last executing test programs: 44.404113247s ago: executing program 1 (id=774): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd890d6e1", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000001200)="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", 0x5a5}], 0x1}}], 0x2, 0x4000c000) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) 42.7133874s ago: executing program 1 (id=824): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x80000) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmmsg$inet6(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x20000094}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x89af, 0x1, 0x8000000, 0x1, 0x5}) 40.439680514s ago: executing program 1 (id=829): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8002, 0x2, 0x6}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) clock_gettime(0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x0) 38.848207819s ago: executing program 1 (id=837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b62f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746243ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d7ea2c27d041ca34a28965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b65a7ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e386d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848afcbb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4acee0e48c7d6d63cec5457a449eaf339d9807cd02f8784487cc9d4733788b3749d2e5560c8f30b11735389106f8d0ea4e3a802cc7eb620dc0e88fac3fbed19ab29c01ab3a068520270ab4f63004a291fbd157700e45cf8a033a658be59dfe6c0d6e7254aaa28b70d5a5f9cd1df60606660eba7870d8aa5935f2c7f5a67764afecad6748b09e28da3cfc1fa0dae3cc0209be966f83402836e66f7a9975217173c3ede094c3f2f4a7ade9627daca3ff34e40"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r4}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x6, '\x00', r6, r8, 0x3, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}]}, &(0x7f0000000700)='GPL\x00', 0xffffffff, 0xe, &(0x7f0000000740)=""/14, 0x40f00, 0x19, '\x00', r6, 0x0, r1, 0x8, &(0x7f0000000780)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xe, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r2, r8, r9, r7], &(0x7f0000000940)=[{0x3, 0x1, 0xf, 0x2}, {0x5, 0x1, 0x0, 0x5}, {0x0, 0x1, 0x4, 0x7}, {0x0, 0x3, 0xa, 0xa}, {0x2, 0x6, 0x9, 0x2}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0xfffffffb}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x691, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x2f, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x6}]}, 0x20}}, 0x0) getsockname$l2tp6(r10, 0x0, &(0x7f00000001c0)) ioctl$SIOCGETSGCNT_IN6(r1, 0x89e1, &(0x7f0000000640)={@private1, @mcast1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400) 38.442172444s ago: executing program 1 (id=838): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2400c004) timer_create(0xfffffffffffffffc, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000000000c000300686173683a697000050005000a000000050004"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0) 34.504435318s ago: executing program 1 (id=842): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x20000894) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x2, 0x0}}], 0xf000, 0x10002, 0x0) 8.994386936s ago: executing program 0 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000000101040000000000000000020000000800164000000659240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) 8.879263305s ago: executing program 0 (id=890): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.065533874s ago: executing program 0 (id=897): r0 = socket(0x8, 0x800, 0x10001fd) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) inotify_init1(0x0) mount(0x0, 0x0, 0x0, 0x24901a, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27, 0x1, 0x1}, 0x6) bind$nfc_llcp(r5, &(0x7f0000000280)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d929849825e6573561bd1ca44c226af5160e000000007760760beeab91e81597c80004da0000000200000000d2b6b9c2000000000000000000000000004000", 0x200000000000003}, 0x60) 5.147703963s ago: executing program 0 (id=902): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) 4.241644229s ago: executing program 0 (id=905): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000940)=@delchain={0x78, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}]}, 0x78}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b", 0xa, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') r1 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r1, 0x2007ffb) open(&(0x7f0000000400)='./bus\x00', 0x500, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 4.241423869s ago: executing program 3 (id=906): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd890d6e1", 0x6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000c000) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) 3.906815727s ago: executing program 3 (id=908): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.846568778s ago: executing program 2 (id=912): r0 = socket(0x8, 0x800, 0x10001fd) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0) inotify_init1(0x0) mount(0x0, 0x0, 0x0, 0x24901a, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27, 0x1, 0x1}, 0x6) bind$nfc_llcp(r5, &(0x7f0000000280)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d929849825e6573561bd1ca44c226af5160e000000007760760beeab91e81597c80004da0000000200000000d2b6b9c2000000000000000000000000004000", 0x200000000000003}, 0x60) 2.773327654s ago: executing program 3 (id=914): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) 2.751224166s ago: executing program 4 (id=915): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.955526523s ago: executing program 4 (id=916): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.8846167s ago: executing program 2 (id=917): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="83cbd890d6e1", 0x6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000c000) sendto$inet6(r0, &(0x7f00000001c0)="c346", 0x2, 0x0, 0x0, 0x0) 1.854167062s ago: executing program 3 (id=918): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 1.694368445s ago: executing program 3 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000000101040000000000000000020000000800164000000659240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) 1.63816012s ago: executing program 3 (id=920): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c410cf8a00000000000109022d00010000000009040600020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.578175565s ago: executing program 0 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x20000000) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000040), 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) unshare(0x62040200) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100003063cb7a60000000064f0000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004800128044000100697036677265746170"], 0x74}}, 0x0) unshare(0x68040200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r11 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) 1.044181971s ago: executing program 2 (id=922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="7000000010000104000000000400000000000000", @ANYRES32=r2, @ANYBLOB="0000000050210600480012800b00010067656e6576650000380002800500090001000000080001000100000005000c000000000005000c0000000000140007"], 0x70}}, 0x0) 982.425176ms ago: executing program 4 (id=923): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r0, 0x50540000, 0x0) 964.505817ms ago: executing program 4 (id=924): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6}, {0x3fb, 0x3f, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 859.778706ms ago: executing program 2 (id=925): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x8, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 657.299824ms ago: executing program 2 (id=926): r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 542.350773ms ago: executing program 2 (id=927): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) 29.785607ms ago: executing program 4 (id=928): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x1, 0x1}, 0x6) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d929849825e6573561bd1ca44c226af5160e000000007760760beeab91e81597c80004da0000000200000000d2b6b9c2000000000000000000000000004000", 0x200000000000003}, 0x60) 0s ago: executing program 4 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000000101040000000000000000020000000800164000000659240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): b found [ 129.434251][ T5262] hub 9-0:1.0: 8 ports detected [ 130.035413][ T5247] EXT4-fs (loop1): 1 orphan inode deleted [ 130.081778][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 130.139156][ T3983] device veth0_vlan left promiscuous mode [ 130.671042][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 130.765838][ T5247] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 13: comm syz.1.434: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 131.077479][ T5283] loop3: detected capacity change from 0 to 256 [ 131.161367][ T5283] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2c83664b, utbl_chksum : 0xe619d30d) [ 131.234876][ T5290] loop1: detected capacity change from 0 to 1024 [ 131.813298][ T3983] team0 (unregistering): Port device team_slave_1 removed [ 131.832215][ T3983] team0 (unregistering): Port device team_slave_0 removed [ 131.851798][ T3983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.882229][ T3983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.959286][ T5302] loop2: detected capacity change from 0 to 512 [ 131.993291][ T3983] bond0 (unregistering): Released all slaves [ 132.028507][ T5302] EXT4-fs (loop2): Ignoring removed oldalloc option [ 132.055518][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 132.067627][ T5302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.448: Parent and EA inode have the same ino 15 [ 132.088469][ T5302] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.448: Parent and EA inode have the same ino 15 [ 132.107959][ T5302] EXT4-fs (loop2): 1 orphan inode deleted [ 132.114142][ T5302] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 132.360388][ T5313] loop3: detected capacity change from 0 to 1024 [ 132.684533][ T3751] Bluetooth: hci1: command 0x0419 tx timeout [ 132.965281][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.007120][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.464826][ T5326] loop1: detected capacity change from 0 to 1024 [ 133.607131][ T5326] hfsplus: cannot replace xattr [ 133.689965][ T5336] loop2: detected capacity change from 0 to 256 [ 133.697017][ T5334] loop4: detected capacity change from 0 to 256 [ 133.960562][ T5340] loop4: detected capacity change from 0 to 512 [ 134.110185][ T5354] loop2: detected capacity change from 0 to 1024 [ 136.880104][ T5384] loop2: detected capacity change from 0 to 8 [ 136.907236][ T5380] loop4: detected capacity change from 0 to 2048 [ 137.019407][ T5380] EXT4-fs (loop4): Unrecognized mount option "context=root" or missing value [ 137.148522][ T5168] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.172058][ T5391] loop2: detected capacity change from 0 to 128 [ 137.236922][ T5168] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.249311][ T5392] x_tables: unsorted underflow at hook 4 [ 137.273184][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.275105][ T5168] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.291457][ T5391] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038 (0x7fffffff) [ 137.341145][ T5391] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.473: No space for directory leaf checksum. Please run e2fsck -D. [ 137.372516][ T5168] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.477566][ T5391] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.473: checksumming directory block 0 [ 137.553731][ T5406] loop3: detected capacity change from 0 to 2048 [ 137.585930][ T5408] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.473: No space for directory leaf checksum. Please run e2fsck -D. [ 137.642546][ T5168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.708745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.715130][ T5408] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.473: checksumming directory block 0 [ 137.727677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.753371][ T5406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 137.788825][ T5168] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.791923][ T5412] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.473: No space for directory leaf checksum. Please run e2fsck -D. [ 137.815542][ T5412] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.473: checksumming directory block 0 [ 137.890862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.917020][ T5422] loop4: detected capacity change from 0 to 2048 [ 137.937977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.401034][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.409096][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.455720][ T5422] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.599056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.608988][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.618027][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.625142][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.633341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.642977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.674642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.741672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.820850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.204762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.410143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.442002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.460352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.609956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.763089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.861132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.067602][ T5461] loop1: detected capacity change from 0 to 256 [ 140.075513][ T5456] x_tables: unsorted underflow at hook 4 [ 140.501791][ T5461] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.613857][ T5473] loop3: detected capacity change from 0 to 128 [ 140.679127][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.725648][ T5473] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 140.729519][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.749181][ T5168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.769325][ T5473] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038 (0x7fffffff) [ 140.790932][ T5473] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.491: No space for directory leaf checksum. Please run e2fsck -D. [ 140.831780][ T5473] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.491: checksumming directory block 0 [ 140.880222][ T5483] loop4: detected capacity change from 0 to 1024 [ 140.887083][ T5487] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.491: No space for directory leaf checksum. Please run e2fsck -D. [ 140.890437][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.965435][ T5487] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.491: checksumming directory block 0 [ 140.982791][ T5483] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 140.985983][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.001830][ T5473] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.491: No space for directory leaf checksum. Please run e2fsck -D. [ 141.029935][ T5487] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.491: No space for directory leaf checksum. Please run e2fsck -D. [ 141.053546][ T5473] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.491: checksumming directory block 0 [ 141.082683][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.111939][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.115381][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 141.124138][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.148299][ T5487] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.491: checksumming directory block 0 [ 141.152803][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.304795][ T5168] device veth0_vlan entered promiscuous mode [ 141.522136][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 141.754096][ T5496] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.491: No space for directory leaf checksum. Please run e2fsck -D. [ 141.774762][ T5496] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.491: checksumming directory block 0 [ 141.886789][ T5168] device veth1_vlan entered promiscuous mode [ 141.994326][ T5168] device veth0_macvtap entered promiscuous mode [ 142.007249][ T5168] device veth1_macvtap entered promiscuous mode [ 142.024122][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.044946][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.109751][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.181438][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.204967][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.226999][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.243607][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.260535][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.272841][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.311712][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.383105][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.419133][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.670865][ T5522] loop3: detected capacity change from 0 to 1024 [ 142.673187][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.697065][ T5522] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 142.773446][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.802203][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.813106][ T5168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.824271][ T5168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.829189][ T5522] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 142.836154][ T5168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.870282][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.890062][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.900894][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.909383][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.919176][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.929255][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.938393][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.950888][ T5507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 142.951960][ T5168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.967848][ T5168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.977015][ T5168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.986014][ T5168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.002314][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.064636][ T1302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.413369][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.439828][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.463313][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.474696][ T1302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.494593][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.514560][ T1302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.530823][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.029892][ T5548] hub 9-0:1.0: USB hub found [ 144.036368][ T5548] hub 9-0:1.0: 8 ports detected [ 144.053141][ T1302] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 144.057187][ T5546] x_tables: unsorted underflow at hook 4 [ 144.070304][ T1302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.084709][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.093606][ T1302] usb 5-1: config 0 descriptor?? [ 144.099625][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.123093][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.187296][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.288922][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 144.319830][ T3613] rtc rtc0: __rtc_set_alarm: err=-22 [ 144.430998][ T5562] overlayfs: failed to resolve './file1': -2 [ 144.639377][ T1302] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 144.914895][ T1302] hid-led: probe of 0003:1D34:000A.0002 failed with error -71 [ 144.946340][ T1302] usb 5-1: USB disconnect, device number 4 [ 145.285129][ T5583] loop0: detected capacity change from 0 to 2048 [ 145.356458][ T5590] rtc_cmos 00:00: Alarms can be up to one day in the future [ 145.383114][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.582336][ T5603] loop4: detected capacity change from 0 to 256 [ 145.615614][ T5607] loop1: detected capacity change from 0 to 1024 [ 145.620332][ T5601] loop2: detected capacity change from 0 to 512 [ 146.106071][ T5607] EXT4-fs (loop1): Test dummy encryption mode enabled [ 146.140734][ T5603] FAT-fs (loop4): Directory bread(block 64) failed [ 146.170365][ T5601] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 146.191001][ T5607] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,noload,barrier=0x0000000000000005,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 146.224748][ T5603] FAT-fs (loop4): Directory bread(block 65) failed [ 146.230495][ T1302] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.238937][ T1302] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.245178][ T5603] FAT-fs (loop4): Directory bread(block 66) failed [ 146.263219][ T1302] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.271896][ T5603] FAT-fs (loop4): Directory bread(block 67) failed [ 146.283702][ T5603] FAT-fs (loop4): Directory bread(block 68) failed [ 146.295336][ T5601] EXT4-fs (loop2): 1 orphan inode deleted [ 146.307655][ T5603] FAT-fs (loop4): Directory bread(block 69) failed [ 146.323224][ T5603] FAT-fs (loop4): Directory bread(block 70) failed [ 146.325004][ T1302] rtc_cmos 00:00: Alarms can be up to one day in the future [ 146.337470][ T5603] FAT-fs (loop4): Directory bread(block 71) failed [ 146.337575][ T5603] FAT-fs (loop4): Directory bread(block 72) failed [ 146.337603][ T5603] FAT-fs (loop4): Directory bread(block 73) failed [ 146.351273][ T1302] rtc rtc0: __rtc_set_alarm: err=-22 [ 146.357684][ T5601] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,nomblk_io_submit,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 146.452554][ T5619] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #18: block 144: comm syz.1.513: lblock 0 mapped to illegal pblock 144 (length 1) [ 146.454690][ T5601] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038 (0x7fffffff) [ 146.972039][ T5620] hub 9-0:1.0: USB hub found [ 146.977155][ T5620] hub 9-0:1.0: 8 ports detected [ 147.147338][ T5623] loop3: detected capacity change from 0 to 1024 [ 147.235794][ T5623] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 147.236857][ T3571] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.265766][ T3571] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 147.297907][ T5623] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 147.444601][ T3571] EXT4-fs error (device loop1): ext4_dirty_inode:6004: inode #2: comm syz-executor: mark_inode_dirty error [ 147.604106][ T5628] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.023264][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.524753][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.532352][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.604347][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 148.615878][ T3613] rtc rtc0: __rtc_set_alarm: err=-22 [ 148.651803][ T3571] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 148.675467][ T3571] EXT4-fs error (device loop1): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 148.688758][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 148.715034][ T5641] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 148.808056][ T3571] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 148.879040][ T3571] EXT4-fs error (device loop1): ext4_quota_off:6485: inode #4: comm syz-executor: mark_inode_dirty error [ 148.916792][ T26] audit: type=1326 audit(1724499825.003:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5646 comm="syz.2.528" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66fd5b5e79 code=0x0 [ 148.965301][ T5649] loop7: detected capacity change from 0 to 16384 [ 148.986509][ T5649] trusted_key: encrypted_key: insufficient parameters specified [ 149.003378][ T5649] kernel profiling enabled (shift: 0) [ 149.423118][ T1211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.217777][ T5659] hub 9-0:1.0: USB hub found [ 150.222884][ T5659] hub 9-0:1.0: 8 ports detected [ 150.310746][ T1211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.432181][ T5663] loop0: detected capacity change from 0 to 256 [ 150.500601][ T5669] rtc_cmos 00:00: Alarms can be up to one day in the future [ 150.539938][ T5672] loop4: detected capacity change from 0 to 256 [ 150.615188][ T1211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.618278][ T5674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.539'. [ 150.658556][ T5672] FAT-fs (loop4): Directory bread(block 64) failed [ 150.677944][ T5672] FAT-fs (loop4): Directory bread(block 65) failed [ 150.695446][ T5672] FAT-fs (loop4): Directory bread(block 66) failed [ 150.715901][ T5672] FAT-fs (loop4): Directory bread(block 67) failed [ 150.723258][ T5674] netlink: 'syz.3.539': attribute type 2 has an invalid length. [ 150.745684][ T1211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.747014][ T5672] FAT-fs (loop4): Directory bread(block 68) failed [ 150.769252][ T5675] loop0: detected capacity change from 0 to 512 [ 150.824877][ T5672] FAT-fs (loop4): Directory bread(block 69) failed [ 150.861026][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 150.893817][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 150.902833][ T5675] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.535: inode #1: comm syz.0.535: iget: illegal inode # [ 150.902999][ T5672] FAT-fs (loop4): Directory bread(block 70) failed [ 150.918867][ T5679] loop3: detected capacity change from 0 to 128 [ 150.939747][ T5675] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.535: error while reading EA inode 1 err=-117 [ 150.939936][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 150.952459][ T5672] FAT-fs (loop4): Directory bread(block 71) failed [ 150.959630][ T3751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 150.973405][ T3751] rtc rtc0: __rtc_set_alarm: err=-22 [ 150.980457][ T5675] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.535: inode #1: comm syz.0.535: iget: illegal inode # [ 150.994070][ T5672] FAT-fs (loop4): Directory bread(block 72) failed [ 151.003379][ T5672] FAT-fs (loop4): Directory bread(block 73) failed [ 151.011427][ T5675] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.535: error while reading EA inode 1 err=-117 [ 151.029308][ T5675] EXT4-fs (loop0): 1 orphan inode deleted [ 151.040784][ T5675] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 151.103415][ T5675] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 13: comm syz.0.535: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 151.217886][ T5666] chnl_net:caif_netlink_parms(): no params data found [ 151.869472][ T5691] binder: BINDER_SET_CONTEXT_MGR already set [ 151.939749][ T5691] binder: 5686:5691 ioctl 4018620d 200001c0 returned -16 [ 152.226657][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 152.403377][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.524582][ T3613] Bluetooth: hci2: command 0x0409 tx timeout [ 152.657792][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.385369][ T5666] device bridge_slave_0 entered promiscuous mode [ 153.503472][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.531076][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.584803][ T5666] device bridge_slave_1 entered promiscuous mode [ 153.764005][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.800065][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.876610][ T5734] rtc_cmos 00:00: Alarms can be up to one day in the future [ 153.979654][ T5666] team0: Port device team_slave_0 added [ 154.072784][ T5666] team0: Port device team_slave_1 added [ 154.131679][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.164676][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.269967][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.315102][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.337512][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.388833][ T5744] loop3: detected capacity change from 0 to 1024 [ 154.406980][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.479254][ T5744] EXT4-fs (loop3): Test dummy encryption mode enabled [ 154.490107][ T5747] loop4: detected capacity change from 0 to 512 [ 154.552178][ T5744] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,noload,barrier=0x0000000000000005,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 154.684577][ T3613] Bluetooth: hci2: command 0x041b tx timeout [ 154.706691][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.718035][ T5747] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038 (0x7fffffff) [ 154.761868][ T5666] device hsr_slave_0 entered promiscuous mode [ 154.791885][ T5666] device hsr_slave_1 entered promiscuous mode [ 154.828946][ T5666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.860477][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.877752][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.910049][ T5666] Cannot create hsr debugfs directory [ 154.936626][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.966646][ T1211] device hsr_slave_0 left promiscuous mode [ 154.984619][ T3613] rtc_cmos 00:00: Alarms can be up to one day in the future [ 154.992649][ T1211] device hsr_slave_1 left promiscuous mode [ 155.032816][ T3613] rtc rtc0: __rtc_set_alarm: err=-22 [ 155.039836][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.062308][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.087127][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.148489][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.203853][ T1211] device bridge_slave_1 left promiscuous mode [ 155.235993][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.267666][ T1211] device bridge_slave_0 left promiscuous mode [ 155.290941][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.343364][ T1211] device veth1_macvtap left promiscuous mode [ 155.381579][ T5770] loop3: detected capacity change from 0 to 128 [ 155.390744][ T1211] device veth0_macvtap left promiscuous mode [ 155.424328][ T1211] device veth1_vlan left promiscuous mode [ 155.456967][ T1211] device veth0_vlan left promiscuous mode [ 155.505977][ T5770] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 155.558990][ T5770] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038 (0x7fffffff) [ 156.761288][ T5783] loop0: detected capacity change from 0 to 256 [ 156.764559][ T3752] Bluetooth: hci2: command 0x040f tx timeout [ 156.863478][ T5783] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 157.040960][ T1211] team0 (unregistering): Port device team_slave_1 removed [ 157.099978][ T1211] team0 (unregistering): Port device team_slave_0 removed [ 157.125478][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.146889][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.283961][ T1211] bond0 (unregistering): Released all slaves [ 157.565475][ T5790] loop0: detected capacity change from 0 to 256 [ 157.576465][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 157.821306][ T5790] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2c83664b, utbl_chksum : 0xe619d30d) [ 157.828499][ T5793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.755502][ T5666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.802064][ T5666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.844704][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 158.885641][ T5666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.947118][ T5666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.122344][ T5832] device lo entered promiscuous mode [ 159.178868][ T5832] loop3: detected capacity change from 0 to 512 [ 159.242166][ T5832] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 159.309542][ T5832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 159.334653][ T5832] System zones: 1-12 [ 159.340799][ T5832] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.410687][ T5832] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.564: Inode bitmap for bg 0 marked uninitialized [ 159.460373][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.528626][ T5832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.560525][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.595748][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.630400][ T5832] device lo left promiscuous mode [ 159.825596][ T5846] loop0: detected capacity change from 0 to 512 [ 160.522495][ T5666] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.654723][ T5854] loop3: detected capacity change from 0 to 256 [ 160.664229][ T5846] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 160.695164][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.705211][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.727345][ T5846] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 160.747893][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.754953][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.804994][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 160.825384][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 160.839563][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.846671][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.960469][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.045579][ T5858] loop4: detected capacity change from 0 to 512 [ 161.144557][ T5859] capability: warning: `syz.3.568' uses 32-bit capabilities (legacy support in use) [ 161.146812][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.445535][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.525069][ T5858] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.551541][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.609895][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.654615][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 161.663399][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.571'. [ 161.738886][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.748589][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.760434][ T5858] EXT4-fs (loop4): 1 orphan inode deleted [ 161.760956][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.774010][ T5858] EXT4-fs (loop4): 1 truncate cleaned up [ 161.779843][ T5858] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 161.859897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.935890][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.979159][ T5666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.021703][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.215032][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.284931][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.437858][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 162.875742][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.905098][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.929681][ T5838] device bridge_slave_0 entered promiscuous mode [ 162.947857][ T5917] loop4: detected capacity change from 0 to 512 [ 162.974574][ T5917] EXT4-fs (loop4): bad geometry: block count 267 exceeds size of device (256 blocks) [ 162.995839][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.045227][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.053952][ T5838] device bridge_slave_1 entered promiscuous mode [ 163.208224][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.279135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.293881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.442774][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.459517][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.106123][ T5938] hub 9-0:1.0: USB hub found [ 165.110988][ T5938] hub 9-0:1.0: 8 ports detected [ 165.130213][ T2104] Bluetooth: hci5: command 0x041b tx timeout [ 165.194136][ T5943] loop3: detected capacity change from 0 to 256 [ 165.209913][ T5838] team0: Port device team_slave_0 added [ 165.235023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 165.296594][ T5945] loop0: detected capacity change from 0 to 128 [ 165.326387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.343424][ T5838] team0: Port device team_slave_1 added [ 165.507688][ T5945] attempt to access beyond end of device [ 165.507688][ T5945] loop0: rw=2049, want=241, limit=128 [ 165.524835][ T5949] loop3: detected capacity change from 0 to 512 [ 165.589294][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.605156][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.748229][ T3669] attempt to access beyond end of device [ 165.748229][ T3669] loop0: rw=1, want=153, limit=128 [ 165.763041][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.848632][ T5958] netlink: 96 bytes leftover after parsing attributes in process `syz.4.582'. [ 165.884618][ T3613] Bluetooth: hci4: command 0x0406 tx timeout [ 166.499647][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.547504][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.580914][ T5949] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.579: inode #1: comm syz.3.579: iget: illegal inode # [ 166.625781][ T5949] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.579: error while reading EA inode 1 err=-117 [ 166.644656][ T5949] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.579: inode #1: comm syz.3.579: iget: illegal inode # [ 166.673018][ T5949] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.579: error while reading EA inode 1 err=-117 [ 166.712019][ T5949] EXT4-fs (loop3): 1 orphan inode deleted [ 166.719261][ T5949] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 166.744811][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.814015][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.859297][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.973773][ T5977] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 13: comm syz.3.579: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 166.981221][ T5666] device veth0_vlan entered promiscuous mode [ 167.036427][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.063336][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.109178][ T5666] device veth1_vlan entered promiscuous mode [ 167.164755][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 167.229556][ T5838] device hsr_slave_0 entered promiscuous mode [ 167.260060][ T5838] device hsr_slave_1 entered promiscuous mode [ 167.281534][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.296729][ T5838] Cannot create hsr debugfs directory [ 167.426329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.502911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.538777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.588739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.666189][ T5666] device veth0_macvtap entered promiscuous mode [ 167.688054][ T5990] loop4: detected capacity change from 0 to 512 [ 167.707933][ T5666] device veth1_macvtap entered promiscuous mode [ 167.890805][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.909816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.004173][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.095180][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.108026][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.119473][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.129492][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.140143][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.157212][ T5997] loop3: detected capacity change from 0 to 1024 [ 168.163743][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.181909][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.197555][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.224664][ T5990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 168.258846][ T5997] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 168.289559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.302342][ T5998] loop0: detected capacity change from 0 to 512 [ 168.309669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.343445][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.345648][ T5997] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 168.354406][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.389801][ T5990] EXT4-fs (loop4): 1 orphan inode deleted [ 168.395614][ T5990] EXT4-fs (loop4): 1 truncate cleaned up [ 168.397391][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.404907][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 168.418931][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.451639][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.463140][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.473243][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.484575][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.523329][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.581406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.602292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.794154][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 168.864753][ T26] audit: type=1326 audit(1724499844.943:25): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65eadee79 code=0x0 [ 168.868592][ T5666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.904682][ T5666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.933936][ T5666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.945323][ T5666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.964762][ T5998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 169.165665][ T5998] EXT4-fs (loop0): 1 orphan inode deleted [ 169.177996][ T5998] EXT4-fs (loop0): 1 truncate cleaned up [ 169.183838][ T5998] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 169.263337][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 169.312801][ T5838] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.451584][ T5838] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.542836][ T5838] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.582627][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.634552][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.646477][ T6011] x_tables: unsorted underflow at hook 4 [ 169.653516][ T6010] loop4: detected capacity change from 0 to 256 [ 169.706523][ T5838] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.823965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.824183][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.846381][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.905587][ T6016] netlink: 96 bytes leftover after parsing attributes in process `syz.0.594'. [ 170.315823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.752163][ T6024] loop1: detected capacity change from 0 to 2048 [ 170.822242][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.829120][ T6024] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.940644][ T6031] loop3: detected capacity change from 0 to 256 [ 171.736982][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.786440][ T6031] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.795821][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.862213][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.984249][ T6048] loop1: detected capacity change from 0 to 512 [ 173.042270][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.061029][ T6048] EXT4-fs (loop1): Ignoring removed bh option [ 173.077235][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.608'. [ 173.112165][ T6056] x_tables: unsorted underflow at hook 4 [ 173.158778][ T6048] EXT4-fs error (device loop1): __ext4_iget:4872: inode #15: block 1803188595: comm syz.1.603: invalid block [ 173.172420][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.187671][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.210207][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.224738][ T6048] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.603: couldn't read orphan inode 15 (err -117) [ 173.238514][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.256832][ T6048] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,grpid,,errors=continue. Quota mode: none. [ 173.288151][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.457906][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.465141][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.557015][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.581226][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.767039][ T3670] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.774796][ T3670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.844983][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.877427][ T1211] device hsr_slave_0 left promiscuous mode [ 173.889188][ T6069] loop0: detected capacity change from 0 to 1024 [ 173.905834][ T1211] device hsr_slave_1 left promiscuous mode [ 173.929260][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.944574][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.952434][ T1211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.981439][ T1211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.005976][ T6069] hfsplus: extend alloc file! (8192,65536,366) [ 174.006036][ T1211] device bridge_slave_1 left promiscuous mode [ 174.028779][ T1211] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.045260][ T1211] device bridge_slave_0 left promiscuous mode [ 174.070451][ T6078] loop1: detected capacity change from 0 to 128 [ 174.083024][ T1211] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.191046][ T6078] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.565672][ T6078] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff) [ 174.632805][ T1211] device veth1_macvtap left promiscuous mode [ 174.645079][ T1211] device veth0_macvtap left promiscuous mode [ 174.962014][ T6078] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 174.990086][ T6078] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.012056][ T1211] device veth1_vlan left promiscuous mode [ 175.030463][ T1211] device veth0_vlan left promiscuous mode [ 175.051416][ T6069] loop0: detected capacity change from 0 to 1764 [ 175.069986][ T6087] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.094396][ T6087] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.130875][ T6069] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 175.154815][ T6078] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.155098][ T6089] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.193741][ T6069] ISOFS: unable to read i-node block [ 175.207426][ T6069] isofs_fill_super: get root inode failed [ 175.218975][ T6078] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.269157][ T6089] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.314746][ T6087] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.325922][ T6069] user requested TSC rate below hardware speed [ 175.350493][ T6087] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.355291][ T6069] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4091629214 (65466067424 ns) > initial count (185248 ns). Using initial count to start timer. [ 175.372456][ T6078] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.412831][ T6089] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.449730][ T6078] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.454099][ T6089] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.490541][ T6078] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.523145][ T6078] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.542100][ T6087] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.570939][ T6087] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.591646][ T6078] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.611: No space for directory leaf checksum. Please run e2fsck -D. [ 175.611784][ T6078] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.611: checksumming directory block 0 [ 175.743455][ T6100] loop0: detected capacity change from 0 to 512 [ 175.769542][ T1211] team0 (unregistering): Port device team_slave_1 removed [ 175.802140][ T1211] team0 (unregistering): Port device team_slave_0 removed [ 175.831924][ T6100] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.878068][ T6100] EXT4-fs (loop0): 1 orphan inode deleted [ 175.883960][ T6100] EXT4-fs (loop0): 1 truncate cleaned up [ 175.892563][ T1211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.917443][ T6100] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 175.997171][ T1211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.034151][ T6109] x_tables: unsorted underflow at hook 4 [ 176.153595][ T1211] bond0 (unregistering): Released all slaves [ 176.200191][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.252239][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.296653][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.382141][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.433866][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.498038][ T6121] loop1: detected capacity change from 0 to 2048 [ 176.505269][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.251467][ T6121] EXT4-fs (loop1): Ignoring removed orlov option [ 177.280257][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.300160][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.330060][ T6121] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 177.402888][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.494134][ T6137] loop3: detected capacity change from 0 to 128 [ 177.541866][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.577036][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.605644][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.616007][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.669476][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.718548][ T6137] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.729795][ T6137] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038 (0x7fffffff) [ 177.749868][ T6137] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.630: No space for directory leaf checksum. Please run e2fsck -D. [ 177.850560][ T6137] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.630: checksumming directory block 0 [ 177.872887][ T6149] x_tables: unsorted underflow at hook 4 [ 177.945845][ T6153] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.630: No space for directory leaf checksum. Please run e2fsck -D. [ 177.979086][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.994719][ T6153] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.630: checksumming directory block 0 [ 178.015437][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.017466][ T6147] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.630: No space for directory leaf checksum. Please run e2fsck -D. [ 178.045691][ T6147] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.630: checksumming directory block 0 [ 178.088430][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.182810][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.200135][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.266462][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.284112][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.395822][ T5838] device veth0_vlan entered promiscuous mode [ 178.404032][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.419673][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.433300][ T5838] device veth1_vlan entered promiscuous mode [ 179.229906][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.255863][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.386541][ T6174] xt_limit: Overflow, try lower: 0/0 [ 179.394143][ T6174] trusted_key: encrypted_key: insufficient parameters specified [ 180.091483][ T5838] device veth0_macvtap entered promiscuous mode [ 180.115183][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.161962][ T5838] device veth1_macvtap entered promiscuous mode [ 180.294123][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.334487][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.360415][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.392040][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.423991][ T6192] loop3: detected capacity change from 0 to 128 [ 180.430827][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.455750][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.531025][ T6192] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.541720][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.629544][ T6192] ext4 filesystem being mounted at /143/mnt supports timestamps until 2038 (0x7fffffff) [ 180.639888][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.686326][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.721261][ T6192] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.645: No space for directory leaf checksum. Please run e2fsck -D. [ 180.750171][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.759911][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 180.772948][ T6192] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.645: checksumming directory block 0 [ 180.777983][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.806096][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 180.815140][ T6198] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.645: No space for directory leaf checksum. Please run e2fsck -D. [ 180.854754][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.865861][ T6198] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.645: checksumming directory block 0 [ 180.891537][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.909098][ T6192] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.645: No space for directory leaf checksum. Please run e2fsck -D. [ 180.930344][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 180.948078][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.984164][ T6199] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.645: No space for directory leaf checksum. Please run e2fsck -D. [ 181.001889][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.017707][ T6192] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.645: checksumming directory block 0 [ 181.030043][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.057863][ T6199] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.645: checksumming directory block 0 [ 181.081404][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.109805][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.161146][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.211665][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.231338][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.240881][ T6198] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.645: No space for directory leaf checksum. Please run e2fsck -D. [ 181.262542][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.297625][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.324529][ T6198] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.645: checksumming directory block 0 [ 181.347105][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.374872][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.416597][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.518297][ T6210] x_tables: unsorted underflow at hook 4 [ 181.683045][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.709661][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.775436][ T6215] netlink: 96 bytes leftover after parsing attributes in process `syz.3.651'. [ 182.506223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.604245][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.628138][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.682120][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.840865][ T6224] loop1: detected capacity change from 0 to 2048 [ 182.983084][ T6228] loop2: detected capacity change from 0 to 1024 [ 183.000457][ T6231] loop0: detected capacity change from 0 to 16 [ 183.018384][ T6224] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.050706][ T6231] erofs: (device loop0): mounted with root inode @ nid 36. [ 183.125290][ T6228] EXT4-fs (loop2): Test dummy encryption mode enabled [ 183.216588][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,noload,barrier=0x0000000000000005,errors=continue,data_err=abort,,errors=continue. Quota mode: writeback. [ 183.496359][ T6244] loop0: detected capacity change from 0 to 256 [ 183.728611][ T6250] netlink: 96 bytes leftover after parsing attributes in process `syz.1.662'. [ 183.890663][ T6244] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 184.447300][ T6253] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #18: block 144: comm syz.2.563: lblock 0 mapped to illegal pblock 144 (length 1) [ 184.846350][ T5838] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.985380][ T5838] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 185.031942][ T5838] EXT4-fs error (device loop2): ext4_dirty_inode:6004: inode #2: comm syz-executor: mark_inode_dirty error [ 185.777041][ T5838] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 185.838998][ T5838] EXT4-fs error (device loop2): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error [ 185.855387][ T26] audit: type=1326 audit(1724499861.943:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09c1e24e79 code=0x0 [ 185.894638][ T5838] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5800: Corrupt filesystem [ 185.908413][ T6274] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.940674][ T5838] EXT4-fs error (device loop2): ext4_quota_off:6485: inode #4: comm syz-executor: mark_inode_dirty error [ 186.159739][ T6280] hub 9-0:1.0: USB hub found [ 186.165421][ T6280] hub 9-0:1.0: 8 ports detected [ 187.444781][ T6288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.674'. [ 191.573592][ T6293] overlayfs: missing 'lowerdir' [ 191.727573][ T5716] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.946795][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 192.001569][ T5716] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.229862][ T5716] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.048207][ T5716] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.344851][ T6332] loop3: detected capacity change from 0 to 764 [ 193.399183][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 193.510699][ T6332] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 193.700594][ T6341] xt_hashlimit: overflow, try lower: 0/0 [ 194.245002][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.251365][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464120][ T4019] Bluetooth: hci0: command 0x0409 tx timeout [ 194.722740][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 195.093993][ T6372] loop3: detected capacity change from 0 to 512 [ 195.103651][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.173669][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.192927][ T6372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.231840][ T6298] device bridge_slave_0 entered promiscuous mode [ 195.398374][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.111447][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.128977][ T6372] EXT4-fs (loop3): 1 orphan inode deleted [ 196.138314][ T6298] device bridge_slave_1 entered promiscuous mode [ 196.155002][ T6372] EXT4-fs (loop3): 1 truncate cleaned up [ 196.166653][ T6372] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 196.432935][ T6385] loop1: detected capacity change from 0 to 512 [ 196.501217][ T6389] overlayfs: missing 'lowerdir' [ 196.543101][ T6385] loop1: detected capacity change from 0 to 128 [ 196.545159][ T3751] Bluetooth: hci0: command 0x041b tx timeout [ 196.638559][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.760661][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.976497][ T6298] team0: Port device team_slave_0 added [ 197.049788][ T6298] team0: Port device team_slave_1 added [ 197.132757][ T6406] loop4: detected capacity change from 0 to 764 [ 197.174405][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.186014][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.225795][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.240103][ T6406] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 197.329345][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.356766][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.528337][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.681895][ T6298] device hsr_slave_0 entered promiscuous mode [ 197.698867][ T6298] device hsr_slave_1 entered promiscuous mode [ 197.804986][ T1073] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 198.012518][ T5716] device hsr_slave_0 left promiscuous mode [ 198.021614][ T5716] device hsr_slave_1 left promiscuous mode [ 198.029080][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.037275][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.055322][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.068850][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.080021][ T5716] device bridge_slave_1 left promiscuous mode [ 198.090515][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.110923][ T5716] device bridge_slave_0 left promiscuous mode [ 198.117474][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.136289][ T5716] device veth1_macvtap left promiscuous mode [ 198.142493][ T5716] device veth0_macvtap left promiscuous mode [ 198.167585][ T5716] device veth1_vlan left promiscuous mode [ 198.192801][ T5716] device veth0_vlan left promiscuous mode [ 198.226793][ T1073] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 198.244535][ T1073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.281428][ T1073] usb 5-1: config 0 descriptor?? [ 198.345928][ T1073] cp210x 5-1:0.0: cp210x converter detected [ 198.604535][ T2104] Bluetooth: hci0: command 0x040f tx timeout [ 198.660744][ T5716] team0 (unregistering): Port device team_slave_1 removed [ 198.686981][ T5716] team0 (unregistering): Port device team_slave_0 removed [ 198.701711][ T5716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.734397][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.774918][ T1073] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 198.782543][ T1073] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 198.810153][ T1073] usb 5-1: cp210x converter now attached to ttyUSB0 [ 198.850332][ T1073] usb 5-1: USB disconnect, device number 5 [ 198.884337][ T1073] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.905776][ T1073] cp210x 5-1:0.0: device disconnected [ 198.948176][ T5716] bond0 (unregistering): Released all slaves [ 199.480151][ T6455] loop1: detected capacity change from 0 to 1024 [ 200.804707][ T2104] Bluetooth: hci0: command 0x0419 tx timeout [ 200.844880][ T6298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.916020][ T6298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.962194][ T6298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.971824][ T6298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.105516][ T4019] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.408236][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 201.464849][ T4019] usb 1-1: Using ep0 maxpacket: 32 [ 201.748857][ T6499] loop1: detected capacity change from 0 to 764 [ 201.805285][ T4019] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 201.850020][ T4019] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.853537][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.866643][ T4019] usb 1-1: Product: syz [ 201.870917][ T4019] usb 1-1: Manufacturer: syz [ 201.876583][ T4019] usb 1-1: SerialNumber: syz [ 201.888389][ T4019] usb 1-1: config 0 descriptor?? [ 201.952495][ T6504] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 201.968141][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.985073][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.000639][ T6499] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 202.055262][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.099173][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.128785][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.156667][ T4019] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 202.193560][ T3983] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.200801][ T3983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.352982][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.360978][ T21] usb 1-1: USB disconnect, device number 3 [ 202.401720][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.427885][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.440438][ T3983] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.447582][ T3983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.502991][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.536190][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.567240][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.601791][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.654326][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.688803][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.708883][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.718076][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.731183][ T6298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.743785][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.848280][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.609975][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.677241][ T3983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.759812][ T6535] loop1: detected capacity change from 0 to 2048 [ 203.832657][ T3583] Bluetooth: Wrong link type (-71) [ 203.923056][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.941660][ T6535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.971148][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.031143][ T26] audit: type=1800 audit(1724499880.113:27): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.731" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 204.072264][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.191750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.244262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.289109][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 204.345535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.379768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.460028][ T6298] device veth0_vlan entered promiscuous mode [ 204.483527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.505519][ T6555] loop3: detected capacity change from 0 to 256 [ 204.512607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 204.580037][ T6298] device veth1_vlan entered promiscuous mode [ 204.615165][ T6562] loop1: detected capacity change from 0 to 512 [ 204.679273][ T6555] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xd9626611, utbl_chksum : 0xe619d30d) [ 204.778654][ T6555] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 204.844231][ T6555] exFAT-fs (loop3): Filesystem has been set read-only [ 204.864290][ T6298] device veth0_macvtap entered promiscuous mode [ 204.898629][ T6562] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.098670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 205.574586][ T6562] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff) [ 205.589883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 205.634774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.675411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.745977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.797705][ T6298] device veth1_macvtap entered promiscuous mode [ 205.944918][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.034475][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.044305][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.082374][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.107034][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.127663][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.143660][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.160014][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.173812][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.200081][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.213554][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.228973][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.240047][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.255742][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.270377][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.292174][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.320098][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.341466][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.354940][ T6298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.363657][ T6298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.390498][ T6298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.512178][ T6298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.531412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.566161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.661838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.683058][ T6602] loop4: detected capacity change from 0 to 512 [ 206.723730][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.014570][ T4019] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 207.258265][ T3670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.381783][ T3670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.445323][ T4019] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.547456][ T4019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.852791][ T4019] usb 1-1: config 0 descriptor?? [ 207.866216][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.911816][ T4019] cp210x 1-1:0.0: cp210x converter detected [ 207.946688][ T6623] netlink: 96 bytes leftover after parsing attributes in process `syz.3.752'. [ 208.547931][ T4019] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 208.567739][ T6625] loop1: detected capacity change from 0 to 512 [ 208.587732][ T4019] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 208.621025][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.642808][ T6627] loop4: detected capacity change from 0 to 2048 [ 208.659527][ T4019] usb 1-1: cp210x converter now attached to ttyUSB0 [ 208.676383][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.685237][ T6625] EXT4-fs (loop1): bad s_min_extra_isize: 65528 [ 208.701670][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.724230][ T6627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.774297][ T4019] usb 1-1: USB disconnect, device number 4 [ 208.792665][ T26] audit: type=1800 audit(1724499884.873:28): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.753" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 208.820871][ T4019] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.863913][ T4019] cp210x 1-1:0.0: device disconnected [ 209.182476][ T6650] loop1: detected capacity change from 0 to 512 [ 209.430454][ T6654] netlink: 96 bytes leftover after parsing attributes in process `syz.0.765'. [ 209.499663][ T6650] EXT4-fs (loop1): Ignoring removed bh option [ 209.862157][ T6650] EXT4-fs (loop1): 1 truncate cleaned up [ 209.953320][ T6650] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,nobarrier,,errors=continue. Quota mode: none. [ 210.007187][ T6659] loop2: detected capacity change from 0 to 256 [ 210.113636][ T6662] x_tables: unsorted underflow at hook 4 [ 210.484350][ T6668] loop4: detected capacity change from 0 to 256 [ 210.493955][ T6666] loop2: detected capacity change from 0 to 512 [ 210.513167][ T6670] loop0: detected capacity change from 0 to 256 [ 210.565052][ T6668] FAT-fs (loop4): Directory bread(block 64) failed [ 210.573616][ T6666] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.767: inode #1: comm syz.2.767: iget: illegal inode # [ 210.606175][ T6666] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.767: error while reading EA inode 1 err=-117 [ 210.704665][ T6668] FAT-fs (loop4): Directory bread(block 65) failed [ 210.728759][ T6666] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.767: inode #1: comm syz.2.767: iget: illegal inode # [ 210.729032][ T6668] FAT-fs (loop4): Directory bread(block 66) failed [ 210.749907][ T6666] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.767: error while reading EA inode 1 err=-117 [ 210.758764][ T6668] FAT-fs (loop4): Directory bread(block 67) failed [ 211.449099][ T6666] EXT4-fs (loop2): 1 orphan inode deleted [ 211.512315][ T6668] FAT-fs (loop4): Directory bread(block 68) failed [ 211.524482][ T6666] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 211.586768][ T3648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.611983][ T6668] FAT-fs (loop4): Directory bread(block 69) failed [ 211.637868][ T6668] FAT-fs (loop4): Directory bread(block 70) failed [ 211.678734][ T3648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.703717][ T6666] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 13: comm syz.2.767: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 211.703857][ T6668] FAT-fs (loop4): Directory bread(block 71) failed [ 211.855381][ T3648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.937910][ T6668] FAT-fs (loop4): Directory bread(block 72) failed [ 211.952132][ T6668] FAT-fs (loop4): Directory bread(block 73) failed [ 211.962925][ T3648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.036245][ T6689] loop3: detected capacity change from 0 to 2048 [ 212.046063][ T5716] attempt to access beyond end of device [ 212.046063][ T5716] loop4: rw=1, want=1228, limit=256 [ 212.185487][ T5716] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 212.198931][ T6689] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.347560][ T6697] attempt to access beyond end of device [ 212.347560][ T6697] loop4: rw=1, want=1228, limit=256 [ 212.385726][ T6697] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 212.511719][ T154] attempt to access beyond end of device [ 212.511719][ T154] loop4: rw=1, want=1228, limit=256 [ 212.564914][ T154] Buffer I/O error on dev loop4, logical block 306, lost async page write [ 212.617092][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 212.763858][ T6708] loop0: detected capacity change from 0 to 512 [ 212.954873][ T6708] EXT4-fs (loop0): Ignoring removed bh option [ 213.029447][ T6718] netlink: 96 bytes leftover after parsing attributes in process `syz.4.778'. [ 213.264259][ T6708] EXT4-fs (loop0): 1 truncate cleaned up [ 213.344278][ T6708] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,resgid=0x000000000000ee00,bh,noload,data_err=ignore,nobarrier,,errors=continue. Quota mode: none. [ 213.884277][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.045464][ T2104] Bluetooth: hci2: command 0x0409 tx timeout [ 214.335055][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.506123][ T6685] device bridge_slave_0 entered promiscuous mode [ 214.543313][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.550551][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.558709][ T6685] device bridge_slave_1 entered promiscuous mode [ 214.726535][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.754027][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.179886][ T6746] loop2: detected capacity change from 0 to 256 [ 215.586288][ T6685] team0: Port device team_slave_0 added [ 215.667973][ T6685] team0: Port device team_slave_1 added [ 215.802686][ T6751] loop4: detected capacity change from 0 to 8 [ 215.849486][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.876802][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.969866][ T6751] SQUASHFS error: Failed to read block 0x1ec: -5 [ 215.984890][ T6751] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 215.993800][ T6751] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 216.117129][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.128476][ T2104] Bluetooth: hci2: command 0x041b tx timeout [ 216.176919][ T6762] netlink: 96 bytes leftover after parsing attributes in process `syz.2.792'. [ 216.569893][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.604162][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.692859][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.717749][ T3648] device hsr_slave_0 left promiscuous mode [ 216.732735][ T3648] device hsr_slave_1 left promiscuous mode [ 216.739876][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.748750][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.760068][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.788685][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.945285][ T3648] device bridge_slave_1 left promiscuous mode [ 216.951533][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.035880][ T3648] device bridge_slave_0 left promiscuous mode [ 217.042100][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.238227][ T3648] device veth1_macvtap left promiscuous mode [ 217.366195][ T3648] device veth0_macvtap left promiscuous mode [ 217.688835][ T3648] device veth1_vlan left promiscuous mode [ 217.694775][ T3648] device veth0_vlan left promiscuous mode [ 217.741607][ T6790] loop3: detected capacity change from 0 to 256 [ 217.819842][ T26] audit: type=1800 audit(1724499893.903:29): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="file2" dev="loop3" ino=1048629 res=0 errno=0 [ 217.910299][ T6793] loop4: detected capacity change from 0 to 256 [ 218.607189][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 218.695081][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 219.020882][ T6804] netlink: 96 bytes leftover after parsing attributes in process `syz.3.803'. [ 219.071173][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 219.103803][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 219.128849][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.153874][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.250352][ T3648] bond0 (unregistering): Released all slaves [ 220.284547][ T6685] device hsr_slave_0 entered promiscuous mode [ 220.291735][ T6685] device hsr_slave_1 entered promiscuous mode [ 220.316010][ T6685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.360172][ T6685] Cannot create hsr debugfs directory [ 220.488279][ T3751] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 220.545397][ T6825] loop4: detected capacity change from 0 to 256 [ 220.607770][ T6764] chnl_net:caif_netlink_parms(): no params data found [ 220.682342][ T26] audit: type=1800 audit(1724499896.763:30): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.810" name="file2" dev="loop4" ino=1048630 res=0 errno=0 [ 220.712285][ T2104] Bluetooth: hci2: command 0x0419 tx timeout [ 220.734636][ T3751] usb 4-1: Using ep0 maxpacket: 8 [ 220.760320][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.767604][ T1073] Bluetooth: hci1: command 0x041b tx timeout [ 220.773718][ T6764] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.784291][ T6764] device bridge_slave_0 entered promiscuous mode [ 220.855354][ T3751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.885035][ T3751] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.894260][ T3751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.902343][ T6764] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.902377][ T6764] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.903333][ T6764] device bridge_slave_1 entered promiscuous mode [ 220.911844][ T3751] usb 4-1: config 0 descriptor?? [ 220.974295][ T6764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.007486][ T6764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.123900][ T6764] team0: Port device team_slave_0 added [ 221.203955][ T3751] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 221.278156][ T6764] team0: Port device team_slave_1 added [ 221.366889][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.380494][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.413598][ T6764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.427509][ T6764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.436041][ T6764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.437064][ T3751] usb 4-1: USB disconnect, device number 5 [ 221.466118][ T6764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.524762][ T3751] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 221.559969][ T6764] device hsr_slave_0 entered promiscuous mode [ 221.591985][ T6764] device hsr_slave_1 entered promiscuous mode [ 221.599648][ T6764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.607944][ T6764] Cannot create hsr debugfs directory [ 221.661177][ T6685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.693804][ T6685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.725680][ T6685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.754814][ T6685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.838899][ T6764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.917061][ T6764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.019243][ T6861] loop4: detected capacity change from 0 to 256 [ 222.454592][ T6872] netlink: 96 bytes leftover after parsing attributes in process `syz.2.813'. [ 222.846598][ T4019] Bluetooth: hci1: command 0x040f tx timeout [ 222.900534][ T6764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.057598][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.102205][ T6764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.183101][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.194902][ T6884] binder: 6883:6884 unknown command 0 [ 223.201771][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.216799][ T6884] binder: 6883:6884 ioctl c0306201 20000080 returned -22 [ 223.230219][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.287414][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.316419][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.357262][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.364589][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.400603][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.439900][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.474070][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.480410][ T6895] tmpfs: Unknown parameter 'usrquota' [ 223.481388][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.545291][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.574495][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.599859][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.613964][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.725041][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.741896][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.751185][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.828750][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.845259][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.927457][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.985477][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.016371][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.041667][ T6685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.080209][ T6764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.104618][ T2104] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 224.121764][ T6764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.163794][ T6764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.206310][ T6764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.456968][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.476150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.483763][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.494835][ T2104] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 224.503516][ T2104] usb 5-1: config 0 has no interface number 0 [ 224.509924][ T2104] usb 5-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 224.521194][ T2104] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 224.542340][ T2104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.566148][ T2104] usb 5-1: config 0 descriptor?? [ 224.589905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.602781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.631870][ T6764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.673905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.686868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.710167][ T6764] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.717532][ T6685] device veth0_vlan entered promiscuous mode [ 224.740667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.750985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.760081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.768640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.784600][ T2104] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 224.789053][ T6685] device veth1_vlan entered promiscuous mode [ 224.801409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.810797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.820130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.832635][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.839746][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.849618][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.860351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.869486][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.876591][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.907167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.915718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.924061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.935754][ T4019] Bluetooth: hci1: command 0x0419 tx timeout [ 224.962958][ T6685] device veth0_macvtap entered promiscuous mode [ 224.989920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.003521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.027002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.043937][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.053817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.078895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.105223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.128554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.137315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.150692][ T6685] device veth1_macvtap entered promiscuous mode [ 225.167675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.176812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.192430][ T6764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.203706][ T6764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.222610][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.234152][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.244271][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.256703][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.266705][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.278522][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.288968][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.299603][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.310604][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.318197][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.328297][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.337034][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.346555][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.370538][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.382584][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.395303][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.406427][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.416595][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.427426][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.437714][ T6685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.448734][ T6685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.461651][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.472436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.481811][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.503794][ T6685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.514091][ T6685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.514689][ T2104] usb 5-1: device descriptor read/64, error -71 [ 225.525933][ T6685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.543143][ T6685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.612993][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.626568][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.648815][ T6764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.668940][ T4112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.682258][ T4112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.698003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.720926][ T5716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.729442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.740694][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.745615][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.765297][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.781222][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.793607][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.805556][ T2104] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 227.373216][ T6943] sched: RT throttling activated [ 227.445253][ T6764] device veth0_vlan entered promiscuous mode [ 227.456771][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 227.467177][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 227.641438][ T6950] netlink: 96 bytes leftover after parsing attributes in process `syz.4.825'. [ 227.650701][ T2104] usb 5-1: device not accepting address 6, error -71 [ 227.914009][ T6955] loop4: detected capacity change from 0 to 256 [ 227.924831][ T3648] device hsr_slave_0 left promiscuous mode [ 227.932965][ T3648] device hsr_slave_1 left promiscuous mode [ 229.794926][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.802541][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.945100][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.963397][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.984141][ T3648] device bridge_slave_1 left promiscuous mode [ 230.085115][ T2104] usb 5-1: USB disconnect, device number 6 [ 230.723675][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.769418][ T3648] device bridge_slave_0 left promiscuous mode [ 230.784715][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.813909][ T3648] device veth1_macvtap left promiscuous mode [ 230.821370][ T3648] device veth0_macvtap left promiscuous mode [ 230.835862][ T3648] device veth1_vlan left promiscuous mode [ 230.841627][ T3648] device veth0_vlan left promiscuous mode [ 231.003692][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 231.024079][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 231.039025][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.053129][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.112445][ T3648] bond0 (unregistering): Released all slaves [ 231.160205][ T6764] device veth1_vlan entered promiscuous mode [ 231.174603][ T2104] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.239812][ T6764] device veth0_macvtap entered promiscuous mode [ 231.265119][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.278229][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.317666][ T6764] device veth1_macvtap entered promiscuous mode [ 231.365012][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.377096][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.387973][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.399452][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.409821][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.420728][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.431080][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.441923][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.453690][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.464023][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.472754][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.481707][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.490815][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.503671][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.518284][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.529126][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.544157][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.554200][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.569572][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.579720][ T6764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.596523][ T6764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.606725][ T2104] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 231.616937][ T6764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.624209][ T2104] usb 5-1: config 0 has no interface number 0 [ 231.634945][ T4025] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 231.646103][ T2104] usb 5-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 231.657816][ T2104] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 231.658287][ T6764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.667925][ T2104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.682550][ T6764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.689766][ T2104] usb 5-1: config 0 descriptor?? [ 231.695230][ T6764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.708889][ T6764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.720266][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.739890][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.832981][ T6988] input: syz1 as /devices/virtual/input/input17 [ 233.374299][ T2104] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 235.444273][ T4025] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 235.674532][ T4025] usb 4-1: can't read configurations, error -71 [ 235.680743][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.680800][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.747646][ T6995] loop4: detected capacity change from 0 to 256 [ 235.781825][ T4112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.816034][ T4112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.839407][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 235.852508][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 236.120736][ T7005] input: syz1 as /devices/virtual/input/input18 [ 236.400883][ T2104] usb 5-1: USB disconnect, device number 7 [ 238.356360][ T3901] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 238.424462][ C0] raw-gadget.0 gadget: ignoring, device is not running [ 238.616066][ T3901] usb 3-1: device descriptor read/64, error -32 [ 240.378785][ T3901] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 240.691873][ T7036] input: syz1 as /devices/virtual/input/input19 [ 243.497842][ T3901] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 243.955873][ T3901] usb 3-1: can't read configurations, error -71 [ 244.092012][ T3901] usb usb3-port1: attempt power cycle [ 244.178149][ T7040] loop2: detected capacity change from 0 to 256 [ 245.619455][ T7057] input: syz1 as /devices/virtual/input/input20 [ 252.379400][ T7094] input: syz1 as /devices/virtual/input/input21 [ 252.677321][ T1302] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.378394][ T4021] Bluetooth: hci5: command 0x0409 tx timeout [ 254.400089][ T7097] loop3: detected capacity change from 0 to 256 [ 255.651831][ T7105] netlink: 44 bytes leftover after parsing attributes in process `syz.2.876'. [ 255.671762][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.678094][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.700680][ T26] audit: type=1804 audit(1724499931.783:31): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.875" name="/newroot/170/bus/bus" dev="overlay" ino=980 res=1 errno=0 [ 256.510695][ T3752] Bluetooth: hci5: command 0x041b tx timeout [ 258.787398][ T3613] Bluetooth: hci5: command 0x040f tx timeout [ 259.565794][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 260.508284][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.880'. [ 261.140904][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.178574][ T4021] Bluetooth: hci5: command 0x0419 tx timeout [ 261.185663][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.194284][ T7079] device bridge_slave_0 entered promiscuous mode [ 261.202889][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.219749][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.241961][ T7145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.888'. [ 261.263500][ T7079] device bridge_slave_1 entered promiscuous mode [ 261.354610][ T4021] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 261.421029][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.488339][ T7147] can: request_module (can-proto-0) failed. [ 261.523305][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.716277][ T4021] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 261.744627][ T4021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.785358][ T4021] usb 3-1: config 0 descriptor?? [ 261.796789][ T7079] team0: Port device team_slave_0 added [ 261.819263][ T7079] team0: Port device team_slave_1 added [ 261.827377][ T4021] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 261.914652][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.931984][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.977259][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.010299][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.034675][ T4021] gp8psk: usb in 128 operation failed. [ 262.044397][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.086304][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.238257][ T26] audit: type=1804 audit(1724499938.323:32): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.891" name="/newroot/193/bus/bus" dev="overlay" ino=1076 res=1 errno=0 [ 262.354617][ T4021] gp8psk: usb in 146 operation failed. [ 262.360250][ T4021] gp8psk: failed to get FW version [ 263.804778][ T4021] gp8psk: usb in 149 operation failed. [ 263.811719][ T7079] device hsr_slave_0 entered promiscuous mode [ 263.851205][ T4021] gp8psk: failed to get FPGA version [ 263.894876][ T4021] gp8psk: usb in 138 operation failed. [ 263.909745][ T4021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.924748][ T7079] device hsr_slave_1 entered promiscuous mode [ 263.975008][ T4021] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 263.986746][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.994241][ T4021] usb 3-1: media controller created [ 264.036612][ T4021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 264.040389][ T7079] Cannot create hsr debugfs directory [ 264.132740][ T4021] gp8psk_fe: Frontend attached [ 264.146229][ T4021] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 264.197250][ T4021] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 264.930467][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.2.899'. [ 264.948078][ T3648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.997811][ T4021] gp8psk: usb in 138 operation failed. [ 265.018667][ T4021] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 265.102580][ T4021] gp8psk: found Genpix USB device pID = 203 (hex) [ 265.119905][ T3648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.123207][ T4021] usb 3-1: USB disconnect, device number 8 [ 265.257688][ T3648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.342652][ T4021] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 265.409979][ T3648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.153709][ T26] audit: type=1804 audit(1724499942.183:33): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.905" name="/newroot/15/bus/bus" dev="overlay" ino=101 res=1 errno=0 [ 266.219147][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 266.422924][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 266.470237][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.909'. [ 266.636111][ T7242] loop0: detected capacity change from 0 to 1 [ 266.685141][ T7242] Dev loop0: unable to read RDB block 1 [ 266.712821][ T7242] loop0: unable to read partition table [ 266.752868][ T7242] loop0: partition table beyond EOD, truncated [ 266.785811][ T7079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.793247][ T7242] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 266.793247][ T7242] ) failed (rc=-5) [ 266.865538][ T7079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.891924][ T7079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.993398][ T7256] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.994860][ T7079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.341565][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.426105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.448997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.541458][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.246221][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.256967][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.268426][ T4112] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.275711][ T4112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.290559][ T3648] device hsr_slave_0 left promiscuous mode [ 268.299610][ T3648] device hsr_slave_1 left promiscuous mode [ 268.380599][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.398596][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.444750][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.472643][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.489169][ T3648] device bridge_slave_1 left promiscuous mode [ 268.502907][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.518311][ T3648] device bridge_slave_0 left promiscuous mode [ 268.530020][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.539747][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 268.548940][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 268.564614][ T3648] device veth1_macvtap left promiscuous mode [ 268.576358][ T3648] device veth0_macvtap left promiscuous mode [ 268.603407][ T3648] device veth1_vlan left promiscuous mode [ 268.616094][ T3648] device veth0_vlan left promiscuous mode [ 268.910980][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 268.930134][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 268.934532][ T3754] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 268.948698][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.963558][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.032848][ T3648] bond0 (unregistering): Released all slaves [ 269.099099][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.107941][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 269.116824][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.126549][ T4112] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.133617][ T4112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.142829][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 269.152078][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 269.204763][ T3754] usb 4-1: Using ep0 maxpacket: 16 [ 269.241983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 269.277111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 269.290076][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'. [ 269.325084][ T3754] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 269.333223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 269.346588][ T3754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.374380][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 269.388675][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 269.392003][ T3754] usb 4-1: config 0 has no interface number 0 [ 269.415313][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.426215][ T3754] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.439550][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.450691][ T3754] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.458961][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.466834][ T3754] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.481424][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.488230][ T3754] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 269.505776][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 269.507447][ T3754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.530340][ T3754] usb 4-1: config 0 descriptor?? [ 269.829763][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 269.838357][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 269.856307][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.880050][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.890802][ T4112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.931367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.942170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.956897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.970471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.985283][ T7079] device veth0_vlan entered promiscuous mode [ 270.018731][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 270.041776][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 270.071830][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 270.094828][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 270.103999][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 270.154509][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input6 [ 270.184394][ T3754] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 270.215497][ T3754] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 270.227307][ T3754] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 270.230644][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 270.235731][ T3754] CPU: 0 PID: 3754 Comm: kworker/0:14 Not tainted 5.15.165-syzkaller #0 [ 270.235753][ T3754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 270.235764][ T3754] Workqueue: usb_hub_wq hub_event [ 270.235798][ T3754] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 270.235819][ T3754] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 7f 41 fa f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d8 41 fa f9 48 8d 54 24 60 48 89 13 [ 270.235833][ T3754] RSP: 0018:ffffc90003126760 EFLAGS: 00010202 [ 270.235846][ T3754] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 270.235856][ T3754] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805f2b0469 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 270.235866][ T3754] RBP: ffffc900031268f0 R08: dffffc0000000000 R09: ffff88805f2b042e [ 270.252648][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 270.252898][ T3754] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88806381e388 [ 270.252914][ T3754] R13: 1ffff1100c703c06 R14: ffff88806381e030 R15: 1ffff1100c703c05 [ 270.252926][ T3754] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 270.357359][ T3754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.363941][ T3754] CR2: 000000002007a000 CR3: 0000000031a70000 CR4: 00000000003506f0 [ 270.371895][ T3754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.379853][ T3754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.387897][ T3754] Call Trace: [ 270.391177][ T3754] [ 270.394096][ T3754] ? __die_body+0x5e/0xa0 [ 270.398404][ T3754] ? die_addr+0x95/0xc0 [ 270.402541][ T3754] ? exc_general_protection+0x327/0x4f0 [ 270.408074][ T3754] ? asm_exc_general_protection+0x22/0x30 [ 270.413810][ T3754] ? u2fzero_rng_read+0x21a/0x700 [ 270.419021][ T3754] ? u2fzero_brightness_set+0x280/0x280 [ 270.424557][ T3754] ? _raw_spin_unlock+0x40/0x40 [ 270.429385][ T3754] ? u2fzero_brightness_set+0x280/0x280 [ 270.434911][ T3754] add_early_randomness+0x78/0x140 [ 270.440015][ T3754] hwrng_register+0x430/0x4c0 [ 270.444694][ T3754] devm_hwrng_register+0x43/0xb0 [ 270.449604][ T3754] u2fzero_probe+0x266/0x2e0 [ 270.454258][ T3754] ? hid_map_usage_clear+0x180/0x180 [ 270.459512][ T3754] hid_device_probe+0x2a6/0x3a0 [ 270.464340][ T3754] ? hid_uevent+0x310/0x310 [ 270.468814][ T3754] really_probe+0x24e/0xb60 [ 270.473291][ T3754] __driver_probe_device+0x1a2/0x3d0 [ 270.478550][ T3754] driver_probe_device+0x50/0x420 [ 270.483553][ T3754] __device_attach_driver+0x2b9/0x500 [ 270.488920][ T3754] ? deferred_probe_work_func+0x230/0x230 [ 270.494637][ T3754] bus_for_each_drv+0x183/0x200 [ 270.499486][ T3754] ? subsys_find_device_by_id+0x310/0x310 [ 270.505197][ T3754] __device_attach+0x359/0x570 [ 270.509951][ T3754] ? device_attach+0x20/0x20 [ 270.514562][ T3754] ? kobject_uevent_env+0x36a/0x8d0 [ 270.519852][ T3754] bus_probe_device+0xba/0x1e0 [ 270.524601][ T3754] ? device_add+0xab9/0xfd0 [ 270.529290][ T3754] device_add+0xb48/0xfd0 [ 270.533611][ T3754] hid_add_device+0x3a5/0x510 [ 270.538276][ T3754] usbhid_probe+0xb32/0xec0 [ 270.542768][ T3754] usb_probe_interface+0x5c0/0xaf0 [ 270.547865][ T3754] ? usb_register_driver+0x3d0/0x3d0 [ 270.553130][ T3754] really_probe+0x24e/0xb60 [ 270.557643][ T3754] __driver_probe_device+0x1a2/0x3d0 [ 270.562995][ T3754] driver_probe_device+0x50/0x420 [ 270.567996][ T3754] __device_attach_driver+0x2b9/0x500 [ 270.573362][ T3754] ? deferred_probe_work_func+0x230/0x230 [ 270.579059][ T3754] bus_for_each_drv+0x183/0x200 [ 270.583972][ T3754] ? subsys_find_device_by_id+0x310/0x310 [ 270.589662][ T3754] ? lockdep_hardirqs_on+0x94/0x130 [ 270.594856][ T3754] __device_attach+0x359/0x570 [ 270.599616][ T3754] ? kobject_uevent_env+0x36a/0x8d0 [ 270.604831][ T3754] ? device_attach+0x20/0x20 [ 270.609396][ T3754] ? kobject_uevent_env+0x36a/0x8d0 [ 270.614571][ T3754] bus_probe_device+0xba/0x1e0 [ 270.619328][ T3754] ? device_add+0xab9/0xfd0 [ 270.623846][ T3754] device_add+0xb48/0xfd0 [ 270.628177][ T3754] usb_set_configuration+0x19dd/0x2020 [ 270.633752][ T3754] usb_generic_driver_probe+0x84/0x140 [ 270.639218][ T3754] usb_probe_device+0x130/0x260 [ 270.644647][ T3754] ? usb_register_device_driver+0x240/0x240 [ 270.651402][ T3754] really_probe+0x24e/0xb60 [ 270.655910][ T3754] __driver_probe_device+0x1a2/0x3d0 [ 270.661387][ T3754] driver_probe_device+0x50/0x420 [ 270.666699][ T3754] __device_attach_driver+0x2b9/0x500 [ 270.672487][ T3754] ? deferred_probe_work_func+0x230/0x230 [ 270.678197][ T3754] bus_for_each_drv+0x183/0x200 [ 270.683041][ T3754] ? subsys_find_device_by_id+0x310/0x310 [ 270.688745][ T3754] ? lockdep_hardirqs_on+0x94/0x130 [ 270.693942][ T3754] __device_attach+0x359/0x570 [ 270.698698][ T3754] ? kobject_uevent_env+0x36a/0x8d0 [ 270.703880][ T3754] ? device_attach+0x20/0x20 [ 270.708453][ T3754] ? kobject_uevent_env+0x36a/0x8d0 [ 270.713631][ T3754] bus_probe_device+0xba/0x1e0 [ 270.718373][ T3754] ? device_add+0xab9/0xfd0 [ 270.722868][ T3754] device_add+0xb48/0xfd0 [ 270.727176][ T3754] usb_new_device+0xc17/0x18e0 [ 270.731997][ T3754] ? usb_disconnect+0x8c0/0x8c0 [ 270.736829][ T3754] ? do_raw_spin_unlock+0x137/0x8b0 [ 270.742028][ T3754] ? _raw_spin_unlock_irq+0x1f/0x40 [ 270.747204][ T3754] ? lockdep_hardirqs_on+0x94/0x130 [ 270.752380][ T3754] hub_event+0x2cdf/0x54c0 [ 270.756785][ T3754] ? led_work+0x700/0x700 [ 270.761091][ T3754] ? read_lock_is_recursive+0x10/0x10 [ 270.766437][ T3754] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 270.772390][ T3754] ? down_read_killable_nested+0x250/0x350 [ 270.778167][ T3754] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 270.784051][ T3754] ? do_raw_spin_unlock+0x137/0x8b0 [ 270.789222][ T3754] process_one_work+0x8a1/0x10c0 [ 270.794143][ T3754] ? worker_detach_from_pool+0x260/0x260 [ 270.799744][ T3754] ? _raw_spin_lock_irqsave+0x120/0x120 [ 270.805272][ T3754] ? kthread_data+0x4e/0xc0 [ 270.809745][ T3754] ? wq_worker_running+0x97/0x170 [ 270.814745][ T3754] worker_thread+0xaca/0x1280 [ 270.819460][ T3754] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 270.825428][ T3754] kthread+0x3f6/0x4f0 [ 270.829476][ T3754] ? rcu_lock_release+0x20/0x20 [ 270.834301][ T3754] ? kthread_blkcg+0xd0/0xd0 [ 270.838865][ T3754] ret_from_fork+0x1f/0x30 [ 270.843264][ T3754] [ 270.846262][ T3754] Modules linked in: [ 270.860774][ T3754] ---[ end trace 85a518832d21d27b ]--- [ 270.893299][ T3754] RIP: 0010:u2fzero_rng_read+0x21a/0x700 [ 270.935427][ T3754] Code: df 41 80 7c 05 00 00 74 08 4c 89 f7 e8 7f 41 fa f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d8 41 fa f9 48 8d 54 24 60 48 89 13 [ 271.002965][ T3754] RSP: 0018:ffffc90003126760 EFLAGS: 00010202 [ 271.010014][ T3754] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 271.024484][ T3754] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88805f2b0469 [ 271.032472][ T3754] RBP: ffffc900031268f0 R08: dffffc0000000000 R09: ffff88805f2b042e [ 271.064491][ T3754] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88806381e388 [ 271.072511][ T3754] R13: 1ffff1100c703c06 R14: ffff88806381e030 R15: 1ffff1100c703c05 [ 271.094455][ T3754] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 271.103409][ T3754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.110052][ T3754] CR2: 000000002007a000 CR3: 00000000753e1000 CR4: 00000000003506f0 [ 271.118320][ T3754] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.126714][ T3754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.134745][ T3754] Kernel panic - not syncing: Fatal exception [ 271.141094][ T3754] Kernel Offset: disabled [ 271.145409][ T3754] Rebooting in 86400 seconds..