last executing test programs: 58.395948919s ago: executing program 3 (id=801): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004c00004400000000000690780a010100ac1e000189070aac1414bb440c05000000000000000000860600"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0761dc7b"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 58.111817284s ago: executing program 3 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 57.947885426s ago: executing program 3 (id=809): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) 57.813355148s ago: executing program 3 (id=810): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") fallocate(0xffffffffffffffff, 0x3, 0x36e, 0x10000) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x7, 0x7fff, 0x7, 0x4000, 0xb, r3, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 57.590410041s ago: executing program 3 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a32"], 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz2\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 51.568539656s ago: executing program 3 (id=832): fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e1a6e2a0df"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3], 0x20) 51.491254757s ago: executing program 32 (id=832): fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000e1a6e2a0df"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3], 0x20) 46.28017318s ago: executing program 1 (id=852): socket$kcm(0x10, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 46.24166494s ago: executing program 1 (id=853): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="183752b5cf59ba77190000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0xffffff56, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200089, &(0x7f0000000180)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@quota}, {@oldalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81}}]}, 0x1, 0x504, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pGckTkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep07W3gSS2FH8+UijeW/erL/vbXbei7/Z+AUwtu5ExEFETEbEuxExl19P8iPe6hzpfZ8cPl49Ony8mkS7/c7fk6w9vRY9fyZ1O3/NUkR871sRP0yejNvc299cqdWqO3l9oVXfXmju7d/fqK+sV9erW5XK8tLy4hsPXq9c2lhfqk/mpS9+/LuDr/047dZsfqV3HJepM/TicZzURER85yqCjcCtfDyTo+4I/5dCRDwfES9nz/9c3Mq+mgDATdZuz0V7rrd+LDlZBQBuikKWA0sK5TwXMBuFQrncyeG9EDOFWqPZuveosbu11smVzUex8GijVl3Mc4XzUUzS+lJW/rReOVV/EBHPRcTPpqazenm1UVsb5Tc+ADDGbp9a//811Vn/AYAbrjTqDgAAQ2f9B4DxY/0HgPFj/QeA8dNZ/6dH3Q0AYIi8/weA8WP9B4Cx8t23306P9lH++ddr7+3tbjbeu79WbW6W67ur5dXGznZ5vdFYzz6zp37W69Uaje2l12L3/fmvbzdbC829/Yf1xu5W62H2ud4Pq8XsroMhjAwAGOS5lz76Y5KuyG9OZ0f07OVQHGnPgKtWGHUHgJG5NeoOACNjty8YXxd4j1+M+KkUAdwAfbboPaHU7xeE2u12++q6BFyxu5+T/4dx1ZP/97+AYczI/8P4kv+H8dVuJ+fd5D/OeyMAcL3J8QMDfv7/fH7+df7DgR+snb7jw6vsFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxv3f1/y/le4LNRKJTLEc9ExHwUk0cbtepiRDwbEX+YKk6l9aUR9xkAuKjCX5J8/6+7c6/Onmh68fZxcTIifvSLd37+/kqrtfP7iMnkH1Pd660P8+uV4fceADhbd53Ozj1v5D85fLzaPYbZn79+MyJKnfhHh5NxdBx/IiaycymKETHzzySvdyQ9uYuLOPggIj7bb/xJzGY5kM7Op6fjp7GfGWr8won4haytc07/Lj5zCX2BcfNROv+81e/5K8Sd7Nz/+S9lM9TF5fNf+lKrR9kc+Gn87vx3a8D8d+e8MV777bc7pekn2z6I+PxERDf2Uc/8042fDIj/6jnj/+kLL748qK39y4i70T9+b6yFVn17obm3f3+jvrJeXa9uVSrLS8uLbzx4vbKQ5agXBq8Gf3vz3rOD2tLxzwyIXzpj/F8+5/h/9Z93v/+lp8T/6iv94hfihafET9fEr5wz/srMb0qD2tL4awPGf9bX/94543/85/0ntg0HAEanube/uVKrVXcUFK5/If0new260bfwjWHFmoz+TT95pfNMn2rqfu//P8YaNGNcRtYNuA6OH/qI+PeoOwMAAAAAAAAAAAAAAPQ1jN9YGvUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLn+GwAA//+hm8cd") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@fwd={0x5}, @func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 45.330950763s ago: executing program 1 (id=856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 42.522601783s ago: executing program 1 (id=859): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 41.337870709s ago: executing program 1 (id=864): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x9, 0x2, 0x100, 0x3, 0x3, 0x19f6}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, &(0x7f0000000ac0)) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000014) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) close(0xffffffffffffffff) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 35.5799344s ago: executing program 1 (id=874): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 34.90079015s ago: executing program 33 (id=874): syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 13.044999177s ago: executing program 0 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 13.037527337s ago: executing program 2 (id=921): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x3}) 11.589835377s ago: executing program 0 (id=913): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040), 0x0) migrate_pages(0x0, 0x9, 0x0, 0x0) 10.931205136s ago: executing program 0 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xb99ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) 10.740315799s ago: executing program 2 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c52bb85dfcda2", 0x11, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 9.164868891s ago: executing program 2 (id=920): mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010102, 0x4e23, 0x3, 'wrr\x00', 0x1, 0x7, 0x49}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x2, 0x81, 0x19}, {@local, 0x4e20, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1c9, 0x12d5c, 0x12d5c}}, 0x44) 9.160369131s ago: executing program 0 (id=922): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = eventfd2(0x2, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x104080, &(0x7f0000000180), 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000003c0)=""/57, 0x0, &(0x7f0000002840)=""/4092, 0x3000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 9.064688312s ago: executing program 2 (id=923): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 9.064226162s ago: executing program 4 (id=924): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="183752b5cf59ba77190000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0xffffff56, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200089, &(0x7f0000000180)={[{@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@quota}, {@oldalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81}}]}, 0x1, 0x504, &(0x7f0000001000)="$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") r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@fwd={0x5}, @func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 7.638344353s ago: executing program 2 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5.319785055s ago: executing program 5 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 5.319420495s ago: executing program 4 (id=929): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, 0x0, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040), 0x0) migrate_pages(0x0, 0x9, 0x0, 0x0) 5.313645095s ago: executing program 2 (id=937): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x6, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 5.310771195s ago: executing program 0 (id=939): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 5.009890129s ago: executing program 4 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.008788809s ago: executing program 0 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4.164553141s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xb99ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) 3.000160037s ago: executing program 5 (id=932): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/12, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000040)={0x2, 0x0, 0x1c, 0x1c, 0x152, 0x0}) 1.981055692s ago: executing program 5 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c52bb85dfcda2", 0x11, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/67, 0x43, 0x0) 1.980571412s ago: executing program 4 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89, 0xc00}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12100, 0x1}) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.060027765s ago: executing program 5 (id=935): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 75.972139ms ago: executing program 5 (id=936): readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/47, 0x2f}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x3) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) socket$kcm(0x21, 0x2, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b00)=@newtaction={0x48, 0x5a, 0x301, 0x40000, 0x0, {0x2}, [{0x34, 0x1, [@m_police={0x30, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x2004e080) 75.681479ms ago: executing program 4 (id=938): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x80000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 4 (id=940): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a0000000000000000800008"], 0x26}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000740)={0x3, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5973f16a}}, {{0xa, 0x4e20, 0x7ff, @local, 0x80000001}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r3, 0x8000000000000001, 0x1) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @local}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.674826][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.677526][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.683198][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.685743][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.688474][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.692581][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.695284][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.697767][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.701851][ T4032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.716840][ T4034] device veth0_vlan entered promiscuous mode [ 40.726926][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.731156][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.734861][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.745865][ T4023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.750910][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.753720][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.756388][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.759524][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.780040][ T4024] device veth0_vlan entered promiscuous mode [ 40.784566][ T4034] device veth1_vlan entered promiscuous mode [ 40.787093][ T4031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.791210][ T4031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.794792][ T4031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.796857][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.799400][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.802930][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.805669][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.808377][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.819279][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.821868][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.826100][ T4023] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.828513][ T4023] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.832771][ T4023] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835186][ T4023] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.851724][ T4031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.854108][ T4031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.856443][ T4031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.858775][ T4031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.865773][ T4024] device veth1_vlan entered promiscuous mode [ 40.881155][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.883668][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.886158][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.889386][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.912104][ T4034] device veth0_macvtap entered promiscuous mode [ 40.917206][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.920856][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.923305][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.925388][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.930476][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 40.940356][ T4034] device veth1_macvtap entered promiscuous mode [ 40.940459][ T4073] Bluetooth: hci1: command 0x041b tx timeout [ 40.943876][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 40.945878][ T4073] Bluetooth: hci2: command 0x041b tx timeout [ 40.961153][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.963955][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.966486][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.969281][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.974128][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.996200][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.998411][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.007641][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.010550][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 41.012736][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.025603][ T4024] device veth0_macvtap entered promiscuous mode [ 41.028940][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.032357][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.035092][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.046540][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.056057][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.061639][ T4034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.064516][ T4034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.068551][ T4034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.072144][ T4024] device veth1_macvtap entered promiscuous mode [ 41.080704][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.083274][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.086019][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.113899][ T4034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.116391][ T4034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.118704][ T4034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.128183][ T4034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.135658][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.137832][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.150989][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.167960][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.167969][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.167996][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.179921][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.182536][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.185251][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.187947][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.196739][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.200904][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.209066][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.212485][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.215113][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.217862][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.220680][ T4024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.223421][ T4024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.227618][ T4024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.230445][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.233282][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.235918][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.238550][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.241754][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.271526][ T4024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.272485][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.274211][ T4024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.276121][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.278363][ T4024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.284898][ T4024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.291910][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.294663][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.297292][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.316068][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.318196][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.329028][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.358613][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.360754][ T4032] device veth0_vlan entered promiscuous mode [ 41.363666][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.371574][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.374106][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.376852][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.379362][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.383667][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.406034][ T4032] device veth1_vlan entered promiscuous mode [ 41.520335][ T403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.522590][ T403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.547836][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.556456][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.427391][ T4103] Bluetooth: hci2: command 0x040f tx timeout [ 43.429286][ T4103] Bluetooth: hci0: command 0x040f tx timeout [ 43.432786][ T4103] Bluetooth: hci1: command 0x040f tx timeout [ 43.434605][ T4103] Bluetooth: hci4: command 0x040f tx timeout [ 43.441574][ T4103] Bluetooth: hci3: command 0x040f tx timeout [ 43.449744][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.452916][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.455444][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.457758][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.538963][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.546645][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.577473][ T4114] loop1: detected capacity change from 0 to 512 [ 43.641297][ T4114] ======================================================= [ 43.641297][ T4114] WARNING: The mand mount option has been deprecated and [ 43.641297][ T4114] and is ignored by this kernel. Remove the mand [ 43.641297][ T4114] option from the mount to silence this warning. [ 43.641297][ T4114] ======================================================= [ 43.720852][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.723508][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.726207][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.748286][ T4032] device veth0_macvtap entered promiscuous mode [ 43.756794][ T4117] loop2: detected capacity change from 0 to 512 [ 44.512080][ T4032] device veth1_macvtap entered promiscuous mode [ 44.546434][ T4114] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 44.556403][ T4114] EXT4-fs (loop1): 1 truncate cleaned up [ 44.557974][ T4114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 44.562649][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.565547][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.570898][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.573798][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.576424][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.579271][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.586736][ T4117] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 44.586736][ T4117] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.586736][ T4117] [ 44.591938][ T4117] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.595035][ T4117] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.598481][ T4117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.605218][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.608023][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.614378][ T4117] EXT4-fs (loop2): 1 truncate cleaned up [ 44.616043][ T4117] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 44.635858][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.666146][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.668732][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.674978][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.686306][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.700444][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.703218][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.721858][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.726630][ T4123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 44.743612][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.754076][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.784637][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.795280][ T4032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.807755][ T4032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.851331][ T4032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.857493][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.860932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.866711][ T4032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.869151][ T4032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.483071][ T4120] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 45.576312][ T4103] Bluetooth: hci3: command 0x0419 tx timeout [ 45.578153][ T4103] Bluetooth: hci4: command 0x0419 tx timeout [ 45.584200][ T4032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.586567][ T4032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.598284][ T4103] Bluetooth: hci1: command 0x0419 tx timeout [ 45.600170][ T4103] Bluetooth: hci0: command 0x0419 tx timeout [ 45.602178][ T4103] Bluetooth: hci2: command 0x0419 tx timeout [ 45.624119][ T4133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 45.731427][ T4170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 46.031991][ T4168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.032617][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.034218][ T4168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.039072][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.059605][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.065456][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.296533][ T4224] loop4: detected capacity change from 0 to 512 [ 46.373506][ T4224] EXT4-fs (loop4): Test dummy encryption mode enabled [ 46.375400][ T4224] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.672738][ T4224] EXT4-fs (loop4): 1 truncate cleaned up [ 46.674385][ T4224] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 46.896549][ T4237] loop3: detected capacity change from 0 to 256 [ 46.975922][ T4237] FAT-fs (loop3): Unrecognized mount option "shortname=" or missing value [ 47.509313][ T4224] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 47.948254][ T4255] Zero length message leads to an empty skb [ 48.012935][ T4224] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 48.883254][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 51.070625][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 51.485881][ T4314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 51.588781][ T4316] binder: 4315:4316 tried to acquire reference to desc 0, got 1 instead [ 51.599185][ T4036] binder: release 4315:4316 transaction 5 out, still active [ 51.604739][ T4036] binder: undelivered TRANSACTION_COMPLETE [ 51.616268][ T4036] binder: send failed reply for transaction 5, target dead [ 51.673329][ T4318] netlink: 68 bytes leftover after parsing attributes in process `syz.1.40'. [ 53.900801][ T4069] Bluetooth: hci5: command 0x1003 tx timeout [ 53.913923][ T144] Bluetooth: hci5: sending frame failed (-49) [ 56.392760][ T4073] Bluetooth: hci5: command 0x1001 tx timeout [ 56.395110][ T144] Bluetooth: hci5: sending frame failed (-49) [ 56.553832][ T4329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 56.693960][ T4338] loop1: detected capacity change from 0 to 512 [ 56.719484][ T9] tipc: Subscription rejected, illegal request [ 56.788453][ T4338] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 57.566439][ T4025] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.257811][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 61.821811][ T4383] netlink: 136 bytes leftover after parsing attributes in process `syz.4.61'. [ 61.824402][ T4383] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 63.099331][ T4392] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 63.149698][ T4400] loop0: detected capacity change from 0 to 1024 [ 63.156063][ T4393] tipc: Started in network mode [ 63.157475][ T4393] tipc: Node identity ac14142f, cluster identity 4711 [ 63.159684][ T4393] tipc: New replicast peer: 0.0.0.0 [ 63.182665][ T4393] tipc: Enabled bearer , priority 10 [ 63.295713][ T4409] loop2: detected capacity change from 0 to 256 [ 63.313012][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.315190][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.319437][ T4411] xt_nat: multiple ranges no longer supported [ 63.360710][ T4409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 63.364442][ T4409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 63.398924][ T4409] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 63.420571][ T4409] UDF-fs: Scanning with blocksize 512 failed [ 63.447077][ T4409] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 63.458541][ T4409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.423524][ T4415] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.432536][ T4415] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.477230][ T4073] tipc: Node number set to 2886997039 [ 65.995122][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.708085][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.778804][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.782277][ T4442] device bridge_slave_0 left promiscuous mode [ 66.784031][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.881303][ T4442] device bridge_slave_1 left promiscuous mode [ 66.883056][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.946027][ T4442] bond0: (slave bond_slave_0): Releasing backup interface [ 66.962012][ T4458] siw: device registration error -23 [ 67.840168][ T4442] bond0: (slave bond_slave_1): Releasing backup interface [ 67.897439][ T4466] loop3: detected capacity change from 0 to 64 [ 67.946681][ T4442] team0: Port device team_slave_0 removed [ 68.017013][ T4442] team0: Port device team_slave_1 removed [ 68.019136][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.029916][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.046115][ T4442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.048116][ T4442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.714183][ T4447] team0: Mode changed to "loadbalance" [ 68.732909][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 68.824231][ T4472] loop3: detected capacity change from 0 to 256 [ 68.930584][ T4472] exfat: Deprecated parameter 'namecase' [ 68.958824][ T4472] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 69.036191][ T4457] loop1: detected capacity change from 0 to 40427 [ 69.059118][ T4457] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(24) [ 69.071878][ T4457] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.808852][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.810971][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.896295][ T1535] cfg80211: failed to load regulatory.db [ 69.915412][ T4457] F2FS-fs (loop1): invalid crc value [ 69.946630][ T4457] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 70.057237][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.130204][ T4490] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 70.132365][ T4490] netlink: 17 bytes leftover after parsing attributes in process `syz.2.97'. [ 70.233653][ T4500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.100'. [ 70.352205][ T4506] loop1: detected capacity change from 0 to 512 [ 70.371393][ T4506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.398623][ T4506] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.102: corrupted in-inode xattr [ 70.402725][ T1535] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.416244][ T4506] EXT4-fs (loop1): Remounting filesystem read-only [ 70.418538][ T4506] EXT4-fs (loop1): 1 truncate cleaned up [ 70.434033][ T4506] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 70.639926][ T1535] usb 1-1: Using ep0 maxpacket: 8 [ 70.760004][ T1535] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 70.763439][ T1535] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 70.766271][ T1535] usb 1-1: config 6 has no interface number 0 [ 70.768025][ T1535] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 70.786849][ T4527] loop1: detected capacity change from 0 to 256 [ 70.809747][ T4527] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 71.040102][ T1535] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 71.042656][ T1535] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.049118][ T1535] usb 1-1: Product: syz [ 71.054949][ T1535] usb 1-1: Manufacturer: syz [ 71.056495][ T1535] usb 1-1: SerialNumber: syz [ 71.793156][ T4534] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 71.806681][ T1535] hso 1-1:6.2: Failed to find INT IN ep [ 71.894212][ T4536] loop2: detected capacity change from 0 to 164 [ 72.144566][ T4499] block nbd3: shutting down sockets [ 72.158661][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 72.185600][ T4545] HTB: quantum of class 80060010 is big. Consider r2q change. [ 72.255708][ T1535] usb 1-1: USB disconnect, device number 2 [ 73.429787][ C0] sched: RT throttling activated [ 74.159941][ T4560] lo speed is unknown, defaulting to 1000 [ 74.161585][ T4560] lo speed is unknown, defaulting to 1000 [ 74.163298][ T4560] lo speed is unknown, defaulting to 1000 [ 74.167918][ T4560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.340869][ T4560] lo speed is unknown, defaulting to 1000 [ 74.343154][ T4560] lo speed is unknown, defaulting to 1000 [ 74.345256][ T4560] lo speed is unknown, defaulting to 1000 [ 74.347702][ T4560] lo speed is unknown, defaulting to 1000 [ 74.349703][ T4560] lo speed is unknown, defaulting to 1000 [ 74.388986][ T4567] loop1: detected capacity change from 0 to 256 [ 74.460535][ T4567] exfat: Deprecated parameter 'namecase' [ 75.246282][ T4567] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 75.503346][ T4580] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 76.526761][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 77.170133][ T4592] tipc: Started in network mode [ 77.171640][ T4592] tipc: Node identity 7f000001, cluster identity 4711 [ 77.173821][ T4592] tipc: Enabled bearer , priority 10 [ 77.697306][ T4614] loop2: detected capacity change from 0 to 128 [ 77.794174][ T4614] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.818096][ T4615] sctp: [Deprecated]: syz.1.130 (pid 4615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.818096][ T4615] Use struct sctp_sack_info instead [ 77.850953][ T4614] EXT4-fs (loop2): Test dummy encryption mode enabled [ 78.839056][ T4627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 78.864291][ T4072] tipc: Node number set to 2130706433 [ 78.903551][ T4614] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 78.914695][ T4630] loop3: detected capacity change from 0 to 128 [ 78.931382][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 78.936095][ T4614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 78.979415][ T4630] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 79.260867][ T4634] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 79.262771][ T4634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 80.012600][ T4634] vhci_hcd vhci_hcd.0: Device attached [ 80.307288][ T4073] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 80.367431][ T4639] vhci_hcd: connection reset by peer [ 80.371776][ T4177] vhci_hcd: stop threads [ 80.373060][ T4177] vhci_hcd: release socket [ 80.374851][ T4177] vhci_hcd: disconnect device [ 81.424361][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'. [ 81.426962][ T4661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 81.433005][ T4662] binder: 4660:4662 ioctl 4018620d 0 returned -22 [ 85.409978][ T4073] vhci_hcd: vhci_device speed not set [ 85.874389][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.874570][ T4712] loop0: detected capacity change from 0 to 40427 [ 85.907425][ T4712] F2FS-fs (loop0): invalid crc value [ 85.957849][ T4712] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 85.984004][ T4712] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 85.987501][ T4712] F2FS-fs (loop0): Start checkpoint disabled! [ 86.008684][ T4712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 87.382001][ T4207] attempt to access beyond end of device [ 87.382001][ T4207] loop0: rw=2049, want=45104, limit=40427 [ 87.447978][ T4724] loop1: detected capacity change from 0 to 1024 [ 87.693674][ T4724] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.156747][ T4761] syz.4.177 sent an empty control message without MSG_MORE. [ 92.729323][ T4794] udc-core: couldn't find an available UDC or it's busy [ 92.735329][ T4794] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 93.976556][ T9] tipc: Subscription rejected, illegal request [ 94.028667][ T4811] loop1: detected capacity change from 0 to 1024 [ 94.132280][ T4811] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.202084][ T4828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.993710][ T4811] raw_sendmsg: syz.1.197 forgot to set AF_INET. Fix it! [ 95.068313][ T4811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.197'. [ 95.090352][ T4811] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 95.117094][ T4811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 95.184784][ T4832] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 95.185828][ T4834] netlink: 71 bytes leftover after parsing attributes in process `syz.0.201'. [ 95.244915][ T4833] loop0: detected capacity change from 0 to 512 [ 95.320047][ T4833] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.358879][ T4833] EXT4-fs (loop0): 1 truncate cleaned up [ 95.363562][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,nombcache,barrier=0x000000000000ffff,nodelalloc,noblock_validity,barrier=0x0000000000000000,,errors=continue. Quota mode: none. [ 97.396133][ T4848] tmpfs: Bad value for 'size' [ 98.213908][ T4856] device syzkaller0 entered promiscuous mode [ 98.226438][ T4864] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 98.228392][ T4864] PKCS7: Only support pkcs7_signedData type [ 98.873143][ T4884] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 98.876718][ T4884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.972509][ T4881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 101.038265][ T26] audit: type=1326 audit(100.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.066554][ T4899] loop3: detected capacity change from 0 to 512 [ 101.080922][ T26] audit: type=1326 audit(101.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=229 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.087445][ T26] audit: type=1326 audit(101.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.123784][ T4901] loop0: detected capacity change from 0 to 2048 [ 101.125988][ T26] audit: type=1326 audit(101.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.173540][ T26] audit: type=1326 audit(101.020:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.191477][ T26] audit: type=1326 audit(101.100:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.202469][ T4901] hpfs: hpfs_map_sector(): read error [ 101.216764][ T26] audit: type=1326 audit(101.100:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4892 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 101.224434][ T4899] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 101.378874][ T4917] loop4: detected capacity change from 0 to 256 [ 101.440864][ T4924] udc-core: couldn't find an available UDC or it's busy [ 101.446779][ T4924] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 101.572774][ T4917] exfat: Deprecated parameter 'utf8' [ 101.574257][ T4917] exfat: Deprecated parameter 'namecase' [ 101.575846][ T4917] exfat: Deprecated parameter 'namecase' [ 101.584853][ T4917] exfat: Deprecated parameter 'utf8' [ 102.511191][ T4917] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 102.646128][ T4985] udc-core: couldn't find an available UDC or it's busy [ 102.648188][ T4985] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.082717][ T5000] loop4: detected capacity change from 0 to 256 [ 104.205181][ T5000] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 105.760538][ T5006] loop2: detected capacity change from 0 to 4096 [ 105.804450][ T5006] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 105.807712][ T5006] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 105.813563][ T5006] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 105.818514][ T5006] ntfs: volume version 3.1. [ 105.893676][ T5010] xt_CT: No such helper "netbios-ns" [ 105.920722][ T5012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'. [ 107.834368][ T5036] loop0: detected capacity change from 0 to 256 [ 110.159954][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 110.159966][ T26] audit: type=1326 audit(110.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5045 comm="syz.4.247" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff929b3728 code=0x0 [ 110.463107][ T5057] mmap: syz.2.250 (5057) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 110.748425][ T5060] loop2: detected capacity change from 0 to 64 [ 111.211370][ T5073] loop3: detected capacity change from 0 to 1024 [ 111.260128][ T5073] EXT4-fs (loop3): Ignoring removed nobh option [ 111.261934][ T5073] EXT4-fs (loop3): Ignoring removed bh option [ 112.207573][ T5073] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_batch_time=0x0000000000000080,data_err=ignore,grpquota,nobh,user_xattr,bh,usrjquota=,. Quota mode: writeback. [ 113.038657][ T5098] loop0: detected capacity change from 0 to 512 [ 113.410464][ T26] audit: type=1107 audit(113.190:10): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 113.519270][ T5098] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.931738][ T5098] EXT4-fs (loop0): 1 truncate cleaned up [ 113.933417][ T5098] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,dioread_lock,,errors=continue. Quota mode: writeback. [ 114.122889][ T5109] device bond_slave_1 entered promiscuous mode [ 114.143339][ T5105] loop4: detected capacity change from 0 to 2048 [ 114.152065][ T5109] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 114.178821][ T5109] bond0: (slave bond_slave_1): Releasing backup interface [ 115.003555][ T5109] device bond_slave_1 left promiscuous mode [ 115.022659][ T5105] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 115.145642][ T5107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm vhost-5105: bg 0: block 234: padding at end of block bitmap is not set [ 115.328421][ T4079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.348459][ T5129] loop1: detected capacity change from 0 to 4096 [ 116.043901][ T5134] bpf_jit: unknown atomic op code 51 [ 116.137693][ T26] audit: type=1326 audit(116.070:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.172222][ T26] audit: type=1326 audit(116.100:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=85 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.187830][ T26] audit: type=1326 audit(116.100:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.201833][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 116.210352][ T26] audit: type=1326 audit(116.100:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.216060][ T26] audit: type=1326 audit(116.100:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=217 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.228271][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 116.246294][ T26] audit: type=1326 audit(116.100:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.257706][ T26] audit: type=1326 audit(116.100:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.269991][ T26] audit: type=1326 audit(116.110:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.370458][ T4103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.439381][ T26] audit: type=1326 audit(116.110:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 116.445475][ T26] audit: type=1326 audit(116.110:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5137 comm="syz.2.274" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 117.286859][ T5160] binder: 5159:5160 tried to acquire reference to desc 0, got 1 instead [ 117.289341][ T5160] binder: 5159:5160 ioctl c0306201 200003c0 returned -14 [ 117.303294][ T4103] binder: release 5159:5160 transaction 10 out, still active [ 117.305428][ T4103] binder: undelivered TRANSACTION_COMPLETE [ 117.336837][ T4103] binder: send failed reply for transaction 10, target dead [ 117.430533][ T4079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.220310][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.329518][ T5172] loop1: detected capacity change from 0 to 512 [ 118.387292][ T5179] udc-core: couldn't find an available UDC or it's busy [ 118.389253][ T5179] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.430512][ T5179] udc-core: couldn't find an available UDC or it's busy [ 118.432713][ T5179] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 118.744718][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.877591][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.919507][ T5172] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.287: bg 0: block 248: padding at end of block bitmap is not set [ 119.930272][ T5200] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 119.939360][ T5172] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.287: Failed to acquire dquot type 1 [ 119.947795][ T5172] EXT4-fs (loop1): 1 truncate cleaned up [ 119.949403][ T5172] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.999749][ T5201] loop3: detected capacity change from 0 to 1024 [ 120.017580][ T5200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.021541][ T5200] bond1: (slave bond2): making interface the new active one [ 120.023805][ T5200] bond1: (slave bond2): Enslaving as an active interface with an up link [ 120.031028][ T5172] tipc: Enabled bearer , priority 10 [ 120.060532][ T5201] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.101238][ T5200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.296'. [ 120.109329][ T5200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.123847][ T4966] EXT4-fs error (device loop1): ext4_release_dquot:6240: comm kworker/u4:20: Failed to release dquot type 1 [ 121.778291][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.963164][ T5225] udc-core: couldn't find an available UDC or it's busy [ 121.965166][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 122.153147][ T5230] loop4: detected capacity change from 0 to 128 [ 122.174022][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.181958][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.254782][ T5232] capability: warning: `syz.0.305' uses deprecated v2 capabilities in a way that may be insecure [ 122.931652][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 122.934820][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 123.786430][ T4103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.569949][ T4103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.637256][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.826640][ T5269] loop4: detected capacity change from 0 to 8 [ 127.250515][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.513976][ T5269] unable to read inode lookup table [ 127.517877][ T5285] input: syz1 as /devices/virtual/input/input2 [ 127.558116][ T5284] netlink: 'syz.1.323': attribute type 10 has an invalid length. [ 127.602603][ T5284] team0: Device hsr_slave_0 failed to register rx_handler [ 127.651546][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 127.805833][ T5290] udc-core: couldn't find an available UDC or it's busy [ 127.808019][ T5290] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 127.859342][ T5290] loop3: detected capacity change from 0 to 256 [ 127.942723][ T5290] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.092101][ T4976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.205868][ T4976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.967772][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.048229][ T4036] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.049875][ T4976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.124948][ T4976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.150638][ T5304] lo speed is unknown, defaulting to 1000 [ 129.169206][ T5315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.172242][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.209115][ T5320] loop1: detected capacity change from 0 to 128 [ 129.264927][ T5320] gfs2: gfs2 mount does not exist [ 129.288474][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 129.289622][ T5300] loop4: detected capacity change from 0 to 32768 [ 129.360364][ T5300] XFS: noattr2 mount option is deprecated. [ 129.362082][ T5300] xfs: Unknown parameter 'nobarrier' [ 132.574014][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.575997][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.244262][ T4895] Bluetooth: hci2: command 0x0409 tx timeout [ 133.247425][ T1535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.280537][ T4072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.344546][ T5304] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.346554][ T5304] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.349278][ T5304] device bridge_slave_0 entered promiscuous mode [ 133.368014][ T5304] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.370117][ T5304] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.372675][ T5304] device bridge_slave_1 entered promiscuous mode [ 133.401135][ T5350] loop3: detected capacity change from 0 to 512 [ 133.441092][ T5304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.505917][ T5356] loop2: detected capacity change from 0 to 128 [ 133.509475][ T5304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.538489][ T4976] tipc: Disabling bearer [ 133.542579][ T4976] tipc: Left network mode [ 133.560469][ T5356] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.653354][ T5304] team0: Port device team_slave_0 added [ 133.658630][ T5350] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 133.688826][ T5304] team0: Port device team_slave_1 added [ 133.728533][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.771323][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.860134][ T5304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.915229][ T5304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.917209][ T5304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.932594][ T5304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.062377][ T5304] device hsr_slave_0 entered promiscuous mode [ 134.080517][ T5304] device hsr_slave_1 entered promiscuous mode [ 134.120260][ T5304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.123219][ T5304] Cannot create hsr debugfs directory [ 134.293176][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.496918][ T5394] loop4: detected capacity change from 0 to 164 [ 135.331080][ T5399] process 'syz.3.350' launched '/dev/fd/3' with NULL argv: empty string added [ 135.340834][ T1535] Bluetooth: hci2: command 0x041b tx timeout [ 135.342940][ T1535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.409714][ T5405] loop3: detected capacity change from 0 to 164 [ 135.548968][ T5417] netlink: 'syz.4.352': attribute type 10 has an invalid length. [ 135.611131][ T5408] netlink: 104 bytes leftover after parsing attributes in process `syz.2.351'. [ 135.636741][ T5417] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 135.863955][ T5430] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 135.978485][ T5433] udc-core: couldn't find an available UDC or it's busy [ 135.988596][ T5433] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 136.018978][ T5433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.021837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.258071][ T5439] loop3: detected capacity change from 0 to 164 [ 136.276265][ T5304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 136.290330][ T4073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.321692][ T5304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 136.371991][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.439707][ T5304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 136.481904][ T5304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.627418][ T4976] device hsr_slave_0 left promiscuous mode [ 136.635052][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 136.635062][ T26] audit: type=1326 audit(136.570:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.660066][ T4976] device hsr_slave_1 left promiscuous mode [ 136.662964][ T26] audit: type=1326 audit(136.580:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.668613][ T26] audit: type=1326 audit(136.600:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.720079][ T26] audit: type=1326 audit(136.600:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.726047][ T26] audit: type=1326 audit(136.600:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.760419][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.762692][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.771844][ T4976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.773827][ T4976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.787873][ T4976] device bridge_slave_1 left promiscuous mode [ 136.790642][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.799333][ T26] audit: type=1326 audit(136.610:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.894669][ T26] audit: type=1326 audit(136.610:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.923065][ T26] audit: type=1326 audit(136.610:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.936257][ T4976] device bridge_slave_0 left promiscuous mode [ 136.938200][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.958286][ T26] audit: type=1326 audit(136.610:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 136.983816][ T26] audit: type=1326 audit(136.610:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x7ffc0000 [ 137.351757][ T4976] device veth1_macvtap left promiscuous mode [ 137.354376][ T4976] device veth0_macvtap left promiscuous mode [ 137.356478][ T4976] device veth1_vlan left promiscuous mode [ 137.358423][ T4976] device veth0_vlan left promiscuous mode [ 137.421716][ T4895] Bluetooth: hci2: command 0x040f tx timeout [ 137.845592][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.259313][ T5487] input: syz1 as /devices/virtual/input/input3 [ 138.707568][ T4976] team0 (unregistering): Port device team_slave_1 removed [ 138.716883][ T4976] team0 (unregistering): Port device team_slave_0 removed [ 138.725403][ T4976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.780050][ T4976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.860544][ T4895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.945947][ T4976] bond0 (unregistering): Released all slaves [ 139.051139][ T5462] netlink: 'syz.2.361': attribute type 3 has an invalid length. [ 139.225047][ T5507] loop1: detected capacity change from 0 to 8 [ 139.298297][ T5304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.324350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.327906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.345013][ T5304] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.550265][ T4103] Bluetooth: hci2: command 0x0419 tx timeout [ 140.497482][ T5507] unable to read inode lookup table [ 141.164355][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.170757][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.192983][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.194885][ T4172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.197242][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.200006][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.202611][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.204506][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.206853][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 141.209554][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 141.212558][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 141.215215][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.217979][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 141.224656][ T5525] loop2: detected capacity change from 0 to 128 [ 141.230284][ T5525] gfs2: gfs2 mount does not exist [ 141.239710][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 141.268380][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.319601][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.322279][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.343703][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.354373][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.366048][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 141.460856][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.483177][ T5547] loop4: detected capacity change from 0 to 128 [ 143.518298][ T5553] loop2: detected capacity change from 0 to 512 [ 143.520697][ T5304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.547554][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 143.549686][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 143.552750][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.558112][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.717788][ T5304] device veth0_vlan entered promiscuous mode [ 143.748846][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.751722][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.755483][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.768813][ T5547] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.797606][ T4211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.835602][ T5304] device veth1_vlan entered promiscuous mode [ 143.880794][ T5304] device veth0_macvtap entered promiscuous mode [ 143.883210][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 143.885750][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 143.888137][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.897666][ T5553] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 143.918359][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.921527][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.947041][ T5304] device veth1_macvtap entered promiscuous mode [ 143.990647][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.993427][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.996033][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.998797][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.007426][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.014350][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.040301][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.149715][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.237389][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.337149][ T4966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.578142][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.684620][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.777743][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.780795][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.783507][ T5304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.786160][ T5304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.789966][ T5304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.821539][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.825063][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.829566][ T5304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.832292][ T5304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.834658][ T5304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.836896][ T5304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.112116][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.114562][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.132813][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 146.277450][ T5581] loop3: detected capacity change from 0 to 8 [ 146.280599][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.282953][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.286243][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.361777][ T5581] unable to read inode lookup table [ 148.427951][ T5611] loop0: detected capacity change from 0 to 128 [ 148.493256][ T5611] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.524851][ T5616] loop3: detected capacity change from 0 to 8 [ 152.183617][ T5651] sctp: [Deprecated]: syz.3.402 (pid 5651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.183617][ T5651] Use struct sctp_sack_info instead [ 154.140701][ T5660] netlink: 96 bytes leftover after parsing attributes in process `syz.3.405'. [ 154.143480][ T5660] netlink: 120 bytes leftover after parsing attributes in process `syz.3.405'. [ 156.115212][ T5674] loop2: detected capacity change from 0 to 2048 [ 156.124023][ T5678] loop0: detected capacity change from 0 to 8 [ 156.129354][ T5679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 156.178295][ T5678] attempt to access beyond end of device [ 156.178295][ T5678] loop0: rw=2048, want=36028797018963976, limit=8 [ 156.187977][ T5678] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 156.221287][ T5678] unable to read xattr id index table [ 156.225599][ T5683] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.243969][ T5693] loop2: detected capacity change from 0 to 1024 [ 157.411042][ T5697] loop0: detected capacity change from 0 to 512 [ 158.321179][ T5697] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.423: bad orphan inode 134217728 [ 158.337847][ T5697] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 159.272749][ T5711] loop3: detected capacity change from 0 to 128 [ 159.292207][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.302016][ T5711] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks [ 159.304189][ T5711] EXT4-fs warning (device loop3): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 159.328605][ T5716] udc-core: couldn't find an available UDC or it's busy [ 159.369422][ T5716] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 159.452023][ T4070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.465469][ T4070] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.508353][ T5719] loop3: detected capacity change from 0 to 1024 [ 159.712495][ T5719] EXT2-fs (loop3): error: couldn't mount because of unsupported optional features (1c2c0) [ 160.693336][ T5731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 163.224336][ T5763] loop3: detected capacity change from 0 to 512 [ 163.271153][ T5763] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.440: bad orphan inode 134217728 [ 163.289900][ T5763] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 163.556591][ T5773] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.559222][ T5773] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.561789][ T5773] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.564138][ T5773] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.567766][ T5773] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 163.586901][ T5774] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 164.366200][ T4070] Bluetooth: hci1: command 0x0406 tx timeout [ 164.443390][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 164.449906][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 164.451659][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 164.528225][ T4293] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 164.542246][ T5774] device ip6gretap1 entered promiscuous mode [ 164.546984][ T4293] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.553720][ T5779] loop1: detected capacity change from 0 to 1024 [ 164.602412][ T5779] EXT2-fs (loop1): error: couldn't mount because of unsupported optional features (1c2c0) [ 164.686818][ T5767] loop4: detected capacity change from 0 to 32768 [ 164.857062][ T5767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.441 (5767) [ 165.844160][ T5767] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 165.853188][ T5767] BTRFS info (device loop4): enabling auto defrag [ 165.855016][ T5767] BTRFS info (device loop4): doing ref verification [ 165.856748][ T5767] BTRFS info (device loop4): use zlib compression, level 3 [ 165.858776][ T5767] BTRFS info (device loop4): force clearing of disk cache [ 165.919017][ T5767] BTRFS info (device loop4): max_inline at 0 [ 165.928146][ T5767] BTRFS info (device loop4): turning off barriers [ 165.937676][ T5767] BTRFS info (device loop4): using free space tree [ 165.939536][ T5767] BTRFS info (device loop4): has skinny extents [ 166.154657][ T5815] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 166.327760][ T5821] loop2: detected capacity change from 0 to 256 [ 166.394473][ T5767] BTRFS error (device loop4): open_ctree failed: -12 [ 166.413687][ T5821] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 166.586399][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 166.613085][ T5833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 168.792833][ T5835] loop2: detected capacity change from 0 to 32768 [ 168.802717][ T5847] loop4: detected capacity change from 0 to 256 [ 168.875658][ T5835] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.459 (5835) [ 168.901310][ T5835] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 168.903906][ T5835] BTRFS info (device loop2): using free space tree [ 168.905653][ T5835] BTRFS info (device loop2): has skinny extents [ 169.866638][ T1961] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 169.869428][ T1961] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.881974][ T5835] BTRFS error (device loop2): open_ctree failed: -12 [ 169.894913][ T5880] loop0: detected capacity change from 0 to 1024 [ 169.912988][ T5883] loop4: detected capacity change from 0 to 1024 [ 169.932928][ T5883] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (1c2c0) [ 170.005696][ T5880] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,noblock_validity,. Quota mode: none. [ 176.065255][ T5929] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.099243][ T5929] FAT-fs (loop2): unable to read boot sector [ 176.257902][ T5935] loop3: detected capacity change from 0 to 1024 [ 176.363821][ T1961] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 176.370204][ T1961] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.376566][ T5940] loop0: detected capacity change from 0 to 1024 [ 176.422501][ T5940] EXT2-fs (loop0): error: couldn't mount because of unsupported optional features (1c2c0) [ 177.318150][ T5935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.440723][ T5924] loop4: detected capacity change from 0 to 32768 [ 177.493964][ T5924] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.478 (5924) [ 177.681171][ T5924] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 177.684131][ T5924] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 177.691450][ T5924] BTRFS info (device loop4): use zstd compression, level 3 [ 177.702451][ T5924] BTRFS info (device loop4): using free space tree [ 177.711394][ T5924] BTRFS info (device loop4): has skinny extents [ 179.454690][ T5924] BTRFS error (device loop4): open_ctree failed: -12 [ 179.496088][ T5982] device vlan2 entered promiscuous mode [ 179.532935][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 179.765516][ T4129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4129) [ 180.771982][ T6005] loop0: detected capacity change from 0 to 2048 [ 181.515806][ T6007] loop4: detected capacity change from 0 to 512 [ 181.603762][ T6005] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.608154][ T6007] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.096864][ T6015] netlink: 'syz.2.498': attribute type 1 has an invalid length. [ 182.578723][ T6021] loop3: detected capacity change from 0 to 512 [ 182.594428][ T6015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.486251][ T6027] bond1: (slave gretap1): making interface the new active one [ 183.506269][ T6027] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 183.536107][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 183.553708][ T6021] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.770938][ T6021] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 183.784225][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.499: inode #15: comm syz.3.499: iget: illegal inode # [ 183.787980][ T6021] EXT4-fs (loop3): Remounting filesystem read-only [ 183.794747][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.499: couldn't read orphan inode 15 (err -117) [ 183.798778][ T6021] EXT4-fs (loop3): Remounting filesystem read-only [ 183.800800][ T6021] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 183.807621][ T6021] udc-core: couldn't find an available UDC or it's busy [ 183.809571][ T6021] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 184.072184][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.075571][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.078425][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.081232][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.083901][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.086592][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.089471][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.092221][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 184.094904][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 187.115257][ T6053] syz.0.504 (6053): drop_caches: 2 [ 188.727072][ T6080] netlink: 'syz.3.511': attribute type 3 has an invalid length. [ 188.733214][ T4069] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 188.767050][ T6080] loop3: detected capacity change from 0 to 1024 [ 188.790455][ T4069] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.799621][ T6084] __nla_validate_parse: 45 callbacks suppressed [ 188.799631][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 188.882389][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 188.895664][ T6086] loop2: detected capacity change from 0 to 1024 [ 188.911410][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 188.917659][ T4074] kernel write not supported for file /uhid (pid: 4074 comm: kworker/1:5) [ 190.174118][ T6086] EXT2-fs (loop2): error: couldn't mount because of unsupported optional features (1c2c0) [ 190.219297][ T6097] lo speed is unknown, defaulting to 1000 [ 191.836035][ T6114] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 191.881232][ T6116] loop2: detected capacity change from 0 to 512 [ 191.940695][ T6114] device syz_tun entered promiscuous mode [ 191.954578][ T6114] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 191.969561][ T6097] lo speed is unknown, defaulting to 1000 [ 192.049741][ T6116] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 192.963600][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 192.991604][ T6133] loop3: detected capacity change from 0 to 2048 [ 193.035916][ T6133] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 193.035916][ T6133] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 193.035916][ T6133] [ 193.072035][ T6133] EXT4-fs (loop3): mounted filesystem without journal. Opts: noacl,,errors=continue. Quota mode: none. [ 193.232968][ T6143] udc-core: couldn't find an available UDC or it's busy [ 193.235054][ T6143] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.249350][ T6143] netlink: 'syz.4.529': attribute type 10 has an invalid length. [ 193.260861][ T6143] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.264139][ T6143] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.278593][ T6143] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 194.764773][ T6151] bond0: (slave dummy0): Error: Slave device does not support XDP [ 194.876739][ T6158] udc-core: couldn't find an available UDC or it's busy [ 194.878832][ T6158] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 194.881383][ T6156] loop3: detected capacity change from 0 to 512 [ 194.911062][ T6156] EXT4-fs (loop3): 1 truncate cleaned up [ 194.912714][ T6156] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.102921][ T6173] device syzkaller0 entered promiscuous mode [ 195.900055][ T6161] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 196.138234][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'. [ 196.161155][ T6222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.537'. [ 196.165072][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 197.264398][ T6249] bond0: (slave wlan1): Error: Slave device does not support XDP [ 197.761178][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.765703][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.278384][ T6264] loop2: detected capacity change from 0 to 256 [ 198.341179][ T6264] FAT-fs (loop2): Unrecognized mount option "shortname=" or missing value [ 198.365019][ T6269] loop1: detected capacity change from 0 to 512 [ 198.439038][ T6269] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.441232][ T6269] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.467826][ T6269] EXT4-fs (loop1): 1 truncate cleaned up [ 198.469552][ T6269] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 199.584054][ T6269] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 200.898382][ T6306] binder: 6305:6306 tried to acquire reference to desc 0, got 1 instead [ 201.560379][ T4074] binder: release 6305:6306 transaction 15 out, still active [ 201.562484][ T4074] binder: undelivered TRANSACTION_COMPLETE [ 201.619979][ T4074] binder: send failed reply for transaction 15, target dead [ 201.660304][ C1] Illegal XDP return value 16128, expect packet loss! [ 201.926072][ T6320] loop3: detected capacity change from 0 to 512 [ 201.937778][ T6320] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 201.937778][ T6320] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 201.937778][ T6320] [ 202.522034][ T6320] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 202.719347][ T6320] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.799854][ T6320] EXT4-fs (loop3): 1 truncate cleaned up [ 202.801438][ T6320] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,grpid,dioread_nolock,debug_want_extra_isize=0x0000000000000080,nouser_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 204.333952][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 205.603993][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 209.891626][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 210.143952][ T6390] xt_nat: multiple ranges no longer supported [ 210.429898][ T6395] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 211.027502][ T6395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.140758][ T6414] netlink: 68 bytes leftover after parsing attributes in process `syz.4.600'. [ 211.144107][ T6401] bond1: (slave veth3): Enslaving as an active interface with a down link [ 211.149067][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 215.350754][ T4207] tipc: Subscription rejected, illegal request [ 215.434909][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.613'. [ 218.178680][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 219.735559][ T4974] tipc: Subscription rejected, illegal request [ 221.587187][ T25] Bluetooth: hci5: command 0x1003 tx timeout [ 221.589065][ T144] Bluetooth: hci5: sending frame failed (-49) [ 221.602455][ T6515] loop3: detected capacity change from 0 to 512 [ 224.354354][ T25] Bluetooth: hci5: command 0x1001 tx timeout [ 224.356162][ T144] Bluetooth: hci5: sending frame failed (-49) [ 224.385251][ T6515] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 224.622425][ T6539] netlink: 136 bytes leftover after parsing attributes in process `syz.1.639'. [ 224.629953][ T6539] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 226.436733][ T25] Bluetooth: hci5: command 0x1009 tx timeout [ 226.476583][ T6555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 226.540230][ T6558] loop4: detected capacity change from 0 to 256 [ 226.611490][ T6558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 227.295576][ T6558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 227.298794][ T6558] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 227.302562][ T6558] UDF-fs: Scanning with blocksize 512 failed [ 227.328946][ T6558] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 227.374072][ T6558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.766616][ T6592] loop2: detected capacity change from 0 to 64 [ 230.043235][ T6603] loop2: detected capacity change from 0 to 256 [ 230.090631][ T6603] exfat: Deprecated parameter 'namecase' [ 230.111704][ T6603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 231.228210][ T6622] siw: device registration error -23 [ 231.255462][ T6621] bond0: (slave team0): Releasing backup interface [ 231.319591][ T6621] device bridge_slave_0 left promiscuous mode [ 231.339393][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.381984][ T6621] device bridge_slave_1 left promiscuous mode [ 231.383789][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.445864][ T6621] bond0: (slave bond_slave_0): Releasing backup interface [ 231.488000][ T6621] bond0: (slave bond_slave_1): Releasing backup interface [ 231.567902][ T6621] team0: Port device team_slave_0 removed [ 231.584271][ T6621] team0: Port device team_slave_1 removed [ 231.586268][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.588312][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.591792][ T6621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.593792][ T6621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.602584][ T6621] bond0: (slave wlan1): Releasing backup interface [ 231.649067][ T6621] bond1: (slave bond2): Releasing backup interface [ 231.711561][ T6629] team0: Mode changed to "loadbalance" [ 231.718351][ T6633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.666'. [ 231.724476][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.726699][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.742264][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 231.826863][ T6638] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 231.901342][ T6650] loop3: detected capacity change from 0 to 512 [ 231.949991][ T6650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.966511][ T6650] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2228: inode #15: comm syz.3.673: corrupted in-inode xattr [ 231.973815][ T6650] EXT4-fs (loop3): Remounting filesystem read-only [ 231.978908][ T6650] EXT4-fs (loop3): 1 truncate cleaned up [ 231.984717][ T6650] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 232.105511][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 232.176949][ T6660] HTB: quantum of class 80120010 is big. Consider r2q change. [ 232.192530][ T6669] udc-core: couldn't find an available UDC or it's busy [ 232.194644][ T6669] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 232.893302][ T4198] Bluetooth: hci5: Frame reassembly failed (-84) [ 233.193868][ T6684] siw: device registration error -23 [ 234.813271][ T4072] Bluetooth: hci5: command 0x1003 tx timeout [ 234.820064][ T144] Bluetooth: hci5: sending frame failed (-49) [ 234.889346][ T6696] loop0: detected capacity change from 0 to 256 [ 234.950687][ T6696] exfat: Deprecated parameter 'namecase' [ 234.981395][ T6696] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 236.914556][ T4072] Bluetooth: hci5: command 0x1001 tx timeout [ 236.916310][ T144] Bluetooth: hci5: sending frame failed (-49) [ 238.921816][ T6717] siw: device registration error -23 [ 239.119714][ T4072] Bluetooth: hci5: command 0x1009 tx timeout [ 239.160471][ T6716] block nbd1: shutting down sockets [ 240.427157][ T6739] tipc: Started in network mode [ 240.428678][ T6739] tipc: Node identity 7f000001, cluster identity 4711 [ 240.431491][ T6739] tipc: Enabled bearer , priority 10 [ 240.520613][ T6744] netlink: 'syz.4.698': attribute type 1 has an invalid length. [ 240.561642][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 240.568077][ T6744] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.571531][ T6744] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 240.625125][ T6744] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 240.668996][ T6744] bond3 (unregistering): Released all slaves [ 241.738179][ T4069] tipc: Node number set to 2130706433 [ 242.051358][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.054728][ T6774] bond0: (slave dummy0): Releasing backup interface [ 242.236339][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.627014][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.746853][ T6774] device bridge_slave_0 left promiscuous mode [ 242.754148][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.792234][ T6774] device bridge_slave_1 left promiscuous mode [ 242.796785][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.841958][ T6774] bond0: (slave bond_slave_0): Releasing backup interface [ 243.079985][ T6774] bond0: (slave bond_slave_1): Releasing backup interface [ 243.842380][ T6774] team0: Port device team_slave_0 removed [ 243.852709][ T6774] team0: Port device team_slave_1 removed [ 243.855560][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.857718][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.861549][ T6774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.863782][ T6774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.876378][ T6774] bond1: (slave veth3): Releasing active interface [ 243.920037][ T6777] team0: Mode changed to "loadbalance" [ 243.998491][ T6799] binder: 6798:6799 ioctl 4018620d 0 returned -22 [ 246.703438][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.640456][ T6803] block nbd4: shutting down sockets [ 248.870141][ T6854] udc-core: couldn't find an available UDC or it's busy [ 248.872123][ T6854] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 250.732592][ T6861] loop1: detected capacity change from 0 to 64 [ 252.777430][ T4069] Bluetooth: hci5: command 0x1003 tx timeout [ 253.470930][ T4030] Bluetooth: hci5: sending frame failed (-49) [ 253.473695][ T4069] Bluetooth: hci2: command 0x0406 tx timeout [ 255.489966][ T4069] Bluetooth: hci5: command 0x1001 tx timeout [ 255.492437][ T4030] Bluetooth: hci5: sending frame failed (-49) [ 256.241984][ T6892] block nbd0: shutting down sockets [ 256.879946][ T26] audit: type=1326 audit(256.770:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.896087][ T26] audit: type=1326 audit(256.770:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.924658][ T26] audit: type=1326 audit(256.770:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=10 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.943477][ T26] audit: type=1326 audit(256.770:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.949386][ T26] audit: type=1326 audit(256.770:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.955280][ T26] audit: type=1326 audit(256.770:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.961173][ T26] audit: type=1326 audit(256.770:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.967460][ T26] audit: type=1326 audit(256.770:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.976980][ T26] audit: type=1326 audit(256.770:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 256.982838][ T26] audit: type=1326 audit(256.770:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.2.753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b6e728 code=0x7ffc0000 [ 257.729025][ T4069] Bluetooth: hci5: command 0x1009 tx timeout [ 258.784771][ T6918] loop0: detected capacity change from 0 to 64 [ 258.939160][ T6906] loop2: detected capacity change from 0 to 32768 [ 258.953264][ T6906] XFS: noattr2 mount option is deprecated. [ 258.954935][ T6906] xfs: Unknown parameter 'nobarrier' [ 259.092168][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.093836][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.121388][ T6925] netlink: 'syz.0.750': attribute type 10 has an invalid length. [ 259.852623][ T6925] team0: Device hsr_slave_0 failed to register rx_handler [ 260.010576][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 260.151657][ T6945] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.370514][ T6954] block nbd2: shutting down sockets [ 262.484481][ T6972] loop3: detected capacity change from 0 to 164 [ 263.327545][ T6978] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQI [ 264.908224][ T7005] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 265.025220][ T7010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.671576][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 265.753046][ T7016] loop2: detected capacity change from 0 to 256 [ 265.821466][ T7016] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 265.906693][ T7024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.884406][ T7022] sctp: [Deprecated]: syz.0.781 (pid 7022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.884406][ T7022] Use struct sctp_sack_info instead [ 267.998710][ T7031] loop1: detected capacity change from 0 to 256 [ 268.107754][ T7021] loop3: detected capacity change from 0 to 40427 [ 268.742633][ T7021] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(24) [ 268.744964][ T7021] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 268.757903][ T7031] FAT-fs (loop1): Directory bread(block 64) failed [ 268.760159][ T7031] FAT-fs (loop1): Directory bread(block 65) failed [ 268.762170][ T7031] FAT-fs (loop1): Directory bread(block 66) failed [ 268.763959][ T7031] FAT-fs (loop1): Directory bread(block 67) failed [ 268.765828][ T7031] FAT-fs (loop1): Directory bread(block 68) failed [ 268.767625][ T7031] FAT-fs (loop1): Directory bread(block 69) failed [ 268.769285][ T7031] FAT-fs (loop1): Directory bread(block 70) failed [ 268.782908][ T7021] F2FS-fs (loop3): invalid crc value [ 268.805089][ T7021] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 268.824680][ T7031] FAT-fs (loop1): Directory bread(block 71) failed [ 268.826468][ T7031] FAT-fs (loop1): Directory bread(block 72) failed [ 268.828236][ T7031] FAT-fs (loop1): Directory bread(block 73) failed [ 268.932944][ T7042] loop0: detected capacity change from 0 to 256 [ 269.052582][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 269.056173][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 269.513782][ T7042] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 269.515909][ T7042] UDF-fs: Scanning with blocksize 512 failed [ 269.529393][ T7042] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 269.533804][ T7042] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.180854][ T7071] loop0: detected capacity change from 0 to 8 [ 272.825516][ T7071] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 272.944273][ T7071] cramfs: Error -5 while decompressing! [ 272.946087][ T7071] cramfs: 0000000068b5eb76(26)->0000000004a997d5(4096) [ 272.948367][ T7071] cramfs: Error -3 while decompressing! [ 272.949974][ T7071] cramfs: 0000000011f79b63(26)->00000000e261babc(4096) [ 272.952029][ T7071] cramfs: Error -3 while decompressing! [ 272.953551][ T7071] cramfs: 00000000c9e850a0(16)->00000000ac9760fb(4096) [ 272.956342][ T7071] cramfs: Error -5 while decompressing! [ 272.957858][ T7071] cramfs: 0000000068b5eb76(26)->0000000004a997d5(4096) [ 273.207689][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'. [ 273.266943][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 273.337579][ T7093] loop1: detected capacity change from 0 to 512 [ 273.430228][ T7093] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,grpquota,,errors=continue. Quota mode: writeback. [ 273.445124][ T7093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 273.461607][ T7093] netlink: 60 bytes leftover after parsing attributes in process `syz.1.803'. [ 273.590455][ T7099] loop3: detected capacity change from 0 to 256 [ 273.652159][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 273.652169][ T26] audit: type=1326 audit(273.590:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7100 comm="syz.1.808" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87168728 code=0x0 [ 273.781808][ T7104] loop3: detected capacity change from 0 to 512 [ 273.857650][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.811'. [ 273.873634][ T7104] EXT4-fs (loop3): 1 orphan inode deleted [ 273.875389][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.811'. [ 273.879413][ T7104] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 273.887547][ T7106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.811'. [ 273.943431][ T4034] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 273.955897][ T4034] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 273.971046][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 273.974426][ T4034] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 273.985991][ T4034] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 274.129104][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 274.134737][ T4034] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 275.393087][ T4034] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 275.433484][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 275.436885][ T4034] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 275.450451][ T4034] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 275.496607][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 275.670246][ T4034] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /172/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 275.699453][ T4034] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 276.438529][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.494044][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.629991][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.636746][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.658418][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.663576][ T7133] loop0: detected capacity change from 0 to 8 [ 276.930235][ T7133] SQUASHFS error: zlib decompression failed, data probably corrupt [ 276.933038][ T4034] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 276.949605][ T7133] SQUASHFS error: Failed to read block 0x9b: -5 [ 277.107868][ T7133] SQUASHFS error: Unable to read metadata cache entry [99] [ 277.434882][ T7133] SQUASHFS error: Unable to read inode 0x127 [ 277.460762][ T7133] xt_TCPMSS: Only works on TCP SYN packets [ 277.471337][ T7133] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.473784][ T7133] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.770449][ T7142] udc-core: couldn't find an available UDC or it's busy [ 277.772494][ T7142] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 277.789385][ T7125] loop4: detected capacity change from 0 to 32768 [ 277.823797][ T7125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.818 (7125) [ 277.858176][ T7144] tipc: Failed to remove unknown binding: 66,1,1/2886997039:457039323/457039325 [ 277.861821][ T7144] tipc: Failed to remove unknown binding: 66,1,1/2886997039:457039323/457039325 [ 277.870793][ T7144] tipc: Failed to remove unknown binding: 66,1,1/2886997039:457039323/457039325 [ 277.881381][ T7125] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 277.883753][ T7125] BTRFS info (device loop4): using free space tree [ 277.885497][ T7125] BTRFS info (device loop4): has skinny extents [ 277.939751][ T7125] BTRFS info (device loop4): enabling ssd optimizations [ 278.153578][ T4177] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 278.175058][ T7167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.177385][ T7167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.180477][ T7167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.182389][ T7167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.184915][ T7167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.186778][ T7167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.188817][ T7167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.190997][ T7167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 278.193129][ T7167] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 278.194977][ T7167] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 279.026902][ T7171] udc-core: couldn't find an available UDC or it's busy [ 279.030501][ T7171] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 280.020751][ T7184] udc-core: couldn't find an available UDC or it's busy [ 280.040078][ T7184] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 280.177539][ T7194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 280.185813][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 281.147398][ T7190] lo speed is unknown, defaulting to 1000 [ 281.460434][ T7208] loop4: detected capacity change from 0 to 40427 [ 281.974055][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 281.986415][ T7211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.842'. [ 281.998271][ T7190] chnl_net:caif_netlink_parms(): no params data found [ 282.013270][ T7211] loop1: detected capacity change from 0 to 512 [ 282.022104][ T7208] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 282.024298][ T7208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 282.060862][ T7211] attempt to access beyond end of device [ 282.060862][ T7211] loop1: rw=0, want=1022040, limit=512 [ 282.070314][ T7208] F2FS-fs (loop4): invalid crc value [ 282.085590][ T7211] attempt to access beyond end of device [ 282.085590][ T7211] loop1: rw=0, want=1022040, limit=512 [ 282.118371][ T7208] F2FS-fs (loop4): Found nat_bits in checkpoint [ 282.129034][ T7222] hub 1-0:1.0: USB hub found [ 282.132142][ T7222] hub 1-0:1.0: 1 port detected [ 282.148620][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.156610][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.161298][ T7190] device bridge_slave_0 entered promiscuous mode [ 282.164789][ T7208] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 282.166650][ T7208] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 282.189309][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.214083][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.234013][ T7190] device bridge_slave_1 entered promiscuous mode [ 282.323849][ T4293] Bluetooth: hci4: command 0x0409 tx timeout [ 282.344104][ T7238] loop0: detected capacity change from 0 to 512 [ 282.349410][ T7190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.353925][ T7190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.109260][ T7190] team0: Port device team_slave_0 added [ 284.129468][ T7190] team0: Port device team_slave_1 added [ 284.151125][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.153105][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.195675][ T7190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.204631][ T7190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.206552][ T7190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.233963][ T7190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.586002][ T7180] Bluetooth: hci4: command 0x041b tx timeout [ 285.219678][ T7190] device hsr_slave_0 entered promiscuous mode [ 285.251665][ T7190] device hsr_slave_1 entered promiscuous mode [ 285.304790][ T7190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.307001][ T7190] Cannot create hsr debugfs directory [ 285.323448][ T7238] EXT4-fs warning (device loop0): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop0. [ 285.359274][ T7253] sch_fq: defrate 0 ignored. [ 285.371233][ T7253] loop1: detected capacity change from 0 to 512 [ 285.965476][ T7253] EXT4-fs (loop1): Ignoring removed oldalloc option [ 286.176861][ T7253] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000800000,quota,oldalloc,auto_da_alloc=0x0000000000000081,. Quota mode: writeback. [ 286.609982][ T4079] Bluetooth: hci4: command 0x040f tx timeout [ 287.131042][ T7265] kernel read not supported for file /L (pid: 7265 comm: syz.4.850) [ 287.245709][ T7272] loop4: detected capacity change from 0 to 512 [ 287.296455][ T7272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 287.365857][ T7272] EXT4-fs (loop4): 1 truncate cleaned up [ 287.367538][ T7272] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 289.016268][ T4079] Bluetooth: hci4: command 0x0419 tx timeout [ 289.052929][ T7282] loop1: detected capacity change from 0 to 128 [ 289.110638][ T7282] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.118992][ T7282] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 290.283013][ T4023] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 290.285474][ T4023] FAT-fs (loop1): Filesystem has been set read-only [ 290.287676][ T4023] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 290.288061][ T7291] loop4: detected capacity change from 0 to 164 [ 291.024397][ T7291] Unable to read rock-ridge attributes [ 291.132606][ T7263] device syz_tun left promiscuous mode [ 291.355275][ T7299] Unable to read rock-ridge attributes [ 291.369593][ T7299] iso9660: Corrupted directory entry in block 1 of inode 1792 [ 292.024938][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 292.405816][ T7263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.442347][ T7263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.876215][ T7263] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.878671][ T7263] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.881134][ T7263] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.883523][ T7263] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.276889][ T7190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.581298][ T7190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.651509][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'. [ 295.660115][ T7190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.721743][ T7190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.424910][ T4969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.763730][ T4969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.058105][ T4969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.791899][ T4969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.902400][ T7190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.956607][ T7190] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.961141][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.963868][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.039930][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.042596][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.045474][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.047356][ T4177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.053585][ T7349] cgroup2: Unknown parameter 'pids_localevents' [ 299.071437][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.074150][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.076653][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.078539][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.081733][ T4177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.087391][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.112657][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.881'. [ 299.241583][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.768765][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.773862][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.776771][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.837406][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.841379][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.852778][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.869915][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.876762][ T7190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 299.881200][ T7190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.926597][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.929224][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.062651][ T7361] sctp: [Deprecated]: syz.0.884 (pid 7361) Use of int in max_burst socket option. [ 300.062651][ T7361] Use struct sctp_assoc_value instead [ 300.095295][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 300.137324][ T4073] Bluetooth: hci0: command 0x0409 tx timeout [ 300.152173][ T4969] tipc: Disabling bearer [ 300.153714][ T4969] tipc: Disabling bearer [ 300.159265][ T7337] lo speed is unknown, defaulting to 1000 [ 300.162308][ T4969] tipc: Left network mode [ 301.036843][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'. [ 301.111255][ T7190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.153749][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.155819][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.187489][ T7393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 302.192081][ T7337] chnl_net:caif_netlink_parms(): no params data found [ 302.210057][ T4073] Bluetooth: hci0: command 0x041b tx timeout [ 304.190240][ T7190] device veth0_vlan entered promiscuous mode [ 304.206617][ T7190] device veth1_vlan entered promiscuous mode [ 304.251543][ T7190] device veth0_macvtap entered promiscuous mode [ 304.266233][ T7190] device veth1_macvtap entered promiscuous mode [ 304.290562][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.293242][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.312019][ T6440] Bluetooth: hci0: command 0x040f tx timeout [ 304.315448][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.318357][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.321118][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.323860][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.326490][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.329654][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.332486][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.335018][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.337655][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.345168][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.347733][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.352080][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.354976][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.357435][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.366982][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.326305][ T7190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.329201][ T7190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.857796][ T7190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.887657][ T7190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.892292][ T7190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.049445][ T7190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.062124][ T7190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.065793][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 306.068781][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.072806][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.074740][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.077286][ T7337] device bridge_slave_0 entered promiscuous mode [ 306.081555][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.083412][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.085970][ T7337] device bridge_slave_1 entered promiscuous mode [ 306.818502][ T5828] Bluetooth: hci0: command 0x0419 tx timeout [ 307.308271][ T7433] loop2: detected capacity change from 0 to 40427 [ 307.947693][ T7337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.961766][ T7337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.980456][ T7442] loop0: detected capacity change from 0 to 1024 [ 308.009192][ T7337] team0: Port device team_slave_0 added [ 308.018991][ T7337] team0: Port device team_slave_1 added [ 308.041006][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.046537][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.064034][ T7337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.069003][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.076238][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.088523][ T7337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.241986][ T7433] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 308.244178][ T7433] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 308.256100][ T7337] device hsr_slave_0 entered promiscuous mode [ 308.278124][ T7442] EXT4-fs (loop0): Ignoring removed oldalloc option [ 308.281866][ T7433] F2FS-fs (loop2): invalid crc value [ 308.300170][ T7337] device hsr_slave_1 entered promiscuous mode [ 308.304837][ T7442] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 308.392607][ T7433] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.404136][ T7337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.406274][ T7337] Cannot create hsr debugfs directory [ 308.433817][ T7433] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 308.435714][ T7433] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 308.605151][ T7454] 9pnet_virtio: no channels available for device syz [ 311.358599][ T4172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.361353][ T4172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.365366][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 311.449443][ T4172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.456985][ T4172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.468229][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 311.567591][ T7337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 315.221618][ T7337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 315.306657][ T7337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.526762][ T7500] loop0: detected capacity change from 0 to 512 [ 315.535349][ T7500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 316.464879][ T7500] EXT4-fs (loop0): 1 truncate cleaned up [ 316.466646][ T7500] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 316.501861][ T7518] loop2: detected capacity change from 0 to 512 [ 316.538936][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.905: casefold flag without casefold feature [ 316.550168][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.905: couldn't read orphan inode 15 (err -117) [ 316.567966][ T7518] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 316.681443][ T7337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.162867][ T7533] loop4: detected capacity change from 0 to 512 [ 318.560726][ T7533] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,grpquota,,errors=continue. Quota mode: writeback. [ 320.094910][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 320.097739][ T7526] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 320.135296][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 320.146154][ T7533] netlink: 60 bytes leftover after parsing attributes in process `syz.4.907'. [ 320.149026][ T7552] netlink: 'syz.5.915': attribute type 10 has an invalid length. [ 320.398905][ T7552] team0: Device hsr_slave_0 failed to register rx_handler [ 320.515697][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 320.531661][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.533386][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.825281][ T7572] loop5: detected capacity change from 0 to 256 [ 322.437089][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.456580][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.459002][ T4983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.480467][ T7572] exfat: Deprecated parameter 'namecase' [ 322.497055][ T7572] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 322.500921][ T7581] loop0: detected capacity change from 0 to 1024 [ 322.522192][ T7591] loop2: detected capacity change from 0 to 512 [ 322.533159][ T7337] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.535453][ T7589] sch_fq: defrate 0 ignored. [ 322.555552][ T7591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 322.557742][ T7589] loop4: detected capacity change from 0 to 512 [ 322.560546][ T4969] device hsr_slave_0 left promiscuous mode [ 322.629734][ T7591] EXT4-fs (loop2): 1 truncate cleaned up [ 322.634540][ T7589] EXT4-fs (loop4): Ignoring removed oldalloc option [ 322.637425][ T7591] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 322.724273][ T7589] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,inode_readahead_blks=0x0000000000800000,quota,oldalloc,auto_da_alloc=0x0000000000000081,. Quota mode: writeback. [ 324.496703][ T4969] device veth1_macvtap left promiscuous mode [ 324.498478][ T4969] device veth0_macvtap left promiscuous mode [ 324.511803][ T4969] device veth1_vlan left promiscuous mode [ 324.513467][ T4969] device veth0_vlan left promiscuous mode [ 324.717904][ T7610] loop5: detected capacity change from 0 to 512 [ 325.566807][ T7610] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,grpquota,,errors=continue. Quota mode: writeback. [ 325.607293][ T4969] bond1 (unregistering): Released all slaves [ 326.076446][ T4969] bond0 (unregistering): Released all slaves [ 326.189710][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.192819][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.196459][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.198366][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.202598][ T4981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.263675][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.266699][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.269282][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.271292][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.279988][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.282950][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.285921][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.340264][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.383083][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.389755][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.468945][ T7675] udc-core: couldn't find an available UDC or it's busy [ 331.475819][ T7675] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 331.664151][ T7680] udc-core: couldn't find an available UDC or it's busy [ 331.666058][ T7680] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 332.268994][ T7618] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.271711][ T7618] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.274146][ T7618] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.276491][ T7618] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.320370][ T4185] [ 332.321028][ T4185] ============================================ [ 332.322648][ T4185] WARNING: possible recursive locking detected [ 332.324304][ T4185] 5.15.181-syzkaller #0 Not tainted [ 332.325642][ T4185] -------------------------------------------- [ 332.327285][ T4185] kworker/u4:13/4185 is trying to acquire lock: [ 332.328981][ T4185] ffff0000d64a4898 (_xmit_ETHER#2){+.-.}-{2:2}, at: __dev_queue_xmit+0xea4/0x2800 [ 332.331493][ T4185] [ 332.331493][ T4185] but task is already holding lock: [ 332.333433][ T4185] ffff0000c7a72498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 332.335836][ T4185] [ 332.335836][ T4185] other info that might help us debug this: [ 332.338013][ T4185] Possible unsafe locking scenario: [ 332.338013][ T4185] [ 332.339993][ T4185] CPU0 [ 332.340876][ T4185] ---- [ 332.341757][ T4185] lock(_xmit_ETHER#2); [ 332.342890][ T4185] lock(_xmit_ETHER#2); [ 332.344084][ T4185] [ 332.344084][ T4185] *** DEADLOCK *** [ 332.344084][ T4185] [ 332.346197][ T4185] May be due to missing lock nesting notation [ 332.346197][ T4185] [ 332.348453][ T4185] 8 locks held by kworker/u4:13/4185: [ 332.349833][ T4185] #0: ffff0000d7ceb138 ((wq_completion)bond1#2){+.+.}-{0:0}, at: process_one_work+0x678/0x1140 [ 332.352669][ T4185] #1: ffff80001fb07c00 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6b8/0x1140 [ 332.355957][ T4185] #2: ffff8000143211e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 332.358422][ T4185] #3: ffff800014321240 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 332.360955][ T4185] #4: ffff0000d80d4258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: qdisc_run_begin+0x120/0x2a8 [ 332.364241][ T4185] #5: ffff0000c7a72498 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x12c/0x3bc [ 332.366831][ T4185] #6: ffff800014321240 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 332.369400][ T4185] #7: ffff800014321240 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x18/0x54 [ 332.372005][ T4185] [ 332.372005][ T4185] stack backtrace: [ 332.373535][ T4185] CPU: 1 PID: 4185 Comm: kworker/u4:13 Not tainted 5.15.181-syzkaller #0 [ 332.375739][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 332.378404][ T4185] Workqueue: bond1 bond_alb_monitor [ 332.379808][ T4185] Call trace: [ 332.380699][ T4185] dump_backtrace+0x0/0x43c [ 332.381879][ T4185] show_stack+0x2c/0x3c [ 332.383010][ T4185] __dump_stack+0x30/0x40 [ 332.384139][ T4185] dump_stack_lvl+0xf8/0x160 [ 332.385423][ T4185] dump_stack+0x1c/0x5c [ 332.386469][ T4185] __lock_acquire+0x18a4/0x651c [ 332.387711][ T4185] lock_acquire+0x1f4/0x620 [ 332.388893][ T4185] _raw_spin_lock+0xb0/0x10c [ 332.390102][ T4185] __dev_queue_xmit+0xea4/0x2800 [ 332.391420][ T4185] dev_queue_xmit+0x24/0x34 [ 332.392605][ T4185] neigh_resolve_output+0x530/0x5e0 [ 332.393946][ T4185] ip_finish_output2+0xdec/0x1228 [ 332.395247][ T4185] __ip_finish_output+0x1b0/0x448 [ 332.396595][ T4185] ip_finish_output+0x40/0x218 [ 332.397869][ T4185] ip_output+0x314/0x414 [ 332.399003][ T4185] ip_local_out+0x120/0x15c [ 332.400204][ T4185] iptunnel_xmit+0x3f8/0x8dc [ 332.401411][ T4185] ip_tunnel_xmit+0x181c/0x1f30 [ 332.402673][ T4185] gre_tap_xmit+0x3f8/0x5e4 [ 332.403885][ T4185] dev_hard_start_xmit+0x2a8/0x87c [ 332.405239][ T4185] sch_direct_xmit+0x2a4/0x3bc [ 332.406493][ T4185] __dev_queue_xmit+0x13f4/0x2800 [ 332.407834][ T4185] dev_queue_xmit+0x24/0x34 [ 332.409032][ T4185] alb_send_lp_vid+0x2b4/0x5fc [ 332.410332][ T4185] alb_send_learning_packets+0xf8/0x294 [ 332.411807][ T4185] bond_alb_monitor+0x2f4/0x121c [ 332.413135][ T4185] process_one_work+0x79c/0x1140 [ 332.414453][ T4185] worker_thread+0x8f4/0x101c [ 332.415668][ T4185] kthread+0x374/0x454 [ 332.416730][ T4185] ret_from_fork+0x10/0x20 [ 332.511574][ T7618] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.513970][ T7618] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.516362][ T7618] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.518701][ T7618] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.596946][ T7337] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.602190][ T7337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.606074][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.608708][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.611537][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.614216][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.616663][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.620946][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.941'. [ 332.628088][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.636812][ T7675] netlink: 'syz.5.936': attribute type 10 has an invalid length. [ 332.648148][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.660190][ T7675] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.662630][ T7676] netlink: 'syz.5.936': attribute type 1 has an invalid length. [ 332.758712][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.766577][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.775831][ T7337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.860644][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.863286][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.879765][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.886306][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.888988][ T7337] device veth0_vlan entered promiscuous mode [ 332.894503][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.896955][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.902909][ T7337] device veth1_vlan entered promiscuous mode [ 332.925078][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.927703][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.936326][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.938921][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.942927][ T7337] device veth0_macvtap entered promiscuous mode [ 332.947449][ T7337] device veth1_macvtap entered promiscuous mode [ 332.961078][ T7337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.964170][ T7337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.966903][ T7337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.969677][ T7337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.980184][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.983971][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.986451][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.988943][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.997307][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 333.000489][ T7337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.003280][ T7337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.005898][ T7337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.008577][ T7337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.017732][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.021149][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 333.024008][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 333.031558][ T7337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.034002][ T7337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.036253][ T7337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.038548][ T7337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.066233][ T7337] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 333.083625][ T4198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.085891][ T4198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.088175][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.110351][ T7337] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 333.133573][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.135833][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.137896][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready