unregistering): Port device team_slave_1 removed [ 543.636716][ T144] team0 (unregistering): Port device team_slave_0 removed [ 543.647305][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.659763][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.683041][ T9757] ntfs3: loop2: failed to convert "0080" to macinuit [ 543.726625][ T144] bond0 (unregistering): Released all slaves [ 543.755147][ T9524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 543.766457][ T9524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 543.775964][ T9756] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 543.794365][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1380'. [ 543.933173][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.085975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.234400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.443034][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.627059][ T9773] device syzkaller0 entered promiscuous mode [ 544.665839][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.696509][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.712371][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.719468][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.727992][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.739038][ T9790] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 544.745975][ T9790] PKCS7: Only support pkcs7_signedData type [ 544.751028][ T9786] loop4: detected capacity change from 0 to 128 [ 544.787616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.807507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.820935][ T9786] FAT-fs (loop4): bogus number of FAT structure [ 544.838442][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.843277][ T9786] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 544.845546][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.878610][ T9786] FAT-fs (loop4): Can't find a valid FAT filesystem [ 544.881374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.905478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 544.915361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 544.930899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 544.940609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 544.950075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 544.967343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.044241][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.401636][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.763882][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 547.186033][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 547.212285][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.225164][ T146] block nbd2: Receive control failed (result -107) [ 547.236161][ T9815] nbd2: detected capacity change from 0 to 15960 [ 547.252613][ T150] block nbd2: Dead connection, failed to find a fallback [ 547.259813][ T150] block nbd2: shutting down sockets [ 547.265530][ T150] print_req_error: 40 callbacks suppressed [ 547.265542][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.282663][ T150] buffer_io_error: 40 callbacks suppressed [ 547.282674][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.298374][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.309522][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.317686][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.328813][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.337462][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.348706][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.356813][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.368750][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.376949][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.483451][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.504693][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.515546][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.523437][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.534243][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.542011][ T3564] ldm_validate_partition_table(): Disk read failed. [ 547.548684][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.559488][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.591673][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.602672][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 547.616565][ T3564] Dev nbd2: unable to read RDB block 0 [ 547.629417][ T3564] nbd2: unable to read partition table [ 547.636737][ T9524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 547.664245][ T9815] ldm_validate_partition_table(): Disk read failed. [ 547.948742][ T9815] Dev nbd2: unable to read RDB block 0 [ 547.985587][ T9815] nbd2: unable to read partition table [ 548.033668][ T3564] ldm_validate_partition_table(): Disk read failed. [ 548.042880][ T3564] Dev nbd2: unable to read RDB block 0 [ 548.066780][ T3564] nbd2: unable to read partition table [ 552.978642][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 553.105178][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 553.187021][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.486503][ T9887] overlayfs: missing 'lowerdir' [ 553.738866][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 553.769571][ T3749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.788807][ T9899] loop2: detected capacity change from 0 to 512 [ 553.853589][ T9524] device veth0_vlan entered promiscuous mode [ 553.860594][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 553.940848][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.995482][ T9899] EXT4-fs (loop2): 1 truncate cleaned up [ 554.001167][ T9899] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 554.095556][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.214845][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 555.011563][ T4494] Bluetooth: hci2: command 0x0406 tx timeout [ 555.019360][ T9524] device veth1_vlan entered promiscuous mode [ 555.115317][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.183328][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.207313][ T9524] device veth0_macvtap entered promiscuous mode [ 555.243533][ T9524] device veth1_macvtap entered promiscuous mode [ 555.332978][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.371550][ T8205] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 555.381490][ T9936] loop2: detected capacity change from 0 to 128 [ 555.388282][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.413569][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.446708][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.471519][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.509452][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.529761][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.543996][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.557009][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.565489][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.594401][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.616351][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.634339][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.657496][ T9936] EXT4-fs (loop2): Test dummy encryption mode enabled [ 555.699664][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.710314][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.722361][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.732066][ T9936] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 555.732338][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.751638][ T8205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.755361][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.775848][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.786379][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.797564][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.807674][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 555.823571][ T9936] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 555.836567][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.851537][ T8205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.888415][ T9524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.898836][ T8205] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.918176][ T9524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.939769][ T8205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.948486][ T9524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.979028][ T9524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.106786][ T8205] usb 4-1: config 0 descriptor?? [ 557.783011][ T3749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.791302][ T3749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.798979][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.839723][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.850734][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 557.889297][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.411692][ T8205] usbhid 4-1:0.0: can't add hid device: -71 [ 559.417663][ T8205] usbhid: probe of 4-1:0.0 failed with error -71 [ 559.441152][ T8205] usb 4-1: USB disconnect, device number 7 [ 560.506271][ T9998] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 560.550714][ T9998] loop4: detected capacity change from 0 to 1024 [ 560.785868][T10021] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1443'. [ 561.317757][T10027] fuse: Bad value for 'fd' [ 561.558879][T10034] netlink: 'syz.4.1449': attribute type 3 has an invalid length. [ 561.601807][T10034] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1449'. [ 562.717619][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.724037][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.909405][T10065] syz.4.1457: vmalloc error: size 12884901888, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 562.927149][T10065] CPU: 1 PID: 10065 Comm: syz.4.1457 Not tainted 5.15.169-syzkaller #0 [ 562.935411][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 562.945459][T10065] Call Trace: [ 562.948732][T10065] [ 562.951649][T10065] dump_stack_lvl+0x1e3/0x2d0 [ 562.956327][T10065] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 562.961946][T10065] ? panic+0x860/0x860 [ 562.966035][T10065] ? __rcu_read_unlock+0x92/0x100 [ 562.971052][T10065] warn_alloc+0x278/0x3f0 [ 562.975369][T10065] ? __vmalloc_node_range+0x91/0x8c0 [ 562.980664][T10065] ? zone_watermark_ok_safe+0x280/0x280 [ 562.986235][T10065] ? release_firmware_map_entry+0x190/0x190 [ 562.992131][T10065] __vmalloc_node_range+0x2b9/0x8c0 [ 562.997315][T10065] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 563.003279][T10065] ? print_irqtrace_events+0x210/0x210 [ 563.008722][T10065] ? memslot_rmap_alloc+0x5e/0x290 [ 563.013814][T10065] __vmalloc+0x75/0x80 [ 563.017867][T10065] ? memslot_rmap_alloc+0x5e/0x290 [ 563.022963][T10065] memslot_rmap_alloc+0x5e/0x290 [ 563.027887][T10065] kvm_arch_prepare_memory_region+0xbd/0xba0 [ 563.033893][T10065] kvm_set_memslot+0x63e/0x1af0 [ 563.038757][T10065] ? __kvm_memslots+0x1a0/0x1a0 [ 563.043630][T10065] __kvm_set_memory_region+0xcda/0x1060 [ 563.049169][T10065] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 563.054525][T10065] ? kvm_vm_ioctl_set_memory_region+0x62/0xa0 [ 563.060578][T10065] ? __might_fault+0xb8/0x110 [ 563.065239][T10065] ? do_vfs_ioctl+0x121/0x2b70 [ 563.069996][T10065] ? mutex_lock_io_nested+0x60/0x60 [ 563.075191][T10065] ? __might_fault+0xb4/0x110 [ 563.079855][T10065] kvm_vm_ioctl_set_memory_region+0x6d/0xa0 [ 563.085733][T10065] kvm_vm_ioctl+0x922/0xb60 [ 563.090227][T10065] ? tomoyo_path_number_perm+0x648/0x810 [ 563.095870][T10065] ? kvm_device_release+0x1f0/0x1f0 [ 563.101052][T10065] ? tomoyo_path_number_perm+0x6ab/0x810 [ 563.106708][T10065] ? __fget_files+0x413/0x480 [ 563.111375][T10065] ? bpf_lsm_file_ioctl+0x5/0x10 [ 563.116297][T10065] ? security_file_ioctl+0x7d/0xa0 [ 563.121392][T10065] ? kvm_device_release+0x1f0/0x1f0 [ 563.126577][T10065] __se_sys_ioctl+0xf1/0x160 [ 563.131153][T10065] do_syscall_64+0x3b/0xb0 [ 563.135553][T10065] ? clear_bhb_loop+0x15/0x70 [ 563.140212][T10065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.146103][T10065] RIP: 0033:0x7fc34a3e5ff9 [ 563.150503][T10065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.170091][T10065] RSP: 002b:00007fc34881c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.178489][T10065] RAX: ffffffffffffffda RBX: 00007fc34a59e130 RCX: 00007fc34a3e5ff9 [ 563.186443][T10065] RDX: 0000000020001180 RSI: 000000004020ae46 RDI: 0000000000000004 [ 563.194394][T10065] RBP: 00007fc34a458296 R08: 0000000000000000 R09: 0000000000000000 [ 563.202360][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.210313][T10065] R13: 0000000000000000 R14: 00007fc34a59e130 R15: 00007ffde2833558 [ 563.218279][T10065] [ 563.221406][T10065] Mem-Info: [ 563.224631][T10065] active_anon:292 inactive_anon:5451 isolated_anon:0 [ 563.224631][T10065] active_file:12339 inactive_file:39416 isolated_file:0 [ 563.224631][T10065] unevictable:768 dirty:314 writeback:0 [ 563.224631][T10065] slab_reclaimable:19440 slab_unreclaimable:93041 [ 563.224631][T10065] mapped:21954 shmem:1643 pagetables:599 bounce:0 [ 563.224631][T10065] kernel_misc_reclaimable:0 [ 563.224631][T10065] free:1386891 free_pcp:16508 free_cma:0 [ 563.266427][T10065] Node 0 active_anon:1160kB inactive_anon:21288kB active_file:49152kB inactive_file:157664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87684kB dirty:1252kB writeback:0kB shmem:4512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10668kB pagetables:2396kB all_unreclaimable? no [ 563.297611][T10065] Node 1 active_anon:8kB inactive_anon:516kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132kB dirty:4kB writeback:0kB shmem:2060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 563.326807][T10065] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.353086][T10065] lowmem_reserve[]: 0 2533 2533 2533 2533 [ 563.359122][T10065] Node 0 DMA32 free:1617084kB min:34736kB low:43420kB high:52104kB reserved_highatomic:0KB active_anon:1160kB inactive_anon:21288kB active_file:49152kB inactive_file:157664kB unevictable:1536kB writepending:1252kB present:3129332kB managed:2600788kB mlocked:0kB bounce:0kB free_pcp:35400kB local_pcp:21212kB free_cma:0kB [ 563.389223][T10065] lowmem_reserve[]: 0 0 0 0 0 [ 563.394387][T10065] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.419900][T10065] lowmem_reserve[]: 0 0 0 0 0 [ 563.424894][T10065] Node 1 Normal free:3915120kB min:55164kB low:68952kB high:82740kB reserved_highatomic:0KB active_anon:8kB inactive_anon:516kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:30612kB local_pcp:17016kB free_cma:0kB [ 563.453786][T10065] lowmem_reserve[]: 0 0 0 0 0 [ 563.458741][T10065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 563.471998][T10065] Node 0 DMA32: 1125*4kB (UME) 681*8kB (UME) 930*16kB (UME) 652*32kB (UME) 301*64kB (UME) 38*128kB (UME) 24*256kB (UM) 8*512kB (M) 9*1024kB (UME) 2*2048kB (UE) 372*4096kB (UM) = 1617084kB [ 563.491464][T10065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 563.503545][T10065] Node 1 Normal: 209*4kB (UME) 52*8kB (UME) 54*16kB (UME) 181*32kB (UME) 79*64kB (UME) 14*128kB (UE) 12*256kB (UME) 6*512kB (UM) 5*1024kB (UM) 5*2048kB (UME) 947*4096kB (M) = 3915172kB [ 563.522731][T10065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.532360][T10065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 563.541856][T10065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.551479][T10065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 563.560813][T10065] 53382 total pagecache pages [ 563.565548][T10065] 1 pages in swap cache [ 563.569799][T10065] Swap cache stats: add 3125, delete 3124, find 421/508 [ 563.576815][T10065] Free swap = 124688kB [ 563.581043][T10065] Total swap = 124996kB [ 563.585259][T10065] 2097051 pages RAM [ 563.589138][T10065] 0 pages HighMem/MovableOnly [ 563.593877][T10065] 413096 pages reserved [ 563.598179][T10065] 0 pages cma reserved [ 563.718772][T10063] fuse: Bad value for 'fd' [ 564.467314][T10079] loop1: detected capacity change from 0 to 1024 [ 565.136519][T10079] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 565.148959][T10086] kernel read not supported for file / n-!_(W (pid: 10086 comm: syz.0.1466) [ 565.424275][ T26] audit: type=1800 audit(1729789166.688:122): pid=10086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1466" name=20FFFF6E2D21FB90E25F2899D657FFEC dev="mqueue" ino=59109 res=0 errno=0 [ 568.126895][T10120] loop0: detected capacity change from 0 to 4096 [ 568.212034][T10124] loop1: detected capacity change from 0 to 64 [ 568.878635][T10120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 570.337811][T10146] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1480'. [ 571.252863][T10148] sctp: [Deprecated]: syz.2.1485 (pid 10148) Use of int in maxseg socket option. [ 571.252863][T10148] Use struct sctp_assoc_value instead [ 571.742494][T10148] loop2: detected capacity change from 0 to 4096 [ 571.929149][T10148] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 573.737250][T10173] loop4: detected capacity change from 0 to 512 [ 573.789401][T10173] EXT4-fs (loop4): Ignoring removed orlov option [ 573.801847][T10173] EXT4-fs (loop4): Test dummy encryption mode enabled [ 573.810138][T10157] loop0: detected capacity change from 0 to 40427 [ 573.831540][T10173] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 573.858363][T10157] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 573.871174][T10157] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 573.887630][T10157] F2FS-fs (loop0): invalid crc value [ 573.893745][T10173] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1492: Parent and EA inode have the same ino 15 [ 573.912663][T10173] EXT4-fs (loop4): 1 orphan inode deleted [ 573.918687][T10173] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,dioread_nolock,orlov,minixdf,test_dummy_encryption,journal_dev=0x000000004d82b9fb,usrjquota=,,errors=continue. Quota mode: none. [ 573.950629][T10157] F2FS-fs (loop0): Found nat_bits in checkpoint [ 573.997029][T10157] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 574.005096][T10157] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 574.764788][T10187] syz.1.1496[10187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.764871][T10187] syz.1.1496[10187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.868087][T10189] loop4: detected capacity change from 0 to 512 [ 575.103957][T10189] EXT4-fs (loop4): 1 orphan inode deleted [ 575.133216][T10189] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 575.979133][T10189] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.113525][T10208] loop0: detected capacity change from 0 to 40427 [ 576.192405][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 576.245347][T10208] F2FS-fs (loop0): Invalid log sectorsize (2) [ 576.251642][T10208] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 576.745058][T10208] F2FS-fs (loop0): Found nat_bits in checkpoint [ 576.782855][T10208] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 576.790057][T10208] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 576.794826][T10225] loop1: detected capacity change from 0 to 128 [ 577.530977][T10225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 577.543064][T10225] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 580.191350][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 580.247863][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 580.411207][ T6343] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 580.610088][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 580.813063][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 580.914056][ T6343] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 580.928014][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 580.942727][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 580.959142][ T6343] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 580.988456][ T6343] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 581.008650][T10254] device syzkaller0 entered promiscuous mode [ 582.004935][T10265] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 582.088833][T10269] loop0: detected capacity change from 0 to 16 [ 582.149510][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 582.173909][T10269] erofs: (device loop0): mounted with root inode @ nid 36. [ 582.201513][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1520'. [ 582.497819][T10275] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 582.601734][ T4672] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 582.871612][ T4672] usb 5-1: Using ep0 maxpacket: 8 [ 583.047018][ T4672] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 583.065426][ T4672] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.118666][ T4672] usb 5-1: config 0 has no interface number 0 [ 583.145357][ T4672] usb 5-1: config 0 interface 52 altsetting 1 has an invalid endpoint with address 0xFF, skipping [ 583.186697][ T4672] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.236426][ T4672] usb 5-1: config 0 interface 52 has no altsetting 0 [ 583.269513][ T4672] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 583.300831][ T4672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.337424][ T4672] usb 5-1: config 0 descriptor?? [ 583.357022][ T3676] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.459676][ T3676] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.536533][ T3676] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.638427][T10284] chnl_net:caif_netlink_parms(): no params data found [ 585.029099][ T8202] usb 5-1: USB disconnect, device number 8 [ 585.837651][ T6644] Bluetooth: hci3: command 0x0409 tx timeout [ 585.962793][T10303] device syzkaller0 entered promiscuous mode [ 586.220842][T10284] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.228159][T10284] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.236964][T10284] device bridge_slave_0 entered promiscuous mode [ 586.317643][T10327] xt_hashlimit: invalid rate [ 586.669036][T10327] loop4: detected capacity change from 0 to 8192 [ 586.724367][T10284] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.804309][T10284] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.831726][T10327] REISERFS warning (device loop4): jmacd-7 reiserfs_fill_super: resize option for remount only [ 586.923655][T10284] device bridge_slave_1 entered promiscuous mode [ 587.074396][T10284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.085441][T10333] sch_fq: defrate 0 ignored. [ 587.127649][T10284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.224159][T10284] team0: Port device team_slave_0 added [ 587.297374][T10284] team0: Port device team_slave_1 added [ 587.390863][T10284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.409108][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.474814][T10284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.500520][T10284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.515314][T10284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.024749][ T6644] Bluetooth: hci3: command 0x041b tx timeout [ 588.051522][T10284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.152964][T10358] [ 588.155298][T10358] ====================================================== [ 588.162309][T10358] WARNING: possible circular locking dependency detected [ 588.169314][T10358] 5.15.169-syzkaller #0 Not tainted [ 588.174495][T10358] ------------------------------------------------------ [ 588.181501][T10358] syz.2.1538/10358 is trying to acquire lock: [ 588.187553][T10358] ffff8880249383f0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_bmap+0x4b/0x410 [ 588.197095][T10358] [ 588.197095][T10358] but task is already holding lock: [ 588.204430][T10358] ffff88814b9063f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x31c/0xc90 [ 588.215006][T10358] [ 588.215006][T10358] which lock already depends on the new lock. [ 588.215006][T10358] [ 588.225381][T10358] [ 588.225381][T10358] the existing dependency chain (in reverse order) is: [ 588.234623][T10358] [ 588.234623][T10358] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 588.243364][T10358] lock_acquire+0x1db/0x4f0 [ 588.248381][T10358] __mutex_lock_common+0x1da/0x25a0 [ 588.254072][T10358] mutex_lock_io_nested+0x45/0x60 [ 588.259590][T10358] jbd2_journal_flush+0x290/0xc90 [ 588.265108][T10358] ext4_ioctl_group_add+0x1f3/0x510 [ 588.270802][T10358] ext4_ioctl+0x17cc/0x5b80 [ 588.275811][T10358] __se_sys_ioctl+0xf1/0x160 [ 588.280926][T10358] do_syscall_64+0x3b/0xb0 [ 588.285846][T10358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.292234][T10358] [ 588.292234][T10358] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 588.300187][T10358] lock_acquire+0x1db/0x4f0 [ 588.305184][T10358] __mutex_lock_common+0x1da/0x25a0 [ 588.310875][T10358] mutex_lock_nested+0x17/0x20 [ 588.316127][T10358] jbd2_journal_lock_updates+0x2aa/0x370 [ 588.322255][T10358] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 588.328812][T10358] ext4_fileattr_set+0xdf4/0x1750 [ 588.334329][T10358] vfs_fileattr_set+0x8f3/0xd30 [ 588.339676][T10358] do_vfs_ioctl+0x1d85/0x2b70 [ 588.344854][T10358] __se_sys_ioctl+0x81/0x160 [ 588.349944][T10358] do_syscall_64+0x3b/0xb0 [ 588.354852][T10358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.361237][T10358] [ 588.361237][T10358] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 588.369640][T10358] lock_acquire+0x1db/0x4f0 [ 588.374635][T10358] percpu_down_write+0x52/0x2d0 [ 588.379979][T10358] ext4_ind_migrate+0x254/0x760 [ 588.385325][T10358] ext4_fileattr_set+0xe8b/0x1750 [ 588.390842][T10358] vfs_fileattr_set+0x8f3/0xd30 [ 588.396183][T10358] do_vfs_ioctl+0x1d85/0x2b70 [ 588.401352][T10358] __se_sys_ioctl+0x81/0x160 [ 588.406431][T10358] do_syscall_64+0x3b/0xb0 [ 588.411338][T10358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.417723][T10358] [ 588.417723][T10358] -> #0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 588.426288][T10358] validate_chain+0x1649/0x5930 [ 588.432052][T10358] __lock_acquire+0x1295/0x1ff0 [ 588.437405][T10358] lock_acquire+0x1db/0x4f0 [ 588.442406][T10358] down_read+0x45/0x2e0 [ 588.447056][T10358] ext4_bmap+0x4b/0x410 [ 588.451703][T10358] bmap+0xa1/0xd0 [ 588.455832][T10358] jbd2_journal_flush+0x7a2/0xc90 [ 588.461360][T10358] ext4_ioctl+0x3249/0x5b80 [ 588.466397][T10358] __se_sys_ioctl+0xf1/0x160 [ 588.471483][T10358] do_syscall_64+0x3b/0xb0 [ 588.476391][T10358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.482776][T10358] [ 588.482776][T10358] other info that might help us debug this: [ 588.482776][T10358] [ 588.493002][T10358] Chain exists of: [ 588.493002][T10358] &sb->s_type->i_mutex_key#9 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 588.493002][T10358] [ 588.508431][T10358] Possible unsafe locking scenario: [ 588.508431][T10358] [ 588.515854][T10358] CPU0 CPU1 [ 588.521190][T10358] ---- ---- [ 588.526526][T10358] lock(&journal->j_checkpoint_mutex); [ 588.532040][T10358] lock(&journal->j_barrier); [ 588.539310][T10358] lock(&journal->j_checkpoint_mutex); [ 588.547350][T10358] lock(&sb->s_type->i_mutex_key#9); [ 588.552704][T10358] [ 588.552704][T10358] *** DEADLOCK *** [ 588.552704][T10358] [ 588.560817][T10358] 2 locks held by syz.2.1538/10358: [ 588.566020][T10358] #0: ffff88814b906170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2aa/0x370 [ 588.576860][T10358] #1: ffff88814b9063f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x31c/0xc90 [ 588.587890][T10358] [ 588.587890][T10358] stack backtrace: [ 588.593755][T10358] CPU: 1 PID: 10358 Comm: syz.2.1538 Not tainted 5.15.169-syzkaller #0 [ 588.601967][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 588.611995][T10358] Call Trace: [ 588.615252][T10358] [ 588.618159][T10358] dump_stack_lvl+0x1e3/0x2d0 [ 588.622811][T10358] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 588.628433][T10358] ? print_circular_bug+0x12b/0x1a0 [ 588.633945][T10358] check_noncircular+0x2f8/0x3b0 [ 588.638858][T10358] ? add_chain_block+0x850/0x850 [ 588.643774][T10358] ? lockdep_lock+0x11f/0x2a0 [ 588.648426][T10358] ? do_raw_spin_unlock+0x137/0x8b0 [ 588.653599][T10358] validate_chain+0x1649/0x5930 [ 588.658436][T10358] ? finish_lock_switch+0x8f/0x100 [ 588.663535][T10358] ? reacquire_held_locks+0x660/0x660 [ 588.668883][T10358] ? reacquire_held_locks+0x660/0x660 [ 588.674228][T10358] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 588.680179][T10358] ? release_firmware_map_entry+0x190/0x190 [ 588.686055][T10358] ? do_raw_spin_unlock+0x137/0x8b0 [ 588.691227][T10358] ? mark_lock+0x98/0x340 [ 588.695551][T10358] ? schedule+0x132/0x1f0 [ 588.699863][T10358] __lock_acquire+0x1295/0x1ff0 [ 588.704706][T10358] lock_acquire+0x1db/0x4f0 [ 588.709187][T10358] ? ext4_bmap+0x4b/0x410 [ 588.713496][T10358] ? read_lock_is_recursive+0x10/0x10 [ 588.718846][T10358] ? __might_sleep+0xc0/0xc0 [ 588.723420][T10358] ? ext4_journalled_write_end+0xee0/0xee0 [ 588.729199][T10358] down_read+0x45/0x2e0 [ 588.733331][T10358] ? ext4_bmap+0x4b/0x410 [ 588.737644][T10358] ? ext4_journalled_write_end+0xee0/0xee0 [ 588.743452][T10358] ext4_bmap+0x4b/0x410 [ 588.747609][T10358] ? ext4_journalled_write_end+0xee0/0xee0 [ 588.753389][T10358] bmap+0xa1/0xd0 [ 588.756997][T10358] jbd2_journal_flush+0x7a2/0xc90 [ 588.762009][T10358] ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50 [ 588.768830][T10358] ? bpf_lsm_capable+0x5/0x10 [ 588.773480][T10358] ? security_capable+0x86/0xb0 [ 588.778309][T10358] ext4_ioctl+0x3249/0x5b80 [ 588.782788][T10358] ? do_vfs_ioctl+0x1b66/0x2b70 [ 588.787626][T10358] ? ext4_fileattr_set+0x1750/0x1750 [ 588.792890][T10358] ? __x64_compat_sys_ioctl+0x80/0x80 [ 588.798276][T10358] ? __lock_acquire+0x1ff0/0x1ff0 [ 588.803274][T10358] ? slab_free_freelist_hook+0xdd/0x160 [ 588.808793][T10358] ? tomoyo_path_number_perm+0x648/0x810 [ 588.814401][T10358] ? kfree+0xf1/0x270 [ 588.818367][T10358] ? tomoyo_path_number_perm+0x6ab/0x810 [ 588.823976][T10358] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 588.829426][T10358] ? __fget_files+0x413/0x480 [ 588.834097][T10358] ? bpf_lsm_file_ioctl+0x5/0x10 [ 588.839027][T10358] ? security_file_ioctl+0x7d/0xa0 [ 588.844112][T10358] ? ext4_fileattr_set+0x1750/0x1750 [ 588.849372][T10358] __se_sys_ioctl+0xf1/0x160 [ 588.853939][T10358] do_syscall_64+0x3b/0xb0 [ 588.858330][T10358] ? clear_bhb_loop+0x15/0x70 [ 588.862984][T10358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 588.868851][T10358] RIP: 0033:0x7f3cb9c5bff9 [ 588.873244][T10358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.892822][T10358] RSP: 002b:00007f3cb80d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.901227][T10358] RAX: ffffffffffffffda RBX: 00007f3cb9e13f80 RCX: 00007f3cb9c5bff9 [ 588.909171][T10358] RDX: 0000000020000180 RSI: 000000004004662b RDI: 0000000000000007 [ 588.917123][T10358] RBP: 00007f3cb9cce296 R08: 0000000000000000 R09: 0000000000000000 [ 588.925070][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.933012][T10358] R13: 0000000000000000 R14: 00007f3cb9e13f80 R15: 00007ffc98d78f68 [ 588.940959][T10358] [ 589.071235][T10284] device hsr_slave_0 entered promiscuous mode [ 589.133091][T10284] device hsr_slave_1 entered promiscuous mode [ 589.190887][T10284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.234692][T10284] Cannot create hsr debugfs directory [ 589.357700][T10346] loop4: detected capacity change from 0 to 40427 [ 589.368044][ T3676] IPVS: stopping backup sync thread 6916 ... [ 589.395031][T10346] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 589.403999][T10346] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 589.443133][T10346] F2FS-fs (loop4): Found nat_bits in checkpoint [ 589.476522][T10346] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 589.488069][T10346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 589.533114][ T3676] device hsr_slave_0 left promiscuous mode [ 589.539376][ T3676] device hsr_slave_1 left promiscuous mode [ 589.547525][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.555955][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.564571][ T3676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.572407][ T3676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.579749][ T3676] device bridge_slave_1 left promiscuous mode [ 589.585999][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.593683][ T3676] device bridge_slave_0 left promiscuous mode [ 589.599813][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.608660][ T3676] device veth1_macvtap left promiscuous mode [ 589.615140][ T3676] device veth0_macvtap left promiscuous mode [ 589.621657][ T3676] device veth1_vlan left promiscuous mode [ 589.627505][ T3676] device veth0_vlan left promiscuous mode [ 589.696731][ T3676] team0 (unregistering): Port device team_slave_1 removed [ 589.708434][ T3676] team0 (unregistering): Port device team_slave_0 removed [ 589.720006][ T3676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.731308][ T3676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.771186][ T3676] bond0 (unregistering): Released all slaves [ 589.881474][ T8202] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 589.892940][T10284] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 589.906966][T10284] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 589.915676][T10284] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 589.926177][T10284] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 590.000190][T10284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.029360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 590.060626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 590.067940][ T3930] Bluetooth: hci3: command 0x040f tx timeout [ 590.077934][T10284] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.087316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 590.096609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 590.105094][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.112176][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.122468][ T8202] usb 5-1: Using ep0 maxpacket: 8 [ 590.130540][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 590.139509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 590.149437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 590.165504][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.172580][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.182496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 590.203777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 590.223116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 590.241633][ T8202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 590.254418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 590.262312][ T8202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.274270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 590.292977][ T8202] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.304524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 590.321455][ T8202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 590.331178][ T8202] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 590.343259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 590.352523][ T8202] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 590.363211][ T8202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.376507][ T8202] usb 5-1: config 0 descriptor?? [ 590.380892][T10284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.401720][T10284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.416215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 590.425185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 590.437554][ T3572] Bluetooth: hci4: urb ffff888148e5f000 submission failed (90) [ 590.448960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 590.460171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 590.476808][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 590.626137][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 590.642551][ T8203] usb 5-1: USB disconnect, device number 9 [ 590.661949][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 590.670049][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.670065][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.694980][T10284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.709698][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.709715][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.726323][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.739195][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.758169][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.758237][ T7656] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 590.766684][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 590.798099][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 590.806723][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 590.822851][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.840427][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.849787][T10284] device veth0_vlan entered promiscuous mode [ 590.865550][T10284] device veth1_vlan entered promiscuous mode [ 590.902813][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 590.910627][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 590.932100][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.940454][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.950906][T10284] device veth0_macvtap entered promiscuous mode [ 590.959354][T10284] device veth1_macvtap entered promiscuous mode [ 590.969933][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.980424][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.990524][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.001239][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.011091][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.031503][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.041329][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.052637][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.063600][T10284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.071361][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 591.089350][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 591.100342][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 591.108711][ T3676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 591.119567][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.130619][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.140765][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.151190][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.161005][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.175076][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.184898][T10284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.195330][T10284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.205797][T10284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.213461][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.222873][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 591.233532][T10284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.242223][T10284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.250895][T10284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.259933][T10284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.280909][T10284] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 591.297984][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.298646][T10284] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 591.309103][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.323982][ T3676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.332473][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 591.339955][ T3676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.348056][ T408] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 592.132195][ T3930] Bluetooth: hci3: command 0x0419 tx timeout