last executing test programs: 16.070200749s ago: executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.395193565s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 14.727016826s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 13.97390366s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x7}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r0, 0x20, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x90) 13.283094109s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xc}, 0x90) unshare(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = epoll_create(0x2) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x1000}) r5 = fcntl$dupfd(r4, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f00000000c0)={0xa0002015}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r5, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000100)={0x0, 0xe, [{0xe}, {0x6}, {0x8}, {}, {}, {0x1}, {0x5}, {0xc, 0x1}, {0x3}, {0xd}, {}, {}, {0x0, 0x1}, {0xc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 10.720331875s ago: executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 9.230462329s ago: executing program 4: chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240), 0x1, 0x50b, &(0x7f0000004fc0)="$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") r0 = socket$unix(0x1, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x8901, 0x20000000) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/243) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe27d, 0x101000) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000080)=""/202) 8.812363157s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 8.712745353s ago: executing program 1: mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='m']) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='H', 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000021c0)=ANY=[@ANYBLOB="020400020a0000000000000000002ddb0300060000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000ec0facdc10c400677a7cf7a55322fd7ed94b4bb7b01b9c35eb66c8f1f8dfc5bd0358891e32556b4849f0e5e79ebef63ab283f711e04cda6df998f4c3c1661aedbf6833b6b7cdf97667caca7f4b75c87c60a7979000"/164], 0x50}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @multicast1, @multicast2}, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xee00]) setregid(0x0, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) close(r4) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) write$tcp_congestion(r5, 0x0, 0x3fffff) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c0000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000020c0)={0x0, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="f5cfb35a07fe98109b7b498aa65a5f112d1973db4fef8efc973149"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) 8.670952404s ago: executing program 0: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003040)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400001"], 0xb0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002a00090000000000000000000400"], 0x20}, 0x1, 0x3000000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448e1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adb91c4bf500fe800000000000000000000000000000ff0200000000000000000000000000010300"], 0x0) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendto$rxrpc(r6, &(0x7f0000000300)="8d18f4e4f2d9887f33a8552af07d5ea633350e8ad2de6854d6683461b9ff7e", 0x1f, 0x2000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0xc0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffff66, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) 8.154447924s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x7}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r0, 0x20, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x90) 7.739801281s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@user_xattr}, {@grpjquota_path}, {@resuid}, {@prjquota}, {@usrjquota}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x409e}}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$eJzs289vFFUcAPDvzG4BQdmKiIIgVTRp/NHSgsrBxGg08aCJiR7wWNtCkIUaWhMhjVZj8GhIvBuPJv4FnjwZ9WTiFY8mhoQoMQG9uGZ2Z0q77JbWbtlN9/NJBt6befve+3bmzb6dtxtA3xrK/kki7o6IyxFRaWSXFxhq/Hfj2vzk39fmJ5Oo1d78I6mXu35tfrKWK163I69zOI1IP03yRmJgabWz5y+cnqhWp8/l+dG5M++Nzp6/8PSpMxMnp09Onx0/duzokbHnnh1/pkWvf7u01jiz+K7v+3Bm/95X3770+uTxS+/8+E3W3z0HGsezONZa5+0MZYH/2fjbNB97vNONddm/tZtxJuVu94bVKkVEOR+cl6MSpbh58irxyidd7RywobJ79tb2hxdqwCaWRLd7AHRH8Uafff4ttjs09egJV19sfADK4r6Rb40j5UjzMgMb2P5QRBxf+OfLbIum5xC1Fs8NAADW67ts/vNUq/lfGnuWlNuZrw0NRsS9EbErIu6LiN0RcX9EvewDEfHgGtsfasrfOv9Mr/yvwFYpm/89n69tLZ//FbO/GCzluXvq8Q8kJ05Vpw/nf5PhGNia5cdaVV5U8fIvn7drf+n8L9uy9ou5YF7JlXLjAd22Ys/UxNxEpyalVz+O2FduFX+yuBKQRMTeiNi3tqp3FolTT3y9v12h28e/gg6sM9W+KiqZX4im+AvJyuuTo9uiOn14tLgqbvXTzxffaNf+uuLvgOz8b19+/TeVqPyVLF2vnV088MJq27j462dtP1OWV3/9L8qu/y3JW/U13S35vg8m5ubOjUVsSV6r55ftH7/52iJflM/iHz7Uevzvyl+Txf9QRGQX8YGIeDgiDubn7pGIeDQiDq0Q/w8vPfZuu2O9cP6nWt7/Fq//weXnf+2J0unvv23X/uruf0frqeF8T/3+dxvtu1PcRpuuZgAAANjE0vp345N0ZDGdpiMjje/w747taXVmdu7JEzPvn51qfId+MAbS4klXZcnz0LFkIa+xkR/PnxUXx4/kz42/KN1Vz49MzlSnuhw79LsdbcZ/5vdSt3sHbDi/14L+1Tz+0y71A7jzvP9D/zL+oX8Z/9C/Wo3/j5ry1gJgM6pVut0DoHvM/6F/Gf/Qv4x/6Evr+V3/RiXKK/x6X6JXEpH2RDd6JnGwh0ZTuQOju8s3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA75LwAA///foPki") syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xe}}) renameat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', r1, &(0x7f0000000300)='./file1\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666703a1ffe80"], 0xffdd) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x208080, &(0x7f0000000040), 0x1, 0x5a2, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.730908428s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x2000000000000141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100", @ANYRES8=r0, @ANYBLOB='d', @ANYRES32], 0x90}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40000000000011a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x1d8, 0x13, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xa5, 0x8, "f7e765c4af3aefa9d1dda07f24a9280bddb748afe464d96b37a8c2b056e7f61e319556b54e4a28f202508a5804349c35cf85a0b0534c87f6b63eb3f78a5f10ef667964695d689092fb104f392fc6dc23af06b4e0c3868202cb00eaca121237db1a666ef560e53fef92663f48ad3fedfa21460aaaf1712d1d8e158d184ec8d357eb3eff65307e8d16b8501c24e827c0c327a378faa988af90bea0789ba18f6c1bba"}, @NFTA_OBJ_USERDATA={0xb5, 0x8, "796d51a9035642d0c8b1ae22c82772ff7a1afb87876120babc52ebd0285a760b6313f156e84fa675619cfba2c5acfd50c214d74f024f6b0bf0c69444c89348310b5901832edb131fb94ed33b3da789f705e59e25df71b1d8aa79e302ca918f9c60e0003e5df4336e300bbaceec0923de5cd78b91463dab55575f0d6204b88640df4c85e2144e09ac938bee7f714e42ee37f3b3d09c5f2f7fdeb97775c7bd2311c106e47ebeeb3f9a5148dcd20e028314fc"}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "3878f3737e8140a3fe10107ba398fc5c7684fe5f891e"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140), 0x41, 0x0, 0x0) 7.322488812s ago: executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000500c3479bf55aa45000000000a0000000600010017000000"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sched_setscheduler(r0, 0x6, 0x0) getpid() add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(0x0, &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fa", 0x1, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000)={[{@auto_da_alloc_val}]}, 0xa, 0x501, &(0x7f0000000140)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0) keyctl$chown(0x4, r3, 0x0, 0xffffffffffffffff) 6.805873304s ago: executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) time(0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x208000, 0x800}, 0x20) time(&(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x64}, {0x5}, {0x6}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 6.453113869s ago: executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 5.634573899s ago: executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 4.990212265s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400), 0xb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x0, 0x0, 0x0, 0x7ff, 0xa5, &(0x7f00000004c0)=""/165, 0x40f00, 0x1, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x6, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0], 0x0, 0x10, 0x9}, 0x90) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000b40)={0x0, 0x8800, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.440296955s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x31d}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX]) dup(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 3.883843432s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'veth0_to_hsr\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) 2.902609705s ago: executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_create(0x0, 0x0) userfaultfd(0x801) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000006c0), &(0x7f0000000700)={0x7f}, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x20000000000, 0x7fffffff}) pwritev(r3, &(0x7f00000012c0)=[{&(0x7f0000001200)="d9", 0x1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300081a, &(0x7f0000000b00)=ANY=[], 0xf, 0x2a0, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800202", 0x1001, r7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000380)={[{@jqfmt_vfsv0}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nombcache}]}, 0x8, 0x602, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) 2.586995168s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.400812543s ago: executing program 2: semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) r0 = memfd_create(&(0x7f0000001340)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2Dy\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3\x11\xed\xac\xa2+\xe0\xc90\x17\bf\x8b\xbd\x10s\vO\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3\xfde\xe4{\xf8\x9b\xe9+2\xf2z\xb6.lJ\x1az\xbe}\x01e\x9c\xdf\"\xcdk\x88u\xf1\'\xa2\x0e\x16xw\xa8\x00\x1c\xd2\xfe8U\x89%\xb1\x0eB\x96\xf3\xb8-\xa3\x1e \x83\xf2\xe6\xf5\x8a\x91S\xb9\xe4\xea^', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r0, 0x0) utime(&(0x7f0000000000)='./file0/file0\x00', 0x0) 2.223010799s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0x7}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r0, 0x20, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x90) 1.639001596s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x16, 0x2000000000000141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100", @ANYRES8=r0, @ANYBLOB='d', @ANYRES32], 0x90}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x40000000000011a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021768238324ee0d5b18eabeda10c06e6143315"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000000140), 0x41, 0x0, 0x0) 1.220489101s ago: executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000007, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x2e00, 0x4000000}, 0x28) 1.08796206s ago: executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) 462.962171ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) time(0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000540)={0xffffffffffffffff, 0x208000, 0x800}, 0x20) time(&(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}}}, 0x24}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x64}, {0x5}, {0x6}]}) prlimit64(0x0, 0x0, 0x0, 0x0) 216.530237ms ago: executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): syz-executor.1[5716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.756684][ T4423] hsr_slave_0: left promiscuous mode [ 340.842045][ T4423] hsr_slave_1: left promiscuous mode [ 340.879505][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.887859][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.959200][ T4423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.973908][ T4423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.082234][ T4423] veth1_macvtap: left promiscuous mode [ 341.088533][ T4423] veth0_macvtap: left promiscuous mode [ 341.094532][ T4423] veth1_vlan: left promiscuous mode [ 341.101407][ T4423] veth0_vlan: left promiscuous mode [ 341.560029][ T5723] loop0: detected capacity change from 0 to 4096 [ 341.651648][ T5066] Bluetooth: hci2: command tx timeout [ 341.829546][ T5723] NILFS (loop0): invalid segment: Checksum error in segment payload [ 341.838488][ T5723] NILFS (loop0): trying rollback from an earlier position [ 342.026719][ T5723] NILFS (loop0): recovery complete [ 342.046957][ T5730] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 342.383842][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 342.478560][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 343.037594][ T5735] overlayfs: upper fs does not support tmpfile. [ 343.054538][ T5735] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 343.062388][ T5735] overlayfs: failed to set xattr on upper [ 343.068679][ T5735] overlayfs: ...falling back to redirect_dir=nofollow. [ 343.075801][ T5735] overlayfs: ...falling back to index=off. [ 343.081730][ T5735] overlayfs: ...falling back to uuid=null. [ 343.726377][ T5066] Bluetooth: hci2: command tx timeout [ 343.737878][ T5698] chnl_net:caif_netlink_parms(): no params data found [ 344.330043][ T5747] loop1: detected capacity change from 0 to 256 [ 345.809945][ T5066] Bluetooth: hci2: command tx timeout [ 346.140411][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.151762][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.159753][ T5698] bridge_slave_0: entered allmulticast mode [ 346.168328][ T5698] bridge_slave_0: entered promiscuous mode [ 346.350211][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.358740][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.367288][ T5698] bridge_slave_1: entered allmulticast mode [ 346.377622][ T5698] bridge_slave_1: entered promiscuous mode [ 346.798218][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.971264][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.102894][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.109812][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.518057][ T5698] team0: Port device team_slave_0 added [ 347.615192][ T5698] team0: Port device team_slave_1 added [ 347.814624][ T5775] vlan0: entered promiscuous mode [ 348.059008][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.066394][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.093080][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.390568][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.397963][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.424828][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.943050][ T5698] hsr_slave_0: entered promiscuous mode [ 348.999267][ T5698] hsr_slave_1: entered promiscuous mode [ 349.041808][ T5698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.049981][ T5698] Cannot create hsr debugfs directory [ 349.962805][ T5780] loop0: detected capacity change from 0 to 4096 [ 350.128710][ T5780] NILFS (loop0): invalid segment: Checksum error in segment payload [ 350.137244][ T5780] NILFS (loop0): trying rollback from an earlier position [ 350.436540][ T5780] NILFS (loop0): recovery complete [ 350.543482][ T5790] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 350.992847][ T5780] overlayfs: upper fs does not support tmpfile. [ 351.043467][ T5780] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 351.051579][ T5780] overlayfs: failed to set xattr on upper [ 351.058048][ T5780] overlayfs: ...falling back to redirect_dir=nofollow. [ 351.065563][ T5780] overlayfs: ...falling back to index=off. [ 351.071885][ T5780] overlayfs: ...falling back to uuid=null. [ 351.736729][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 351.812400][ T5795] ip6gretap0: entered promiscuous mode [ 351.818682][ T5795] macvtap1: entered promiscuous mode [ 351.831260][ T5795] macvtap1: entered allmulticast mode [ 351.837051][ T5795] ip6gretap0: entered allmulticast mode [ 352.318459][ T5698] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.430152][ T5698] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.513583][ T5698] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.646069][ T5698] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.888706][ T5646] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.551972][ T5814] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 354.831711][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.325898][ T5823] bridge0: entered allmulticast mode [ 355.563510][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.726520][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.734361][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.218617][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.226572][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.385605][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.407756][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.426257][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.447994][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.460539][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 356.481425][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.683724][ T5698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.694613][ T5698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.904571][ T3850] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.185413][ T3850] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.415341][ T3850] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.683433][ T3850] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.246786][ T5844] Zero length message leads to an empty skb [ 358.313517][ T3850] bridge_slave_1: left allmulticast mode [ 358.320111][ T3850] bridge_slave_1: left promiscuous mode [ 358.326966][ T3850] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.440278][ T3850] bridge_slave_0: left allmulticast mode [ 358.448435][ T3850] bridge_slave_0: left promiscuous mode [ 358.455349][ T3850] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.546081][ T51] Bluetooth: hci0: command tx timeout [ 359.814716][ T3850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.978623][ T3850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.086309][ T3850] bond0 (unregistering): Released all slaves [ 360.609864][ T51] Bluetooth: hci0: command tx timeout [ 360.860287][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.710973][ T51] Bluetooth: hci0: command tx timeout [ 363.176847][ T5869] loop0: detected capacity change from 0 to 512 [ 363.287444][ T5869] EXT4-fs: Ignoring removed oldalloc option [ 363.515436][ T5869] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 363.635276][ T5869] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 363.735497][ T5869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.789865][ T51] Bluetooth: hci0: command tx timeout [ 365.258270][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.396083][ T5698] veth0_vlan: entered promiscuous mode [ 365.987545][ T3850] hsr_slave_0: left promiscuous mode [ 366.018025][ T3850] hsr_slave_1: left promiscuous mode [ 366.031393][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.041039][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.088024][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.095947][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.137747][ T3850] veth1_macvtap: left promiscuous mode [ 366.143690][ T3850] veth0_macvtap: left promiscuous mode [ 366.149929][ T3850] veth1_vlan: left promiscuous mode [ 366.155914][ T3850] veth0_vlan: left promiscuous mode [ 367.466451][ T3850] team0 (unregistering): Port device team_slave_1 removed [ 367.597109][ T3850] team0 (unregistering): Port device team_slave_0 removed [ 367.975251][ T5698] veth1_vlan: entered promiscuous mode [ 368.596856][ T5698] veth0_macvtap: entered promiscuous mode [ 368.681929][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 368.789373][ T5698] veth1_macvtap: entered promiscuous mode [ 369.297148][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.308275][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.318582][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.331541][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.347390][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.359556][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.375645][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.672122][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 369.680161][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 369.850850][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.863569][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.873895][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.884686][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.895154][ T5698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.906034][ T5698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.920348][ T5916] loop1: detected capacity change from 0 to 512 [ 369.921818][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.097858][ T5916] EXT4-fs: Ignoring removed oldalloc option [ 370.317906][ T5916] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 370.387688][ T5916] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 370.410035][ T5916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.433138][ T5698] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.442984][ T5698] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.452284][ T5698] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.463984][ T5698] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.094908][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.104785][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.112949][ T5829] bridge_slave_0: entered allmulticast mode [ 371.178310][ T5829] bridge_slave_0: entered promiscuous mode [ 371.291106][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.299077][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.307139][ T5829] bridge_slave_1: entered allmulticast mode [ 371.316889][ T5829] bridge_slave_1: entered promiscuous mode [ 371.796161][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.839526][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.849647][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.858386][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.979771][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.988085][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.358879][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.753591][ T5829] team0: Port device team_slave_0 added [ 372.848421][ T5829] team0: Port device team_slave_1 added [ 373.233564][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.240867][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.267796][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.501642][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.509763][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.539533][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.195996][ T5829] hsr_slave_0: entered promiscuous mode [ 374.263606][ T5829] hsr_slave_1: entered promiscuous mode [ 376.793852][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.867961][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.949326][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.046072][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 378.763498][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.050698][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.198726][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.206642][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.323634][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.331583][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.301854][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.310110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.538475][ T2935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.547277][ T2935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.272607][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.038692][ T5829] veth0_vlan: entered promiscuous mode [ 383.211245][ T5829] veth1_vlan: entered promiscuous mode [ 383.804504][ T5829] veth0_macvtap: entered promiscuous mode [ 383.920552][ T5829] veth1_macvtap: entered promiscuous mode [ 384.227630][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.238639][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.249597][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.261673][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.273242][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.290358][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.309842][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.393107][ T6006] loop4: detected capacity change from 0 to 1024 [ 384.447367][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.458271][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.468584][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.479478][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.493263][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.505112][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.521050][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.648848][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.658592][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.667845][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.677030][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.717977][ T6006] hfsplus: failed to load root directory [ 392.929022][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.937224][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.312853][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.321222][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.312842][ T5914] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.047436][ T6092] loop3: detected capacity change from 0 to 256 [ 399.176196][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.403809][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.655400][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.081125][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.375530][ T5066] Bluetooth: hci5: command 0x0406 tx timeout [ 400.634154][ T11] bridge_slave_1: left allmulticast mode [ 400.640401][ T11] bridge_slave_1: left promiscuous mode [ 400.647149][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.696364][ T11] bridge_slave_0: left allmulticast mode [ 400.702475][ T11] bridge_slave_0: left promiscuous mode [ 400.709699][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.760086][ T11] gretap1: left allmulticast mode [ 400.779802][ T11] gretap1: left promiscuous mode [ 400.790167][ T11] bridge1: port 1(gretap1) entered disabled state [ 401.378103][ T5066] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.408539][ T5066] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.423510][ T5066] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.531101][ T5066] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.543059][ T5066] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 401.552737][ T5066] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.628228][ T11] bridge0 (unregistering): left allmulticast mode [ 401.970185][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.073391][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.134336][ T11] bond0 (unregistering): Released all slaves [ 403.642845][ T11] hsr_slave_0: left promiscuous mode [ 403.660433][ T11] hsr_slave_1: left promiscuous mode [ 403.714873][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.723446][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.793028][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.800961][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.859737][ T11] veth1_macvtap: left promiscuous mode [ 403.866055][ T11] veth0_macvtap: left promiscuous mode [ 403.871792][ T11] veth1_vlan: left promiscuous mode [ 403.877508][ T11] veth0_vlan: left promiscuous mode [ 403.885507][ T5066] Bluetooth: hci1: command tx timeout [ 405.985441][ T5066] Bluetooth: hci1: command tx timeout [ 406.648046][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.768264][ T11] team0 (unregistering): Port device team_slave_0 removed [ 408.045201][ T5066] Bluetooth: hci1: command tx timeout [ 408.288455][ T6112] chnl_net:caif_netlink_parms(): no params data found [ 408.613325][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.620278][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.125722][ T5066] Bluetooth: hci1: command tx timeout [ 410.338306][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.346356][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.354217][ T6112] bridge_slave_0: entered allmulticast mode [ 410.363821][ T6112] bridge_slave_0: entered promiscuous mode [ 410.573821][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.581873][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.589887][ T6112] bridge_slave_1: entered allmulticast mode [ 410.608203][ T6112] bridge_slave_1: entered promiscuous mode [ 411.116662][ T6112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.198618][ T6112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.612186][ T6112] team0: Port device team_slave_0 added [ 411.662132][ T6112] team0: Port device team_slave_1 added [ 412.050570][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.059789][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.086662][ T6112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.200934][ T6112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.208374][ T6112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.234827][ T6112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.942955][ T6112] hsr_slave_0: entered promiscuous mode [ 413.002840][ T6112] hsr_slave_1: entered promiscuous mode [ 413.041668][ T6112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.049615][ T6112] Cannot create hsr debugfs directory [ 415.161762][ T6112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 415.241934][ T6112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 415.287583][ T6112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 415.357354][ T6112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 416.866590][ T6112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.097764][ T6112] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.198055][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.205808][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.321106][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.328750][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.555993][ T779] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 417.889559][ T6169] fuse: Bad value for 'fd' [ 418.016548][ T779] usb 5-1: config 0 has an invalid interface number: 18 but max is 0 [ 418.025195][ T779] usb 5-1: config 0 has no interface number 0 [ 418.031449][ T779] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.042836][ T779] usb 5-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.185263][ T779] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 418.194596][ T779] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 418.203059][ T779] usb 5-1: Manufacturer: syz [ 418.257787][ T779] usb 5-1: config 0 descriptor?? [ 418.867696][ T779] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.18/0003:054C:03D5.0001/input/input5 [ 418.988219][ T779] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.4-1/input18 [ 419.085841][ T779] usb 5-1: USB disconnect, device number 2 [ 420.243314][ T6112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.918428][ T6112] veth0_vlan: entered promiscuous mode [ 421.061562][ T6112] veth1_vlan: entered promiscuous mode [ 421.226814][ T6184] loop4: detected capacity change from 0 to 512 [ 421.328192][ T6184] EXT4-fs: Ignoring removed oldalloc option [ 421.540254][ T6112] veth0_macvtap: entered promiscuous mode [ 421.578572][ T6112] veth1_macvtap: entered promiscuous mode [ 421.646050][ T6184] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 421.698316][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.709125][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.719173][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.729983][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.740247][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.750947][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.771703][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.945775][ T6184] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 421.977439][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.988277][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.998345][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.009128][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.019212][ T6112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.029932][ T6112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.043889][ T6112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.099602][ T6184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.151673][ T6112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.161835][ T6112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.177919][ T6112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.192972][ T6112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.966424][ T5074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.980591][ T5074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.021065][ T5074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.076755][ T5074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.105561][ T5074] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 425.118483][ T5074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.220779][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 427.248342][ T5066] Bluetooth: hci3: command tx timeout [ 428.231306][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.525839][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.811362][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.021478][ T5074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 429.037744][ T5074] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.051208][ T5074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.102872][ T5074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.123891][ T5074] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.138831][ T5074] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.302661][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.342998][ T5066] Bluetooth: hci3: command tx timeout [ 429.468209][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.477919][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.485788][ T6196] bridge_slave_0: entered allmulticast mode [ 429.494074][ T6196] bridge_slave_0: entered promiscuous mode [ 429.760655][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.769495][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.777411][ T6196] bridge_slave_1: entered allmulticast mode [ 429.786348][ T6196] bridge_slave_1: entered promiscuous mode [ 430.535833][ T11] bridge_slave_1: left allmulticast mode [ 430.541798][ T11] bridge_slave_1: left promiscuous mode [ 430.548228][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.758403][ T11] bridge_slave_0: left allmulticast mode [ 430.764357][ T11] bridge_slave_0: left promiscuous mode [ 430.777298][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.279285][ T5066] Bluetooth: hci4: command tx timeout [ 431.415421][ T5066] Bluetooth: hci3: command tx timeout [ 431.602655][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.708194][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.838427][ T11] bond0 (unregistering): Released all slaves [ 432.125740][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.242894][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.692632][ T6196] team0: Port device team_slave_0 added [ 432.993126][ T6196] team0: Port device team_slave_1 added [ 433.088537][ T11] hsr_slave_0: left promiscuous mode [ 433.108723][ T11] hsr_slave_1: left promiscuous mode [ 433.149535][ T11] veth1_macvtap: left promiscuous mode [ 433.155948][ T11] veth0_macvtap: left promiscuous mode [ 433.161921][ T11] veth1_vlan: left promiscuous mode [ 433.167668][ T11] veth0_vlan: left promiscuous mode [ 433.345876][ T5066] Bluetooth: hci4: command tx timeout [ 433.488240][ T5066] Bluetooth: hci3: command tx timeout [ 433.954828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 434.070261][ T11] team0 (unregistering): Port device team_slave_0 removed [ 434.950858][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.953733][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.959422][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.977861][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.005582][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.099753][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 435.284155][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.291462][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.317847][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.339434][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.347725][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.417865][ T5066] Bluetooth: hci4: command tx timeout [ 435.880142][ T6196] hsr_slave_0: entered promiscuous mode [ 435.958534][ T6196] hsr_slave_1: entered promiscuous mode [ 436.003389][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.011512][ T6196] Cannot create hsr debugfs directory [ 436.796098][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.803912][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.812386][ T6215] bridge_slave_0: entered allmulticast mode [ 436.827965][ T6215] bridge_slave_0: entered promiscuous mode [ 436.907695][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.920805][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.928874][ T6215] bridge_slave_1: entered allmulticast mode [ 436.938567][ T6215] bridge_slave_1: entered promiscuous mode [ 437.311730][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.472116][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.505523][ T5066] Bluetooth: hci4: command tx timeout [ 437.893077][ T6215] team0: Port device team_slave_0 added [ 437.995864][ T6215] team0: Port device team_slave_1 added [ 438.308889][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.316224][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.342628][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.566393][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.573697][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.601076][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.647054][ T6196] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 438.753840][ T6196] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.877020][ T6196] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 439.000888][ T6196] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 439.186753][ T6215] hsr_slave_0: entered promiscuous mode [ 439.280612][ T6215] hsr_slave_1: entered promiscuous mode [ 439.336169][ T6215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.343991][ T6215] Cannot create hsr debugfs directory [ 440.884328][ T6215] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.330667][ T6215] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.434070][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.609344][ T6215] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.797354][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.903201][ T6215] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.127561][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.220049][ T11] bridge_slave_1: left allmulticast mode [ 442.226794][ T11] bridge_slave_1: left promiscuous mode [ 442.233440][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.271669][ T11] bridge_slave_0: left allmulticast mode [ 442.278312][ T11] bridge_slave_0: left promiscuous mode [ 442.285098][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.586241][ T6250] loop1: detected capacity change from 0 to 4096 [ 442.691657][ T6250] NILFS (loop1): invalid segment: Checksum error in segment payload [ 442.700307][ T6250] NILFS (loop1): trying rollback from an earlier position [ 442.827532][ T6250] NILFS (loop1): recovery complete [ 442.861278][ T6255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.907802][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.997357][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.078318][ T11] bond0 (unregistering): Released all slaves [ 443.241118][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.249172][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.614716][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.622627][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.639906][ T6215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.791072][ T6215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.959965][ T6215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.043602][ T6215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.207687][ T11] hsr_slave_0: left promiscuous mode [ 444.248010][ T11] hsr_slave_1: left promiscuous mode [ 444.314363][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.323863][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.374162][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.383293][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.545915][ T11] veth1_macvtap: left promiscuous mode [ 444.551730][ T11] veth0_macvtap: left promiscuous mode [ 444.557799][ T11] veth1_vlan: left promiscuous mode [ 444.563396][ T11] veth0_vlan: left promiscuous mode [ 445.484054][ T6180] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.744701][ T11] team0 (unregistering): Port device team_slave_1 removed [ 445.816863][ T11] team0 (unregistering): Port device team_slave_0 removed [ 447.784592][ T6268] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.880445][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.209363][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.402488][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.410589][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.537669][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.545641][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.133527][ T6274] loop1: detected capacity change from 0 to 512 [ 449.219042][ T6274] EXT4-fs: Ignoring removed mblk_io_submit option [ 449.271577][ T6274] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 449.373226][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.396267][ T6274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056c118, mo2=0002] [ 449.405332][ T6274] System zones: 1-12 [ 449.438546][ T6274] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 449.530792][ T6274] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 449.611249][ T6274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.406069][ T6274] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: e_value size too large [ 450.600582][ T6196] veth0_vlan: entered promiscuous mode [ 450.750132][ T6196] veth1_vlan: entered promiscuous mode [ 450.953951][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 451.056751][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 451.157221][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 451.211256][ T5074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.222363][ T5074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.232468][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 451.246696][ T5074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.268310][ T6196] veth0_macvtap: entered promiscuous mode [ 451.308084][ T5074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.392135][ T5074] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 451.426148][ T5074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.435772][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 451.449786][ T6196] veth1_macvtap: entered promiscuous mode [ 451.601855][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.613668][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.616448][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 451.623697][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.655692][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.668622][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.680050][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.696068][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.716421][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.728396][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 451.859799][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.875381][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.886933][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.897857][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.909437][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 451.928437][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 451.929869][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.965701][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.987807][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.522599][ T6196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.533109][ T6196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.545852][ T6196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.555081][ T6196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.059274][ T6284] chnl_net:caif_netlink_parms(): no params data found [ 453.174457][ T6215] veth0_vlan: entered promiscuous mode [ 453.392920][ T6215] veth1_vlan: entered promiscuous mode [ 453.575645][ T5066] Bluetooth: hci0: command tx timeout [ 453.903426][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.124852][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.276263][ T6215] veth0_macvtap: entered promiscuous mode [ 454.366735][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.414208][ T6215] veth1_macvtap: entered promiscuous mode [ 454.474608][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.066168][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.077090][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.087654][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.098451][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.108662][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.119540][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.129842][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.140857][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.162650][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.242403][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.258109][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.270161][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.282526][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.293616][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.304661][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.314978][ T6215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.325968][ T6215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.341677][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.358264][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.366259][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.374145][ T6284] bridge_slave_0: entered allmulticast mode [ 455.383832][ T6284] bridge_slave_0: entered promiscuous mode [ 455.462821][ T6112] EXT4-fs error: 162 callbacks suppressed [ 455.462904][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 455.517852][ T6215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.527289][ T6215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.536493][ T6215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.545728][ T6215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.585128][ T11] bridge_slave_1: left allmulticast mode [ 455.591072][ T11] bridge_slave_1: left promiscuous mode [ 455.598373][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.620178][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 455.658373][ T5066] Bluetooth: hci0: command tx timeout [ 455.662115][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 455.697029][ T11] bridge_slave_0: left allmulticast mode [ 455.702974][ T11] bridge_slave_0: left promiscuous mode [ 455.709881][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.776314][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 455.833958][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 455.935734][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 455.983368][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 456.009125][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 456.130161][ T6112] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 18: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 456.213561][ T6112] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor.1: path /root/syzkaller-testdir844263038/syzkaller.HapXQn/6/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 456.487314][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.549062][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.603818][ T11] bond0 (unregistering): Released all slaves [ 456.641484][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.649710][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.657827][ T6284] bridge_slave_1: entered allmulticast mode [ 456.667507][ T6284] bridge_slave_1: entered promiscuous mode [ 457.003006][ T6112] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.152305][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.392427][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.732654][ T5066] Bluetooth: hci0: command tx timeout [ 457.999949][ T11] hsr_slave_0: left promiscuous mode [ 458.036817][ T11] hsr_slave_1: left promiscuous mode [ 458.075478][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.083267][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.105911][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.117386][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.157052][ T11] veth1_macvtap: left promiscuous mode [ 458.162968][ T11] veth0_macvtap: left promiscuous mode [ 458.169084][ T11] veth1_vlan: left promiscuous mode [ 458.174673][ T11] veth0_vlan: left promiscuous mode [ 459.224769][ T11] team0 (unregistering): Port device team_slave_1 removed [ 459.289294][ T11] team0 (unregistering): Port device team_slave_0 removed [ 459.811422][ T6284] team0: Port device team_slave_0 added [ 459.826309][ T5066] Bluetooth: hci0: command tx timeout [ 459.901452][ T6284] team0: Port device team_slave_1 added [ 460.190257][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.197489][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.223763][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.295649][ T5074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.320776][ T5074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.332728][ T5074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.346491][ T5074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.395441][ T5074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 460.404683][ T5074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.432351][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.440767][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.468394][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.664809][ T6284] hsr_slave_0: entered promiscuous mode [ 460.681967][ T6284] hsr_slave_1: entered promiscuous mode [ 462.445209][ T5074] Bluetooth: hci1: command tx timeout [ 462.466205][ T6331] chnl_net:caif_netlink_parms(): no params data found [ 462.660598][ T6284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 462.758219][ T6284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 462.950608][ T6284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.055290][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.063429][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.088820][ T6284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.311474][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.320763][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.705319][ T29] audit: type=1804 audit(1717655230.519:13): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/file0/root/syzkaller-testdir304533876/syzkaller.fwLjZZ/76/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 464.531291][ T5074] Bluetooth: hci1: command tx timeout [ 464.617970][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.628595][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.636782][ T6331] bridge_slave_0: entered allmulticast mode [ 464.646607][ T6331] bridge_slave_0: entered promiscuous mode [ 464.785899][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.793714][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.801715][ T6331] bridge_slave_1: entered allmulticast mode [ 464.811434][ T6331] bridge_slave_1: entered promiscuous mode [ 465.112716][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.215276][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.254619][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.569277][ T6331] team0: Port device team_slave_0 added [ 465.618087][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 465.656597][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.721914][ T6331] team0: Port device team_slave_1 added [ 465.914855][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.095933][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.176547][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.183771][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.216438][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.296308][ T6284] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.327270][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.369744][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.377223][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.404042][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.448829][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.456756][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.590734][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.598635][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.605438][ T5074] Bluetooth: hci1: command tx timeout [ 466.983029][ T6331] hsr_slave_0: entered promiscuous mode [ 467.017538][ T6331] hsr_slave_1: entered promiscuous mode [ 467.036329][ T6331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.044273][ T6331] Cannot create hsr debugfs directory [ 467.061622][ T11] bridge_slave_1: left allmulticast mode [ 467.067659][ T11] bridge_slave_1: left promiscuous mode [ 467.074342][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.133067][ T11] bridge_slave_0: left allmulticast mode [ 467.139364][ T11] bridge_slave_0: left promiscuous mode [ 467.146254][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.912332][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.962091][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.010902][ T11] bond0 (unregistering): Released all slaves [ 468.693286][ T5074] Bluetooth: hci1: command tx timeout [ 468.809862][ T4423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.818797][ T4423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.285290][ T11] hsr_slave_0: left promiscuous mode [ 469.340074][ T11] hsr_slave_1: left promiscuous mode [ 469.340175][ T5066] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.356401][ T5066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.368580][ T5066] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.379309][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.387083][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.399854][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.407662][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.427732][ T5066] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.456688][ T5066] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 469.462153][ T11] veth1_macvtap: left promiscuous mode [ 469.469859][ T11] veth0_macvtap: left promiscuous mode [ 469.476117][ T11] veth1_vlan: left promiscuous mode [ 469.483587][ T11] veth0_vlan: left promiscuous mode [ 469.496933][ T5066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.739900][ T6386] loop0: detected capacity change from 0 to 512 [ 469.825851][ T6386] EXT4-fs: Ignoring removed oldalloc option [ 469.878960][ T6386] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 469.951837][ T6386] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 469.993989][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.998059][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.001004][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.294741][ T6196] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.438182][ T11] team0 (unregistering): Port device team_slave_1 removed [ 470.493044][ T11] team0 (unregistering): Port device team_slave_0 removed [ 471.263796][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.273215][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.827074][ T5074] Bluetooth: hci2: command tx timeout [ 473.151164][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 473.411625][ T6331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.582400][ T6331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.679799][ T6331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.796830][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.810731][ T6331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.886812][ T5074] Bluetooth: hci2: command tx timeout [ 474.973822][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.981891][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.990076][ T6388] bridge_slave_0: entered allmulticast mode [ 474.999836][ T6388] bridge_slave_0: entered promiscuous mode [ 475.155856][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.163739][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.173002][ T6388] bridge_slave_1: entered allmulticast mode [ 475.182988][ T6388] bridge_slave_1: entered promiscuous mode [ 475.540932][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.652735][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.720019][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.965533][ T5074] Bluetooth: hci2: command tx timeout [ 476.003383][ T6388] team0: Port device team_slave_0 added [ 476.119700][ T6388] team0: Port device team_slave_1 added [ 476.170998][ T6331] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.298988][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.306959][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.557114][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.564334][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.591677][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.673450][ T787] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.681388][ T787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.710772][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.718654][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.745452][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.929273][ T6304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.190696][ T6304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.408965][ T6304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.548623][ T6431] loop3: detected capacity change from 0 to 512 [ 477.581676][ T6431] EXT4-fs: Ignoring removed oldalloc option [ 477.662180][ T6304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.688396][ T6431] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 477.750081][ T6431] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 477.791033][ T6388] hsr_slave_0: entered promiscuous mode [ 477.830112][ T6388] hsr_slave_1: entered promiscuous mode [ 477.840198][ T6431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.854013][ T6388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.862328][ T6388] Cannot create hsr debugfs directory [ 477.959468][ T6284] veth0_vlan: entered promiscuous mode [ 478.050395][ T5074] Bluetooth: hci2: command tx timeout [ 478.263866][ T6439] loop0: detected capacity change from 0 to 2048 [ 478.351434][ T6215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.406093][ T6304] bridge_slave_1: left allmulticast mode [ 478.412045][ T6304] bridge_slave_1: left promiscuous mode [ 478.418888][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.440566][ T6439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.465631][ T6304] bridge_slave_0: left allmulticast mode [ 478.471558][ T6304] bridge_slave_0: left promiscuous mode [ 478.478497][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.748543][ T6196] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.870846][ T6304] ip6gretap0 (unregistering): left allmulticast mode [ 479.279977][ T6304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.335755][ T6304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.361353][ T6304] bond0 (unregistering): Released all slaves [ 479.438921][ T6284] veth1_vlan: entered promiscuous mode [ 480.175851][ T6453] loop0: detected capacity change from 0 to 16 [ 480.207282][ T6453] erofs: (device loop0): mounted with root inode @ nid 36. [ 480.428878][ T6456] loop3: detected capacity change from 0 to 512 [ 480.440157][ T6304] hsr_slave_0: left promiscuous mode [ 480.457202][ T6304] hsr_slave_1: left promiscuous mode [ 480.470729][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.480511][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.503620][ T6456] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 480.526234][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.533992][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.606454][ T6304] veth1_macvtap: left promiscuous mode [ 480.612273][ T6304] veth0_macvtap: left promiscuous mode [ 480.618368][ T6304] veth1_vlan: left promiscuous mode [ 480.623834][ T6304] veth0_vlan: left promiscuous mode [ 481.367261][ T6461] loop0: detected capacity change from 0 to 1764 [ 481.521803][ T6304] team0 (unregistering): Port device team_slave_1 removed [ 481.622659][ T6304] team0 (unregistering): Port device team_slave_0 removed [ 481.896936][ T6284] veth0_macvtap: entered promiscuous mode [ 482.095952][ T6284] veth1_macvtap: entered promiscuous mode [ 482.591217][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.602494][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.612957][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.623772][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.639821][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.658376][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.826479][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.837358][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.847686][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.858673][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.874159][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.981660][ T6284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.991342][ T6284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.004648][ T6284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.015221][ T6284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.446343][ T6388] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.526901][ T6388] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.588335][ T6331] veth0_vlan: entered promiscuous mode [ 483.671039][ T6388] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.813587][ T6388] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.898093][ T6467] sit0: entered promiscuous mode [ 483.927255][ T6467] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 483.935865][ T6467] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.999856][ T6331] veth1_vlan: entered promiscuous mode [ 484.550040][ T6331] veth0_macvtap: entered promiscuous mode [ 484.652821][ T6331] veth1_macvtap: entered promiscuous mode [ 484.909294][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.922406][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.934625][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.947240][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.957768][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.968813][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.988547][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.287933][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.298837][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.308993][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.319883][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.334072][ T6331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.348108][ T6331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.365208][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.606868][ T6331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.616341][ T6331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.625803][ T6331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.634990][ T6331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.741947][ T6478] loop0: detected capacity change from 0 to 512 [ 485.827224][ T6478] EXT4-fs: Ignoring removed oldalloc option [ 485.954138][ T6478] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 486.021038][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.063738][ T6478] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 486.168588][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.197784][ T6478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.293732][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.301704][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.433078][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.441121][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.669461][ T6196] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.312760][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.842987][ T6388] veth0_vlan: entered promiscuous mode [ 489.965053][ T6388] veth1_vlan: entered promiscuous mode [ 490.379626][ T6388] veth0_macvtap: entered promiscuous mode [ 490.458224][ T6388] veth1_macvtap: entered promiscuous mode [ 490.695796][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.706990][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.717623][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.728493][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.738739][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.749772][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.760109][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.771040][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.791899][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.999266][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.010323][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.020643][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.031554][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.041825][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.052702][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.062897][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.073761][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.101172][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.311021][ T6388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.320401][ T6388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.332327][ T6388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.342640][ T6388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.738587][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.747404][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.095655][ T5125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.103839][ T5125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.001276][ T6540] loop3: detected capacity change from 0 to 512 [ 493.090113][ T6540] EXT4-fs: Ignoring removed oldalloc option [ 493.202690][ T6549] loop4: detected capacity change from 0 to 128 [ 493.641157][ T6540] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 493.669312][ T6549] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 493.706701][ T6540] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 493.728254][ T6549] ext4 filesystem being mounted at /root/syzkaller-testdir756524475/syzkaller.YGaKVl/0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 493.768511][ T6540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.100225][ T6215] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.590361][ T6284] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.745274][ T5113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.753384][ T5113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.918228][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.928301][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.848307][ T6590] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 497.064839][ T6593] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 497.422065][ T6591] loop1: detected capacity change from 0 to 512 [ 497.525889][ T6591] EXT4-fs: Ignoring removed oldalloc option [ 497.676101][ T6591] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 497.770290][ T6591] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 497.971150][ T6591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.212964][ T6598] loop0: detected capacity change from 0 to 4096 [ 498.731182][ T6331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.755111][ T6602] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 499.810500][ T5066] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 499.820281][ T5066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 499.841239][ T5066] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 499.858402][ T5066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 499.873660][ T5066] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 499.884524][ T5066] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.579199][ T6611] chnl_net:caif_netlink_parms(): no params data found [ 502.001442][ T5066] Bluetooth: hci5: command tx timeout [ 502.306633][ T6304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.314631][ T6304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.536777][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 502.992371][ T6304] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.122530][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.131681][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.233701][ T6304] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.390365][ T6304] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.523667][ T6636] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 503.572555][ T6304] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.854515][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.864681][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.872787][ T6611] bridge_slave_0: entered allmulticast mode [ 503.882463][ T6611] bridge_slave_0: entered promiscuous mode [ 503.971618][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.979764][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.997014][ T6611] bridge_slave_1: entered allmulticast mode [ 504.007146][ T6611] bridge_slave_1: entered promiscuous mode [ 504.061435][ T5066] Bluetooth: hci5: command tx timeout [ 504.211996][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.331406][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.619425][ T6304] bridge_slave_1: left allmulticast mode [ 504.625567][ T6304] bridge_slave_1: left promiscuous mode [ 504.632224][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.726626][ T6304] bridge_slave_0: left allmulticast mode [ 504.732573][ T6304] bridge_slave_0: left promiscuous mode [ 504.739513][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.794538][ T6649] loop2: detected capacity change from 0 to 64 [ 504.959331][ T6651] loop1: detected capacity change from 0 to 512 [ 505.467929][ T6304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.560540][ T6304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.599195][ T6304] bond0 (unregistering): Released all slaves [ 505.650025][ T6651] EXT4-fs (loop1): Test dummy encryption mode enabled [ 505.685588][ T6611] team0: Port device team_slave_0 added [ 505.778846][ T6651] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 505.838689][ T6611] team0: Port device team_slave_1 added [ 505.899091][ T6651] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 505.925695][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.125974][ T5066] Bluetooth: hci5: command tx timeout [ 506.224691][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.232348][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.265351][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.336171][ T5123] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 506.411537][ T6663] loop0: detected capacity change from 0 to 512 [ 506.509106][ T6663] EXT4-fs (loop0): Test dummy encryption mode enabled [ 506.583091][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.592402][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.619067][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.678022][ T6663] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.0: corrupted in-inode xattr: invalid ea_ino [ 506.720654][ T6663] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 12 (err -117) [ 506.795140][ T6304] hsr_slave_0: left promiscuous mode [ 506.812203][ T6304] hsr_slave_1: left promiscuous mode [ 506.820300][ T6663] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.835493][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 108, changing to 10 [ 506.847267][ T5123] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 26478, setting to 1024 [ 506.862663][ T5123] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 506.878904][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.887455][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.920874][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.931275][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.977439][ T6304] veth1_macvtap: left promiscuous mode [ 506.983364][ T6304] veth0_macvtap: left promiscuous mode [ 506.989537][ T6304] veth1_vlan: left promiscuous mode [ 506.999544][ T6304] veth0_vlan: left promiscuous mode [ 507.310691][ T5123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.320257][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.328712][ T5123] usb 2-1: SerialNumber: syz [ 507.417320][ T6651] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 507.488681][ T5123] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 507.785218][ T5133] usb 2-1: USB disconnect, device number 4 [ 508.121122][ T29] audit: type=1326 audit(1717655274.869:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b5579 code=0x0 [ 508.207418][ T5066] Bluetooth: hci5: command tx timeout [ 508.352889][ T6304] team0 (unregistering): Port device team_slave_1 removed [ 508.504182][ T6304] team0 (unregistering): Port device team_slave_0 removed [ 508.604476][ T6331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.959945][ T6663] fscrypt (loop0): Error allocating 'xts(aes)' transform: -4 [ 509.370605][ T6611] hsr_slave_0: entered promiscuous mode [ 509.430822][ T6611] hsr_slave_1: entered promiscuous mode [ 509.485781][ T6611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.493786][ T6611] Cannot create hsr debugfs directory [ 509.778365][ T6196] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 510.054794][ T6688] loop1: detected capacity change from 0 to 2048 [ 510.247752][ T6688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.004446][ T6331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.764043][ T6611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 511.868915][ T6611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 511.985943][ T6611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 512.110434][ T6611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 512.382339][ T6715] loop1: detected capacity change from 0 to 512 [ 512.515829][ T6715] EXT4-fs (loop1): Test dummy encryption mode enabled [ 512.718939][ T6715] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 512.820542][ T6715] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 512.891861][ T6715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.215398][ T5133] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 513.685984][ T5133] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 108, changing to 10 [ 513.697639][ T5133] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 26478, setting to 1024 [ 513.709385][ T5133] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 513.834340][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.854312][ T5133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.864085][ T5133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.872582][ T5133] usb 2-1: SerialNumber: syz [ 513.962943][ T6715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 514.004378][ T5133] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 514.037157][ T6611] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.304783][ T5133] usb 2-1: USB disconnect, device number 5 [ 514.771860][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.779884][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.926128][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.933899][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.098075][ T6331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.545420][ T6729] loop2: detected capacity change from 0 to 2048 [ 515.742150][ T6729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.645971][ T6388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.979776][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.553164][ T6611] veth0_vlan: entered promiscuous mode [ 517.670650][ T6611] veth1_vlan: entered promiscuous mode [ 517.987377][ T6751] loop1: detected capacity change from 0 to 1024 [ 518.096198][ T6611] veth0_macvtap: entered promiscuous mode [ 518.153829][ T6751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.189752][ T6611] veth1_macvtap: entered promiscuous mode [ 518.416650][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.433166][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.444693][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.455868][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.466160][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.477020][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.487341][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.498293][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.515387][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.749889][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.761361][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.771633][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.782541][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.792753][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.803566][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.813732][ T6611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.825178][ T6611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.848597][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.920608][ T6331] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.980224][ T6611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.989676][ T6611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.998854][ T6611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.010640][ T6611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.365765][ T5113] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 519.645515][ T5113] usb 5-1: Using ep0 maxpacket: 8 [ 519.787334][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.798786][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.809206][ T5113] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 519.818710][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.901004][ T5113] usb 5-1: config 0 descriptor?? [ 520.142640][ T6771] loop1: detected capacity change from 0 to 256 [ 520.492371][ T5113] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 520.500011][ T5113] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 520.507273][ T5113] elo 0003:04E7:0009.0002: item fetching failed at offset 2/7 [ 520.604599][ T5113] elo 0003:04E7:0009.0002: parse failed [ 520.617317][ T5113] elo 0003:04E7:0009.0002: probe with driver elo failed with error -22 [ 520.721880][ T5113] usb 5-1: USB disconnect, device number 3 [ 521.830298][ T6781] infiniband syz2: set active [ 521.835450][ T6781] infiniband syz2: added team_slave_1 [ 522.170771][ T6781] RDS/IB: syz2: added [ 522.175423][ T6781] smc: adding ib device syz2 with port count 1 [ 522.181744][ T6781] smc: ib device syz2 port 1 has pnetid [ 524.297387][ T6787] sch_tbf: burst 88 is lower than device veth1_to_team mtu (1514) ! [ 524.533297][ T29] audit: type=1326 audit(1717655291.409:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x0 [ 526.132126][ T6800] loop4: detected capacity change from 0 to 2048 [ 526.342281][ T6800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.348413][ T6284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.135181][ T5133] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 528.415978][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.424145][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.512500][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.521795][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.657857][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.675489][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.687094][ T5133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.700407][ T5133] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 528.709907][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.744482][ T6825] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 528.799038][ T5133] usb 3-1: config 0 descriptor?? [ 528.861918][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.032038][ T6827] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 529.042327][ T29] audit: type=1326 audit(1717655295.929:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b5579 code=0x0 [ 529.401143][ T5133] wacom 0003:056A:0094.0003: unbalanced collection at end of report description [ 529.425302][ T5133] wacom 0003:056A:0094.0003: parse failed [ 529.432517][ T5133] wacom 0003:056A:0094.0003: probe with driver wacom failed with error -22 [ 529.610097][ T5123] usb 3-1: USB disconnect, device number 2 [ 530.418473][ T5133] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 531.078090][ T5133] usb 4-1: Using ep0 maxpacket: 8 [ 531.298855][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.312038][ T5133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.324117][ T5133] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 531.335566][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.473658][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.480556][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.520513][ T5133] usb 4-1: config 0 descriptor?? [ 531.922499][ T5133] usbhid 4-1:0.0: can't add hid device: -71 [ 531.930047][ T5133] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 531.976340][ T5133] usb 4-1: USB disconnect, device number 3 [ 532.628317][ T6846] loop2: detected capacity change from 0 to 2048 [ 532.801639][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.697940][ T6388] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.934498][ T5133] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 534.235511][ T5133] usb 4-1: Using ep0 maxpacket: 8 [ 534.625168][ T6862] syz2: rxe_newlink: already configured on team_slave_1 [ 534.789283][ T6862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 534.862543][ T6862] sch_tbf: burst 88 is lower than device vlan1 mtu (1514) ! [ 534.902910][ T5133] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.918391][ T5133] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.933627][ T5133] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 534.943134][ T5133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.973811][ T5133] usb 4-1: config 0 descriptor?? [ 535.292055][ T29] audit: type=1326 audit(1717655302.099:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x0 [ 535.785713][ T5119] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 535.876480][ T5133] usb 4-1: string descriptor 0 read error: -71 [ 535.894748][ T5133] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 535.996951][ T5133] usb 4-1: USB disconnect, device number 4 [ 536.285849][ T5119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.297268][ T5119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.307840][ T5119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.321266][ T5119] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 536.330855][ T5119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.408650][ T5119] usb 5-1: config 0 descriptor?? [ 537.047684][ T5119] wacom 0003:056A:0094.0004: unbalanced collection at end of report description [ 537.141962][ T5119] wacom 0003:056A:0094.0004: parse failed [ 537.149056][ T5119] wacom 0003:056A:0094.0004: probe with driver wacom failed with error -22 [ 537.297729][ T5119] usb 5-1: USB disconnect, device number 4 [ 538.708520][ T5124] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 538.985117][ T5124] usb 4-1: Using ep0 maxpacket: 8 [ 539.156588][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.167874][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.177934][ T5124] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 539.187232][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.304867][ T5124] usb 4-1: config 0 descriptor?? [ 539.732142][ T5124] usbhid 4-1:0.0: can't add hid device: -71 [ 539.738827][ T5124] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 539.801082][ T5124] usb 4-1: USB disconnect, device number 5 [ 539.938214][ T6893] syz2: rxe_newlink: already configured on team_slave_1 [ 540.083738][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 540.228676][ T6893] sch_tbf: burst 88 is lower than device netdevsim0 mtu (1514) ! [ 540.356292][ T29] audit: type=1326 audit(1717655307.229:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x0 [ 540.636342][ T5124] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 540.895521][ T5124] usb 1-1: Using ep0 maxpacket: 8 [ 541.016291][ T5124] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.027186][ T5124] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.040724][ T5124] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 541.050524][ T5124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.093845][ T5124] usb 1-1: config 0 descriptor?? [ 542.209882][ T5124] usb 1-1: string descriptor 0 read error: -71 [ 542.225050][ T5124] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 542.959273][ T5124] usb 1-1: USB disconnect, device number 4 [ 543.306382][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.317691][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.451161][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.459151][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.468244][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.476183][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.485886][ T6916] bridge0: entered promiscuous mode [ 543.491352][ T6916] bridge0: entered allmulticast mode [ 543.555294][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 543.946167][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.957404][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.967463][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.980603][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 543.989957][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.098276][ T8] usb 4-1: config 0 descriptor?? [ 544.713044][ T8] wacom 0003:056A:0094.0005: unbalanced collection at end of report description [ 544.787950][ T8] wacom 0003:056A:0094.0005: parse failed [ 544.794518][ T8] wacom 0003:056A:0094.0005: probe with driver wacom failed with error -22 [ 544.978287][ T8] usb 4-1: USB disconnect, device number 6 [ 545.824361][ T6927] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 545.951131][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 546.105198][ T5133] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 546.130577][ T6927] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 546.362998][ T29] audit: type=1326 audit(1717655313.229:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b5579 code=0x0 [ 546.436634][ T5133] usb 3-1: Using ep0 maxpacket: 8 [ 546.592518][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.603914][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.614245][ T5133] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 546.623839][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.671470][ T5133] usb 3-1: config 0 descriptor?? [ 547.066270][ T5133] usbhid 3-1:0.0: can't add hid device: -71 [ 547.073043][ T5133] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.136786][ T5133] usb 3-1: USB disconnect, device number 3 [ 547.938446][ T5133] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 548.285260][ T5133] usb 1-1: Using ep0 maxpacket: 8 [ 548.387795][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.398687][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.409029][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.419694][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.435629][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.453496][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.466499][ T6940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.477549][ T6940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.516288][ T5133] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.527334][ T5133] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.545417][ T5133] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 548.556322][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.675020][ T5133] usb 1-1: config 0 descriptor?? [ 548.861565][ T5074] Bluetooth: hci3: command 0x0406 tx timeout [ 549.451555][ T5133] usb 1-1: string descriptor 0 read error: -71 [ 549.474303][ T5133] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 549.618012][ T5133] usb 1-1: USB disconnect, device number 5 [ 549.826019][ T3709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.135779][ T3709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.455412][ T3709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.688910][ T3709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.975941][ T5133] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 551.128491][ T3709] bridge_slave_1: left allmulticast mode [ 551.134438][ T3709] bridge_slave_1: left promiscuous mode [ 551.141466][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.234763][ T3709] bridge_slave_0: left allmulticast mode [ 551.241216][ T3709] bridge_slave_0: left promiscuous mode [ 551.252593][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.306400][ T6956] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 551.614295][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.629355][ T5133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.645653][ T5133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.661399][ T5133] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 551.672929][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.689413][ T5074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.700117][ T5074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.719237][ T5133] usb 3-1: config 0 descriptor?? [ 551.776601][ T5074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.870348][ T5074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.987278][ T5074] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 551.999737][ T5074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 552.033309][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.103859][ T29] audit: type=1326 audit(1717655318.989:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73da579 code=0x0 [ 552.151543][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.178988][ T3709] bond0 (unregistering): Released all slaves [ 552.216415][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 552.306407][ T6959] sch_tbf: burst 88 is lower than device bond_slave_0 mtu (1514) ! [ 552.350779][ T5133] wacom 0003:056A:0094.0006: unbalanced collection at end of report description [ 552.418118][ T5133] wacom 0003:056A:0094.0006: parse failed [ 552.432773][ T5133] wacom 0003:056A:0094.0006: probe with driver wacom failed with error -22 [ 552.795614][ T5119] usb 3-1: USB disconnect, device number 4 [ 552.817651][ T5113] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 553.227074][ T5113] usb 5-1: Using ep0 maxpacket: 8 [ 553.365802][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.377313][ T5113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.387608][ T5113] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 553.397210][ T5113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.495962][ T5113] usb 5-1: config 0 descriptor?? [ 553.905201][ T6973] Driver unsupported XDP return value 0 on prog (id 110) dev N/A, expect packet loss! [ 553.955829][ T5113] usbhid 5-1:0.0: can't add hid device: -71 [ 553.973128][ T5113] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 554.009770][ T5113] usb 5-1: USB disconnect, device number 5 [ 554.010236][ T3709] hsr_slave_0: left promiscuous mode [ 554.101431][ T3709] hsr_slave_1: left promiscuous mode [ 554.127994][ T5074] Bluetooth: hci1: command tx timeout [ 554.134451][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.142461][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.176479][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.184223][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.239989][ T3709] veth1_macvtap: left promiscuous mode [ 554.247012][ T3709] veth0_macvtap: left promiscuous mode [ 554.255303][ T3709] veth1_vlan: left promiscuous mode [ 554.260944][ T3709] veth0_vlan: left promiscuous mode [ 554.405893][ T6976] loop2: detected capacity change from 0 to 256 [ 554.958567][ T5123] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 555.231620][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 555.408176][ T5123] usb 1-1: Using ep0 maxpacket: 8 [ 555.436172][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 555.546205][ T5123] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.556925][ T5123] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 555.570398][ T5123] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 555.579902][ T5123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.654310][ T5123] usb 1-1: config 0 descriptor?? [ 556.205292][ T5074] Bluetooth: hci1: command tx timeout [ 557.767934][ T5123] usb 1-1: string descriptor 0 read error: -71 [ 557.781299][ T5123] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 557.878638][ T5123] usb 1-1: USB disconnect, device number 6 [ 558.046148][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 558.295274][ T5074] Bluetooth: hci1: command tx timeout [ 559.824154][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.832285][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.840415][ T6958] bridge_slave_0: entered allmulticast mode [ 559.850070][ T6958] bridge_slave_0: entered promiscuous mode [ 559.940684][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.948723][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.957072][ T6958] bridge_slave_1: entered allmulticast mode [ 559.966788][ T6958] bridge_slave_1: entered promiscuous mode [ 560.026520][ T7004] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 560.216559][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 560.366507][ T5074] Bluetooth: hci1: command tx timeout [ 560.566978][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.581758][ T7006] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 560.610944][ T29] audit: type=1326 audit(1717655327.519:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b5579 code=0x0 [ 560.654245][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.955443][ T6958] team0: Port device team_slave_0 added [ 561.004189][ T6958] team0: Port device team_slave_1 added [ 561.339344][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.346972][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.373951][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.541971][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.550160][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.577434][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.063511][ T6958] hsr_slave_0: entered promiscuous mode [ 562.124790][ T6958] hsr_slave_1: entered promiscuous mode [ 562.191219][ T6958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.199713][ T6958] Cannot create hsr debugfs directory [ 562.782844][ T5123] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 563.087931][ T5123] usb 5-1: Using ep0 maxpacket: 8 [ 563.215409][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.226984][ T5123] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.237067][ T5123] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 563.246440][ T5123] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.272749][ T5123] usb 5-1: config 0 descriptor?? [ 563.606671][ T5123] usbhid 5-1:0.0: can't add hid device: -71 [ 563.613613][ T5123] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 563.683449][ T5123] usb 5-1: USB disconnect, device number 6 [ 563.967623][ T6958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 564.058713][ T6958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 564.111037][ T6958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 564.182552][ T6958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 564.426373][ T7025] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.852400][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.074552][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.168383][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.176316][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.266281][ T7035] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 566.320405][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.328073][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.395870][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 566.472251][ T7037] sch_tbf: burst 88 is lower than device hsr_slave_0 mtu (1514) ! [ 566.728646][ T29] audit: type=1326 audit(1717655333.559:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73da579 code=0x0 [ 569.803436][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.684992][ T6958] veth0_vlan: entered promiscuous mode [ 570.787696][ T6958] veth1_vlan: entered promiscuous mode [ 571.157120][ T6958] veth0_macvtap: entered promiscuous mode [ 571.287947][ T6958] veth1_macvtap: entered promiscuous mode [ 571.348787][ T7074] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 571.545266][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.680170][ T7075] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 571.791757][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.802833][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.813164][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.824039][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.834256][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.845236][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.855463][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.866265][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.890865][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.053995][ T29] audit: type=1326 audit(1717655338.879:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73b5579 code=0x0 [ 572.229932][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.240830][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.251193][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.262129][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.272465][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.286132][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.301216][ T6958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.313371][ T6958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.329541][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.544478][ T6958] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.554031][ T6958] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.563442][ T6958] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.572761][ T6958] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.448101][ T5074] Bluetooth: hci0: command 0x0406 tx timeout [ 576.594321][ T7119] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 576.710142][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 576.810337][ T7117] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 577.005045][ T29] audit: type=1326 audit(1717655343.849:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7496579 code=0x0 [ 578.396095][ T7138] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 580.476083][ T29] audit: type=1800 audit(1717655347.309:25): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 580.656882][ T7164] loop4: detected capacity change from 0 to 128 [ 580.806193][ T7165] syz2: rxe_newlink: already configured on team_slave_1 [ 580.953496][ T29] audit: type=1800 audit(1717655347.829:26): pid=7164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048636 res=0 errno=0 [ 581.131111][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 581.596157][ T7167] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 581.984266][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.992941][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.046961][ T29] audit: type=1326 audit(1717655348.879:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7163 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7427579 code=0x0 [ 582.590459][ T3709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.598844][ T3709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.656228][ T7158] loop3: detected capacity change from 0 to 256 [ 583.642255][ T7178] loop4: detected capacity change from 0 to 512 [ 583.818398][ T7178] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 583.956075][ T7178] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 584.032817][ T7178] EXT4-fs (loop4): orphan cleanup on readonly fs [ 584.107501][ T7178] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz-executor.4: bad orphan inode 15 [ 584.183977][ T7178] ext4_test_bit(bit=14, block=2) = 0 [ 584.189996][ T7178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 584.323429][ T7185] loop0: detected capacity change from 0 to 256 [ 584.789008][ T6284] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.685662][ T7196] loop4: detected capacity change from 0 to 512 [ 585.895756][ T7196] EXT4-fs (loop4): Test dummy encryption mode enabled [ 586.038369][ T7196] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 586.241908][ T7202] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 586.277696][ T7196] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 586.343360][ T7201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 586.380356][ T7196] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.436876][ T7202] sch_tbf: burst 88 is lower than device ip6tnl0 mtu (1620) ! [ 586.848827][ T29] audit: type=1326 audit(1717655353.699:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7198 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73a7579 code=0x0 [ 587.305941][ T7196] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 587.434597][ T7196] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))" [ 587.836059][ T7196] syzkaller0: entered promiscuous mode [ 587.841713][ T7196] syzkaller0: entered allmulticast mode [ 589.378493][ T7217] loop3: detected capacity change from 0 to 8 [ 589.629059][ T7217] SQUASHFS error: lzo decompression failed, data probably corrupt [ 589.637818][ T7217] SQUASHFS error: Failed to read block 0x28d: -5 [ 589.644624][ T7217] SQUASHFS error: Unable to read metadata cache entry [28b] [ 589.654209][ T7217] SQUASHFS error: Unable to read inode 0x11f [ 589.954693][ T6284] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 592.554011][ T7239] syz2: rxe_newlink: already configured on team_slave_1 [ 592.659534][ T7239] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 592.961204][ T1214] ieee802154 phy0 wpan0: encryption failed: -22 [ 592.968658][ T1214] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.049145][ T7243] ===================================================== [ 593.057255][ T7243] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 593.059118][ T7239] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 593.064560][ T7243] __bpf_strtoull+0x245/0x5b0 [ 593.077203][ T7243] bpf_strtol+0x7c/0x270 [ 593.081823][ T7243] ___bpf_prog_run+0x13fe/0xe0f0 [ 593.087295][ T7243] __bpf_prog_run96+0xb5/0xe0 [ 593.092585][ T7243] bpf_test_run_xdp_live+0x1f4b/0x2f70 [ 593.098681][ T7243] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 593.104295][ T7243] bpf_prog_test_run+0x6b7/0xad0 [ 593.109488][ T7243] __sys_bpf+0x6aa/0xd90 [ 593.113883][ T7243] __ia32_sys_bpf+0xa0/0xe0 [ 593.118627][ T7243] ia32_sys_call+0xf7e/0x40a0 [ 593.123463][ T7243] __do_fast_syscall_32+0xb4/0x120 [ 593.128927][ T7243] do_fast_syscall_32+0x38/0x80 [ 593.133921][ T7243] do_SYSENTER_32+0x1f/0x30 [ 593.138692][ T7243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.145273][ T7243] [ 593.147658][ T7243] Local variable stack created at: [ 593.152831][ T7243] __bpf_prog_run96+0x45/0xe0 [ 593.157737][ T7243] bpf_test_run_xdp_live+0x1f4b/0x2f70 [ 593.163350][ T7243] [ 593.165843][ T7243] CPU: 0 PID: 7243 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 593.176051][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 593.186404][ T7243] ===================================================== [ 593.193408][ T7243] Disabling lock debugging due to kernel taint [ 593.199719][ T7243] Kernel panic - not syncing: kmsan.panic set ... [ 593.206236][ T7243] CPU: 0 PID: 7243 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 593.217821][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 593.227995][ T7243] Call Trace: [ 593.231349][ T7243] [ 593.234363][ T7243] dump_stack_lvl+0x216/0x2d0 [ 593.239195][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.245146][ T7243] dump_stack+0x1e/0x30 [ 593.249443][ T7243] panic+0x4e2/0xcd0 [ 593.253483][ T7243] ? kmsan_get_metadata+0xf1/0x1d0 [ 593.258744][ T7243] kmsan_report+0x2d5/0x2e0 [ 593.263382][ T7243] ? __msan_warning+0x95/0x120 [ 593.268263][ T7243] ? __bpf_strtoull+0x245/0x5b0 [ 593.273249][ T7243] ? bpf_strtol+0x7c/0x270 [ 593.277800][ T7243] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 593.283070][ T7243] ? __bpf_prog_run96+0xb5/0xe0 [ 593.288126][ T7243] ? bpf_test_run_xdp_live+0x1f4b/0x2f70 [ 593.293945][ T7243] ? bpf_prog_test_run_xdp+0xf02/0x1a40 [ 593.299658][ T7243] ? bpf_prog_test_run+0x6b7/0xad0 [ 593.304938][ T7243] ? __sys_bpf+0x6aa/0xd90 [ 593.309564][ T7243] ? __ia32_sys_bpf+0xa0/0xe0 [ 593.314367][ T7243] ? ia32_sys_call+0xf7e/0x40a0 [ 593.319389][ T7243] ? __do_fast_syscall_32+0xb4/0x120 [ 593.324890][ T7243] ? do_fast_syscall_32+0x38/0x80 [ 593.330081][ T7243] ? do_SYSENTER_32+0x1f/0x30 [ 593.335005][ T7243] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.341702][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.347048][ T7243] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 593.353502][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.358837][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.364783][ T7243] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 593.370878][ T7243] ? stack_depot_save_flags+0x66d/0x6e0 [ 593.376560][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.381889][ T7243] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 593.388297][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.393640][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.399585][ T7243] __msan_warning+0x95/0x120 [ 593.404305][ T7243] __bpf_strtoull+0x245/0x5b0 [ 593.409110][ T7243] ? bpf_strtol+0x5c/0x270 [ 593.413686][ T7243] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 593.418936][ T7243] bpf_strtol+0x7c/0x270 [ 593.423328][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.429308][ T7243] ___bpf_prog_run+0x13fe/0xe0f0 [ 593.434417][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.439763][ T7243] __bpf_prog_run96+0xb5/0xe0 [ 593.444593][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.450537][ T7243] ? __pfx___bpf_prog_run96+0x10/0x10 [ 593.456098][ T7243] bpf_test_run_xdp_live+0x1f4b/0x2f70 [ 593.461768][ T7243] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 593.467846][ T7243] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 593.474080][ T7243] ? bpf_test_run_xdp_live+0x7ed/0x2f70 [ 593.479807][ T7243] ? _copy_from_user+0x10c/0x160 [ 593.484934][ T7243] ? kmsan_get_metadata+0x146/0x1d0 [ 593.490324][ T7243] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 593.496283][ T7243] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 593.501882][ T7243] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 593.507851][ T7243] bpf_prog_test_run+0x6b7/0xad0 [ 593.512980][ T7243] __sys_bpf+0x6aa/0xd90 [ 593.517376][ T7243] __ia32_sys_bpf+0xa0/0xe0 [ 593.522004][ T7243] ia32_sys_call+0xf7e/0x40a0 [ 593.526838][ T7243] __do_fast_syscall_32+0xb4/0x120 [ 593.532106][ T7243] ? irqentry_exit+0x16/0x60 [ 593.536830][ T7243] do_fast_syscall_32+0x38/0x80 [ 593.541835][ T7243] do_SYSENTER_32+0x1f/0x30 [ 593.546482][ T7243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 593.552992][ T7243] RIP: 0023:0xf7496579 [ 593.557162][ T7243] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 593.576933][ T7243] RSP: 002b:00000000f5f1f5ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 593.585472][ T7243] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 593.593575][ T7243] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 593.601646][ T7243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 593.609714][ T7243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 593.617781][ T7243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 593.625873][ T7243] [ 593.629278][ T7243] Kernel Offset: disabled [ 593.633701][ T7243] Rebooting in 86400 seconds..