last executing test programs: 49.885058108s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 48.720628608s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 46.324355949s ago: executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) 46.143800207s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = epoll_create1(0x0) r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0) r3 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0) 45.435844257s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xccba275ff009971}, 0x24000050) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 44.392367948s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = epoll_create1(0x0) r2 = ioctl$NS_GET_PARENT(r1, 0x5450, 0x0) r3 = dup(r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) epoll_pwait2(r3, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000340), 0x0, 0x0) 31.933904777s ago: executing program 2: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067) write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf) dup3(r0, r1, 0x0) 31.608209487s ago: executing program 2: syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x8c48, &(0x7f0000000240)=ANY=[], 0x1, 0x59d, &(0x7f00000009c0)="$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") r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) quotactl$Q_GETINFO(0x0, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c302c73686f72746e616d653d77696e39352c6572726f72733d72656d6f756e742d726f2c696f636861727365743d64656661756c742c756e695f786c6125048de308e7862bfa74653d302c6e6f6e756d7461696c3d302c7574663820302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c7569643d00f1ac5e6060c5b360cb02c812f9a71447b5d45409497a79", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x97, 0x2a9, &(0x7f0000000500)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x101}}) 31.418718647s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) poll(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) socket$packet(0x11, 0x0, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0) 31.403107539s ago: executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 31.262281661s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r9, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 30.968907986s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 30.921272804s ago: executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067) write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf) dup3(r0, r1, 0x0) 30.831940137s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 30.710598566s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000120001010000000000000000000000004e2200000000000000000000000000000000000000000000000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000080000f9ffff"], 0x4c}}, 0x0) 30.610752782s ago: executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x20000}) 30.523873165s ago: executing program 1: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 30.48937982s ago: executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) poll(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) socket$packet(0x11, 0x0, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/dmi', 0x0, 0x0) 30.451971186s ago: executing program 0: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001740)=ANY=[@ANYRES64=r1, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYBLOB="3d8bf0955e571ed85bd72e40205496ed401eb01ba54c3a2ec565f6baf4011d1b6cc3e2148ed1e5742b70c0409b2460a9be8fe02bac9b630c48cf798f3207221bed5de4094c4ebd7a2cdc494ddb81193e47564a211318914f329065e640ff2cf61a6e53498b14d49de642ac1c9835c4f21328f118150a5eb2563fe4e1823b44bf87a12fe02c4be98933fc52966076dd4291f7358e1064699e51ed1c7be6fc8025f11f070c046f1b8cfc0bb68626fd9ed953f649f076d424c8ee174c3ce621d7ff7590627456bc7f70e3032aeac2", @ANYRES16, @ANYBLOB="6b36cc1c67784f38aea4fbe12779dc033e6da3654442af1f3745ef9960f433e51bd0f8c57df57a30eeeba1eaefbc8f0615c16bbb43784a34aa8c4b180f4dbd8786d81cc3b2a23fd7f66ae762ff6b458aa6ab52638e904f2f7bb561491db1447ee6b90ff2c4bccd06a24defd20b9fed47408cc406df6eecdd2fd56e0a45c4c6ffa0f265bd84a7d969c13135e79b97ec4d24c22cd9c8883dbee1ac7ad48a0505e555ff75795582a0c79c7bfd7adcaa2f5f6ecb4993", @ANYBLOB="5d89e7f5ae235b3811fba8decf2b4bb7fe0fac57f981e4b693da3fb8d287ed3907380c372c58a72b23c7d425333cc64cbcc94797dce0b3b8c01cc49a50b174ba4ddd5af70bc618f171e871cc0a64eb6c5dece5d1b4ac40507673dde64359ad207e61f888d5970927486f9dd02d0db9d1492fc496e9b9e04d50dd85f94ab68d8fcdb204903f01ff93204cc4823f34e4874345777951b0af0d024c721187a93cabea1ce932d550724d733d389982b8a231575ff2db878168424a7bf3d6d66ba9f01005eec07304826949af824bf6be05e0df735aabc9bf914cd1d58c0cc4bff14262324d9229cc587b80ad6f4461bf6caeaa59da1541b2297645a59b16caf14257723220f3a89b50113ad1007e1d89a18bd9c20bd19d4c6921e42bfca1105faa27978d9575a0a1fa6ec537c2c276526115f16e7b5d37cc67541b19b7f3c39e1eba80861872ad726c57ff7f8d0c1eea3253a9358d5a11473533d4ff6c6a2b409405a28c95bf34466bab3a3d8ef8726dcebf32427599644db825612de642444f7231bc7cd265a916babf0fe35d5282503f03401bee44cd14e31359ecddb71c57aac9d6245fa6098d4c5f53d0929b9fd40dee456e58dc4512afb9028d4c6047c2c12fb4eff20e5203583c1f5c84e037e68fd9573c98f9653768ff2f01b5e65066bd16bd90a10d82188d37927a6151f6fc4528a540937909837e07cec45691027708fdba69c06becbd7fdefb0f4a878f595e0ff14a7db81ea9e34e65c34c629f84c375d47be49e392c3dea92d9d06aaceb12d20a88b21d07f7751901d0abc34a540fde1e87f08dd461460e0e896a03f19ec7dc2898d03bd1eca8cfbebac1e317fbc990dc902b3c7d6c7f462e7cde3b9676f892154fe48e4018fdfe867af5608060a6d5f73e7aa2f10b78dbed36521a7e0b9c2ffb0313ae465dcf7adcd37eae04f70a8ce09a13fa0ae50655fccab9e71b08c308b5bcf513534addc2d231b7d5f54df58b503df72e744e39f728a05d796e00930b5f7986dbc73250a819a555ce96c4755d8b5bccd8fb64ca884bf483f41b35ee005b3509f3bd32268f83058be9fa32a82f448f7369c97bd0f144075dd949a5a8605cad4447ec55ffc959eee521f239496f15e00af0bca0122cfde70e4220a565a3e82f27ae5dca790ebf1fe595299e2e7504571adce95f73f5c670140d82b703b938f89d313ffed88bb4a99f35f533f63a0e498b78d722fee3a0be39de6cb986a353e862c888e78e63722b1eef9a419e8f20aac584303a86c236483d6bb3e1759744739cb16e596093f4a42915b89dc61cb51375c120b2b5cefa69e09d98374ab4c26df424414018da546835e427af0e66944a7b295abef518ff612a2942c30c27cec6d65b7b2c749a240fe2a2c9e0324f8731de2ff282f2608c77f7d81fd6c7b5787aa099edde78237528aba04cc5fec525bbdb13800991795f15a12bbd0821ed9e9d6cb97b7934d37f9167a59b0bd55d504fbc974b45911e26ddce1d088213a1acadd96f27259f422db2ce5fa9ddbb22338a3ca9c7eb010b892170dc916ec7d3b598d1235f676741b91c0217848bb4bd23f86489eebfdcd39aff312f8e5443e7848b01a922bb7063a6ed20d863302e5b1f37869bf4c6d1203c4295cbdaad13a817d3c8cc7ca5538892e20b88c0c3c0931f34007113b5676e1d5fa81ab38079efb5864f47adc9817488bb4cf89862c72744eda97290c086475633a3cb5b1f4223b578d8bc4157bc7c93f5c2aa8ae89804664868c867f40761d1772961ae65102e529ae0248dc1fdce340a25fccf2a63a8508c74aa7ff33374ee2f10c7a90fcdb4811acf2e5d5ecc64ab17ea9678b293712a95cbe007b4705d74dc0ad5a62e1634d6d62b83c99cedaac37bac65e17ddf9efd7886d4d4f1aeeb37b1a7e99497de17573d7dfadbed7a8410150a6b0e399d0c6329029a9f2f58ac4817f54cbc2deb106b684050dfee8936c180202468d8c458c88f7cbe4935e76e4bb430417dc8d3168a46e5e4656dd4903f22d7be690822180032afb12bef9b19f8a7ef8d3fc37cf88cbc663f6feb411c18bc959d4ea9ba883840ff2669abac2232c29ab9b11e061a0fa6b532591f24f97275223e0cf9af63ce7bfd09f6c81af3c4d061768cff80dc7703fad721c788fc06fa8ce2fe7582c642c85b00d7438ff73714a7be331ade251644b0b6ea98cd88dc23143876b77662fefd432aec5376cbc5d5412c5a85da613800f1460d7c4f956c567fd4b6d87d9d65b5061d06bbfc7921bb54cb3ba93358199d1273b34c142314e252f3af935c03d23350fe036d67da9ab140c77330263ba9cfe37d13d403d73db0bc9157918a3b6027ff8c96700daf14909d28a67b7a7006a1ffa3e3e87815201913d91f39ea07a1c6f0adcf67795eb2b0fe692c31dcd8b0d1560e1893305436fabe7318f481a0f1f04655ff4cbfdc1b49eb23f291913f143aea21e1da0f5210539afde9df7925529641a9f82a3f603b0740fdeb20a1c736964779ae4950add5d05821394c939f1177740e8c8936a55bae1540637864374c910f09ca59b718b3840c3f20fb412212c0b6417771df24bc80ef6f58b9db2cdbd7b98582a9cf0ac18880cb15f38940aaa0c9583a15dd200c95b82e39c706d03746d993de038a308446b824f59f5284e48e489267e7c0025324a9fb037c47dd1ea262ae5ccfd112f18448b87a06a251d174b0ea32843177b4488663bf6ec561118babc828831bd12bc0f57fa6861a77e98c76d39492d4afc7c802a870fd5042441ec0cc9a4aec8a73bc1b0da2ca3d3f02b26bf53e713f796c2c467aa10404ec08324125438882815c3b6d53fcb6ea59cf90f83357c9485a07409418c5bdf6046c387ba717cdbb7f8313c6aa060e38a1f9e54773694a634855c45e98e5b6451f5c77b7e4f9cda54e61f04c64e91e019d774bb879b5767ce9db4d3ebd5e271651c8c8f210609b6a5299debefc69071ca9a7d8e1b04d9c9d94da22fe0ccb96d00043a578ea1fc211e41b9978b7a3bb8d49989347b1d66efbc2452b05ec3ed3c468c89544332a346f9d26675d20b379df45db62cc4e02d39b96e832b1a23e5468da52c2bbbd67821a9dce341c3d3b3d0b2b1617a8b18424fd3c8d7f8b3129dadf3415fb002a20a9b5e8921abcb13bcc012276951cc4390124863cb3848e3dc906e70fe5307fc941497d2a29bd9e0c2b3f651407bed79651379611fa6414cf7626f0fbce33dc1ccfdf68731b19b451b0c497cb5de54b0e902b6e30817cf3dbe3e6e9724ff460069a9e9a431338778c6756370fa3ccb630b9a9c1974c143ef57b5d15d7616d9a53c4c98c3d764b279cd84c69e70971eb3ba0fca65adadcaa1d0acf5340ee5290f99e4a7264334437585e36e177b8b3047456686d9331d9db3008f2d9daa89c110a8e87ae46516b25e77ff5d7287fd7bba40a592c1d16d6b5da8ea5ba1d95e74ef8d1dd5c1e68fec796c794137b1b1af5d345a3273386625604420d4371efab87b50f55818345a381d17b5ec4c25d8e6711e0ab090c3c15bf2e82aa1fc5d84479940a14150b846cff95df1ad75bbfd06304fbb8fec5b08c7d0cd18d51f0bfd0e65ab122625707790b9aeaee0f7d71a1c86ef07fa73176c38ab1a2f309b58c298095fb1a9f2b4b8e1fbd1923e89cde4532d246130ac78a8ed97b91545e6950c8103eb33a06fc05a011f5dfd42ca5d095c4649b1fd0cdd28e11e592dcb9a163b189b8f72080b92084e2b956acc8398861bcda5de79f37c2cc2aed9e7e92582e9cadd21aa4c95ee095c3f931a56a2493225187867762fc840fc94cfed1be9f1b9037570f5cf30adc133fbdf6384c93fe4535eb9566b87f1c74c95d66c7d8b8f3063ab8e529bfc0ac3e0611918ba6d7b8a082f5b0d19bad8831e25596e427590690b89c817ed270695cc8390dc885819127464c30a1fc48bd27aa53feb96c9a167d37e51e988632e2edc7ba18fda3699971550b58eeb0e2e339a3e5791e030b7d9bc27124d812c1ed28fe56b3c46a9fd2516381b9815652afdacbe8c40032cdcd5e0f741bc33e3484299a05bbf6686527285f61754a4b00611970881bd0cffbd9adb294440493ebe786e0c2a92aa81687aebf1ae465500135135fc59f3f1f182ee8685678f82ab37039589143d58e3625e4cd667cdb3c16731e8b3e57467ccc912e75165113b5d848acaba29967b9c81106cbd754b5b6cde787304a8c4a783be68e3fd33508caebc354cd2893473e906cf87a902153bdf09a876e0e046a664f73c9ab107c5f17ec18ae19624b6d0ca730c235c2f6ad9ce8471f3657dec8e51a69e02018298dc0644684bd71e8113488b50c507c8946cc0d9538f20ac85b6e931420266461d972f685640a1e443de0609ae5ada31d2ee54ed7ac578000d38a42e34be56e96cf8ddbbfaf70ab039b5bf29d30620a2d1989eec002356c920ce728360e821084d8a1537a6db35a762b4d419da11ca314eb3509af713882b6b3e034400744ba3483909b9054d179e988dcfe5e61baae6a83bfb54149b5eae5a23edfff352281a182d841b684136b1284eb4d625692113521e0876759913e7e53091c799bbfc2f7d46ed651ca4086f75583009da2689cbad5408cb8ed416ba726a06d2d1aca9435eab19d865d819fb36f8ffa72c5513188df5b9cfbe2fb1833090d2837681a441fe9b879fb87dd2d8f2b5be4609ecbb67ee10cdcd910e22439c1ca278ef0c536a54806784b9b4a83966f3227349716d635fc86fb2868b9a0026c97e7f152822e21f09e4faba0e5654986541b6a2a97150f92174b036a036e647036726fd41681a3b34c6bdc88bc4e6a357681998b19dafe34ba848c1d532d797a37cbdd5f13407c26ad2232adc7eb472053b285a489fd3c8bd640765c3d95791b56a95c6dd5d672a8b743dedc4f70e14e0866075e9698cbec82395a270c2f3be27fc5fa14ebd716c80dc70e481c3b68266a90cb39b5a42747d6a4eab190e0c6176eb1e905f8e194e588b0c6107f8541355dc551fb81466f710024bb119bd9e5303b2128e7dba2443db7a349a7849480ecd21f2e02406ffad5b69f012cd26a78076741739f7101be48cdd031a638766b775137200981e6896239a100b9aa4eeefdbea6f1dfa793364de99fa941cb050e0f14c8a9261578dbbed9e66fe1f7c42d2fa1bdfb8a42c1a2cff75ed0c1dbec8098f8eb7fc0509fc76fc1e2a3ce9284a9d8c98aa1bfef7bb4702a40e9963c976b59dbd1b18a02316e627484cf892ec8bed26336fe6a121fcdca6795efe6074031d50df3d9bf7702f0fb9678461449e17dc8763e748a6e1b706d3ffda60e81835b89231d6716b8ffc24bd2bd3846cbd2ef495baa980ff3ea27b8e366f8bb2a7968a315cc13a3b46265549acafa7bfb652880145cfa747c22c947b2b7a9cf7cad5dd17d9e78bbf911c424c51ffddbe603e889094bbaeec5384369ac086941b3c9bffc0704e4db3c2cd6ffd585be7312df9d0ce57e52ea9db6d13affbffe82595dbd7ef7306b42112f7291eae482a55afe0e1b374b30c46b34619337d46d4c0f86f08813015cc740c0a2afacd06eb2e515ad4bc086db45f6f6e8cee80d7ded5229f3dc00fd21b89624773b6c52a8a3373e040240cc2433b824210db21f24b5ee784f13edcd60968021b1e4156afff2556bb067487dc8f0401bb63d6773000262b317f3490fc98e646d4f2af2cc1af93cfafd9254017c7a573525706e056b003213f342fbe04e210d3076fef859c33551a494be4c7139e87a260a1d9879a649ecdcb330e6", @ANYRES8, @ANYRES32=r0], 0x2, 0x1e0, &(0x7f00000001c0)="$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") 30.351374932s ago: executing program 0: r0 = syz_open_dev$I2C(&(0x7f00000021c0), 0x0, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x21f) 30.349499632s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r2, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 30.223387592s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@ld}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 30.193285806s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 30.183311918s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 30.140593345s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.031945821s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r9, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 464.851177ms ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x4e2affba}]}, 0x44}}, 0x0) 175.351883ms ago: executing program 0: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2067) write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xbf) dup3(r0, r1, 0x0) 127.8722ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r9, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='svcrdma_page_overrun_err\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f00000002c0)="86eb777b58924e2f58cc61838d55cb9007b8ac0c000789d3463e758baef693ad7a2b3016bc3b42925124b87100d706878e840e6500d4df48f08fc02c2ef5ec0961fffc37051635b6fb788bbbcbc9fc45f48fec28705c34e7f3bbb00f6733e6baf41045acebb424b1efb18f9fb9d44beb6839d79b6f5d746ff9463328e866d700840a686d7b8b3b91962b3e77c31ed6852b138500c312898afd99a14bcfa29534a8e262", &(0x7f0000000380)=""/180, &(0x7f0000000440)="4dd1192f0bc220960cc77d53d2777708d9d9f00a7f06f8b86376a56d55081c034a10eeeb707d17870111adb4d38db16eb236a98ef8aa5a0124da6d80a41e939f17bab1e3fae4f232357aed80ae30502ce51213f78ac4b13cd5f625532fee07d1b80645bdffee54df9918f953b768a916a33984a3de1b9e88e934f557543d2deceb1d85be987e70d8694b2d500b5fd1ba55804a834db610d3f239d6ab9ca5375b8d3db13da4ca99b697d74de4c06806b69ffdc3c9030340820524", &(0x7f0000000500)="bbdc4dcc922cd8f94c856d22ce7c8f11b78c2ad3600525a725b7a22a1bb7ad549c3ea967be1fbe0271a1115361f35465c49e4fd7aa9b18d3452a728de364f20cea5addf1b3c2f4915886158acf78cb3ec03dfa67a82f1098b53bc169d6f07c2575b436fccdc7d51c720939cd7f5060d2724ce3499a8f146fad64b495882f71c532c70a736864acd8c70e36e24448a959", 0x5, r13, 0x4}, 0x38) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd602e5cea00483c0020010000000000000000000000000002ff0200000000000000000000000000010004"], 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r14, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000030801010000000000000000020000010900010073797a30000000000600024000040022050003003a000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64], 0x43, 0x555c, &(0x7f0000005b80)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00'], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peek(0x2, r5, &(0x7f0000000100)) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x4000000}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) kernel console output (not intermixed with test programs): 0:50:50:50:50:50 [ 610.618827][T17855] device veth1_macvtap entered promiscuous mode [ 610.636605][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.667387][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.690634][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.707718][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.719787][ T48] Bluetooth: hci2: command tx timeout [ 610.732444][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.747495][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.759885][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.766406][T17963] loop4: detected capacity change from 0 to 2048 [ 610.781681][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.784733][T17963] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 610.796527][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.808150][T17963] NILFS (loop4): mounting unchecked fs [ 610.812564][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.828474][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.840036][T17855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.840941][T17963] NILFS (loop4): recovery required for readonly filesystem [ 610.850893][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.861594][T17963] NILFS (loop4): write access will be enabled during recovery [ 610.870944][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.883325][T17963] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 610.883899][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.904172][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.914365][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.924979][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.937822][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.948811][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.959369][T17855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.970518][T17855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.993401][T17855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.012022][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 611.020390][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.052982][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 611.061778][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.084640][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 611.093547][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 611.108712][T17855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.127721][T17855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.155912][T17855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.170465][T17855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.239935][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 611.267874][T17973] loop2: detected capacity change from 0 to 2048 [ 611.439090][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.484145][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.533189][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 611.568043][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.581181][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 611.590808][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.642692][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 611.912844][ T3581] Bluetooth: hci4: command tx timeout [ 612.228099][ T4110] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 612.382140][ T3579] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 612.502157][ T4110] usb 3-1: Using ep0 maxpacket: 32 [ 612.622063][ T3579] usb 5-1: Using ep0 maxpacket: 32 [ 612.622197][ T4110] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.644082][ T4110] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.748896][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.768600][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.780790][ T26] kauditd_printk_skb: 680 callbacks suppressed [ 612.780805][ T26] audit: type=1804 audit(1717154999.564:6551): pid=18018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir741381151/syzkaller.G6P70W/2/bus" dev="sda1" ino=1964 res=1 errno=0 [ 612.823922][ T4110] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 612.859333][ T4110] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 612.898437][ T4110] usb 3-1: Product: syz [ 612.918131][ T3579] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 612.921434][ T4110] usb 3-1: Manufacturer: syz [ 612.932220][ T3579] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 612.950402][ T3579] usb 5-1: Product: syz [ 612.963159][ T3579] usb 5-1: Manufacturer: syz [ 612.983211][ T4110] hub 3-1:4.0: USB hub found [ 613.022905][ T3579] hub 5-1:4.0: USB hub found [ 613.118316][T18027] loop3: detected capacity change from 0 to 2048 [ 613.154973][T18027] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 613.173717][T18027] NILFS (loop3): mounting unchecked fs [ 613.179223][T18027] NILFS (loop3): recovery required for readonly filesystem [ 613.212199][ T4110] hub 3-1:4.0: 2 ports detected [ 613.217301][T18027] NILFS (loop3): write access will be enabled during recovery [ 613.247435][T18027] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 613.255352][ T3579] hub 5-1:4.0: 2 ports detected [ 613.571622][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 613.987826][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 614.219903][T18087] loop3: detected capacity change from 0 to 512 [ 614.253058][T18087] EXT4-fs: Ignoring removed bh option [ 614.296961][T18087] EXT4-fs error (device loop3): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.3: invalid block [ 614.311452][T18087] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 614.336460][T18087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 614.496941][T17855] EXT4-fs (loop3): unmounting filesystem. [ 614.512098][ T4110] hub 3-1:4.0: activate --> -90 [ 614.578356][ T4505] hub 5-1:4.0: activate --> -90 [ 614.813943][T18114] loop3: detected capacity change from 0 to 128 [ 614.822438][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.862034][ T4110] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 614.869079][ T3615] usb 3-1: USB disconnect, device number 27 [ 614.890247][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 614.934213][ T3648] usb 5-1: USB disconnect, device number 24 [ 614.942026][ T4505] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 615.041078][T18121] loop3: detected capacity change from 0 to 512 [ 615.049542][T18121] EXT4-fs: Ignoring removed bh option [ 615.060896][T18121] EXT4-fs error (device loop3): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.3: invalid block [ 615.074252][T18121] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 615.092583][T18121] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 615.244598][T17855] EXT4-fs (loop3): unmounting filesystem. [ 615.580118][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.952197][ T4110] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 616.008697][T18189] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 616.076418][ T3579] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 616.095678][T18193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 616.209549][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 616.230939][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 616.250986][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 616.262161][ T4110] usb 4-1: Using ep0 maxpacket: 32 [ 616.283102][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 616.304024][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 616.322231][ T3579] usb 5-1: Using ep0 maxpacket: 32 [ 616.333975][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 616.355126][T18199] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 616.398447][ T4110] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.418584][ T4110] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.435007][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 616.442386][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.455814][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 616.463432][ T3579] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.474138][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 616.483545][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 616.492792][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 616.501622][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 616.510060][T18201] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 616.566514][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 616.579763][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 616.582330][ T4110] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 616.589577][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 616.603794][ T4110] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 616.603823][ T4110] usb 4-1: Product: syz [ 616.603838][ T4110] usb 4-1: Manufacturer: syz [ 616.621129][ T3579] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 616.636246][ T3579] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 616.642924][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 616.645741][ T3579] usb 5-1: Product: syz [ 616.653753][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 616.661193][ T3579] usb 5-1: Manufacturer: syz [ 616.664865][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 616.677275][ T4110] hub 4-1:4.0: USB hub found [ 616.683133][T18203] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 616.703347][ T3579] hub 5-1:4.0: USB hub found [ 616.906677][ T4110] hub 4-1:4.0: 2 ports detected [ 616.922169][ T3579] hub 5-1:4.0: 2 ports detected [ 617.606499][T18209] loop2: detected capacity change from 0 to 131072 [ 617.617442][T18209] F2FS-fs (loop2): invalid crc value [ 617.631106][T18209] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 617.674597][T18209] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 617.992040][ T48] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 617.992234][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 618.105503][T18215] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 618.152326][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.212891][ T4110] hub 4-1:4.0: activate --> -90 [ 618.272196][ T3579] hub 5-1:4.0: activate --> -90 [ 618.338397][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 618.376352][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 618.399489][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 618.408345][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 618.422675][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 618.431303][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 618.445793][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 618.459836][T18228] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 618.484035][T18233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 618.552613][T18160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.595280][ T3648] usb 4-1: USB disconnect, device number 23 [ 618.602366][T18171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.612180][ T4110] hub 4-1:4.0: hub_ext_port_status failed (err = -71) [ 618.651604][ T4110] usb 5-1: USB disconnect, device number 25 [ 618.665154][ T4505] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 619.288575][T18261] loop4: detected capacity change from 0 to 512 [ 619.297090][T18261] EXT4-fs: Ignoring removed bh option [ 619.339338][T18261] EXT4-fs error (device loop4): __ext4_iget:5044: inode #15: block 1803188595: comm syz-executor.4: invalid block [ 619.355322][T18261] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 619.373965][T18261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 619.456193][T11714] EXT4-fs (loop4): unmounting filesystem. [ 619.649978][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 619.671179][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 619.681680][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 619.693527][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 619.701434][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 619.757412][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 619.794708][T18272] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 619.918148][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 619.940251][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 619.954993][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 619.967818][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 619.980863][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 619.993909][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 620.008292][T18278] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 620.368297][T18275] loop2: detected capacity change from 0 to 32768 [ 620.387060][T18275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (18275) [ 620.430812][T18275] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 620.461545][T18275] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 620.489681][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.506629][T18275] BTRFS info (device loop2): using free space tree [ 620.663354][T18275] BTRFS info (device loop2): enabling ssd optimizations [ 620.724869][T18321] Bluetooth: MGMT ver 1.22 [ 620.768051][T13195] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 620.879407][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 620.882091][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 621.172821][T18330] loop3: detected capacity change from 0 to 512 [ 621.234867][T18330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 621.267588][T18334] netlink: 87 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.296488][T18330] ext4 filesystem being mounted at /root/syzkaller-testdir741381151/syzkaller.G6P70W/30/bus supports timestamps until 2038 (0x7fffffff) [ 621.390729][ T26] audit: type=1800 audit(1717155008.174:6552): pid=18330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 621.504103][T17855] EXT4-fs (loop3): unmounting filesystem. [ 622.257221][T18354] loop3: detected capacity change from 0 to 32768 [ 622.286855][T18354] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (18354) [ 622.323637][T18354] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 622.353361][T18354] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 622.383744][T18354] BTRFS info (device loop3): using free space tree [ 622.471519][ T26] audit: type=1800 audit(1717155009.254:6553): pid=18381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 622.501025][T18354] BTRFS info (device loop3): enabling ssd optimizations [ 622.621185][T17855] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 623.513781][ T3581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 623.515249][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 623.867542][T18418] loop3: detected capacity change from 0 to 32768 [ 623.896634][ T26] audit: type=1800 audit(1717155010.684:6554): pid=18418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 624.153889][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.160217][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.320738][T18471] loop3: detected capacity change from 0 to 4096 [ 625.341401][T18471] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 625.346686][T18476] loop4: detected capacity change from 0 to 4096 [ 625.374388][T18476] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 625.613217][T18487] loop4: detected capacity change from 0 to 512 [ 625.632541][T18487] EXT4-fs: Ignoring removed orlov option [ 625.648410][T18487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 625.690441][T18487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 625.706764][T18487] System zones: 1-12 [ 625.721536][T18487] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 625.738272][T18464] loop2: detected capacity change from 0 to 32768 [ 625.772863][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 625.789824][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 625.797823][T18464] ERROR: (device loop2): dbDiscardAG: -EIO [ 625.797823][T18464] [ 625.812086][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag [ 625.825979][T18487] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 625.844947][T18487] EXT4-fs (loop4): 1 orphan inode deleted [ 625.850868][T18487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 626.062459][ T26] audit: type=1804 audit(1717155012.854:6555): pid=18506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir741381151/syzkaller.G6P70W/41/file0" dev="sda1" ino=1965 res=1 errno=0 [ 626.355027][T18510] loop3: detected capacity change from 0 to 4096 [ 626.378306][T18510] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 626.400635][T11714] EXT4-fs (loop4): unmounting filesystem. [ 626.654739][T18516] loop2: detected capacity change from 0 to 8192 [ 626.696967][T18516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 626.756345][T18516] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 626.786483][ T26] audit: type=1800 audit(1717155013.574:6556): pid=18527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 626.818203][T18516] REISERFS (device loop2): using ordered data mode [ 626.847503][T18516] reiserfs: using flush barriers [ 626.893553][T18516] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 626.949304][T18516] REISERFS (device loop2): checking transaction log (loop2) [ 626.988352][T18516] REISERFS (device loop2): Using r5 hash to sort names [ 626.996652][T18516] REISERFS (device loop2): using 3.5.x disk format [ 627.013421][T18516] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 627.040013][T18516] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 627.130833][T18537] 9pnet_fd: p9_fd_create_tcp (18537): problem connecting socket to 127.0.0.1 [ 627.721001][T18548] loop2: detected capacity change from 0 to 1024 [ 627.748134][T18548] EXT4-fs: Ignoring removed orlov option [ 627.775903][T18548] EXT4-fs (loop2): Test dummy encryption mode enabled [ 627.782661][T18533] loop3: detected capacity change from 0 to 32768 [ 627.819792][T18548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 627.862479][T18533] ERROR: (device loop3): dbDiscardAG: -EIO [ 627.862479][T18533] [ 628.118570][T18548] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 628.457424][ T26] audit: type=1804 audit(1717155015.244:6557): pid=18565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3523531432/syzkaller.QV6JEo/448/bus" dev="sda1" ino=1962 res=1 errno=0 [ 628.484989][T18565] Invalid ELF header type: 0 != 1 [ 628.510336][T13195] EXT4-fs (loop2): unmounting filesystem. [ 628.590982][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 629.037561][T18576] loop4: detected capacity change from 0 to 8192 [ 629.077917][T18576] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 629.098403][T18576] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 629.108368][T18576] REISERFS (device loop4): using ordered data mode [ 629.116925][T18576] reiserfs: using flush barriers [ 629.124688][T18576] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 629.141438][T18576] REISERFS (device loop4): checking transaction log (loop4) [ 629.159904][T18576] REISERFS (device loop4): Using r5 hash to sort names [ 629.167037][T18576] REISERFS (device loop4): using 3.5.x disk format [ 629.174271][T18576] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 629.187196][T18576] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 629.353484][T18559] loop3: detected capacity change from 0 to 32768 [ 629.418575][ T26] audit: type=1800 audit(1717155016.204:6558): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 629.480395][T18569] loop2: detected capacity change from 0 to 32768 [ 629.538601][T18581] loop4: detected capacity change from 0 to 1024 [ 629.546913][T18569] ERROR: (device loop2): dbDiscardAG: -EIO [ 629.546913][T18569] [ 629.560355][T18581] EXT4-fs: Ignoring removed orlov option [ 629.575461][T18581] EXT4-fs (loop4): Test dummy encryption mode enabled [ 629.636648][T18581] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 629.951630][T11714] EXT4-fs (loop4): unmounting filesystem. [ 630.281278][T18602] loop4: detected capacity change from 0 to 128 [ 630.289236][T18602] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 630.321607][T18602] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 630.410808][T18602] sysv_count_free_inodes: unable to read inode table [ 630.419913][T18605] sysv_free_block: trying to free block not in datazone [ 630.482300][T11714] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 630.541982][ T6233] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 630.674114][T18613] loop4: detected capacity change from 0 to 2048 [ 630.717594][T18615] loop2: detected capacity change from 0 to 1024 [ 630.732047][ T6233] usb 4-1: device descriptor read/64, error -71 [ 630.736311][T18615] EXT4-fs: Ignoring removed orlov option [ 630.749094][T18613] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 630.768988][T18615] EXT4-fs (loop2): Test dummy encryption mode enabled [ 630.769195][T18613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.827804][T18615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 631.004257][ T6233] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 631.168986][T13195] EXT4-fs (loop2): unmounting filesystem. [ 631.296387][T18628] loop4: detected capacity change from 0 to 256 [ 631.402341][T18628] loop4: detected capacity change from 256 to 0 [ 631.414964][ C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.424225][T18628] Unable to read inode block [ 631.480967][ C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.490255][T11714] Unable to read inode block [ 631.501562][ C0] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.510823][T11714] Unable to read inode block [ 631.783186][T18652] 9pnet_fd: p9_fd_create_tcp (18652): problem connecting socket to 127.0.0.1 [ 631.851825][ C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.872232][ T11] Unable to read inode block [ 631.878042][ T8679] loop: Write error at byte offset 9223372036854845439, length 1024. [ 631.890000][ C1] I/O error, dev loop4, sector 136 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 631.899483][ C1] Buffer I/O error on dev loop4, logical block 68, lost async page write [ 631.920481][T18659] loop3: detected capacity change from 0 to 256 [ 631.945835][ C1] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 631.955110][ T11] Unable to read inode block [ 632.016522][ T32] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.051830][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 632.082056][T18659] loop3: detected capacity change from 256 to 0 [ 632.089433][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.098708][T18662] Unable to read inode block [ 632.139508][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.149069][T17855] Unable to read inode block [ 632.175214][T18661] device bond1 entered promiscuous mode [ 632.195612][T18661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 632.205868][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.215111][T17855] Unable to read inode block [ 632.265044][ T32] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.366289][ T26] audit: type=1804 audit(1717155019.154:6559): pid=18666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3987181647/syzkaller.5KgWPZ/453/bus" dev="sda1" ino=1946 res=1 errno=0 [ 632.393757][T18666] Invalid ELF header type: 0 != 1 [ 632.451461][ T32] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.573788][ T32] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.604957][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 632.614274][ T8679] Unable to read inode block [ 632.619524][ T11] loop: Write error at byte offset 9223372036854845439, length 1024. [ 632.632167][ C0] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 632.654068][ T8679] Unable to read inode block [ 632.908184][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.920972][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.937607][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.948544][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.005131][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 633.014739][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.175298][T18657] loop2: detected capacity change from 0 to 32768 [ 633.214100][T18657] XFS: ikeep mount option is deprecated. [ 633.251161][T18657] XFS: ikeep mount option is deprecated. [ 633.315789][T18657] XFS (loop2): Mounting V5 Filesystem [ 633.395996][T18701] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 633.472892][T18657] XFS (loop2): Ending clean mount [ 633.488116][T18683] chnl_net:caif_netlink_parms(): no params data found [ 633.509343][T18657] XFS (loop2): Quotacheck needed: Please wait. [ 633.561277][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.570854][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.606411][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.614714][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.626031][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 633.636976][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.674733][T18657] XFS (loop2): Quotacheck: Done. [ 633.878333][T18683] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.893909][T18683] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.907272][T13195] XFS (loop2): Unmounting Filesystem [ 633.935036][T18683] device bridge_slave_0 entered promiscuous mode [ 633.943945][T18683] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.951124][T18683] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.961704][T18683] device bridge_slave_1 entered promiscuous mode [ 634.098890][T18683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.140213][T18683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.188630][T18683] team0: Port device team_slave_0 added [ 634.223555][T18683] team0: Port device team_slave_1 added [ 634.261140][ T32] device hsr_slave_0 left promiscuous mode [ 634.268738][ T32] device hsr_slave_1 left promiscuous mode [ 634.275530][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.283277][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.293044][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.300637][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.319669][ T32] device bridge_slave_1 left promiscuous mode [ 634.330478][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.357901][ T32] device bridge_slave_0 left promiscuous mode [ 634.376808][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.402954][ T32] device veth1_macvtap left promiscuous mode [ 634.408999][ T32] device veth0_macvtap left promiscuous mode [ 634.423451][ T32] device veth1_vlan left promiscuous mode [ 634.425363][T18728] loop2: detected capacity change from 0 to 8192 [ 634.435633][ T32] device veth0_vlan left promiscuous mode [ 634.450546][T18728] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 634.463961][T18728] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 634.473375][T18728] REISERFS (device loop2): using ordered data mode [ 634.479894][T18728] reiserfs: using flush barriers [ 634.486940][T18728] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 634.503806][T18728] REISERFS (device loop2): checking transaction log (loop2) [ 634.514905][T18728] REISERFS (device loop2): Using r5 hash to sort names [ 634.522446][T18728] REISERFS (device loop2): using 3.5.x disk format [ 634.529407][T18728] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 634.545872][T18728] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 634.673542][ T32] bond1 (unregistering): Released all slaves [ 634.869384][ T32] team0 (unregistering): Port device team_slave_1 removed [ 634.897990][ T32] team0 (unregistering): Port device team_slave_0 removed [ 634.920087][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.938623][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.057854][ T32] bond0 (unregistering): Released all slaves [ 635.112122][ T3581] Bluetooth: hci0: command tx timeout [ 635.186926][T18683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.194149][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.221715][T18683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.285773][T18750] device ipvlan2 entered promiscuous mode [ 635.338026][T18683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.352084][T18683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.386792][T18683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.449164][T18755] loop2: detected capacity change from 0 to 4096 [ 635.510011][T18683] device hsr_slave_0 entered promiscuous mode [ 635.539947][T18683] device hsr_slave_1 entered promiscuous mode [ 635.576479][T18708] chnl_net:caif_netlink_parms(): no params data found [ 635.672665][ T3581] Bluetooth: hci4: command tx timeout [ 635.880502][T18708] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.893518][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.914287][T18708] device bridge_slave_0 entered promiscuous mode [ 635.933960][T18771] loop2: detected capacity change from 0 to 1024 [ 635.957938][T18708] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.972222][T18771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.974491][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.991778][T18708] device bridge_slave_1 entered promiscuous mode [ 636.040575][T18771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 636.146226][T13195] EXT4-fs (loop2): unmounting filesystem. [ 636.185559][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.221052][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.244033][T18776] loop2: detected capacity change from 0 to 128 [ 636.259745][T18776] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 636.299431][T18776] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 636.333688][T18708] team0: Port device team_slave_0 added [ 636.361727][T18708] team0: Port device team_slave_1 added [ 636.424280][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.437127][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.487653][T18776] sysv_count_free_inodes: unable to read inode table [ 636.502053][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.512704][T18777] sysv_free_block: trying to free block not in datazone [ 636.554197][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.561174][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.631568][T13195] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 636.633421][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.785677][T18708] device hsr_slave_0 entered promiscuous mode [ 636.800258][T18708] device hsr_slave_1 entered promiscuous mode [ 636.828007][T18708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.842859][T18708] Cannot create hsr debugfs directory [ 636.861263][T18683] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 636.905938][T18683] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 636.971825][T18683] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 637.057423][T18683] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 637.202101][ T3581] Bluetooth: hci0: command tx timeout [ 637.472534][T18708] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.566009][T18683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.624398][T18708] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.665891][T18683] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.680924][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.691560][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.721628][T18708] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.752121][T18187] Bluetooth: hci4: command tx timeout [ 637.799847][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.819495][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.851088][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.858306][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.891310][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.918552][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.947807][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.955079][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.028769][T18708] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.076173][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.091526][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 638.107870][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 638.116972][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 638.131820][T18803] loop2: detected capacity change from 0 to 32768 [ 638.143446][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.156588][T18803] XFS: ikeep mount option is deprecated. [ 638.156769][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 638.168885][T18803] XFS: ikeep mount option is deprecated. [ 638.175686][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 638.202886][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 638.230549][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.257102][T18683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 638.282768][T18803] XFS (loop2): Mounting V5 Filesystem [ 638.317048][T18683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.373351][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 638.381406][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 638.382293][T18803] XFS (loop2): Ending clean mount [ 638.407268][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.449735][T18803] XFS (loop2): Quotacheck needed: Please wait. [ 638.598314][T18803] XFS (loop2): Quotacheck: Done. [ 638.800864][T18708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.855581][T18708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.901340][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.906830][T13195] XFS (loop2): Unmounting Filesystem [ 638.923549][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.931203][T18708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.969724][T18708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.030243][T18683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.252586][T18708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.273164][T18187] Bluetooth: hci0: command tx timeout [ 639.287930][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.300145][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.324662][T18708] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.363727][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.377435][ T5044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.422432][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.429631][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.466624][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.482923][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.492635][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.508629][T15070] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.515786][T15070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.528596][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.550203][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.612515][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.623578][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.632816][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.641802][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.661412][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.686714][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.740131][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.835225][T18187] Bluetooth: hci4: command tx timeout [ 639.873582][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.902608][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.910877][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.944125][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.962194][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.973172][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.996192][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 640.011745][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 640.028947][T18708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 640.092941][T18683] device veth0_vlan entered promiscuous mode [ 640.134736][T18683] device veth1_vlan entered promiscuous mode [ 640.243938][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 640.258687][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 640.273905][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 640.292280][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 640.312908][T18683] device veth0_macvtap entered promiscuous mode [ 640.343561][T18683] device veth1_macvtap entered promiscuous mode [ 640.428632][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.462037][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.490243][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.517373][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.545512][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.572994][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.584339][ T26] audit: type=1800 audit(1717155027.374:6560): pid=18896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1943 res=0 errno=0 [ 640.590659][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.653130][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.680102][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.709787][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.745646][T18683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.770538][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.785952][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.805322][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.822837][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.834554][T18882] loop2: detected capacity change from 0 to 32768 [ 640.850914][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.887154][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.919791][T18882] XFS (loop2): Mounting V5 Filesystem [ 640.956460][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.000036][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.044141][T18882] XFS (loop2): Ending clean mount [ 641.067120][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.080967][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.104817][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.127808][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.153614][T18683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.168118][T18683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.180215][T13195] XFS (loop2): Unmounting Filesystem [ 641.194351][T18683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.207188][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.222325][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.260267][T18683] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.298762][T18683] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.317275][T18683] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.328215][T18683] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.363595][T18187] Bluetooth: hci0: command tx timeout [ 641.424558][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.433181][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.534304][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.678506][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.697599][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.724944][ T8679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.748998][ T8679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.779909][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 641.826513][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.850010][ T8679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.877103][T18708] device veth0_vlan entered promiscuous mode [ 641.896221][ T8679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.901978][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.916905][T18187] Bluetooth: hci4: command tx timeout [ 641.932738][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.941456][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.957204][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.965296][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 642.063893][T18936] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 642.097610][T18930] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 642.177360][ T32] device hsr_slave_0 left promiscuous mode [ 642.202655][ T32] device hsr_slave_1 left promiscuous mode [ 642.219002][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.254454][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.284143][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.291578][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.304309][ T32] device bridge_slave_1 left promiscuous mode [ 642.332177][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.340988][ T32] device bridge_slave_0 left promiscuous mode [ 642.355404][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.382611][ T32] device veth1_macvtap left promiscuous mode [ 642.388683][ T32] device veth0_macvtap left promiscuous mode [ 642.402093][ T32] device veth1_vlan left promiscuous mode [ 642.408300][ T32] device veth0_vlan left promiscuous mode [ 642.433802][ T3615] kernel read not supported for file [timerfd] (pid: 3615 comm: kworker/1:6) [ 642.626808][T18952] loop4: detected capacity change from 0 to 4096 [ 642.692966][T18953] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 642.889741][ T32] team0 (unregistering): Port device team_slave_1 removed [ 642.922588][ T32] team0 (unregistering): Port device team_slave_0 removed [ 642.950374][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.976905][T18955] loop4: detected capacity change from 0 to 4096 [ 642.982475][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.034161][T18956] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.142830][ T32] bond0 (unregistering): Released all slaves [ 643.208834][T18708] device veth1_vlan entered promiscuous mode [ 643.232837][T18941] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 643.273197][T18941] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 643.290979][T18950] device ipvlan2 entered promiscuous mode [ 643.306248][T18950] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 643.357169][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 643.412204][T18966] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 643.458507][T18708] device veth0_macvtap entered promiscuous mode [ 643.474330][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 643.492673][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 643.515459][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 643.532658][T18708] device veth1_macvtap entered promiscuous mode [ 643.594945][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.615670][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.626883][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.638240][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.655755][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.674253][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.684255][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.704186][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.718028][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.736545][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.794108][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.810495][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 643.819338][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.832167][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 643.847028][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.860269][T18973] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 643.868674][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.892046][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.905842][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.917071][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.927688][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.952052][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.968279][ T26] audit: type=1800 audit(1717155030.754:6561): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 643.974613][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.021211][T18708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.043648][T18708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.057742][ T26] audit: type=1800 audit(1717155030.754:6562): pid=18990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 644.087262][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.101444][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 644.126063][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 644.138660][T18708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.159745][T18708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.169305][T18708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.185968][T18708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.431123][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.456105][T18996] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 644.480499][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.514092][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.532456][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.549713][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.593507][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 644.717720][T19008] loop4: detected capacity change from 0 to 256 [ 644.738261][T19010] openvswitch: netlink: Message has 4 unknown bytes. [ 645.610293][T19005] loop2: detected capacity change from 0 to 32768 [ 645.696318][T19005] XFS (loop2): Mounting V5 Filesystem [ 645.837855][T19005] XFS (loop2): Ending clean mount [ 645.921073][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 645.958319][T13195] XFS (loop2): Unmounting Filesystem [ 646.205040][T19045] loop3: detected capacity change from 0 to 256 [ 646.213099][T19046] loop4: detected capacity change from 0 to 256 [ 646.412307][T19042] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 646.764133][T19053] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 646.912731][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 647.463040][T19051] loop3: detected capacity change from 0 to 32768 [ 647.485911][T19051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19051) [ 647.509309][T19051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 647.535115][T19051] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 647.550384][T19051] BTRFS info (device loop3): use zlib compression, level 3 [ 647.557863][T19051] BTRFS info (device loop3): using free space tree [ 647.595917][ T26] audit: type=1800 audit(1717155034.384:6563): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 647.642015][ T26] audit: type=1800 audit(1717155034.414:6564): pid=19096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 647.730389][T19051] BTRFS info (device loop3): enabling ssd optimizations [ 648.006936][T18708] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 648.079434][T19114] loop4: detected capacity change from 0 to 256 [ 648.184653][T19116] binder: 19115:19116 ioctl 400c620e 0 returned -14 [ 648.370920][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 648.682379][ T6233] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 648.772028][ T4779] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 649.012127][ T4779] usb 5-1: Using ep0 maxpacket: 8 [ 649.028520][T19137] loop3: detected capacity change from 0 to 32768 [ 649.036836][T19137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19137) [ 649.049644][ T935] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 649.066248][T19137] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 649.088309][T19137] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 649.097725][T19137] BTRFS info (device loop3): use zlib compression, level 3 [ 649.105591][T19137] BTRFS info (device loop3): using free space tree [ 649.134540][ T4779] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 649.140789][T19137] BTRFS info (device loop3): enabling ssd optimizations [ 649.147905][ T4779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.160789][ T4779] usb 5-1: config 0 descriptor?? [ 649.212285][ T6233] usb 3-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24 [ 649.222712][ T6233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.230917][ T6233] usb 3-1: Product: syz [ 649.235412][ T6233] usb 3-1: Manufacturer: syz [ 649.240231][ T6233] usb 3-1: SerialNumber: syz [ 649.246885][ T6233] usb 3-1: config 0 descriptor?? [ 649.289682][T18708] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 649.303386][ T935] usb 1-1: Using ep0 maxpacket: 32 [ 649.319968][ T6233] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 649.434722][ T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.445827][ T935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.455772][ T935] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.495346][T15070] usb 5-1: USB disconnect, device number 26 [ 649.570123][ T4780] usb 3-1: USB disconnect, device number 28 [ 649.632165][ T935] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 649.641772][ T935] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 649.650746][ T935] usb 1-1: Product: syz [ 649.655248][ T935] usb 1-1: Manufacturer: syz [ 649.660090][ T935] usb 1-1: SerialNumber: syz [ 649.704696][ T935] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input38 [ 649.738587][T19161] loop3: detected capacity change from 0 to 2048 [ 649.785051][T19161] UDF-fs: iocharset iýo8859-1 not found [ 649.912467][ T4780] usb 1-1: USB disconnect, device number 16 [ 649.924196][ T4780] appletouch 1-1:1.0: input: appletouch disconnected [ 650.146439][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 650.263326][T19175] loop4: detected capacity change from 0 to 512 [ 650.305653][T19175] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 650.315730][T19175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 650.326157][T19175] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 650.351418][T19175] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 650.380708][T19175] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 650.565354][T19175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 650.655808][T19175] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 650.706585][T19175] EXT4-fs (loop4): 1 truncate cleaned up [ 650.730143][T19186] binder: 19184:19186 ioctl 400c620e 0 returned -14 [ 650.754604][T19175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 650.964139][T19180] loop2: detected capacity change from 0 to 32768 [ 650.971495][T18683] EXT4-fs (loop4): unmounting filesystem. [ 650.977644][T19180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (19180) [ 651.011533][T19180] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 651.048302][T19180] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 651.064155][T19190] loop4: detected capacity change from 0 to 256 [ 651.077252][T19180] BTRFS info (device loop2): using free space tree [ 651.125171][T19209] loop4: detected capacity change from 0 to 256 [ 651.137332][T19180] BTRFS info (device loop2): enabling ssd optimizations [ 651.174497][T13195] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 651.309657][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 651.352410][ T935] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 651.601985][ T935] usb 2-1: Using ep0 maxpacket: 8 [ 651.632009][ T4780] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 651.722212][ T935] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 651.734360][T19215] loop2: detected capacity change from 0 to 32768 [ 651.736290][ T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.750414][ T935] usb 2-1: config 0 descriptor?? [ 651.754817][T19215] XFS (loop2): Mounting V5 Filesystem [ 651.779519][T19215] XFS (loop2): Ending clean mount [ 651.823456][T13195] XFS (loop2): Unmounting Filesystem [ 652.009543][ T3615] usb 2-1: USB disconnect, device number 19 [ 652.172110][ T4780] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24 [ 652.181280][ T4780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.182142][ T4109] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 652.189544][ T4780] usb 5-1: Product: syz [ 652.201350][ T4780] usb 5-1: Manufacturer: syz [ 652.206116][ T4780] usb 5-1: SerialNumber: syz [ 652.212047][ T4780] usb 5-1: config 0 descriptor?? [ 652.259491][ T4780] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 652.461995][ T4109] usb 1-1: Using ep0 maxpacket: 32 [ 652.480700][ T4780] usb 5-1: USB disconnect, device number 27 [ 652.570913][T19240] loop3: detected capacity change from 0 to 128 [ 652.585236][T19240] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 652.612052][ T4109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.626225][ T4109] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.636679][ T4109] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.686326][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 652.697353][T18708] FAT-fs (loop3): Filesystem has been set read-only [ 652.705334][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 652.832746][ T4109] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 652.851947][ T4109] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 652.860317][ T4109] usb 1-1: Product: syz [ 652.871922][ T4109] usb 1-1: Manufacturer: syz [ 652.876545][ T4109] usb 1-1: SerialNumber: syz [ 652.934462][ T4109] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input39 [ 653.049002][T19247] loop3: detected capacity change from 0 to 32768 [ 653.070848][T19253] input: syz0 as /devices/virtual/input/input40 [ 653.071229][T19247] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (19247) [ 653.121774][T19247] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.147701][ T26] audit: type=1326 audit(1717155039.934:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.179585][T19247] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 653.189326][ T3615] usb 1-1: USB disconnect, device number 17 [ 653.202912][ T3615] appletouch 1-1:1.0: input: appletouch disconnected [ 653.210489][T19252] loop4: detected capacity change from 0 to 4096 [ 653.217128][T19247] BTRFS info (device loop3): using free space tree [ 653.228842][ T26] audit: type=1326 audit(1717155039.934:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.252825][ T26] audit: type=1326 audit(1717155039.934:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.277678][ T26] audit: type=1326 audit(1717155039.934:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.300836][ T26] audit: type=1326 audit(1717155039.964:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.324585][ T26] audit: type=1326 audit(1717155039.974:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.350316][ T26] audit: type=1326 audit(1717155039.974:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd2987a667 code=0x7ffc0000 [ 653.379593][ T26] audit: type=1326 audit(1717155039.974:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd29840329 code=0x7ffc0000 [ 653.383184][T19252] ntfs3: loop4: failed to convert "0000" to iso8859-2 [ 653.410892][ T26] audit: type=1326 audit(1717155039.974:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd2987cee9 code=0x7ffc0000 [ 653.459692][T19247] BTRFS info (device loop3): enabling ssd optimizations [ 653.545524][T18708] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.599139][T19281] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.602112][T18187] Bluetooth: hci4: command tx timeout [ 653.864697][T19285] i2c i2c-0: Invalid block write size 129 [ 654.437219][T19296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.661020][T19286] loop4: detected capacity change from 0 to 32768 [ 654.686422][T19286] XFS: noikeep mount option is deprecated. [ 654.716626][T19286] XFS (loop4): Mounting V5 Filesystem [ 654.752065][ T4780] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 654.827989][T19286] XFS (loop4): Ending clean mount [ 654.841308][T19286] XFS (loop4): Quotacheck needed: Please wait. [ 654.966583][T19286] XFS (loop4): Quotacheck: Done. [ 655.131800][T18683] XFS (loop4): Unmounting Filesystem [ 655.302222][ T4780] usb 1-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24 [ 655.318359][ T4780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.331207][ T4780] usb 1-1: Product: syz [ 655.356811][ T4780] usb 1-1: Manufacturer: syz [ 655.368454][ T4780] usb 1-1: SerialNumber: syz [ 655.391646][ T4780] usb 1-1: config 0 descriptor?? [ 655.449792][ T4780] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 655.663862][ T4780] usb 1-1: USB disconnect, device number 18 [ 656.133890][T19354] loop4: detected capacity change from 0 to 512 [ 656.184811][T19354] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 656.212650][T19354] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #3: comm syz-executor.4: corrupted inode contents [ 656.231311][T19354] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #3: comm syz-executor.4: mark_inode_dirty error [ 656.243352][ T4109] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 656.253830][T19354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 656.269677][T19354] Quota error (device loop4): write_blk: dquota write failed [ 656.277366][T19354] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz-executor.4: Failed to acquire dquot type 0 [ 656.294104][T19354] EXT4-fs (loop4): 1 truncate cleaned up [ 656.299872][T19354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 656.316975][T19354] ext4 filesystem being mounted at /root/syzkaller-testdir3348131777/syzkaller.lObnEm/31/file1 supports timestamps until 2038 (0x7fffffff) [ 656.410421][T18683] EXT4-fs (loop4): unmounting filesystem. [ 656.505962][ T4109] usb 3-1: Using ep0 maxpacket: 32 [ 656.622116][ T4109] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 656.630499][ T4109] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 656.680767][ T4109] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 656.704285][ T4109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 656.726301][ T4109] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 656.747239][ T4109] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 656.771979][ T4109] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 656.792635][ T4109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.812808][ T4109] usb 3-1: config 0 descriptor?? [ 656.922079][ T4780] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 657.075380][ T4109] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 657.167663][T19375] loop3: detected capacity change from 0 to 32768 [ 657.174406][ T4780] usb 5-1: Using ep0 maxpacket: 32 [ 657.271209][ T3615] usb 3-1: USB disconnect, device number 29 [ 657.292211][ T4780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.293977][ T3615] usblp0: removed [ 657.310923][ T4780] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.335890][ T4780] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.512196][ T4780] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 657.532181][ T4780] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 657.540563][ T4780] usb 5-1: Product: syz [ 657.554641][ T4780] usb 5-1: Manufacturer: syz [ 657.565065][ T4780] usb 5-1: SerialNumber: syz [ 657.614170][ T4780] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input41 [ 657.828135][ T4780] usb 5-1: USB disconnect, device number 28 [ 657.846491][ T4780] appletouch 5-1:1.0: input: appletouch disconnected [ 657.910336][T19427] mkiss: ax0: crc mode is auto. [ 657.988641][T19429] i2c i2c-0: Invalid block write size 129 [ 658.109712][T19433] loop3: detected capacity change from 0 to 128 [ 658.136041][T19433] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 658.327332][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 658.343548][T18708] FAT-fs (loop3): Filesystem has been set read-only [ 658.357021][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 658.771365][T19461] loop4: detected capacity change from 0 to 8 [ 658.799643][T19461] SQUASHFS error: lzo decompression failed, data probably corrupt [ 658.846425][T19461] SQUASHFS error: Failed to read block 0x91: -5 [ 658.866177][T19461] SQUASHFS error: Unable to read metadata cache entry [8f] [ 658.904717][T19461] SQUASHFS error: Unable to read inode 0x11f [ 659.044396][T19468] loop3: detected capacity change from 0 to 128 [ 659.084653][T19468] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 659.247067][ T3581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.259757][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.270742][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.273312][T18708] FAT-fs (loop3): error, invalid access to FAT (entry 0x0affffff) [ 659.287729][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.287902][T18708] FAT-fs (loop3): Filesystem has been set read-only [ 659.303122][ T3581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 659.310371][ T3581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 659.342321][T18708] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 659.518974][T19480] loop3: detected capacity change from 0 to 1024 [ 659.563116][T19471] chnl_net:caif_netlink_parms(): no params data found [ 659.829661][T19471] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.841844][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.854959][T19471] device bridge_slave_0 entered promiscuous mode [ 659.893998][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.901198][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.942563][T19471] device bridge_slave_1 entered promiscuous mode [ 660.050470][ T5818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.182684][ T5818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.220655][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.268385][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.348202][ T5818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.428250][T19471] team0: Port device team_slave_0 added [ 660.470237][ T5818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.536300][T19471] team0: Port device team_slave_1 added [ 660.645190][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.669044][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.748027][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.833111][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.840726][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.876901][T19531] loop3: detected capacity change from 0 to 2048 [ 660.883118][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.912487][T19531] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 660.923304][T18187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.937507][T18187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.950257][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.960221][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.968072][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 660.975489][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 661.009282][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 661.009297][ T26] audit: type=1800 audit(1717155047.794:6577): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 661.043351][ T26] audit: type=1804 audit(1717155047.824:6578): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/149/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 661.068891][ C0] vkms_vblank_simulate: vblank timer overrun [ 661.075567][T19531] syz-executor.3: attempt to access beyond end of device [ 661.075567][T19531] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 661.102754][T19540] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 661.114073][ T26] audit: type=1804 audit(1717155047.854:6579): pid=19539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/149/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 661.173575][T19531] syz-executor.3: attempt to access beyond end of device [ 661.173575][T19531] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 661.196082][T19531] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 661.211635][T19531] NILFS (loop3): error -5 reading inode: ino=15 [ 661.277389][T19471] device hsr_slave_0 entered promiscuous mode [ 661.314802][T19471] device hsr_slave_1 entered promiscuous mode [ 661.331286][T19471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.352149][ T48] Bluetooth: hci3: command tx timeout [ 661.361958][T19471] Cannot create hsr debugfs directory [ 661.390179][T19549] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 662.482187][T19533] chnl_net:caif_netlink_parms(): no params data found [ 662.694702][T19570] loop3: detected capacity change from 0 to 512 [ 662.713171][T19570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.729191][T19570] EXT4-fs (loop3): 1 truncate cleaned up [ 662.735273][T19570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 662.787422][T19580] loop4: detected capacity change from 0 to 64 [ 662.793933][ T26] audit: type=1800 audit(1717155049.574:6580): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="loop3" ino=18 res=0 errno=0 [ 662.795371][T19533] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.833424][ T26] audit: type=1804 audit(1717155049.614:6581): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3616583818/syzkaller.YE9FeI/47/bus/memory.events" dev="loop3" ino=18 res=1 errno=0 [ 662.856456][T19533] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.860991][ T26] audit: type=1804 audit(1717155049.614:6582): pid=19570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3616583818/syzkaller.YE9FeI/47/bus/memory.events" dev="loop3" ino=18 res=1 errno=0 [ 662.897796][T19533] device bridge_slave_0 entered promiscuous mode [ 662.919622][T19533] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.930717][T19533] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.948125][T19533] device bridge_slave_1 entered promiscuous mode [ 662.977700][T18708] EXT4-fs (loop3): unmounting filesystem. [ 663.032954][ T48] Bluetooth: hci1: command tx timeout [ 663.063615][T19471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.101161][T19587] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 663.119376][T19533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.176006][T19471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.203548][T19533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.268467][T19471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.285417][T19594] nbd3: detected capacity change from 0 to 2199023255570 [ 663.316851][T19533] team0: Port device team_slave_0 added [ 663.342395][T19533] team0: Port device team_slave_1 added [ 663.378906][T19471] bond0: (slave netdevsim0): Releasing backup interface [ 663.393994][T19471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.414084][T19598] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 663.438434][ T48] Bluetooth: hci3: command tx timeout [ 663.462327][T19533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.473259][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.500448][T19533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.575660][ T5818] device hsr_slave_0 left promiscuous mode [ 663.583623][ T5818] device hsr_slave_1 left promiscuous mode [ 663.599182][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.639529][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.653630][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.664121][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.681692][ T5818] device bridge_slave_1 left promiscuous mode [ 663.692549][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.701444][ T5818] device bridge_slave_0 left promiscuous mode [ 663.712828][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.743885][ T5818] device veth1_macvtap left promiscuous mode [ 663.757238][ T5818] device veth0_macvtap left promiscuous mode [ 663.768366][ T5818] device veth1_vlan left promiscuous mode [ 663.779666][ T5818] device veth0_vlan left promiscuous mode [ 663.916100][ T26] audit: type=1800 audit(1717155050.704:6583): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 663.939554][ T26] audit: type=1804 audit(1717155050.704:6584): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/156/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 663.982539][ T26] audit: type=1804 audit(1717155050.704:6585): pid=19609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3561695001/syzkaller.DMflcB/156/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 664.705527][T19591] block nbd3: shutting down sockets [ 664.916651][ T5818] bond2 (unregistering): Released all slaves [ 664.941482][ T5818] bond1 (unregistering): Released all slaves [ 665.116342][ T3581] Bluetooth: hci1: command tx timeout [ 666.538092][ T48] Bluetooth: hci3: command tx timeout [ 667.202001][ T3581] Bluetooth: hci1: command tx timeout [ 667.316535][T19632] loop3: detected capacity change from 0 to 8 [ 667.365897][T19632] SQUASHFS error: lzo decompression failed, data probably corrupt [ 667.391490][T19632] SQUASHFS error: Failed to read block 0x91: -5 [ 667.430165][T19632] SQUASHFS error: Unable to read metadata cache entry [8f] [ 667.444382][T19632] SQUASHFS error: Unable to read inode 0x11f [ 667.524723][ T5818] team0 (unregistering): Port device team_slave_1 removed [ 667.548037][ T5818] team0 (unregistering): Port device team_slave_0 removed [ 667.562148][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.578196][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.685595][ T5818] bond0 (unregistering): Released all slaves [ 667.755674][T19533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.772100][T19533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.856299][T19533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.149066][T19533] device hsr_slave_0 entered promiscuous mode [ 668.875497][ T3581] Bluetooth: hci3: command tx timeout [ 668.901091][T19533] device hsr_slave_1 entered promiscuous mode [ 668.990130][T19533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.008002][T19533] Cannot create hsr debugfs directory [ 669.277405][ T3581] Bluetooth: hci1: command tx timeout [ 669.326768][T19471] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.356727][T19471] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.363915][ T3611] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 669.403637][T19471] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.419519][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 669.420496][T19471] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.430691][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 669.445360][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 669.463568][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 669.476674][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 669.485377][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 669.734941][T19471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.792803][ T3611] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 669.821203][ T3611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.846034][T19471] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.863098][ T3611] usb 1-1: config 0 descriptor?? [ 669.888885][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 669.899320][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 669.934387][ T3611] dw2102: su3000_identify_state [ 669.939277][ T3611] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 669.952011][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 669.973494][ T3611] dw2102: su3000_power_ctrl: 1, initialized 0 [ 669.987181][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 670.003340][ T3611] dvb-usb: bulk message failed: -22 (2/0) [ 670.018230][ T4653] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.025412][ T4653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.038213][ T3611] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 670.077893][ T3611] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 670.151548][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 670.158298][ T935] usb 1-1: USB disconnect, device number 19 [ 670.186205][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 670.200038][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 670.216833][ T4653] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.223988][ T4653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.992898][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 671.004937][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 671.013877][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 671.053315][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 671.079614][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 671.115379][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.167054][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.206668][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.225706][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.274214][T19663] chnl_net:caif_netlink_parms(): no params data found [ 671.296845][T19471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 671.310772][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.327173][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 671.487029][T19686] loop3: detected capacity change from 0 to 8 [ 671.515285][ T3581] Bluetooth: hci0: command tx timeout [ 671.533354][T19686] SQUASHFS error: lzo decompression failed, data probably corrupt [ 671.541248][T19686] SQUASHFS error: Failed to read block 0x91: -5 [ 671.564496][T19686] SQUASHFS error: Unable to read metadata cache entry [8f] [ 671.572620][T19686] SQUASHFS error: Unable to read inode 0x11f [ 671.618496][T19663] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.643201][T19663] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.672406][T19663] device bridge_slave_0 entered promiscuous mode [ 671.702647][T19663] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.722995][T19663] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.739526][T19663] device bridge_slave_1 entered promiscuous mode [ 671.747717][T19533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.816393][T19533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.838375][T19663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.861118][T19533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.871282][T19533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.895374][T19663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.924658][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.938472][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.978657][T19471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.040683][T19663] team0: Port device team_slave_0 added [ 672.093683][T19663] team0: Port device team_slave_1 added [ 672.258331][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 672.275999][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 672.291968][T19663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.299790][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.371079][T19663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.203249][T19663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.210212][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.291236][T19663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.458094][T19663] device hsr_slave_0 entered promiscuous mode [ 673.470657][T19663] device hsr_slave_1 entered promiscuous mode [ 673.481092][T19663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 673.497499][T19663] Cannot create hsr debugfs directory [ 673.509375][T19471] device veth0_vlan entered promiscuous mode [ 673.522528][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 673.531834][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 673.571133][T19471] device veth1_vlan entered promiscuous mode [ 673.592046][ T3581] Bluetooth: hci0: command tx timeout [ 673.601325][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 673.612746][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 673.620601][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 673.674341][T19533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.730759][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 673.753748][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 673.774468][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 673.786772][T19471] device veth0_macvtap entered promiscuous mode [ 673.814607][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 673.831758][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 673.839939][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 673.855106][T19471] device veth1_macvtap entered promiscuous mode [ 673.894240][ T5818] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.998286][T19533] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.080416][T19533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 674.090886][T19533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.106950][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 674.873702][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 674.884414][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 674.893034][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.900142][ T4780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.908594][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 674.926035][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 674.943591][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.950733][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.992704][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 675.033383][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 675.042949][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 675.056713][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 675.065363][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 675.074753][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 675.083243][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 675.091488][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 675.099922][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 675.108854][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 675.150404][ T5818] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.186227][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 675.202969][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 675.210927][T15070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 675.228054][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.246441][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.268538][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.291809][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.317191][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.339088][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.359231][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.380730][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.391123][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 675.401757][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.423613][T19471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.458347][ T5818] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.717956][ T3581] Bluetooth: hci0: command tx timeout [ 675.832972][T19733] loop3: detected capacity change from 0 to 40427 [ 675.858616][T19733] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 675.866403][T19733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 676.564623][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 676.584410][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.608199][T19733] F2FS-fs (loop3): invalid crc value [ 676.619481][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.661434][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.671428][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.684744][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.698705][T19733] F2FS-fs (loop3): Found nat_bits in checkpoint [ 676.758218][T19733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 676.765488][T19733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 676.777040][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.787788][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.799148][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.809750][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.866571][T19471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.882426][T19471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.901849][T19471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.967552][ T5818] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.996184][T19747] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 677.018161][T19748] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 677.038152][T19748] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 677.883584][ T48] Bluetooth: hci0: command tx timeout [ 677.916178][T19748] bond2: (slave vcan1): making interface the new active one [ 677.934461][T19748] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 677.956985][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 677.965868][ T4109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 677.977325][T19471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.009002][T19471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.018001][T19471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.035738][T19471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.248904][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.271957][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.326949][T11617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.338208][T11617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.347897][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 678.365286][T19533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.393591][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 678.402318][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 678.430811][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 678.477680][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 678.497865][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 678.605010][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 678.614735][T19766] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 678.691567][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 678.705126][T19768] loop3: detected capacity change from 0 to 736 [ 678.712300][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 678.722904][T19533] device veth0_vlan entered promiscuous mode [ 678.759923][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 678.768265][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.828529][T19533] device veth1_vlan entered promiscuous mode [ 678.901784][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 678.913730][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 678.915595][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 678.950582][ T6232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 678.990426][T19533] device veth0_macvtap entered promiscuous mode [ 679.022552][ T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 679.045028][T19781] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 679.073959][T19533] device veth1_macvtap entered promiscuous mode [ 679.114630][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.137372][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.160203][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.184664][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.196474][T19789] ALSA: mixer_oss: invalid OSS volume 'V3' [ 679.202801][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 679.209254][T19789] ALSA: mixer_oss: invalid OSS volume '7' [ 679.216205][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 679.220889][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.222746][T19789] ALSA: mixer_oss: invalid OSS volume '8' [ 679.222761][T19789] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 679.222774][T19789] ALSA: mixer_oss: invalid OSS volume '9' [ 679.253139][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.263062][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.275268][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.291482][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.302165][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.312278][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.322808][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.365292][T19533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.380338][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.392198][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.402205][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.412797][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.432082][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.451937][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.461797][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.497100][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.524965][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.551965][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.561820][T19533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.588304][T19533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.614932][T19533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.636168][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 679.662872][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 679.671522][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.692817][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.722320][T19799] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 679.742608][T19799] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 679.777916][T19533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.812035][T19533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.820774][T19533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.838346][T19533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.051423][T19805] loop2: detected capacity change from 0 to 736 [ 680.132024][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.160103][T19663] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 680.160816][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.226820][T19663] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 680.249155][T19663] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 680.275719][T19663] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 680.318147][ T4110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 680.355160][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.379084][T19814] ALSA: mixer_oss: invalid OSS volume 'V3' [ 680.400816][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.408221][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 680.408241][T19814] ALSA: mixer_oss: invalid OSS volume '8' [ 680.408252][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 680.408263][T19814] ALSA: mixer_oss: invalid OSS volume '9' [ 680.408274][T19814] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 680.408285][T19814] ALSA: mixer_oss: invalid OSS volume '10' [ 680.484056][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 680.598304][ T5818] device hsr_slave_0 left promiscuous mode [ 680.631490][ T5818] device hsr_slave_1 left promiscuous mode [ 680.640869][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.656302][T19828] loop2: detected capacity change from 0 to 736 [ 680.661659][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.678625][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.686367][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.707737][ T5818] device bridge_slave_1 left promiscuous mode [ 680.721493][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.744337][ T5818] device bridge_slave_0 left promiscuous mode [ 680.756201][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.776183][ T5818] device veth1_macvtap left promiscuous mode [ 680.784196][ T5818] device veth0_macvtap left promiscuous mode [ 680.790424][ T5818] device veth1_vlan left promiscuous mode [ 680.797933][ T5818] device veth0_vlan left promiscuous mode [ 680.832062][ T5044] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 681.082072][ T5044] usb 2-1: Using ep0 maxpacket: 32 [ 681.094499][ T5818] team0 (unregistering): Port device team_slave_1 removed [ 681.115009][ T5818] team0 (unregistering): Port device team_slave_0 removed [ 681.144915][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.169877][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.202195][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.219541][ T5044] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.250252][ T5044] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.294044][ T5818] bond0 (unregistering): Released all slaves [ 681.442469][ T5044] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 681.451560][ T5044] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 681.451638][T19663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.470556][ T5044] usb 2-1: Product: syz [ 681.474866][ T5044] usb 2-1: Manufacturer: syz [ 681.485120][ T5044] usb 2-1: SerialNumber: syz [ 681.543294][ T5044] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input42 [ 681.559457][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 681.576546][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 681.601442][T19663] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.639010][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 681.655446][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 681.680999][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.688256][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.715131][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.724057][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 681.735546][T19850] ALSA: mixer_oss: invalid OSS volume 'V3' [ 681.736095][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 681.741366][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 681.741380][T19850] ALSA: mixer_oss: invalid OSS volume '7' [ 681.741393][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 681.741405][T19850] ALSA: mixer_oss: invalid OSS volume '8' [ 681.741416][T19850] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 681.741427][T19850] ALSA: mixer_oss: invalid OSS volume '9' [ 681.750046][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.792978][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.835705][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 681.850783][ T5044] usb 2-1: USB disconnect, device number 20 [ 681.872044][ T5044] appletouch 2-1:1.0: input: appletouch disconnected [ 681.882804][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 681.901353][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 681.925246][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 681.962283][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 681.968476][T19854] loop2: detected capacity change from 0 to 736 [ 681.990057][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 682.019296][T19663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.067765][T19663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.095888][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 682.106363][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 682.132925][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 682.152376][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 682.177816][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 682.253576][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 682.377751][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.418165][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.527222][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 682.542823][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 682.603672][T19663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 682.705526][T19886] ALSA: mixer_oss: invalid OSS volume 'V3' [ 682.734050][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 682.745005][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 682.757485][T19886] ALSA: mixer_oss: invalid OSS volume '8' [ 682.773798][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 682.799562][T19886] ALSA: mixer_oss: invalid OSS volume '9' [ 682.822218][T19886] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 682.843477][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.869439][T19886] ALSA: mixer_oss: invalid OSS volume '10' [ 683.439643][T19913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 685.600715][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.607069][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.292698][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 713.303672][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 713.313905][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 713.321709][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 713.329469][ T48] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 713.339251][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.909942][ T3581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 713.923579][ T3581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 713.932284][ T3581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 713.941043][ T3581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 713.950323][ T3581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 713.957643][ T3581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 714.074537][T18187] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 714.088317][T18187] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 714.100819][ T3573] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 714.111279][T18187] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 714.118478][T18187] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 714.127380][T19936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 714.128488][T18187] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 714.135159][T19936] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 714.148975][T19936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 714.159827][T18187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 714.195824][T18187] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 714.203173][T18187] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 715.442148][T18187] Bluetooth: hci5: command tx timeout [ 715.992106][T18187] Bluetooth: hci6: command tx timeout [ 716.232028][T18187] Bluetooth: hci8: command tx timeout [ 716.232123][ T3581] Bluetooth: hci7: command tx timeout [ 717.512285][ T3581] Bluetooth: hci5: command tx timeout [ 718.081941][ T3581] Bluetooth: hci6: command tx timeout [ 718.312031][ T3581] Bluetooth: hci7: command tx timeout [ 718.317484][ T3581] Bluetooth: hci8: command tx timeout [ 719.592242][ T3581] Bluetooth: hci5: command tx timeout [ 720.159365][ T3581] Bluetooth: hci6: command tx timeout [ 720.391983][ T3581] Bluetooth: hci8: command tx timeout [ 720.397437][ T3581] Bluetooth: hci7: command tx timeout [ 721.672246][ T3581] Bluetooth: hci5: command tx timeout [ 722.231970][ T3581] Bluetooth: hci6: command tx timeout [ 722.471984][ T3581] Bluetooth: hci7: command tx timeout [ 722.471991][T19936] Bluetooth: hci8: command tx timeout [ 728.632030][T18187] Bluetooth: hci2: command 0x0406 tx timeout [ 734.504781][T18187] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 734.521432][T18187] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 734.532817][T18187] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 734.551316][T18187] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 734.559089][T18187] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 734.567746][T18187] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 736.632238][T19936] Bluetooth: hci9: command tx timeout [ 738.712628][T19936] Bluetooth: hci9: command tx timeout [ 740.792062][T19936] Bluetooth: hci9: command tx timeout [ 742.872243][T19936] Bluetooth: hci9: command tx timeout [ 747.033816][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.040145][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.352037][T18187] Bluetooth: hci4: command 0x0406 tx timeout [ 778.407605][T19936] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 778.428642][T19936] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 778.441101][T19936] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 778.449739][T19936] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 778.457411][T19936] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 778.469641][T19936] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 778.783055][T19936] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 778.795159][T19936] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 778.806006][T19936] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 778.813932][T19936] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 778.821495][T19936] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 778.828841][T19936] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 779.089063][ T3581] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 779.104119][ T3581] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 779.113776][ T3581] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 779.121702][ T3581] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 779.129292][ T3581] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 779.136636][ T3581] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 779.187474][T18187] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 779.201392][T18187] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 779.216701][T18187] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 779.227914][T18187] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 779.236915][T18187] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 779.244367][T18187] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 780.552029][T18187] Bluetooth: hci10: command tx timeout [ 780.872088][T18187] Bluetooth: hci11: command tx timeout [ 781.192257][T18187] Bluetooth: hci12: command tx timeout [ 781.282029][T18187] Bluetooth: hci13: command tx timeout [ 782.631973][T18187] Bluetooth: hci10: command tx timeout [ 782.951993][T19936] Bluetooth: hci11: command tx timeout [ 783.272389][T19936] Bluetooth: hci12: command tx timeout [ 783.351923][T19936] Bluetooth: hci13: command tx timeout [ 784.712016][T19936] Bluetooth: hci10: command tx timeout [ 784.952061][T19936] Bluetooth: hci3: command 0x0406 tx timeout [ 784.961943][T18187] Bluetooth: hci1: command 0x0406 tx timeout [ 785.031975][T18187] Bluetooth: hci11: command tx timeout [ 785.353527][T18187] Bluetooth: hci12: command tx timeout [ 785.432031][T18187] Bluetooth: hci13: command tx timeout [ 786.792018][T18187] Bluetooth: hci10: command tx timeout [ 787.112023][T18187] Bluetooth: hci11: command tx timeout [ 787.432272][T18187] Bluetooth: hci12: command tx timeout [ 787.511936][T18187] Bluetooth: hci13: command tx timeout [ 795.191900][T18187] Bluetooth: hci0: command 0x0406 tx timeout [ 799.558961][ T3581] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 799.577683][ T3581] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 799.590689][ T3581] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 799.600268][ T3581] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 799.611499][ T3581] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 799.618993][ T3581] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 801.672077][ T3581] Bluetooth: hci14: command tx timeout [ 803.752036][ T3581] Bluetooth: hci14: command tx timeout [ 805.831944][ T3581] Bluetooth: hci14: command tx timeout [ 807.911904][ T3581] Bluetooth: hci14: command tx timeout [ 808.483620][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.489969][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 831.512140][ T27] INFO: task kworker/1:18:4653 blocked for more than 143 seconds. [ 831.522610][ T27] Not tainted 6.1.92-syzkaller #0 [ 831.528183][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 831.545992][ T27] task:kworker/1:18 state:D stack:23192 pid:4653 ppid:2 flags:0x00004000 2024/05/31 11:33:38 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 831.559190][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 831.610582][ T27] Call Trace: [ 831.614013][ T27] [ 831.616964][ T27] __schedule+0x142d/0x4550 [ 831.621522][ T27] ? __sched_text_start+0x8/0x8 [ 831.634057][ T27] ? print_irqtrace_events+0x210/0x210 [ 831.641209][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 831.650679][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 831.659154][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 831.668759][ T27] schedule+0xbf/0x180 [ 831.676614][ T27] schedule_preempt_disabled+0xf/0x20 [ 831.686233][ T27] __mutex_lock+0x6b9/0xd80 [ 831.690771][ T27] ? __mutex_lock+0x53c/0xd80 [ 831.698703][ T27] ? addrconf_dad_work+0xcc/0x16b0 [ 831.709266][ T27] ? mutex_lock_nested+0x10/0x10 [ 831.718084][ T27] addrconf_dad_work+0xcc/0x16b0 [ 831.750743][ T27] ? read_lock_is_recursive+0x10/0x10 [ 831.756293][ T27] ? ipv6_get_saddr_eval+0xe90/0xe90 [ 831.761605][ T27] ? print_irqtrace_events+0x210/0x210 [ 831.794908][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 831.800869][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 831.822582][ T27] ? process_one_work+0x7a9/0x11d0 [ 831.827752][ T27] process_one_work+0x8a9/0x11d0 [ 831.851890][ T27] ? worker_detach_from_pool+0x260/0x260 [ 831.857586][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 831.871854][ T27] ? kthread_data+0x4e/0xc0 [ 831.876410][ T27] ? wq_worker_running+0x97/0x190 [ 831.881454][ T27] worker_thread+0xa47/0x1200 [ 831.901865][ T27] ? _raw_spin_unlock+0x40/0x40 [ 831.906772][ T27] kthread+0x28d/0x320 [ 831.910849][ T27] ? worker_clr_flags+0x190/0x190 [ 831.932534][ T27] ? kthread_blkcg+0xd0/0xd0 [ 831.937269][ T27] ret_from_fork+0x1f/0x30 [ 831.947711][ T27] [ 831.950945][ T27] INFO: task kworker/u4:11:5818 blocked for more than 143 seconds. [ 831.971845][ T27] Not tainted 6.1.92-syzkaller #0 [ 831.977432][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [