last executing test programs: 8.721536564s ago: executing program 4 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) 8.63213264s ago: executing program 4 (id=628): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6611, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006d00)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 6.614087075s ago: executing program 0 (id=637): socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 6.061759925s ago: executing program 0 (id=641): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x497c, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x7, 0x2c, 0x0, @remote, @mcast2, {[@routing], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x300, &(0x7f0000000300)}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000280)=[r6], &(0x7f00000002c0)}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x2}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x1000, 0x20, 0x0, 0x206}, &(0x7f0000000100), &(0x7f0000000080)) socket$inet6_dccp(0xa, 0x6, 0x0) 5.832799731s ago: executing program 2 (id=643): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x5, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00006973ca8678b700516d0900000002771b969d07a6b18e0068000100000bf274ad940caf2f131d9a32779817172d5c12bdafb9ec4e7c4f7b485c394c5711417beb1746ee5ec3797c2e54cff11118da01bffaa8d52f8cc5561d8feabcc1e362a81a84ffd312dc601ecbd327ba6f1850011835ebe2ce1d6fd1f3027adff9aa008ca2d7f19adb882d929ac04c5aeecc6572636234af19749e1d5f16d53068ff75c1d92aa55048444855f71cfa440b66123ef5158ffb84750c3e87842c41431d5677a05362678cbf1e7bceda97ad6cd6e794efa5a901cc32f8def22ee999c5d4007bdbf17d"], 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) 4.509943976s ago: executing program 2 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_PTRACER(0x59616d61, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 4.472595699s ago: executing program 0 (id=646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffdc0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000001080)={0xbc, 0x0, 0x6, 0x7, 0x3, "2c8b8de199419a40"}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x1, 0xdc, 0x1, 0x3, 0x3, 0x3ff, 0x66, 0x40, 0x357, 0x5, 0xfbff, 0x38, 0x2, 0x9, 0x3, 0x2}, [{0x60000000, 0x7, 0x1c, 0xfffffffffffffff7, 0x7741, 0x4, 0xc, 0x3ff}], "3d2d2ae0dd5c3b986ce9010fc837ccfcb924d2b70fdb47bdeb0359fa61e07e669018149c1181730bd1b545cd4347972cb03d0cf3a31a6885c98e93270d03b96a50379084c92a46c45c38cf47aebb369bbf74e16335b46f6ebf47bbb2", ['\x00']}, 0x1d4) 4.357258167s ago: executing program 4 (id=649): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f00000005c0)="c2c10b270d21c75ca6ebfb5b23be", 0xe}], 0x2) 4.311502951s ago: executing program 1 (id=651): syz_usb_connect(0x0, 0x24, &(0x7f0000002480)={{0x12, 0x1, 0x201, 0x4c, 0xf1, 0xc5, 0x8, 0x763, 0x1002, 0x5f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x87, 0xe7}}]}}]}}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) 4.124798594s ago: executing program 0 (id=652): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000a40)=@req3={0x21000, 0xffffff00, 0x8}, 0x1c) 4.114364275s ago: executing program 0 (id=653): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@grpquota}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x452, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2, 0x6}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001100)={0x14, &(0x7f0000001040)={0x40, 0x2, 0x75, {0x75, 0x31, "c98903aa4cb3f8eb7bd3d7c937ce33489fdc499997cfd3bd8cfcf73fe8c2fa5a07d8ae0c521a3302c19ad8409cfdd3396a05a9bd273b721603080d5176bcfd9c09c7db44e65f53de6976bcd783ee7ebf1dc9fd389a33c92c6c052b276b9b63bc43cc4bd10dc3ede92ec12e1b6906273fae8825"}}, &(0x7f00000010c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000013c0)={0x44, &(0x7f0000001140)={0x20, 0x17, 0x8a, "b35c998de1e0d88b2cfaaf2ab5f5ca6791bdcb7ac06228cb3a338a1d717438dd67e8bf7866c8e6fbf47aa5e2861cf0e9cfa3fc14df4c99f1d0ba77a78732e37972aa8758c8a05b74bc94ee1c9a68196f7c20201faf58ec43a5a462afbbb6634d3b2f38578e5cf6df10a2c5bc2c6650550c96adb5c7f84964c242b74c69fb667b23e990d29a731e3b6085"}, &(0x7f0000001200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001280)={0x20, 0x80, 0x1c, {0x0, 0x59, 0x9, 0x400, 0x1, 0x800, 0x8, 0x8, 0x40, 0x2, 0xf6}}, &(0x7f00000012c0)={0x20, 0x85, 0x4, 0xffffff81}, &(0x7f0000001300)={0x20, 0x83, 0x2}, &(0x7f0000001340)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000001380)={0x20, 0x89, 0x2, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000030c0)={0x9, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000041000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r7, 0x8c5d47e95537ac9b) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x88700a, 0x0) 4.066602718s ago: executing program 4 (id=654): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020104"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.962228357s ago: executing program 2 (id=655): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c, 0x40000000}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 2.913364891s ago: executing program 3 (id=656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x2, r0, 0x4, 0x80000}) 2.840919506s ago: executing program 1 (id=657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000000), 0x0) brk(0xc00000000000) 2.840687686s ago: executing program 2 (id=658): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0xff, 0x4) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000180)='./file1\x00', 0x4080, &(0x7f0000000040)=ANY=[], 0x3, 0x7c4, &(0x7f00000006c0)="$eJzs3U9oHOfZAPBn9Em2o/D5C/k+8hnjOGM7BZs6yu4qUSpySDerkTzJalfsropNKYmJ5WAsJyEhpPGhqS9JW1pKTz2muYZcemsptNBD21OhOfTSQyGQU0lLC6WlFFx2dtf6u5JsS3H+/H6L952deead950dz7Oz2pkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCS2kypVE6injcWz6bD1WZazfktpg/q+8WaYovlRiTdf3HgQBzqjTr0fyuT7+s+HY8jvVdH4kC3OBBX777vnsf/d3RkMP8WDbpVx4ZPGlv9Ion4ZrdRl88vLy+9vAcN+Rh952f9gQM7nuWf17vPc1kjbzfz+epclubtZjo9NVV6+MxsO53N61n7XLuTzae1VlbtNFvpydqptDw9PZlmE+eai425mWo9G4x87KFKqTSVPjWxkFVb7Wbj4acm2rUzeb2eN+aKmErptejGPNbdEJ/OO2knq86n6cVLy0uT2zW1G1ReM2b/mg3nyIP3fPjqB3+7tNTdIIdVkvQ3zEq5XKmUpx6dfvSxUmm0UqqsHVFaJ25ExEhEN2JPNlo+RSKu/8/u7cDhNoz083/UI49GLMbZSCONkeJ55TEWtZiJVjRjvvv692Prpm/I/194+M+/3Wq5q/P/IMsfWpl8OIr8f7T36uiw/L+hFXv5aLzXa83qca/E63E1Lsf5WI7lWIqXb6Xmfetr3cPHyO7WNxdZNCKPdjQjj/moFmPS/pg0pmMqpqIUz8SZmI12pDEbedQji3aci3Z0Iiu2qFq0IotqdKIZrUjjZNTiVKRRjumYjslII4uJOBfNWIxGzMVMVItaLsalYr1PrmvXfd949qfP/+7Dt7vDN4LKW3Qk6X6Y6wb9dYugDen+JvL/IEL+/6w50N9n7TR+F/fecHuuF/l/9E43AwAAANhDSfHtexIRY3F/MTSb17Ov3ulmAQAAALuo+F3zkW4x1h26P5Lu8X9pk8j3P/a2AQAAALsjKc6xSyJiPB7oDQ1Ol9rsSwAAAADgU6j4+//RbjEe8UYxwvE/AAAAfMZ8a9g19j/Y17/Gbnthf/Lzv0SrNZZcWzj7YHKl2o2rXvmv3nz94is3auzMHk4O9ispiqnRq3cnETFay44kg6tf/nt/r/yoeD68cgHCYdf6T7ZpQGzdgOJVfDeO9WKOXeiVFwZTeksZn83r2UStWX+8nPS/HOm8+sKlr0fR/W835g8mcfHS8tLEcy8uXyjacq1by7Ur/cvDJ4O5dtCW6/01EPdv3uOx4kSM/nLHe8stre7/SG/2ka37n6xe5ptxvBdzfLxXjq/t/4HuMssTj5ejWj040snOdl69vqr3/VaUN+v5TbwLb8aJXsyJkyd6xSatqKxpxQsbW1FZ3YqdrYsdt+LtY2+c/fuvmkk2uV0rJm+zFQB3ysXiqj8rWeiuIgv963pPN6Gty7t3Dea8mb3cxZVPGYP5V+W60diQ3dNbye5vxslezMne54nRw5vkldIme/SXLr306/4e/ZF3f/ijrx39zY9vPbu9G6d6Mf0i7v3lkBzb7fP31mXVd7pzvDN0ue16JYmx7oTi5kNx9aFLV84/v/T80guVyuRU6ZFS6dFKjBUfFfrFkJbKPACfb9vfY2fbiOSRbY6q773xk4KJeC5ejOW4EKeLsw0i4oHNax1f9TOE09sctY6vusPL6W2OLVdiK+tj959IYkjs5Ko19v8/KIp/7N17AgB77fg2efhG/n/tv/tzbMz/p7c57l6by0/1bpw7ODqO4bl8M1/a4/UBAJ8HWeujZLzzVtJq5QvPlKeny9XOmSxtNWtPp618Zi5L80Yna9XOVBtzWbrQanaatcFXxzNZO20vLiw0W510ttlKF5rt/Gxx5/e0f+v3djZfbXTyWnuhnlXbWVprNjrVWiedydu1dGHxyXrePpO1ipnbC1ktn81r1U7ebKTt5mKrlk2kaTvLVgXmM1mjk8/m2ViaN9KFVj5fbV2LiPrifJbOZO1aK1/oNHsVDpaVN2abrfmi2omN3f/Tx72+AeCT4JXXr14+v7y89PKtDfxhJ8F3uo8AwFqyNAAAAAAAAAAAAAAAfPJtPF2vO/amTgQci1s+ffCV/XE7Zx9+9ga++F7vbdmNCm+nnrvWvKf7+hvLnV8/Nz3w7BNPXB4W8+Qbh878MYvYvp7N/6dsdqrrWwcj9v3k+70xXx4SnIzuck/fj530YsPA9WSLmDu2SwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAof4TAAD///vCWDA=") r1 = io_uring_setup(0x7cdf, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="000100000000ffdbdf2502000000080069000200000008003f00d902"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 2.804178308s ago: executing program 1 (id=659): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x6611, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006d00)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2.622175952s ago: executing program 0 (id=660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) add_key$user(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)) timer_settime(0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x40000000002, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x0, 0x2, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs, 0x6e) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x2) 2.531629248s ago: executing program 4 (id=661): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800800, &(0x7f0000000cc0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRESHEX], 0xfe, 0x65f, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbBwnm5bUTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTM7a2/WL123jXdTPp9o9nmeeWae+T2/2Zl9saIN8H9rcSpjD1JkcerljbK9vTXX2t6au9utJzmTZDMZS9JIUvyn3W5/kFxPit1hir5yn/dWFl798OPtjzqtsXqptm8ctV+fervNvtWb3XWTSU7V5Wfw0Hg3PvN4xW7k15NcqUsYutNJ2g/56d+e3O3p0Txo77MnEiPwaBWd1819JpJz9YVevg/ovvI2Tja6wZ0ZcLv+dxAAAADwuBnkM/BTO9nJRnH+BMIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL4TNvd//L+ql0a1Ppuj+/v94vS51fbS8cLzNHzyqOAAAAAAAAADgBL2wk51s5Hy33S6qv/m/WDUuVo9P5M2sZTmruZqNLGU961nNTJKJnoHGN5bW11dnBthz9sA9Zz8h0DN12fx85g0AAAAAAAAAXzC/zOLe3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAUFMmpTpHifs/qiTTGkpxNMl6u2Ez+0a0/zh4MOwAAAAA4AU/tZCcbOd9tt4tcTPJs9R3A2byZe1nPStbTynJuVt8LdD71N7a35lrbW3N3y2X/uN/797HCqEZM57uHg498udqimVtZqdZczY28nlZuplHtWbpcx9MdtS+u+2VMxXdrA0Z2sy7Lmb9bl/u8c6zJHuaYX6ZMVBk5vZuR6Tq2MhtPd8/MwWfomGen/0gzaewGe7HvSH2T+FQ5P1eX5Xx+e1jOh6I/E7M9z75nj8558rU///En03V9dKY0mFN12a4em/szMdeTiecGycTt1r07t2+tTT1umdhnusrEpd32Yn6YH2cqk3klq1nJz7KU9SxnMj+oakv1yS96LvlDMnX9odYrnxTJeP0M7Zys48X0YrXv+azkR3k9N7Ocl6p/s5nJtzKf+Sz0nOFLR5/h6qpvHHLVt790YPBXvl5Xmkl+V5ejoczr0z157b3nTlR9vWv2snRhgCwd89449pW6Uh7jV3U5GvozMdOTiWeOzsTvq9vKWuvendXbS28MdrgL79aV8jr6zUjdUsvny4XyZFWth58dZd8zB/bNVH0Xd/sa+/ou7fZ1rtTNQ6/U8fo93P6RZqu+5w7sm6v6Lvf0HfR+C4CRd+4b58ab/2r+vfl+89fN282Xz37/zLfPPD+e0385/Z2x6VNfbTxf/Cnv5xd7n/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPb+2tt+8stVrLq32Vdrv9ziFdI1/J5D+fKOd2QFf358xOMJ4vP5mMRFqGWvlvu92u1xSHbPOHv45Motq1kUjdkCrDvS8Bj9619btvXFt76+1vrtxdem35teV7C/PzC9ML8y/NXbu10lqe7jwOO0rgUdh70R92JAAAAAAAAAAAAMCgTuK/Ewx7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjbXEqYw9SZGb66nTZ3t6aa5VLt7635ViSRpLi50nxQXI9nSUTPcMVhx3nvZWFVz/8ePujvbHGuts3jtpvMJv1kskkpzrl/c9rvBt1eaTiqCkUuzMsE3almzgYtv8FAAD//z3RCsM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x7) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, 0x0, 0xfffffffffffffed1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) 1.792844701s ago: executing program 3 (id=662): r0 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 1.773371463s ago: executing program 2 (id=663): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) faccessat2(0xffffffffffffffff, 0x0, 0x8, 0x1200) 821.833451ms ago: executing program 3 (id=664): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}, {0x1}], 0x2, 0x0) semop(0x0, &(0x7f0000000140)=[{0x0, 0x3}], 0x1) 504.802574ms ago: executing program 3 (id=665): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 250.425132ms ago: executing program 1 (id=666): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x1c, 0x1, 0x0, 0x0, "873fd265d9e2d3b3d4c594c70847ec4b3d9a5451d21afd2055c1f5b2ec08b2d5f1ffd7c180e12ad02ec0b7d803872107491c55e51967c3fb4a31749da1cfa8c3"}}}}, 0x0) 250.240182ms ago: executing program 2 (id=667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400005cfa0000000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e200000040006"], 0x48}}, 0x0) 241.922912ms ago: executing program 3 (id=668): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x6}, 0x10) 40.742587ms ago: executing program 3 (id=669): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 40.587777ms ago: executing program 1 (id=670): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = dup3(r1, r0, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 16.430879ms ago: executing program 4 (id=671): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=672): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x80, 0xa, 0x0, 0x200, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000001b00), 0x1, 0x49d, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(r3, 0x0, 0x22) kernel console output (not intermixed with test programs): NGE): macvlan1: link becomes ready [ 48.649666][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.652098][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.654597][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.659293][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.661987][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.664675][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.682219][ T4025] device veth0_vlan entered promiscuous mode [ 48.697044][ T4032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.699399][ T4032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.701699][ T4032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.703920][ T4032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711050][ T4020] device veth0_vlan entered promiscuous mode [ 48.718973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.721720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.724390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.730202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.738043][ T4020] device veth1_vlan entered promiscuous mode [ 48.757554][ T4021] device veth0_macvtap entered promiscuous mode [ 48.763832][ T4021] device veth1_macvtap entered promiscuous mode [ 48.769140][ T4025] device veth1_vlan entered promiscuous mode [ 48.772275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.775533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.779270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.781615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.784138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.788725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.840122][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.842995][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.845584][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.849834][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.857880][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.865133][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.873089][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.878699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.881276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.883745][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.887430][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.890022][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.901065][ T4025] device veth0_macvtap entered promiscuous mode [ 48.910292][ T4020] device veth0_macvtap entered promiscuous mode [ 48.914748][ T4020] device veth1_macvtap entered promiscuous mode [ 48.920365][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.923045][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.925562][ T4021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.928940][ T4021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.932738][ T4021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.950811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.954245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.962794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.965475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.969274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.971892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.974910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.979781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.982424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.987499][ T4025] device veth1_macvtap entered promiscuous mode [ 48.997389][ T4087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.001892][ T4087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.005034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.011081][ T4021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.013483][ T4021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.016999][ T4021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.019296][ T4021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.073777][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.078863][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.081768][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.084622][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.087607][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.090376][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.094458][ T4020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.114636][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.117688][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.121374][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.122251][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.123529][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.129566][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.132246][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.134964][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.139474][ T4020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.142234][ T4020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.149242][ T4020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.160094][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.162841][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.165531][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.172474][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.175227][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.181296][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.183972][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.187262][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.191557][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.197296][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.197321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.199630][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.202780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.206957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.209739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.212460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.215154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.220512][ T4020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.222814][ T4020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.225132][ T4020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.228188][ T4020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.232633][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.235384][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.239021][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.241961][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.244594][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.247928][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.250527][ T4025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.253353][ T4025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.259058][ T4025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.264491][ T4025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.267365][ T4025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.269742][ T4025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.272063][ T4025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.289227][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.292150][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.309873][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.311985][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.322761][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.325505][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.355932][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.358489][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.478881][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.481176][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.484171][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.525970][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.528244][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.531274][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.545604][ T4087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.564591][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.568598][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.592024][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.594258][ T4087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.609440][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.758439][ T4112] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 49.761511][ T4112] FAT-fs (loop5): unable to read boot sector [ 50.076721][ T4118] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 50.080238][ T4118] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 50.083528][ T4118] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 50.088851][ T4118] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 50.593000][ T4065] Bluetooth: hci4: command 0x040f tx timeout [ 50.594835][ T4065] Bluetooth: hci2: command 0x040f tx timeout [ 50.596640][ T4065] Bluetooth: hci1: command 0x040f tx timeout [ 50.599002][ T4065] Bluetooth: hci0: command 0x040f tx timeout [ 50.602350][ T4065] Bluetooth: hci3: command 0x040f tx timeout [ 51.184366][ T4140] loop1: detected capacity change from 0 to 2048 [ 51.351739][ T4143] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 51.354122][ T4143] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 51.357465][ T4143] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 51.362298][ T4143] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 51.496568][ T4140] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 51.854768][ T4140] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 51.972533][ T4110] loop4: detected capacity change from 0 to 32768 [ 51.983363][ T4150] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.15: bg 0: block 234: padding at end of block bitmap is not set [ 52.010892][ T4150] EXT4-fs (loop1): Remounting filesystem read-only [ 52.025036][ T4110] ======================================================= [ 52.025036][ T4110] WARNING: The mand mount option has been deprecated and [ 52.025036][ T4110] and is ignored by this kernel. Remove the mand [ 52.025036][ T4110] option from the mount to silence this warning. [ 52.025036][ T4110] ======================================================= [ 52.057563][ T4110] XFS: ikeep mount option is deprecated. [ 52.059012][ T4110] XFS: noikeep mount option is deprecated. [ 52.232623][ T4110] XFS (loop4): Mounting V5 Filesystem [ 53.050706][ T1959] Bluetooth: hci0: command 0x0419 tx timeout [ 53.052398][ T1959] Bluetooth: hci1: command 0x0419 tx timeout [ 53.054046][ T1959] Bluetooth: hci2: command 0x0419 tx timeout [ 53.065986][ T1959] Bluetooth: hci4: command 0x0419 tx timeout [ 53.067689][ T1959] Bluetooth: hci3: command 0x0419 tx timeout [ 53.123571][ T4157] loop3: detected capacity change from 0 to 764 [ 53.161600][ T4157] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.192717][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 53.199504][ T4110] XFS (loop4): Ending clean mount [ 53.210159][ T4110] XFS (loop4): Quotacheck needed: Please wait. [ 53.239363][ T4172] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 53.280775][ T4172] team0: Device hsr_slave_0 failed to register rx_handler [ 53.316063][ T4110] XFS (loop4): Quotacheck: Done. [ 53.462282][ T4175] Symlink component flag not implemented [ 53.464004][ T4175] Symlink component flag not implemented [ 53.466394][ T4175] Symlink component flag not implemented (128) [ 53.468101][ T4175] Symlink component flag not implemented (122) [ 53.510130][ T4175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 53.645108][ T4021] XFS (loop4): Unmounting Filesystem [ 54.384936][ T4185] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.711691][ T4166] Bluetooth: hci4: command 0x0405 tx timeout [ 56.714560][ T4166] Bluetooth: hci0: command 0x0409 tx timeout [ 57.012239][ T4200] netlink: 277 bytes leftover after parsing attributes in process `syz.0.27'. [ 58.406242][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 58.410900][ T4199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 58.804158][ T4197] loop2: detected capacity change from 0 to 32768 [ 63.321931][ T4197] XFS (loop2): Mounting V5 Filesystem [ 63.460208][ T4197] XFS (loop2): log mount failed [ 64.865993][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.890757][ T4248] device syzkaller0 entered promiscuous mode [ 65.226002][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.230689][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.234710][ T21] usb 1-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 65.249891][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.268069][ T21] usb 1-1: config 0 descriptor?? [ 65.337277][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 65.404347][ T4119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.649453][ T4119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.778125][ T4265] netlink: 277 bytes leftover after parsing attributes in process `syz.3.45'. [ 66.595141][ T4119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.623141][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 66.645932][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 66.678598][ T1959] Bluetooth: hci5: command 0x0409 tx timeout [ 66.712633][ T4267] team0: Port device team_slave_1 removed [ 66.744643][ T4119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.917886][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 66.965523][ T25] usb 1-1: USB disconnect, device number 2 [ 67.948352][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.950359][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.956994][ T4241] device bridge_slave_0 entered promiscuous mode [ 67.962786][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.977355][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.980194][ T4241] device bridge_slave_1 entered promiscuous mode [ 68.054806][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.065137][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.171313][ T4241] team0: Port device team_slave_0 added [ 68.181437][ T4241] team0: Port device team_slave_1 added [ 68.253178][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.258939][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.272282][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.304109][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.309740][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.784111][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.238041][ T1959] Bluetooth: hci5: command 0x041b tx timeout [ 69.539076][ T4241] device hsr_slave_0 entered promiscuous mode [ 69.565297][ T4241] device hsr_slave_1 entered promiscuous mode [ 69.596448][ T4312] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 69.606147][ T4241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.608237][ T4241] Cannot create hsr debugfs directory [ 69.618677][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.620640][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.061273][ T4337] capability: warning: `syz.2.63' uses deprecated v2 capabilities in a way that may be insecure [ 70.095973][ T4337] mmap: syz.2.63 (4337) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 70.286542][ T4339] can: request_module (can-proto-0) failed. [ 70.667969][ T4241] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.816085][ T4186] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 70.820831][ T4241] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.848410][ T4241] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.879736][ T4241] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.027156][ T4366] udc-core: couldn't find an available UDC or it's busy [ 71.029012][ T4366] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 71.049934][ T4367] loop2: detected capacity change from 0 to 764 [ 71.117745][ T4367] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 71.173543][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.176276][ T4186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.185503][ T4186] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.193099][ T4186] usb 1-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 71.200907][ T4186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.220113][ T4186] usb 1-1: config 0 descriptor?? [ 71.230643][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.233647][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.236892][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.246673][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.249387][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.258765][ T4186] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 71.271989][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.274251][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.305967][ T1959] Bluetooth: hci5: command 0x040f tx timeout [ 71.331427][ T4373] netlink: 'syz.1.70': attribute type 29 has an invalid length. [ 71.406930][ T4374] Symlink component flag not implemented [ 71.408544][ T4374] Symlink component flag not implemented [ 71.410679][ T4374] Symlink component flag not implemented (128) [ 71.412351][ T4374] Symlink component flag not implemented (122) [ 71.448371][ T4374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 72.039638][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.042453][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.045198][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.047835][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.049695][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.052265][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.055235][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.058385][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.062330][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.065098][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.070574][ T4373] netlink: 'syz.1.70': attribute type 29 has an invalid length. [ 72.073130][ T4375] netlink: 'syz.1.70': attribute type 29 has an invalid length. [ 72.827391][ T25] usb 1-1: USB disconnect, device number 3 [ 72.870033][ T4119] device hsr_slave_0 left promiscuous mode [ 72.919552][ T4119] device hsr_slave_1 left promiscuous mode [ 72.986455][ T4119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.988492][ T4119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.000996][ T4119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.002989][ T4119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.008539][ T4119] device bridge_slave_1 left promiscuous mode [ 73.011137][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.063304][ T4119] device bridge_slave_0 left promiscuous mode [ 73.119684][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.436473][ T4119] device veth1_macvtap left promiscuous mode [ 73.437560][ T1959] Bluetooth: hci5: command 0x0419 tx timeout [ 73.438884][ T4119] device veth0_macvtap left promiscuous mode [ 73.442104][ T4119] device veth1_vlan left promiscuous mode [ 73.444443][ T4119] device veth0_vlan left promiscuous mode [ 73.623331][ T4381] can: request_module (can-proto-0) failed. [ 74.280415][ T4119] team0 (unregistering): Port device team_slave_1 removed [ 74.291218][ T4119] team0 (unregistering): Port device team_slave_0 removed [ 74.314364][ T4119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.366580][ T4119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.582360][ T4119] bond0 (unregistering): Released all slaves [ 74.701146][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.704215][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.710150][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.744408][ T7] cfg80211: failed to load regulatory.db [ 74.747003][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.749554][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.752147][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.768522][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.868126][ T4406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.80'. [ 75.180823][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.625304][ T4417] loop2: detected capacity change from 0 to 8 [ 75.686505][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.688897][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.756615][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.936191][ T7] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 75.938381][ T7] usb 1-1: config 0 has no interface number 0 [ 75.939971][ T7] usb 1-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=1b.dd [ 75.950363][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.966614][ T7] usb 1-1: config 0 descriptor?? [ 76.011693][ T7] qmi_wwan: probe of 1-1:0.6 failed with error -22 [ 76.137405][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.140818][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.206839][ T4241] device veth0_vlan entered promiscuous mode [ 76.227259][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.229969][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.237730][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.240287][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.246782][ T4241] device veth1_vlan entered promiscuous mode [ 76.318456][ T4429] udc-core: couldn't find an available UDC or it's busy [ 76.320450][ T4429] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 76.370812][ T1533] usb 1-1: USB disconnect, device number 4 [ 76.439367][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.441967][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.444981][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.466945][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.477602][ T4241] device veth0_macvtap entered promiscuous mode [ 76.482608][ T4241] device veth1_macvtap entered promiscuous mode [ 76.547005][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.558624][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.566849][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.569591][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.871620][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.995089][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.104459][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.323977][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.371325][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.373929][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.377294][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.380115][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.395271][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.410755][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.413894][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.419722][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.425683][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.431577][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.441350][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.451666][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.463203][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.477765][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.511147][ T4241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.516895][ T4241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.529913][ T4241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546334][ T4241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566357][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.569875][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.640304][ T4443] udc-core: couldn't find an available UDC or it's busy [ 78.643390][ T4443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.698421][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.711377][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.718350][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.820092][ T4445] netlink: 277 bytes leftover after parsing attributes in process `syz.0.88'. [ 79.717583][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.720025][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.811265][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.008489][ T4458] loop1: detected capacity change from 0 to 256 [ 80.506401][ T4458] exfat: Unknown parameter 'keep_last_dots' [ 81.044746][ T4469] loop1: detected capacity change from 0 to 256 [ 81.108068][ T4474] netlink: 52 bytes leftover after parsing attributes in process `syz.0.95'. [ 81.214419][ T4441] can: request_module (can-proto-0) failed. [ 83.135742][ C0] sched: RT throttling activated [ 83.431522][ T4484] udc-core: couldn't find an available UDC or it's busy [ 83.444000][ T4484] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 83.668310][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 83.751861][ T4493] udc-core: couldn't find an available UDC or it's busy [ 83.779467][ T4493] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.876895][ T4507] udc-core: couldn't find an available UDC or it's busy [ 85.878725][ T4507] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.898940][ T4509] udc-core: couldn't find an available UDC or it's busy [ 85.903147][ T4509] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.802401][ T4513] loop1: detected capacity change from 0 to 764 [ 86.885209][ T26] audit: type=1326 audit(86.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.894294][ T26] audit: type=1326 audit(86.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.904485][ T4524] udc-core: couldn't find an available UDC or it's busy [ 86.912436][ T4524] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 86.918546][ T26] audit: type=1326 audit(86.880:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.930881][ T26] audit: type=1326 audit(86.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.957784][ T26] audit: type=1326 audit(86.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.978592][ T26] audit: type=1326 audit(86.880:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 86.984100][ T26] audit: type=1326 audit(86.880:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 87.032391][ T26] audit: type=1326 audit(86.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=50 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 87.057494][ T26] audit: type=1326 audit(86.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 87.073185][ T26] audit: type=1326 audit(86.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4521 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 87.223740][ T4536] udc-core: couldn't find an available UDC or it's busy [ 87.225684][ T4536] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.293088][ T4549] udc-core: couldn't find an available UDC or it's busy [ 88.295366][ T4549] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 88.308993][ T4520] can: request_module (can-proto-0) failed. [ 89.625230][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 90.019454][ T4573] loop3: detected capacity change from 0 to 512 [ 90.049925][ T4573] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 90.072895][ T4573] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 90.093993][ T4573] System zones: 1-12 [ 90.108195][ T4573] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.127028][ T4573] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.128: Inode bitmap for bg 0 marked uninitialized [ 90.285971][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: none. [ 90.309439][ T4573] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 5: comm syz.3.128: lblock 0 mapped to illegal pblock 5 (length 1) [ 90.314812][ T4573] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.128: error -117 reading directory block [ 91.188581][ T4586] udc-core: couldn't find an available UDC or it's busy [ 91.196319][ T4586] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 91.466086][ T4600] loop2: detected capacity change from 0 to 512 [ 91.500123][ T4600] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.522275][ T4600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.540995][ T4600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 91.543145][ T4600] System zones: 1-12 [ 91.572849][ T4600] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.581402][ T4600] EXT4-fs (loop2): 1 truncate cleaned up [ 91.582983][ T4600] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 91.665350][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 91.787462][ T4588] can: request_module (can-proto-0) failed. [ 91.987869][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 91.987884][ T26] audit: type=1326 audit(91.960:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 91.999654][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 92.013184][ T26] audit: type=1326 audit(91.960:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.097332][ T4630] netlink: 277 bytes leftover after parsing attributes in process `syz.4.145'. [ 92.584535][ T26] audit: type=1326 audit(91.960:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.763086][ T26] audit: type=1326 audit(91.960:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.799669][ T26] audit: type=1326 audit(91.960:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.829908][ T3603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.835466][ T26] audit: type=1326 audit(91.960:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.844937][ T26] audit: type=1326 audit(91.960:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4625 comm="syz.3.148" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 92.886018][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 92.965667][ T26] audit: type=1326 audit(92.930:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 92.972900][ T26] audit: type=1326 audit(92.940:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 92.989262][ T26] audit: type=1326 audit(92.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4643 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 94.153329][ T3603] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.156451][ T3603] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.160193][ T3603] usb 1-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 94.162843][ T3603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.167274][ T3603] usb 1-1: config 0 descriptor?? [ 94.208978][ T3603] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 94.286605][ T4664] tipc: Started in network mode [ 94.288205][ T4664] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 94.307384][ T4664] tipc: Enabled bearer , priority 10 [ 94.322493][ T4651] can: request_module (can-proto-0) failed. [ 95.461762][ T21] tipc: Node number set to 4269801491 [ 95.465101][ T4066] usb 1-1: USB disconnect, device number 5 [ 95.571785][ T4674] netlink: 277 bytes leftover after parsing attributes in process `syz.1.163'. [ 97.006580][ T4699] can: request_module (can-proto-0) failed. [ 97.458630][ T4725] udc-core: couldn't find an available UDC or it's busy [ 97.460568][ T4725] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 97.571490][ T4726] netlink: 277 bytes leftover after parsing attributes in process `syz.1.180'. [ 99.381319][ T4739] can: request_module (can-proto-0) failed. [ 99.465061][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 99.465075][ T26] audit: type=1326 audit(99.430:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 99.478672][ T26] audit: type=1326 audit(99.450:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 99.503102][ T26] audit: type=1326 audit(99.450:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=158 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 99.531648][ T26] audit: type=1326 audit(99.450:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4757 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2d6aee8 code=0x7ffc0000 [ 100.871476][ T4773] loop1: detected capacity change from 0 to 512 [ 100.969047][ T4773] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.203: corrupted in-inode xattr [ 100.972954][ T4773] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.203: couldn't read orphan inode 15 (err -117) [ 100.982053][ T4773] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.784907][ T4798] device pim6reg1 entered promiscuous mode [ 101.897964][ T4793] can: request_module (can-proto-0) failed. [ 102.276365][ T4807] udc-core: couldn't find an available UDC or it's busy [ 102.278237][ T4807] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 104.251998][ T4819] udc-core: couldn't find an available UDC or it's busy [ 104.253999][ T4819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.357327][ T4829] loop1: detected capacity change from 0 to 128 [ 105.608669][ T4836] udc-core: couldn't find an available UDC or it's busy [ 105.610640][ T4836] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 105.655964][ T4827] can: request_module (can-proto-0) failed. [ 105.835644][ T4843] loop2: detected capacity change from 0 to 764 [ 105.862284][ T4843] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 105.996924][ T4848] loop3: detected capacity change from 0 to 1024 [ 106.076504][ T4848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.133476][ T4855] Symlink component flag not implemented [ 106.135217][ T4855] Symlink component flag not implemented [ 106.137619][ T4855] Symlink component flag not implemented (128) [ 106.139398][ T4855] Symlink component flag not implemented (122) [ 106.707704][ T4847] ptrace attach of "./syz-executor exec"[4030] was attempted by "./syz-executor exec"[4847] [ 106.824391][ T4848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.229'. [ 107.166231][ T4868] loop4: detected capacity change from 0 to 512 [ 107.235646][ T4868] EXT4-fs (loop4): Unrecognized mount option "fsmagic=0x0000000000000008" or missing value [ 108.732735][ T4875] loop2: detected capacity change from 0 to 512 [ 108.788971][ T4882] loop4: detected capacity change from 0 to 764 [ 108.829297][ T4882] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 108.936491][ T4885] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.940093][ T4885] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.971812][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 108.994185][ T4885] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.997456][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 109.000090][ T4885] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 109.002222][ T4885] UDF-fs: Scanning with blocksize 512 failed [ 109.005583][ T4885] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.008856][ T4885] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.011757][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.014583][ T4885] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.018487][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 109.021068][ T4886] loop2: detected capacity change from 0 to 164 [ 109.026082][ T4885] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 109.028117][ T4885] UDF-fs: Scanning with blocksize 1024 failed [ 109.030171][ T4885] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.033248][ T4885] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.090436][ T4893] Symlink component flag not implemented [ 109.091990][ T4893] Symlink component flag not implemented [ 109.094227][ T4893] Symlink component flag not implemented (128) [ 109.096007][ T4893] Symlink component flag not implemented (122) [ 109.173831][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.183130][ T4885] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.215073][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 109.228862][ T4885] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 109.231120][ T4885] UDF-fs: Scanning with blocksize 2048 failed [ 109.245406][ T4885] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.293439][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.334549][ T4885] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 109.354730][ T4885] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 109.357267][ T4885] UDF-fs: Scanning with blocksize 4096 failed [ 109.358984][ T4885] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 109.608810][ T4889] chnl_net:caif_netlink_parms(): no params data found [ 109.641611][ T4896] loop2: detected capacity change from 0 to 512 [ 109.742205][ T4896] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 109.758466][ T4896] System zones: 0-2, 18-18, 34-35 [ 109.761383][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.763353][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.766635][ T4889] device bridge_slave_0 entered promiscuous mode [ 109.788267][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.790247][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.792890][ T4889] device bridge_slave_1 entered promiscuous mode [ 109.803709][ T4896] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 109.868379][ T4896] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 3: comm syz.2.245: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 109.927439][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.932033][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.950409][ T4896] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.245: Directory hole found for htree leaf block 0 [ 109.984251][ T4913] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.245: Directory hole found for htree leaf block 0 [ 109.994988][ T4916] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.245: Directory hole found for htree leaf block 0 [ 110.063297][ T4896] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.245: Directory hole found for htree leaf block 0 [ 110.070256][ T4889] team0: Port device team_slave_0 added [ 110.073506][ T4889] team0: Port device team_slave_1 added [ 110.101115][ T4909] can: request_module (can-proto-0) failed. [ 110.149599][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.151351][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.168653][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.175464][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.205846][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.229000][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.663593][ T4889] device hsr_slave_0 entered promiscuous mode [ 110.696309][ T4889] device hsr_slave_1 entered promiscuous mode [ 110.736113][ T4889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.739600][ T4889] Cannot create hsr debugfs directory [ 110.759144][ T4927] loop1: detected capacity change from 0 to 2048 [ 110.829677][ T4927] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 110.985021][ T4939] loop1: detected capacity change from 0 to 1024 [ 111.017034][ T4889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.062527][ T4068] Bluetooth: hci1: command 0x0409 tx timeout [ 111.078255][ T4889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.103655][ T4939] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 111.181741][ T4889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.290850][ T4889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.343907][ T4952] loop4: detected capacity change from 0 to 512 [ 111.361023][ T4952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 111.389544][ T4952] EXT4-fs (loop4): 1 truncate cleaned up [ 111.391525][ T4952] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.517138][ T4952] overlayfs: conflicting lowerdir path [ 111.654574][ T4889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.709181][ T4889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.758084][ T4889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.800440][ T4889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.939774][ T26] audit: type=1107 audit(111.910:82): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='`Åh¨ãñ¿{OðÚþ#1a¸E”GBëÀæa½€-!.çº-Õ-ƒì_0Ùä<ó ½À' [ 112.081728][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.124238][ T4889] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.131376][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.134263][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.158743][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.182517][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.186495][ T4547] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.188538][ T4547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.198072][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.229765][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.236545][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.239199][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.241179][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.283281][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.289162][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.301507][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.304873][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.318081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.338785][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 112.342565][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 112.360930][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.369206][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.377955][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.385289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.393841][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 112.630634][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.632945][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.659821][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.709194][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.713192][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.978363][ T4990] loop4: detected capacity change from 0 to 512 [ 112.989627][ T4990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.012170][ T4889] device veth0_vlan entered promiscuous mode [ 113.021125][ T4990] EXT4-fs (loop4): 1 truncate cleaned up [ 113.022621][ T4990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.028258][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.031071][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.058427][ T4889] device veth1_vlan entered promiscuous mode [ 113.079605][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.082193][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.099874][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.103832][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.143593][ T4498] Bluetooth: hci1: command 0x041b tx timeout [ 113.148002][ T4889] device veth0_macvtap entered promiscuous mode [ 113.152898][ T4889] device veth1_macvtap entered promiscuous mode [ 113.182517][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.185293][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.205853][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.208757][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.211405][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.214092][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.225893][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.228948][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.231606][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.234430][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.247338][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.265442][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.282239][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.289458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.299614][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.315476][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.318555][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.321137][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.323865][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.332587][ T26] audit: type=1326 audit(113.300:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.338841][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.341607][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.344136][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.357279][ T26] audit: type=1326 audit(113.330:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.366114][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.436196][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.439035][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.455221][ T26] audit: type=1326 audit(113.330:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.464787][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.490877][ T4889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.493235][ T4889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.505930][ T26] audit: type=1326 audit(113.330:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.511748][ T26] audit: type=1326 audit(113.330:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.525927][ T4889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.528261][ T4889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.556008][ T26] audit: type=1326 audit(113.330:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.617969][ T26] audit: type=1326 audit(113.330:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 113.624211][ T26] audit: type=1326 audit(113.330:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 114.091591][ T26] audit: type=1326 audit(113.330:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4996 comm="syz.2.280" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffac6f3ee8 code=0x7ffc0000 [ 114.237791][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.240699][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.558649][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.560876][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.565929][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.588928][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.591123][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.595200][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.685403][ T5007] loop3: detected capacity change from 0 to 512 [ 114.829565][ T5007] EXT4-fs (loop3): Unrecognized mount option "fsmagic=0x0000000000000008" or missing value [ 115.222696][ T4066] Bluetooth: hci1: command 0x040f tx timeout [ 116.577488][ T5013] chnl_net:caif_netlink_parms(): no params data found [ 117.369993][ T1959] Bluetooth: hci4: command 0x0409 tx timeout [ 117.579706][ T5013] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.582050][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.596202][ T5013] device bridge_slave_0 entered promiscuous mode [ 117.750891][ T5013] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.752889][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.755594][ T5013] device bridge_slave_1 entered promiscuous mode [ 117.911003][ T5013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.025374][ T5013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.156785][ T5060] netlink: 'syz.0.302': attribute type 29 has an invalid length. [ 118.158929][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 118.178255][ T4066] Bluetooth: hci1: command 0x0419 tx timeout [ 118.189641][ T5013] team0: Port device team_slave_0 added [ 118.193603][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 118.214632][ T148] device hsr_slave_0 left promiscuous mode [ 118.222292][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 118.222304][ T26] audit: type=1326 audit(118.190:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.235844][ T26] audit: type=1326 audit(118.200:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.246114][ T26] audit: type=1326 audit(118.200:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.251691][ T26] audit: type=1326 audit(118.200:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.277094][ T26] audit: type=1326 audit(118.200:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.299177][ T26] audit: type=1326 audit(118.200:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.318401][ T26] audit: type=1326 audit(118.200:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.337753][ T26] audit: type=1326 audit(118.200:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.357761][ T26] audit: type=1326 audit(118.200:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.367342][ T148] device hsr_slave_1 left promiscuous mode [ 118.379573][ T26] audit: type=1326 audit(118.200:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5061 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8ccf2ee8 code=0x7ffc0000 [ 118.602609][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.654807][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.776842][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.855967][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.105870][ T148] device bridge_slave_1 left promiscuous mode [ 119.109632][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.124349][ T5066] loop1: detected capacity change from 0 to 512 [ 119.264976][ T148] device bridge_slave_0 left promiscuous mode [ 119.266843][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.324417][ T5066] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 119.362058][ T5079] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.308'. [ 119.375836][ T1533] Bluetooth: hci4: command 0x041b tx timeout [ 119.458504][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 119.460392][ T148] device veth1_macvtap left promiscuous mode [ 119.462225][ T148] device veth0_macvtap left promiscuous mode [ 119.463862][ T148] device veth1_vlan left promiscuous mode [ 119.465460][ T148] device veth0_vlan left promiscuous mode [ 119.726508][ T148] team0 (unregistering): Port device team_slave_1 removed [ 119.739269][ T148] team0 (unregistering): Port device team_slave_0 removed [ 119.748758][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.784248][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.914086][ T148] bond0 (unregistering): Released all slaves [ 120.013484][ T5013] team0: Port device team_slave_1 added [ 120.015588][ T5060] netlink: 'syz.0.302': attribute type 29 has an invalid length. [ 120.020168][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 120.039932][ T5081] tipc: Enabling of bearer rejected, failed to enable media [ 120.102443][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.104337][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.120263][ T5013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.154992][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.157334][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.164637][ T5013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.239394][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.241541][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.254461][ T5034] device bridge_slave_0 entered promiscuous mode [ 120.328079][ T5104] netlink: 'syz.0.318': attribute type 29 has an invalid length. [ 120.330091][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 120.352503][ T5013] device hsr_slave_0 entered promiscuous mode [ 120.556511][ T5013] device hsr_slave_1 entered promiscuous mode [ 121.093517][ T5109] loop1: detected capacity change from 0 to 1024 [ 121.120841][ T5109] EXT4-fs (loop1): Ignoring removed oldalloc option [ 121.162484][ T5109] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 121.193909][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.195960][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.198650][ T5034] device bridge_slave_1 entered promiscuous mode [ 121.201386][ T5104] netlink: 'syz.0.318': attribute type 29 has an invalid length. [ 121.203433][ T5104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 121.293225][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.314623][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.462475][ T5034] team0: Port device team_slave_0 added [ 121.466647][ T1959] Bluetooth: hci4: command 0x040f tx timeout [ 121.503358][ T5034] team0: Port device team_slave_1 added [ 121.546000][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 121.596218][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.598189][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.605180][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.624957][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.633979][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.641671][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.757800][ T5034] device hsr_slave_0 entered promiscuous mode [ 121.796194][ T5034] device hsr_slave_1 entered promiscuous mode [ 121.835854][ T5034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.837922][ T5034] Cannot create hsr debugfs directory [ 121.885570][ T5013] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.966601][ T5013] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.049617][ T5013] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.123715][ T5013] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.209117][ T5157] loop1: detected capacity change from 0 to 512 [ 122.329370][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 122.367059][ T5034] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.471829][ T5034] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.537771][ T5034] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.638079][ T5034] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.870235][ T5013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.910516][ T5013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.969427][ T5013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.015542][ T5177] loop1: detected capacity change from 0 to 1024 [ 123.021002][ T5013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.047296][ T5034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.099244][ T5034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.124366][ T5179] device bridge0 entered promiscuous mode [ 123.133854][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 123.146564][ T5179] device bridge0 left promiscuous mode [ 123.232128][ T5034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.280715][ T5034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.366197][ T26] kauditd_printk_skb: 126 callbacks suppressed [ 123.366210][ T26] audit: type=1326 audit(123.340:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.466657][ T26] audit: type=1326 audit(123.360:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.493837][ T26] audit: type=1326 audit(123.360:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.532082][ T26] audit: type=1326 audit(123.360:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.556143][ T4068] Bluetooth: hci4: command 0x0419 tx timeout [ 123.575484][ T26] audit: type=1326 audit(123.360:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.581439][ T26] audit: type=1326 audit(123.360:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.587653][ T26] audit: type=1326 audit(123.360:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.593966][ T26] audit: type=1326 audit(123.370:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.605329][ T26] audit: type=1326 audit(123.370:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.613001][ T26] audit: type=1326 audit(123.370:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5183 comm="syz.1.349" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x7ffc0000 [ 123.618972][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 123.673127][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.680780][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.721099][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.723986][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.731746][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.737287][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.743220][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.748714][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.762688][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.768750][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.772321][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.774371][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.800900][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.814937][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.824789][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.834501][ T4144] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.836408][ T4144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.847475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.853710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.861136][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.863244][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.879356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.882175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.891766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.895038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.903044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.905751][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.907679][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.911021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.927958][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.932911][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.940032][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.944060][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.950460][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 123.953497][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.957906][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.968160][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.971620][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.981121][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.984656][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.026064][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.259281][ T5013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.262734][ T5013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.435949][ T7] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 124.438058][ T7] usb 1-1: config 0 has no interface number 0 [ 124.439670][ T7] usb 1-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=1b.dd [ 124.442483][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.450473][ T7] usb 1-1: config 0 descriptor?? [ 124.486761][ T7] qmi_wwan: probe of 1-1:0.6 failed with error -22 [ 124.512406][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.521401][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.525979][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.528945][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.534770][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.540578][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.560870][ T5034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.564109][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.575308][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.579839][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.776645][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.778974][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.809777][ T5013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.816705][ T4498] usb 1-1: USB disconnect, device number 6 [ 124.875864][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.878121][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.899825][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.962270][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.965140][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.007433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.010428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.013245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.030537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.146016][ T5034] device veth0_vlan entered promiscuous mode [ 125.159742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.162963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.169444][ T5034] device veth1_vlan entered promiscuous mode [ 125.212700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.229783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.236900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.246840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.253968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.261182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.270317][ T5013] device veth0_vlan entered promiscuous mode [ 125.288142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.290928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.298352][ T5013] device veth1_vlan entered promiscuous mode [ 125.316609][ T5034] device veth0_macvtap entered promiscuous mode [ 125.348610][ T5034] device veth1_macvtap entered promiscuous mode [ 125.365459][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.374479][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.381278][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.390086][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.398320][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.415531][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.429147][ T5013] device veth0_macvtap entered promiscuous mode [ 125.433741][ T5013] device veth1_macvtap entered promiscuous mode [ 125.494233][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.502237][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.506094][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.512401][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.526700][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.529521][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.532184][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.534935][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.542709][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.545519][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.569001][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.572029][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.574716][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.577820][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.594597][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.610790][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.613579][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.617038][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.623997][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.628154][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.631045][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.633637][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.666557][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.669358][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.677322][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.679972][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.682902][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.696293][ T4068] Bluetooth: hci3: command 0x0419 tx timeout [ 125.719448][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.721924][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.724762][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.739178][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.742006][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.744624][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.755871][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.758554][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.770798][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.778689][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.781404][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.784152][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.789872][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.794096][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.812156][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.814907][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.835260][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.842410][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.845003][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.865809][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.876347][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.879100][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.881735][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.900794][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.903567][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.908535][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.912566][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.914658][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.918542][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.921343][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.924511][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.931267][ T5034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.933530][ T5034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.939709][ T5034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.942243][ T5034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.975593][ T5013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.979044][ T5013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.981558][ T5013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.983784][ T5013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.105837][ T4166] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 126.191389][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.193648][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.209163][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.238067][ T4119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.240409][ T4119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.257479][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.262795][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.265092][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.289462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.314367][ T4119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.318156][ T4119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.322280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.461526][ T5273] Zero length message leads to an empty skb [ 126.516103][ T4166] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 126.518971][ T4166] usb 1-1: config 0 has no interface number 0 [ 126.520823][ T4166] usb 1-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=1b.dd [ 126.523301][ T4166] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.542973][ T4166] usb 1-1: config 0 descriptor?? [ 126.579651][ T4166] qmi_wwan: probe of 1-1:0.6 failed with error -22 [ 126.611643][ T5280] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 126.613754][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 126.635360][ T5280] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 126.637972][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 126.641280][ T5280] netlink: 'syz.4.382': attribute type 29 has an invalid length. [ 126.643343][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 126.749724][ T5284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.384'. [ 126.944151][ T21] usb 1-1: USB disconnect, device number 7 [ 126.991016][ T5299] loop3: detected capacity change from 0 to 764 [ 127.001023][ T5299] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 127.268900][ T5305] Symlink component flag not implemented [ 127.270482][ T5305] Symlink component flag not implemented [ 127.272564][ T5305] Symlink component flag not implemented (128) [ 127.274244][ T5305] Symlink component flag not implemented (122) [ 128.004915][ T5313] udc-core: couldn't find an available UDC or it's busy [ 128.010349][ T5313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.537847][ T5320] can: request_module (can-proto-0) failed. [ 128.792192][ T5345] loop1: detected capacity change from 0 to 764 [ 128.876651][ T5345] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 129.019235][ T148] device hsr_slave_0 left promiscuous mode [ 129.142697][ T5366] Symlink component flag not implemented [ 129.144336][ T5366] Symlink component flag not implemented [ 129.146598][ T5366] Symlink component flag not implemented (128) [ 129.148349][ T5366] Symlink component flag not implemented (122) [ 129.291729][ T148] device hsr_slave_1 left promiscuous mode [ 129.625944][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.409'. [ 129.826025][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.828404][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.837611][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.839899][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.872783][ T148] device bridge_slave_1 left promiscuous mode [ 129.878008][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.924421][ T148] device bridge_slave_0 left promiscuous mode [ 129.926355][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.977875][ T148] device hsr_slave_0 left promiscuous mode [ 130.046745][ T148] device hsr_slave_1 left promiscuous mode [ 130.147183][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.149388][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.152079][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.154089][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.201804][ T148] device bridge_slave_1 left promiscuous mode [ 130.203562][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.324708][ T148] device bridge_slave_0 left promiscuous mode [ 130.326601][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.575969][ T148] device veth1_macvtap left promiscuous mode [ 130.577648][ T148] device veth0_macvtap left promiscuous mode [ 130.579315][ T148] device veth1_vlan left promiscuous mode [ 130.580977][ T148] device veth0_vlan left promiscuous mode [ 130.607948][ T5394] can: request_module (can-proto-0) failed. [ 130.612080][ T5414] loop1: detected capacity change from 0 to 764 [ 130.677908][ T148] device veth1_macvtap left promiscuous mode [ 130.680018][ T148] device veth0_macvtap left promiscuous mode [ 130.681858][ T148] device veth1_vlan left promiscuous mode [ 130.683481][ T148] device veth0_vlan left promiscuous mode [ 130.689701][ T5414] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 130.811583][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 130.960780][ T5421] Symlink component flag not implemented [ 130.962441][ T5421] Symlink component flag not implemented [ 130.964508][ T5421] Symlink component flag not implemented (128) [ 130.966274][ T5421] Symlink component flag not implemented (122) [ 131.410583][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.412465][ T2055] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.733237][ T148] team0 (unregistering): Port device team_slave_0 removed [ 131.742859][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.778967][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.924736][ T148] bond0 (unregistering): Released all slaves [ 132.133474][ T148] team0 (unregistering): Port device team_slave_1 removed [ 132.142851][ T148] team0 (unregistering): Port device team_slave_0 removed [ 132.154202][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.217055][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.354562][ T148] bond0 (unregistering): Released all slaves [ 132.526949][ T5438] device veth0_vlan left promiscuous mode [ 132.529643][ T5438] device veth0_vlan entered promiscuous mode [ 132.813433][ T5452] loop1: detected capacity change from 0 to 1024 [ 132.823993][ T5453] loop3: detected capacity change from 0 to 2048 [ 132.879875][ T5453] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 132.883556][ T5457] serio: Serial port ptm0 [ 132.893678][ T5453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.040467][ T5462] tmpfs: Unknown parameter 'nolazytime;' [ 133.117556][ T5466] loop1: detected capacity change from 0 to 764 [ 133.133327][ T5441] can: request_module (can-proto-0) failed. [ 133.173251][ T5466] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.368898][ T5481] loop2: detected capacity change from 0 to 1024 [ 133.436840][ T5485] Symlink component flag not implemented [ 133.438381][ T5485] Symlink component flag not implemented [ 133.440557][ T5485] Symlink component flag not implemented (128) [ 133.442235][ T5485] Symlink component flag not implemented (122) [ 133.464591][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 133.986361][ T5481] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.177407][ T5505] loop2: detected capacity change from 0 to 2048 [ 135.177410][ T5479] loop3: detected capacity change from 0 to 32768 [ 135.237290][ T5505] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 135.282965][ T4065] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x328/0x44c, xfs_sb block 0x0 [ 135.309279][ T4065] XFS (loop3): Unmount and run xfs_repair [ 135.320924][ T4065] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 135.333056][ T4065] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 05 00 XFSB............ [ 135.353308][ T4065] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 135.372095][ T4065] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 135.390101][ T5510] loop4: detected capacity change from 0 to 512 [ 135.391961][ T4065] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40 ....... ......$@ [ 135.407882][ T4065] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42 ......$A......$B [ 135.421046][ T4065] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 135.435192][ T4065] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 135.448804][ T5510] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.459299][ T4065] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 135.461843][ T5479] XFS (loop3): SB validate failed with error -74. [ 135.483535][ T5520] loop1: detected capacity change from 0 to 128 [ 135.493426][ T5510] EXT4-fs (loop4): 1 truncate cleaned up [ 135.495064][ T5510] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 135.552948][ T5520] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 135.975243][ T5498] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 136.256991][ T5522] can: request_module (can-proto-0) failed. [ 136.332363][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 138.490182][ T5555] binder: 5554:5555 tried to acquire reference to desc 0, got 1 instead [ 138.493787][ T21] binder: release 5554:5555 transaction 5 out, still active [ 138.496815][ T21] binder: undelivered TRANSACTION_COMPLETE [ 138.499593][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 138.513248][ T21] binder: send failed reply for transaction 5, target dead [ 139.015552][ T5578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 139.569895][ T5565] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.572608][ T5565] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.574860][ T5565] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.577351][ T5565] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.605848][ T5565] device vxlan0 entered promiscuous mode [ 139.772388][ T5565] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.774806][ T5565] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.777523][ T5565] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.779921][ T5565] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.627831][ T4065] Bluetooth: hci4: command 0x0409 tx timeout [ 141.014968][ T5539] chnl_net:caif_netlink_parms(): no params data found [ 141.018347][ T5585] can: request_module (can-proto-0) failed. [ 141.024649][ T5602] netlink: 165 bytes leftover after parsing attributes in process `syz.0.487'. [ 141.053999][ T5601] loop3: detected capacity change from 0 to 128 [ 141.986439][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.988558][ T5539] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.991557][ T5539] device bridge_slave_0 entered promiscuous mode [ 142.018097][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.020076][ T5539] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.022661][ T5539] device bridge_slave_1 entered promiscuous mode [ 142.057950][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 142.057962][ T26] audit: type=1326 audit(142.030:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5610 comm="syz.1.491" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffab456ee8 code=0x0 [ 142.204528][ T5539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.220026][ T5539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.750752][ T4068] Bluetooth: hci4: command 0x041b tx timeout [ 144.341876][ T5539] team0: Port device team_slave_0 added [ 144.415072][ T5539] team0: Port device team_slave_1 added [ 144.424304][ T5623] loop1: detected capacity change from 0 to 764 [ 144.504192][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.506562][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.514191][ T5539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.530553][ T5623] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 144.562551][ T5539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.564542][ T5539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.595390][ T5539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.749273][ T5539] device hsr_slave_0 entered promiscuous mode [ 145.327900][ T5539] device hsr_slave_1 entered promiscuous mode [ 145.366924][ T5539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.369322][ T5539] Cannot create hsr debugfs directory [ 146.051118][ T4011] Bluetooth: hci4: command 0x040f tx timeout [ 149.433240][ T5664] loop1: detected capacity change from 0 to 512 [ 149.526117][ T5664] EXT4-fs (loop1): Encoding requested by superblock is unknown [ 149.534368][ T5539] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.536021][ T4065] Bluetooth: hci4: command 0x0419 tx timeout [ 149.721516][ T5664] loop1: detected capacity change from 0 to 128 [ 149.749292][ T5539] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.764247][ T5671] loop2: detected capacity change from 0 to 512 [ 149.845001][ T5539] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.686924][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 151.698179][ T5539] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.835556][ T5680] loop1: detected capacity change from 0 to 764 [ 151.846874][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 151.920511][ T5680] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 152.180734][ T5691] Symlink component flag not implemented [ 152.182557][ T5691] Symlink component flag not implemented [ 152.184683][ T5691] Symlink component flag not implemented (128) [ 152.186471][ T5691] Symlink component flag not implemented (122) [ 152.791981][ T5688] can: request_module (can-proto-0) failed. [ 152.889019][ T5539] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.962474][ T5539] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.010520][ T5539] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.048112][ T5539] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.394239][ T5539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.408604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.411202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.418198][ T5539] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.429747][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.432661][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.435126][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.437125][ T1600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.463010][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.519814][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.522614][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.537111][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.538995][ T1600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.553862][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.558789][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.571343][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.575528][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.583618][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.601964][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.613814][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.617092][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.619746][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.622341][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.624884][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.629975][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.723953][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.726096][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.734160][ T5539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.832017][ T5723] loop1: detected capacity change from 0 to 512 [ 153.854098][ T5726] loop2: detected capacity change from 0 to 512 [ 153.904419][ T5726] EXT4-fs (loop2): Encoding requested by superblock is unknown [ 154.077875][ T5726] loop2: detected capacity change from 0 to 128 [ 154.157690][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 154.186509][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 154.192098][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 154.536910][ T5539] device veth0_vlan entered promiscuous mode [ 155.613460][ T5539] device veth1_vlan entered promiscuous mode [ 155.688013][ T5737] udc-core: couldn't find an available UDC or it's busy [ 155.690785][ T5737] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 155.809348][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.812966][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.823597][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.015878][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.018766][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.021579][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.024652][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.213480][ T7] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 156.233898][ T7] usb 1-1: config 0 has no interface number 0 [ 156.304415][ T7] usb 1-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=1b.dd [ 156.314782][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.260527][ T5539] device veth0_macvtap entered promiscuous mode [ 160.269925][ T7] usb 1-1: config 0 descriptor?? [ 160.281420][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.293049][ T7] usb 1-1: can't set config #0, error -71 [ 160.305634][ T7] usb 1-1: USB disconnect, device number 8 [ 160.312888][ T5539] device veth1_macvtap entered promiscuous mode [ 160.404379][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.420563][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.426724][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.432985][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.437977][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.443126][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.458756][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.461523][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.464000][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.476041][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.481368][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.635960][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.639086][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.058522][ T5773] udc-core: couldn't find an available UDC or it's busy [ 161.060422][ T5773] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 161.247631][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.250554][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.253295][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.256590][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.259289][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.262312][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.265121][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.268705][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.271351][ T5539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.274212][ T5539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.278453][ T5539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.283481][ T5539] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.286463][ T5539] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.288853][ T5539] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.291145][ T5539] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.308443][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.312202][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.457830][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.460150][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.464899][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.548441][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.550826][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.555509][ T1600] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 163.955408][ T148] device hsr_slave_0 left promiscuous mode [ 164.018103][ T148] device hsr_slave_1 left promiscuous mode [ 164.096387][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.098449][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.123251][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.125243][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.133227][ T148] device bridge_slave_1 left promiscuous mode [ 164.134905][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.207538][ T148] device bridge_slave_0 left promiscuous mode [ 164.209457][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.356130][ T148] device veth1_macvtap left promiscuous mode [ 164.357742][ T148] device veth0_macvtap left promiscuous mode [ 164.359418][ T148] device veth1_vlan left promiscuous mode [ 164.361001][ T148] device veth0_vlan left promiscuous mode [ 165.145217][ T148] team0 (unregistering): Port device team_slave_1 removed [ 165.170819][ T148] team0 (unregistering): Port device team_slave_0 removed [ 165.202526][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.246087][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.512928][ T148] bond0 (unregistering): Released all slaves [ 165.706962][ T5810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.548'. [ 165.835424][ T5825] udc-core: couldn't find an available UDC or it's busy [ 165.837558][ T5825] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.623264][ T5861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 167.845650][ T5873] udc-core: couldn't find an available UDC or it's busy [ 167.862493][ T5873] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.244344][ T5893] fuse: Unknown parameter 'rootmo–de' [ 168.468419][ T5897] fuse: Unknown parameter 'rootmo–de' [ 168.688629][ T5907] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 169.678358][ T1959] Bluetooth: hci0: command 0x0406 tx timeout [ 169.680166][ T1959] Bluetooth: hci2: command 0x0406 tx timeout [ 169.779422][ T5913] device syzkaller0 entered promiscuous mode [ 169.869250][ T5913] syzkaller0: create flow: hash 1024663771 index 1 [ 169.894322][ T5912] syzkaller0: delete flow: hash 1024663771 index 1 [ 169.911802][ T5893] loop1: detected capacity change from 0 to 32768 [ 169.977039][ T5893] XFS: ikeep mount option is deprecated. [ 169.978700][ T5893] XFS: noikeep mount option is deprecated. [ 170.049119][ T5926] loop2: detected capacity change from 0 to 128 [ 170.095197][ T5893] XFS (loop1): Mounting V5 Filesystem [ 170.283596][ T5944] loop4: detected capacity change from 0 to 512 [ 170.296711][ T5946] udc-core: couldn't find an available UDC or it's busy [ 170.298643][ T5946] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 170.306308][ T5893] XFS (loop1): Ending clean mount [ 170.313469][ T5893] XFS (loop1): Quotacheck needed: Please wait. [ 170.412703][ T5893] XFS (loop1): Quotacheck: Done. [ 170.429138][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.590: iget: bad extended attribute block 128 [ 170.455208][ T5944] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.590: couldn't read orphan inode 16 (err -117) [ 170.480885][ T5944] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.741424][ T4020] XFS (loop1): Unmounting Filesystem [ 171.841955][ T5976] loop3: detected capacity change from 0 to 764 [ 171.896888][ T5976] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 172.169406][ T5980] Symlink component flag not implemented [ 172.171238][ T5980] Symlink component flag not implemented [ 172.173452][ T5980] Symlink component flag not implemented (128) [ 172.175219][ T5980] Symlink component flag not implemented (122) [ 172.197896][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 173.571625][ T6008] netlink: 277 bytes leftover after parsing attributes in process `syz.2.613'. [ 174.891479][ T6017] loop2: detected capacity change from 0 to 764 [ 174.973581][ T6017] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 175.240787][ T6021] Symlink component flag not implemented [ 175.242457][ T6021] Symlink component flag not implemented [ 175.244576][ T6021] Symlink component flag not implemented (128) [ 175.246405][ T6021] Symlink component flag not implemented (122) [ 175.268181][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.616'. [ 176.134471][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 176.327904][ T6045] netlink: 277 bytes leftover after parsing attributes in process `syz.3.626'. [ 178.446297][ T6075] udc-core: couldn't find an available UDC or it's busy [ 178.462342][ T6075] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 178.682113][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 178.714473][ T6079] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.717146][ T6079] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.719584][ T6079] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.721965][ T6079] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.742738][ T6079] device vxlan0 entered promiscuous mode [ 179.133437][ T6090] loop3: detected capacity change from 0 to 764 [ 179.399818][ T6090] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 179.667980][ T6099] Symlink component flag not implemented [ 179.669450][ T6099] Symlink component flag not implemented [ 179.671003][ T6099] Symlink component flag not implemented (128) [ 179.672698][ T6099] Symlink component flag not implemented (122) [ 179.678329][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'. [ 180.349653][ T6106] netlink: 277 bytes leftover after parsing attributes in process `syz.2.645'. [ 180.366769][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 180.492190][ T6116] udc-core: couldn't find an available UDC or it's busy [ 180.494328][ T6116] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.569487][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 180.571987][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.3.650'. [ 180.728024][ T6123] udc-core: couldn't find an available UDC or it's busy [ 180.730224][ T6123] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 180.994128][ T6125] bpf_jit: unknown atomic op code f1 [ 181.988793][ T6133] loop2: detected capacity change from 0 to 764 [ 182.055901][ T6133] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 182.314029][ T6142] Symlink component flag not implemented [ 182.315620][ T6142] Symlink component flag not implemented [ 182.317378][ T6142] Symlink component flag not implemented (128) [ 182.319231][ T6142] Symlink component flag not implemented (122) [ 182.324707][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 182.825199][ T26] audit: type=1326 audit(182.790:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 182.833003][ T26] audit: type=1326 audit(182.800:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 182.867330][ T6141] loop4: detected capacity change from 0 to 1024 [ 182.894048][ T26] audit: type=1326 audit(182.800:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 182.977356][ T26] audit: type=1326 audit(182.800:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 182.989790][ T26] audit: type=1326 audit(182.800:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 182.995565][ T26] audit: type=1326 audit(182.800:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 184.039583][ T26] audit: type=1326 audit(182.800:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 184.125519][ T26] audit: type=1326 audit(182.800:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 184.177058][ T26] audit: type=1326 audit(182.800:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 184.183164][ T26] audit: type=1326 audit(182.800:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.3.656" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccf2ee8 code=0x7fc00000 [ 184.596349][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 184.646961][ T6163] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.649368][ T6163] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.685985][ T6163] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.688682][ T6163] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 184.716120][ T6163] device geneve2 entered promiscuous mode [ 184.781307][ T6168] ------------[ cut here ]------------ [ 184.782961][ T6168] WARNING: CPU: 0 PID: 6168 at mm/page_alloc.c:5398 __alloc_pages+0x33c/0x674 [ 184.785330][ T6168] Modules linked in: [ 184.786539][ T6168] CPU: 0 PID: 6168 Comm: syz.3.669 Not tainted 5.15.165-syzkaller #0 [ 184.788838][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 184.791613][ T6168] pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 184.793801][ T6168] pc : __alloc_pages+0x33c/0x674 [ 184.795265][ T6168] lr : __alloc_pages+0xc8/0x674 [ 184.796644][ T6168] sp : ffff80001fde77c0 [ 184.797884][ T6168] x29: ffff80001fde78a0 x28: ffff80001fde77e0 x27: dfff800000000000 [ 184.800105][ T6168] x26: ffff700003fbcefc x25: 0000000000000000 x24: ffff80001fde7800 [ 184.802409][ T6168] x23: ffff80001b770604 x22: 0000000000040dc0 x21: 0000000000000000 [ 184.804640][ T6168] x20: ffff80001fde7820 x19: 000000000000001a x18: 0000000000000000 [ 184.806821][ T6168] x17: 0000000000000002 x16: ffff8000088a72d0 x15: 0000000000000005 [ 184.809056][ T6168] x14: ffff0000c6661b40 x13: 0000000000ff0100 x12: 0000000000000005 [ 184.811371][ T6168] x11: 1ffff00003fbcf04 x10: 0000000000000000 x9 : 0000000000000000 [ 184.813716][ T6168] x8 : ffff80001fde7848 x7 : 0000000000000000 x6 : 0000000000000000 [ 184.815949][ T6168] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 184.818206][ T6168] x2 : 0000000000000008 x1 : 0000000000000000 x0 : ffff80001fde7820 [ 184.820410][ T6168] Call trace: [ 184.821297][ T6168] __alloc_pages+0x33c/0x674 [ 184.822710][ T6168] alloc_pages+0x368/0x5d4 [ 184.823981][ T6168] kmalloc_order+0x40/0x154 [ 184.825191][ T6168] kmalloc_order_trace+0x30/0x21c [ 184.826566][ T6168] __kmalloc+0x35c/0x4c8 [ 184.827684][ T6168] input_mt_init_slots+0xc0/0x818 [ 184.829183][ T6168] uinput_create_device+0x3d0/0x528 [ 184.830760][ T6168] uinput_ioctl_handler+0x700/0x14b0 [ 184.832235][ T6168] uinput_ioctl+0x38/0x4c [ 184.833476][ T6168] __arm64_sys_ioctl+0x14c/0x1c8 [ 184.834894][ T6168] invoke_syscall+0x98/0x2b8 [ 184.836296][ T6168] el0_svc_common+0x138/0x258 [ 184.837681][ T6168] do_el0_svc+0x58/0x14c [ 184.838859][ T6168] el0_svc+0x7c/0x1f0 [ 184.839960][ T6168] el0t_64_sync_handler+0x84/0xe4 [ 184.841400][ T6168] el0t_64_sync+0x1a0/0x1a4 [ 184.842651][ T6168] irq event stamp: 420 [ 184.843805][ T6168] hardirqs last enabled at (419): [] kasan_quarantine_put+0xdc/0x204 [ 184.846448][ T6168] hardirqs last disabled at (420): [] el1_dbg+0x24/0x80 [ 184.848803][ T6168] softirqs last enabled at (402): [] local_bh_enable+0x10/0x34 [ 184.851345][ T6168] softirqs last disabled at (400): [] local_bh_disable+0x10/0x34 [ 184.853991][ T6168] ---[ end trace 9d5b11c7df20cbbd ]--- [ 184.903772][ T6171] loop2: detected capacity change from 0 to 764 [ 184.924630][ T6170] loop1: detected capacity change from 0 to 512 [ 185.025056][ T6171] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 185.189882][ T6170] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.672: corrupted in-inode xattr [ 185.193380][ T6170] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.672: couldn't read orphan inode 15 (err -117) [ 185.205787][ T6170] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.237269][ T6176] Symlink component flag not implemented [ 185.238966][ T6176] Symlink component flag not implemented [ 185.240537][ T6176] Symlink component flag not implemented (128) [ 185.242121][ T6176] Symlink component flag not implemented (122) [ 185.247953][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 192.498205][ T2055] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.499895][ T2055] ieee802154 phy1 wpan1: encryption failed: -22