last executing test programs: 3m25.756403709s ago: executing program 1 (id=114): r0 = epoll_create(0x7) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.863739476s ago: executing program 1 (id=117): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000080)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x0, 0x0) 3m22.693618608s ago: executing program 1 (id=126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, 0x0, 0x2000c080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x5}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m21.784250415s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m21.216212053s ago: executing program 1 (id=132): socket$rds(0x15, 0x5, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000900000000000000000080000000000000833909fbd5cc788480b81c34cf89f1f2e6db43", @ANYRES32=r0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000001000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x7c, @local, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1873000000000000000000000100010081128000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r3) 3m17.224323989s ago: executing program 1 (id=144): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 3m16.325019346s ago: executing program 32 (id=144): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 7.937775788s ago: executing program 3 (id=680): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x18) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 7.719285198s ago: executing program 4 (id=682): pipe2(&(0x7f00000000c0), 0x80) syz_emit_ethernet(0x7e, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4040084) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000402) lseek(0xffffffffffffffff, 0x0, 0x3) r5 = accept4(r0, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="ea", 0x1) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x409, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) 6.581510144s ago: executing program 3 (id=685): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) close(r0) 6.580394994s ago: executing program 4 (id=686): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6.200192432s ago: executing program 3 (id=687): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$get_security(0x11, r4, 0x0, 0x0) 5.435344769s ago: executing program 4 (id=688): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x100000079}}, {@resgid}, {@max_batch_time}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001c0073fc00000000000000", @ANYRES32=0x0, @ANYBLOB="f3ff0008"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') writev(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff75, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000200)=@abs={0x1}, 0x6e) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010004000000fedbdf251d010000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001540)=""/48, 0x30}], 0x7, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}, 0x101) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 4.792028577s ago: executing program 2 (id=692): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) 4.687356157s ago: executing program 2 (id=694): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 4.480231726s ago: executing program 2 (id=695): socket$rds(0x15, 0x5, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000900000000000000000080000000000000833909fbd5cc788480b81c34cf89f1f2e6db43", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x7c, @local, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1873000000000000000000000100010081128000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r3) 4.383398845s ago: executing program 2 (id=696): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(r1) 4.250491005s ago: executing program 2 (id=697): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@nodiscard}, {@disable_ext_identify}, {@noheap}, {@alloc_mode_reuse}, {@noquota}, {@gc_merge}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@quota}, {@adaptive_mode}, {@noinline_dentry}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x103141, 0xb8) r1 = fsopen(&(0x7f0000002e80)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x4, &(0x7f0000002ec0)='default_permissions', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) unshare(0x20010000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 3.534093653s ago: executing program 5 (id=703): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) 3.177394532s ago: executing program 5 (id=705): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 3.007180721s ago: executing program 5 (id=706): socket$rds(0x15, 0x5, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000900000000000000000080000000000000833909fbd5cc788480b81c34cf89f1f2e6db43", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x7c, @local, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1873000000000000000000000100010081128000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r3) 2.84578706s ago: executing program 5 (id=708): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000740), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 2.66426991s ago: executing program 0 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x0) 2.61177089s ago: executing program 5 (id=711): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000400), 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) pwrite64(r0, 0x0, 0x0, 0x8080c61) 2.610434689s ago: executing program 4 (id=712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x30, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 2.174204078s ago: executing program 3 (id=713): mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x42, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000019c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f00000007c0)}, 0x9}], 0x1, 0x0, 0x0) 1.833567867s ago: executing program 4 (id=714): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) syz_genetlink_get_family_id$nl80211(0x0, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) 1.823196947s ago: executing program 2 (id=715): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.764321977s ago: executing program 0 (id=716): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.274070095s ago: executing program 0 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="2480", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r2, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) 959.084204ms ago: executing program 0 (id=718): socket$rds(0x15, 0x5, 0x0) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000900000000000000000080000000000000833909fbd5cc788480b81c34cf89f1f2e6db43", @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x7c, @local, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1873000000000000000000000100010081128000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r3) 916.373254ms ago: executing program 3 (id=719): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 806.827273ms ago: executing program 0 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 763.371273ms ago: executing program 5 (id=721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f1ffffff850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r4}, 0x38) 338.093062ms ago: executing program 3 (id=722): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000880)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x100000079}}, {@resgid}, {@max_batch_time}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001c0073fc00000000000000", @ANYRES32=0x0, @ANYBLOB="f3ff0008"], 0x1c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') writev(r1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff75, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000200)=@abs={0x1}, 0x6e) socketpair(0xf, 0xa, 0x2, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010004000000fedbdf251d010000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001540)=""/48, 0x30}], 0x7, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}, 0x101) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 284.279841ms ago: executing program 0 (id=723): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$get_security(0x11, r4, 0x0, 0x0) 0s ago: executing program 4 (id=724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1, 0x3, 0x0, 0x30, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) kernel console output (not intermixed with test programs): ndle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.905542][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.947649][ T4168] device hsr_slave_0 entered promiscuous mode [ 70.956020][ T4168] device hsr_slave_1 entered promiscuous mode [ 70.963064][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.971225][ T4168] Cannot create hsr debugfs directory [ 70.982706][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.990593][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.018054][ T4171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.033574][ T4171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.043046][ T4171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.071007][ T4171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.185352][ T4174] device hsr_slave_0 entered promiscuous mode [ 71.193223][ T4174] device hsr_slave_1 entered promiscuous mode [ 71.200956][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.209935][ T4174] Cannot create hsr debugfs directory [ 71.274350][ T4171] device hsr_slave_0 entered promiscuous mode [ 71.281503][ T4171] device hsr_slave_1 entered promiscuous mode [ 71.289414][ T4171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.298239][ T4171] Cannot create hsr debugfs directory [ 71.488670][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.495563][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.602113][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.624966][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.635305][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.658801][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.700352][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.711341][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.749795][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.775532][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.789260][ T4170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.816863][ T4170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.828492][ T4170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.840249][ T4170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.927595][ T4174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.961409][ T4174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.985117][ T4174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.995900][ T4174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.056743][ T4171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.085510][ T4171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.096656][ T4171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.113091][ T4171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.146600][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.168948][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.221109][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.236778][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.249956][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.259643][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.272353][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.289974][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.308500][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.332272][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.342550][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.352075][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.361691][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.373617][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.389842][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.399814][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.442089][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.453274][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.467197][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.478200][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.485830][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.495292][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.506402][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.516824][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.528164][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.535540][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.547446][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.558456][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.571913][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.579298][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.588226][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.598195][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.607790][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.615774][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.625861][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.638575][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.648488][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.656807][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.697157][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.706400][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.717086][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.727697][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.738120][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.748991][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.759060][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.774766][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.783406][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.796032][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.805503][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.825948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.839467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.863642][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.880190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.888802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.901196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.912192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.921515][ T4159] Bluetooth: hci2: command 0x041b tx timeout [ 72.954262][ T4159] Bluetooth: hci3: command 0x041b tx timeout [ 72.960664][ T4159] Bluetooth: hci0: command 0x041b tx timeout [ 72.967812][ T4159] Bluetooth: hci4: command 0x041b tx timeout [ 72.968919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.975035][ T4159] Bluetooth: hci1: command 0x041b tx timeout [ 72.990359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.002986][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.012621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.021616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.033376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.042934][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.052505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.061470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.071988][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.081568][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.091297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.101421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.111547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.120928][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.130699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.143244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.155828][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.167890][ T4170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.183507][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.223343][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.240742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.254029][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.270309][ T4171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.299365][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.317819][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.329639][ T1204] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.336816][ T1204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.366861][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.379010][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.388623][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.401249][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.415235][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.425468][ T1204] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.433652][ T1204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.447014][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.462816][ T4171] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.495140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.509190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.521757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.575836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.588224][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.599228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.609538][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.616779][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.629482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.639080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.648781][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.656319][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.666744][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.674847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.683154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.692499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.701647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.711030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.720627][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.732757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.742879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.753343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.763003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.772600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.788442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.798598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.810573][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.820488][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.850194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.860260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.870558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.880739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.911284][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.924485][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.940432][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.953801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.963409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.973729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.982400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.990696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.999150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.014500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.024217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.039548][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.120391][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.130763][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.161571][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.171028][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.182317][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.192649][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.222638][ T4170] device veth0_vlan entered promiscuous mode [ 74.240872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.257697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.286167][ T4168] device veth0_vlan entered promiscuous mode [ 74.302374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.312045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.322419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.332525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.351447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.360957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.379496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.388758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.399431][ T4170] device veth1_vlan entered promiscuous mode [ 74.427784][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.439335][ T4168] device veth1_vlan entered promiscuous mode [ 74.459309][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.487036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.502326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.545668][ T4169] device veth0_vlan entered promiscuous mode [ 74.561050][ T4170] device veth0_macvtap entered promiscuous mode [ 74.586546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.598192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.609495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.623227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.635916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.648553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.658777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.685817][ T4170] device veth1_macvtap entered promiscuous mode [ 74.705509][ T4174] device veth0_vlan entered promiscuous mode [ 74.718317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.733601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.748033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.764701][ T4169] device veth1_vlan entered promiscuous mode [ 74.790315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.799165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.809957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.819061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.829643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.840188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.854950][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.873413][ T4174] device veth1_vlan entered promiscuous mode [ 74.886548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.896978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.908977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.928991][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.945527][ T4168] device veth0_macvtap entered promiscuous mode [ 74.959102][ T4168] device veth1_macvtap entered promiscuous mode [ 74.977436][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.989530][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.994656][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 74.999847][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.012948][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 75.013941][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.020451][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 75.030236][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.056225][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 75.057010][ T4170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062635][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 75.081261][ T4170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.092921][ T4170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.104889][ T4170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143365][ T4169] device veth0_macvtap entered promiscuous mode [ 75.153459][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.165784][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.175758][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.186688][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.197008][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.213076][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.227017][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.240032][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.268261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.279009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.288916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.300591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.321590][ T4169] device veth1_macvtap entered promiscuous mode [ 75.339796][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.352030][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.366511][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.393092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.406179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.415742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.427961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.437781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.450179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.459531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.468947][ T4174] device veth0_macvtap entered promiscuous mode [ 75.487985][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.498322][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.507291][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.517540][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.531668][ T4171] device veth0_vlan entered promiscuous mode [ 75.547026][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.569501][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.580000][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.592102][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.606287][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.617489][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.629276][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641944][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.654308][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.669246][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.681105][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.690423][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.700396][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.709679][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.722435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.732024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.742482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.751809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.770195][ T4174] device veth1_macvtap entered promiscuous mode [ 75.782140][ T4171] device veth1_vlan entered promiscuous mode [ 75.859744][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.873385][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.885037][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.899326][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.910788][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.929294][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.946390][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.991811][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.002586][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.014451][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.026311][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.038662][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.053277][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.066362][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.078394][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.090737][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.123354][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.147251][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.161495][ T4174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172614][ T4174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.182569][ T4174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.191994][ T4174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.244793][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.263114][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.277603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.292960][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.302252][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.306793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.319602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.328706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.340321][ T4171] device veth0_macvtap entered promiscuous mode [ 76.402883][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.427426][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.428037][ T4171] device veth1_macvtap entered promiscuous mode [ 76.449952][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.490866][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.517818][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.534901][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.546336][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.557582][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.569782][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.581124][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.592039][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.603441][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.616344][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.626859][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.642664][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.648270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.660447][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669224][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.672283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.692712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.702602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.730241][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.741930][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.752837][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.765020][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.776472][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.788037][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.798866][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.810056][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.823024][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.858673][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.866004][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.881232][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.896751][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.897199][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.906496][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.933679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.951654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.961582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.075835][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 77.082804][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.085698][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 77.133872][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 77.136446][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.161859][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 77.176850][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.209954][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 77.233192][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.243222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.263593][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.307722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.328045][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.370517][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.443128][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.509814][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.542989][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.609249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.162017][ T4286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.243169][ T4286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.057822][ T4331] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 80.074444][ T4332] loop2: detected capacity change from 0 to 2048 [ 80.147559][ T4337] device syzkaller1 entered promiscuous mode [ 80.262260][ T4332] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.663793][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 82.941777][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 82.969585][ T4371] syz.4.33 uses obsolete (PF_INET,SOCK_PACKET) [ 83.278968][ T4382] device syzkaller1 entered promiscuous mode [ 85.661813][ T4409] loop4: detected capacity change from 0 to 720 [ 85.695814][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 86.189284][ T4424] loop0: detected capacity change from 0 to 1024 [ 86.872853][ T1107] cfg80211: failed to load regulatory.db [ 87.605849][ T4444] loop2: detected capacity change from 0 to 512 [ 87.862487][ T4444] ======================================================= [ 87.862487][ T4444] WARNING: The mand mount option has been deprecated and [ 87.862487][ T4444] and is ignored by this kernel. Remove the mand [ 87.862487][ T4444] option from the mount to silence this warning. [ 87.862487][ T4444] ======================================================= [ 88.255986][ T4248] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.674214][ T4248] usb 1-1: Using ep0 maxpacket: 32 [ 89.239039][ T4262] Set syz1 is full, maxelem 65536 reached [ 89.310537][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 89.321077][ T4248] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 89.386236][ T4457] loop2: detected capacity change from 0 to 256 [ 89.419532][ T4457] exfat: Deprecated parameter 'namecase' [ 89.532010][ T4459] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 89.570166][ T4457] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 89.679120][ T4448] loop3: detected capacity change from 0 to 32768 [ 89.805186][ T4461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 89.821694][ T4448] [ 89.821694][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.821694][ T4448] [ 90.011092][ T4448] [ 90.011092][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.011092][ T4448] [ 90.074737][ T4448] [ 90.074737][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.074737][ T4448] [ 90.135775][ T4448] [ 90.135775][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.135775][ T4448] [ 90.184322][ T4448] [ 90.184322][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.184322][ T4448] [ 90.232160][ T4448] [ 90.232160][ T4448] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.232160][ T4448] [ 90.263047][ T4466] mmap: syz.4.57 (4466) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 90.320484][ T277] [ 90.320484][ T277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.320484][ T277] [ 90.346987][ T4448] ea_get: invalid extended attribute [ 90.353303][ T4448] ffff888070f143f0: 30 00 07 00 00 00 00 00 00 00 65 72 2e 78 61 74 0.........er.xat [ 90.429362][ T4448] ffff888070f14400: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 90.460915][ T4448] ffff888070f14410: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 90.507703][ T4468] read_mapping_page failed! [ 90.525158][ T26] audit: type=1800 audit(1738373042.698:2): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.55" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 90.547252][ T4468] ERROR: (device loop3): txCommit: [ 90.547252][ T4468] [ 90.632472][ T4468] ERROR: (device loop3): remounting filesystem as read-only [ 90.774200][ T4248] usb 1-1: string descriptor 0 read error: -71 [ 90.811666][ T4248] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.854101][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.899625][ T4471] Zero length message leads to an empty skb [ 90.935602][ T4349] hfsplus: b-tree write err: -5, ino 8 [ 90.966572][ T4248] usb 1-1: config 0 descriptor?? [ 91.064520][ T4248] usb 1-1: can't set config #0, error -71 [ 91.130636][ T4248] usb 1-1: USB disconnect, device number 2 [ 91.317245][ T4478] loop0: detected capacity change from 0 to 512 [ 91.400702][ T4465] loop1: detected capacity change from 0 to 32768 [ 91.486823][ T4478] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.67: casefold flag without casefold feature [ 91.514583][ T4478] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.67: couldn't read orphan inode 15 (err -117) [ 91.544835][ T4465] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.62 (4465) [ 91.560381][ T4479] bond1 (unregistering): Released all slaves [ 91.594854][ T4478] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.654667][ T4465] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 91.704211][ T4465] BTRFS info (device loop1): force zlib compression, level 3 [ 91.712031][ T4465] BTRFS info (device loop1): force clearing of disk cache [ 91.761979][ T4465] BTRFS info (device loop1): setting nodatasum [ 91.844256][ T4465] BTRFS info (device loop1): use zlib compression, level 3 [ 91.851765][ T4465] BTRFS info (device loop1): allowing degraded mounts [ 91.922983][ T4465] BTRFS info (device loop1): enabling disk space caching [ 92.024266][ T4465] BTRFS info (device loop1): disk space caching is enabled [ 92.031666][ T4465] BTRFS info (device loop1): has skinny extents [ 92.223275][ T4490] overlayfs: failed to resolve './file2': -2 [ 92.491822][ T4492] loop4: detected capacity change from 0 to 512 [ 93.861058][ T4517] sctp: failed to load transform for md5: -2 [ 94.971581][ T4465] BTRFS error (device loop1): open_ctree failed [ 95.420770][ T4542] loop3: detected capacity change from 0 to 256 [ 95.595152][ T4542] FAT-fs (loop3): Directory bread(block 64) failed [ 95.612495][ T4542] FAT-fs (loop3): Directory bread(block 65) failed [ 95.637930][ T4542] FAT-fs (loop3): Directory bread(block 66) failed [ 95.670363][ T4542] FAT-fs (loop3): Directory bread(block 67) failed [ 95.707616][ T4542] FAT-fs (loop3): Directory bread(block 68) failed [ 95.746854][ T4542] FAT-fs (loop3): Directory bread(block 69) failed [ 95.774098][ T4542] FAT-fs (loop3): Directory bread(block 70) failed [ 95.780836][ T4542] FAT-fs (loop3): Directory bread(block 71) failed [ 95.831485][ T4542] FAT-fs (loop3): Directory bread(block 72) failed [ 95.854152][ T4542] FAT-fs (loop3): Directory bread(block 73) failed [ 96.362059][ T4538] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.804334][ T4538] usb 5-1: Using ep0 maxpacket: 8 [ 96.924652][ T4538] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.983404][ T4538] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.114689][ T4538] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.122502][ T4538] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 97.142083][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.205897][ T4538] usb 5-1: config 0 descriptor?? [ 97.887744][ T4538] kye 0003:0458:4018.0001: item fetching failed at offset 12/133 [ 97.904754][ T4538] kye 0003:0458:4018.0001: parse failed [ 97.921028][ T4538] kye: probe of 0003:0458:4018.0001 failed with error -22 [ 97.929465][ T4550] loop1: detected capacity change from 0 to 32768 [ 98.005660][ T4550] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.75 (4550) [ 98.076092][ T4550] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.114298][ T4550] BTRFS info (device loop1): force zlib compression, level 3 [ 98.122029][ T4550] BTRFS info (device loop1): force clearing of disk cache [ 98.184241][ T4550] BTRFS info (device loop1): setting nodatasum [ 98.190005][ T4564] loop2: detected capacity change from 0 to 512 [ 98.197661][ T4550] BTRFS info (device loop1): use zlib compression, level 3 [ 98.197739][ T4550] BTRFS info (device loop1): allowing degraded mounts [ 98.197761][ T4550] BTRFS info (device loop1): enabling disk space caching [ 98.197778][ T4550] BTRFS info (device loop1): disk space caching is enabled [ 98.244156][ T4538] usb 5-1: USB disconnect, device number 2 [ 98.250615][ T4550] BTRFS info (device loop1): has skinny extents [ 98.644308][ T4550] BTRFS info (device loop1): enabling ssd optimizations [ 100.072337][ T4550] BTRFS info (device loop1): clearing free space tree [ 100.161323][ T4550] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.214660][ T4573] loop0: detected capacity change from 0 to 32768 [ 100.226725][ T4550] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.248902][ T4599] loop4: detected capacity change from 0 to 128 [ 100.273352][ T4573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.82 (4573) [ 100.372737][ T4573] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.414156][ T4573] BTRFS info (device loop0): enabling auto defrag [ 100.420402][ T4599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 100.420736][ T4573] BTRFS info (device loop0): doing ref verification [ 100.514214][ T4573] BTRFS info (device loop0): use no compression [ 100.531323][ T4573] BTRFS info (device loop0): force clearing of disk cache [ 100.583283][ T4573] BTRFS info (device loop0): max_inline at 7 [ 100.641791][ T4573] BTRFS info (device loop0): disabling free space tree [ 100.652984][ T4573] BTRFS info (device loop0): has skinny extents [ 101.381256][ T4608] loop2: detected capacity change from 0 to 2048 [ 101.713069][ T4608] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.717473][ T4630] loop4: detected capacity change from 0 to 4096 [ 101.750717][ T4573] BTRFS error (device loop0): open_ctree failed [ 101.770836][ T4630] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 102.652209][ T4630] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 102.931105][ T4630] ODEBUG: Out of memory. ODEBUG disabled [ 103.160147][ T4644] loop3: detected capacity change from 0 to 4096 [ 103.166884][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 103.303450][ T4630] syz.4.91 (4630): drop_caches: 2 [ 103.450821][ T4656] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.461863][ T4655] loop2: detected capacity change from 0 to 512 [ 105.272656][ T4666] netlink: 64 bytes leftover after parsing attributes in process `syz.3.95'. [ 105.580132][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 105.799386][ T4679] device syzkaller1 entered promiscuous mode [ 106.329461][ T4686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 106.676585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 106.686090][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.695592][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.704830][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.714243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.724011][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.733167][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.742211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.751372][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.760525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 106.821419][ T4681] loop3: detected capacity change from 0 to 32768 [ 108.282834][ T4702] loop2: detected capacity change from 0 to 512 [ 108.349625][ T4681] XFS (loop3): Mounting V5 Filesystem [ 109.249487][ T4681] XFS (loop3): Ending clean mount [ 109.348461][ T4681] XFS (loop3): Quotacheck needed: Please wait. [ 109.366155][ T4726] device syzkaller1 entered promiscuous mode [ 109.382388][ T4727] loop1: detected capacity change from 0 to 128 [ 109.469971][ T4727] UDF-fs: bad mount option "" or missing value [ 109.494822][ T4681] XFS (loop3): Quotacheck: Done. [ 109.536327][ T4168] XFS (loop3): Unmounting Filesystem [ 109.650829][ T4727] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.698025][ T4727] blk_update_request: I/O error, dev loop1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.733749][ T4731] loop2: detected capacity change from 0 to 1764 [ 109.753854][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.804478][ T4727] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.834255][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 109.881073][ T4727] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 109.889907][ T4727] UDF-fs: Scanning with blocksize 512 failed [ 109.935475][ T4727] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 109.983805][ T4727] blk_update_request: I/O error, dev loop1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.010867][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.029253][ T4727] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.048089][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 110.189979][ T4727] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 110.259315][ T4727] UDF-fs: Scanning with blocksize 1024 failed [ 110.267362][ T4727] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.293746][ T4727] blk_update_request: I/O error, dev loop1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.314292][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 110.530094][ T4727] blk_update_request: I/O error, dev loop1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.705170][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 110.874551][ T4727] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 111.034049][ T4727] UDF-fs: Scanning with blocksize 2048 failed [ 111.071497][ T4727] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.148786][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.160101][ T4727] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 111.177362][ T4727] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 111.188715][ T4727] UDF-fs: Scanning with blocksize 4096 failed [ 111.198639][ T4727] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 111.280160][ T4746] loop3: detected capacity change from 0 to 512 [ 112.474206][ T4757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 112.563139][ T4758] loop1: detected capacity change from 0 to 2048 [ 112.706016][ T4763] device syzkaller1 entered promiscuous mode [ 112.714888][ T4758] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,. Quota mode: writeback. [ 112.767566][ T4741] loop0: detected capacity change from 0 to 32768 [ 112.912612][ T4174] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /13/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 112.949515][ T4741] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 112.976563][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 112.998855][ T4174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 113.068886][ T4741] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.087784][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.108854][ T4174] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /13/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 113.174335][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.181327][ T4174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 113.231738][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.290122][ T4174] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /13/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 113.354257][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.361138][ T4174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 113.454097][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.461797][ T4174] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /13/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 113.487904][ T4778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.136'. [ 113.494082][ T4775] loop3: detected capacity change from 0 to 2048 [ 113.555999][ T4776] trusted_key: encrypted_key: insufficient parameters specified [ 113.650836][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 113.841484][ T4781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.856334][ T4174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 113.899752][ T4775] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.100767][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 114.118381][ T4174] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /13/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 114.236155][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 114.243104][ T4174] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 114.889902][ T4174] EXT4-fs (loop1): Remounting filesystem read-only [ 116.977110][ T4427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.351497][ T4427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.858416][ T4427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.971759][ T4427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.974537][ T4169] ocfs2: Unmounting device (7,0) on (node local) [ 118.147355][ T4817] netlink: 48 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.332572][ T4821] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 118.811166][ T4834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.149'. [ 119.100700][ T4835] sctp: failed to load transform for md5: -2 [ 119.323276][ T4834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 119.610366][ T4818] chnl_net:caif_netlink_parms(): no params data found [ 119.644336][ T4853] loop4: detected capacity change from 0 to 128 [ 119.681118][ T4855] device macsec1 entered promiscuous mode [ 119.762020][ T4853] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 120.151457][ T4171] sysv_free_block: trying to free block not in datazone [ 120.218039][ T4171] sysv_free_block: trying to free block not in datazone [ 120.292674][ T4171] sysv_free_block: getblk() failed [ 120.339092][ T4171] sysv_free_block: getblk() failed [ 120.364115][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 120.383458][ T4870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.156'. [ 120.412571][ T4171] sysv_free_block: getblk() failed [ 120.434877][ T4171] sysv_free_block: getblk() failed [ 120.440265][ T4171] sysv_free_block: getblk() failed [ 120.445753][ T4171] sysv_free_block: getblk() failed [ 120.451162][ T4171] sysv_free_block: getblk() failed [ 120.456490][ T4171] sysv_free_block: getblk() failed [ 120.461657][ T4171] sysv_free_block: getblk() failed [ 120.467095][ T4171] sysv_free_block: getblk() failed [ 120.472533][ T4171] sysv_free_block: getblk() failed [ 120.477905][ T4171] sysv_free_block: getblk() failed [ 120.483508][ T4171] sysv_free_block: getblk() failed [ 120.490882][ T4171] sysv_free_block: getblk() failed [ 120.496525][ T4171] sysv_free_block: getblk() failed [ 120.501858][ T4171] sysv_free_block: getblk() failed [ 120.507714][ T4171] sysv_free_block: getblk() failed [ 120.513374][ T4171] sysv_free_block: getblk() failed [ 120.519543][ T4171] sysv_free_block: getblk() failed [ 120.525852][ T4171] sysv_free_block: getblk() failed [ 120.531215][ T4171] sysv_free_block: getblk() failed [ 120.539012][ T4171] sysv_free_block: getblk() failed [ 120.544660][ T4171] sysv_free_block: getblk() failed [ 120.549960][ T4171] sysv_free_block: getblk() failed [ 120.555782][ T4171] sysv_free_block: getblk() failed [ 120.561283][ T4171] sysv_free_block: getblk() failed [ 120.567149][ T4171] sysv_free_block: getblk() failed [ 120.572419][ T4171] sysv_free_block: getblk() failed [ 120.582873][ T4171] sysv_free_block: getblk() failed [ 120.591309][ T4171] sysv_free_block: getblk() failed [ 120.607490][ T4875] loop2: detected capacity change from 0 to 128 [ 120.614597][ T4171] sysv_free_block: getblk() failed [ 120.619914][ T4171] sysv_free_block: getblk() failed [ 120.625565][ T4171] sysv_free_block: getblk() failed [ 120.648671][ T4171] sysv_free_block: getblk() failed [ 120.655094][ T4171] sysv_free_block: getblk() failed [ 120.660276][ T4171] sysv_free_block: getblk() failed [ 120.672781][ T4171] sysv_free_block: getblk() failed [ 120.678589][ T4171] sysv_free_block: getblk() failed [ 120.683837][ T4171] sysv_free_block: trying to free block not in datazone [ 120.698235][ T4171] sysv_free_block: trying to free block not in datazone [ 120.708213][ T4171] sysv_free_block: trying to free block not in datazone [ 120.737432][ T4171] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 120.779243][ T4875] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.794398][ T4875] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.852682][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.866473][ T4818] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.881518][ T4818] device bridge_slave_0 entered promiscuous mode [ 120.895396][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.965455][ T4818] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.009123][ T4818] device bridge_slave_1 entered promiscuous mode [ 121.044194][ T4535] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.217167][ T4818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.392722][ T4897] loop4: detected capacity change from 0 to 512 [ 122.399643][ T4535] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 122.420359][ T4535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.514324][ T4818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.565602][ T4535] usb 4-1: config 0 descriptor?? [ 122.651386][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 122.675607][ T4818] team0: Port device team_slave_0 added [ 122.736335][ T4902] netlink: 68 bytes leftover after parsing attributes in process `syz.2.164'. [ 122.793757][ T4897] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x000000000000002f,dioread_lock,,errors=continue. Quota mode: writeback. [ 122.815462][ T4427] device hsr_slave_0 left promiscuous mode [ 122.855180][ T4897] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.868827][ T4427] device hsr_slave_1 left promiscuous mode [ 122.904937][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.935249][ T4911] loop2: detected capacity change from 0 to 4096 [ 122.942362][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.973421][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.983431][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.991484][ T4427] device bridge_slave_1 left promiscuous mode [ 123.000651][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.022362][ T4427] device bridge_slave_0 left promiscuous mode [ 123.028773][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.528600][ T4911] ntfs3: loop2: ino=21, "file1" fallocate(0x20) is not supported [ 123.571996][ T4427] device veth1_macvtap left promiscuous mode [ 123.583418][ T4427] device veth0_macvtap left promiscuous mode [ 123.624165][ T4427] device veth1_vlan left promiscuous mode [ 123.630024][ T4427] device veth0_vlan left promiscuous mode [ 123.754403][ T4535] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 123.797620][ T4535] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 123.832698][ T4925] netlink: 48 bytes leftover after parsing attributes in process `syz.2.167'. [ 123.862361][ T4535] asix: probe of 4-1:0.0 failed with error -71 [ 123.925144][ T4535] usb 4-1: USB disconnect, device number 2 [ 125.023521][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 125.228185][ T4897] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 125.326754][ T4937] tmpfs: Unknown parameter 'quota' [ 126.182430][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 126.253762][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 126.272867][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.292240][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.307019][ T4895] Process accounting resumed [ 126.469251][ T4427] bond0 (unregistering): Released all slaves [ 126.622314][ T4818] team0: Port device team_slave_1 added [ 126.690431][ T4934] loop2: detected capacity change from 0 to 32768 [ 126.751259][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.804102][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.905055][ T4818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.941298][ T4818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.949892][ T4934] XFS (loop2): Mounting V5 Filesystem [ 126.972119][ T4818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.010997][ T4818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.084717][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 127.099869][ T4958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.174'. [ 127.285123][ T4818] device hsr_slave_0 entered promiscuous mode [ 127.316302][ T4934] XFS (loop2): Ending clean mount [ 127.333423][ T4818] device hsr_slave_1 entered promiscuous mode [ 127.337855][ T4934] XFS (loop2): Quotacheck needed: Please wait. [ 127.345991][ T4818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.374034][ T4818] Cannot create hsr debugfs directory [ 127.454205][ T4966] loop0: detected capacity change from 0 to 2048 [ 127.535565][ T4966] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 127.550776][ T4934] XFS (loop2): Quotacheck: Done. [ 127.585249][ T4328] udevd[4328]: incorrect nilfs2 checksum on /dev/loop0 [ 127.621217][ T4969] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.774851][ T4170] XFS (loop2): Unmounting Filesystem [ 127.816216][ T4944] loop4: detected capacity change from 0 to 40427 [ 127.901340][ T4975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 127.971535][ T4944] F2FS-fs (loop4): Invalid segment count (1) [ 128.024183][ T4944] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.061742][ T4944] F2FS-fs (loop4): invalid crc value [ 128.097428][ T4818] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 128.118020][ T4944] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.156448][ T4818] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 128.175860][ T4818] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 128.254631][ T4818] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 128.452448][ T4944] F2FS-fs (loop4): recover fsync data on readonly fs [ 128.502291][ T4944] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 128.564489][ T4944] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 128.600903][ T4818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.680655][ T4818] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.714938][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.744665][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.900751][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.941691][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.989284][ T4394] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.996562][ T4394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.005317][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.014276][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.022896][ T4394] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.030278][ T4394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.038759][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.048195][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.121098][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.355447][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 129.390528][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.415030][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 129.490959][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 129.530468][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.591605][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.678751][ T4818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.734884][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 129.777003][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 129.785937][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.802933][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.992108][ T5013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.184'. [ 130.129081][ T5013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 130.213541][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 130.233792][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 130.283217][ T4818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.385805][ T4986] loop2: detected capacity change from 0 to 32768 [ 130.530223][ T5025] loop3: detected capacity change from 0 to 512 [ 130.572985][ T4986] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.178 (4986) [ 130.786766][ T26] audit: type=1800 audit(1738373082.948:3): pid=5030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.186" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 131.562151][ T4986] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.620343][ T4986] BTRFS info (device loop2): force zlib compression, level 3 [ 131.644416][ T4986] BTRFS info (device loop2): force clearing of disk cache [ 131.651255][ T5035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 131.651594][ T4986] BTRFS info (device loop2): setting nodatasum [ 131.834129][ T4986] BTRFS info (device loop2): use zlib compression, level 3 [ 131.841577][ T4986] BTRFS info (device loop2): allowing degraded mounts [ 131.904596][ T4986] BTRFS info (device loop2): enabling disk space caching [ 131.911865][ T4986] BTRFS info (device loop2): disk space caching is enabled [ 131.920090][ T4986] BTRFS info (device loop2): has skinny extents [ 132.180991][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.212503][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.296056][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.315457][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.349081][ T5009] loop4: detected capacity change from 0 to 40427 [ 132.352929][ T4818] device veth0_vlan entered promiscuous mode [ 132.375038][ T4986] BTRFS error (device loop2): open_ctree failed [ 132.376902][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.440597][ T5009] F2FS-fs (loop4): invalid crc value [ 132.440629][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.480867][ T4818] device veth1_vlan entered promiscuous mode [ 132.507484][ T5009] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.611596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.634813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.673589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.713894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.725584][ T4818] device veth0_macvtap entered promiscuous mode [ 132.761534][ T5009] F2FS-fs (loop4): Start checkpoint disabled! [ 132.765924][ T4818] device veth1_macvtap entered promiscuous mode [ 132.836023][ T5009] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 132.846920][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.900683][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.917238][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.923631][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.962626][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.004713][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.034004][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.062631][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.092743][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.127172][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.180597][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.217255][ T5077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 133.239016][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.278649][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.346649][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.448427][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.526007][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.574226][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.610295][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.881542][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.966227][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.065166][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.117030][ T4818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.128129][ T4818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.155556][ T4818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.193485][ T4818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.280051][ T4818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.289253][ T4818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.298034][ T4818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.308680][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.354993][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.613247][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.633475][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.705555][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.740217][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.759488][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.851448][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.899582][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 134.976203][ T5113] loop0: detected capacity change from 0 to 2048 [ 135.091223][ T5113] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 135.105843][ T5117] device syzkaller1 entered promiscuous mode [ 135.132981][ T5113] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 135.236308][ T5113] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 135.334261][ T5113] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 135.345435][ T5113] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 135.592266][ T5113] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 136.418915][ T5138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.201'. [ 137.260682][ T5123] loop3: detected capacity change from 0 to 40427 [ 137.341646][ T5123] F2FS-fs (loop3): invalid crc value [ 137.370940][ T5123] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.552604][ T5123] F2FS-fs (loop3): Start checkpoint disabled! [ 137.591469][ T5123] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 138.162133][ T5179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.170068][ T5179] IPv6: NLM_F_CREATE should be set when creating new route [ 138.177396][ T5179] IPv6: NLM_F_CREATE should be set when creating new route [ 138.223475][ T4224] attempt to access beyond end of device [ 138.223475][ T4224] loop3: rw=2049, want=40968, limit=40427 [ 138.404647][ T5183] loop4: detected capacity change from 0 to 512 [ 139.241510][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 139.478863][ T5199] input: syz0 as /devices/virtual/input/input9 [ 140.422451][ T5208] device syzkaller1 entered promiscuous mode [ 140.738440][ T5213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 141.546674][ T5227] sctp: failed to load transform for md5: -2 [ 141.702398][ T5235] netlink: 68 bytes leftover after parsing attributes in process `syz.3.220'. [ 141.894998][ T5235] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 142.176278][ T5243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 142.417030][ T5247] device syzkaller1 entered promiscuous mode [ 142.641367][ T5249] device macsec1 entered promiscuous mode [ 142.805124][ T5251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'. [ 142.941410][ T5225] loop2: detected capacity change from 0 to 40427 [ 143.046762][ T5225] F2FS-fs (loop2): invalid crc value [ 143.076790][ T5225] F2FS-fs (loop2): Found nat_bits in checkpoint [ 143.090417][ T26] audit: type=1326 audit(1738373095.268:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5244 comm="syz.3.224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e5fa0da9 code=0x0 [ 143.274507][ T5258] loop4: detected capacity change from 0 to 4096 [ 143.323499][ T5225] F2FS-fs (loop2): Start checkpoint disabled! [ 143.364398][ T5225] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 144.095195][ T5272] ntfs3: loop4: ino=21, "file1" fallocate(0x20) is not supported [ 144.947701][ T1234] attempt to access beyond end of device [ 144.947701][ T1234] loop2: rw=2049, want=40968, limit=40427 [ 145.142321][ T5282] device syzkaller1 entered promiscuous mode [ 145.194637][ T5284] loop4: detected capacity change from 0 to 512 [ 145.406973][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'. [ 145.978125][ T5301] netlink: 68 bytes leftover after parsing attributes in process `syz.2.234'. [ 146.629462][ T5311] sctp: failed to load transform for md5: -2 [ 147.324863][ T5328] loop5: detected capacity change from 0 to 2048 [ 147.413428][ T5328] loop5: p1 < > p4 [ 147.427839][ T5310] loop3: detected capacity change from 0 to 32768 [ 147.445244][ T5328] loop5: p4 size 8388608 extends beyond EOD, truncated [ 147.532277][ T5310] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.244 (5310) [ 148.752161][ T5328] sched: RT throttling activated [ 148.787118][ T5310] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 148.979840][ T5310] BTRFS info (device loop3): enabling auto defrag [ 149.054221][ T5334] netlink: 'syz.0.248': attribute type 3 has an invalid length. [ 149.062060][ T5334] netlink: 'syz.0.248': attribute type 3 has an invalid length. [ 149.365153][ T5310] BTRFS info (device loop3): doing ref verification [ 149.371822][ T5310] BTRFS info (device loop3): use no compression [ 149.447801][ T5310] BTRFS info (device loop3): force clearing of disk cache [ 149.497072][ T5310] BTRFS info (device loop3): max_inline at 4096 [ 149.537585][ T5310] BTRFS info (device loop3): disabling free space tree [ 149.598269][ T5310] BTRFS info (device loop3): has skinny extents [ 149.717725][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 149.802507][ T4247] udevd[4247]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.164568][ T5310] BTRFS error (device loop3): open_ctree failed [ 150.189267][ T5371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.253'. [ 151.614350][ T5389] tmpfs: Unknown parameter 'quota' [ 152.510215][ T5393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.259'. [ 152.607093][ T26] audit: type=1326 audit(1738373104.778:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5351 comm="syz.5.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe12060eda9 code=0x0 [ 152.770970][ T5395] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.257'. [ 152.874142][ T5384] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.257'. [ 153.141513][ T5401] sctp: failed to load transform for md5: -2 [ 153.568043][ T5425] loop0: detected capacity change from 0 to 512 [ 154.821554][ T5416] loop3: detected capacity change from 0 to 40427 [ 154.956187][ T5416] F2FS-fs (loop3): invalid crc value [ 154.975711][ T5416] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.132630][ T5449] netlink: 68 bytes leftover after parsing attributes in process `syz.2.268'. [ 155.165631][ T5416] F2FS-fs (loop3): Start checkpoint disabled! [ 155.211762][ T5416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 155.240778][ T5431] loop0: detected capacity change from 0 to 32768 [ 155.281146][ T5449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 155.546149][ T5431] XFS (loop0): Mounting V5 Filesystem [ 155.772921][ T5475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.855739][ T5431] XFS (loop0): Ending clean mount [ 156.300754][ T5488] syz.2.272 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.809981][ T1204] attempt to access beyond end of device [ 157.809981][ T1204] loop3: rw=2049, want=40968, limit=40427 [ 158.101633][ T5495] loop2: detected capacity change from 0 to 512 [ 158.114896][ T4169] XFS (loop0): Unmounting Filesystem [ 158.564645][ T5505] loop5: detected capacity change from 0 to 256 [ 158.839664][ T5505] FAT-fs (loop5): Directory bread(block 64) failed [ 158.862217][ T5505] FAT-fs (loop5): Directory bread(block 65) failed [ 158.889221][ T5505] FAT-fs (loop5): Directory bread(block 66) failed [ 158.910454][ T5505] FAT-fs (loop5): Directory bread(block 67) failed [ 158.927964][ T5505] FAT-fs (loop5): Directory bread(block 68) failed [ 158.954341][ T5505] FAT-fs (loop5): Directory bread(block 69) failed [ 158.961010][ T5505] FAT-fs (loop5): Directory bread(block 70) failed [ 159.024082][ T5505] FAT-fs (loop5): Directory bread(block 71) failed [ 159.031163][ T5505] FAT-fs (loop5): Directory bread(block 72) failed [ 159.073882][ T5516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.281'. [ 159.105455][ T5505] FAT-fs (loop5): Directory bread(block 73) failed [ 159.236901][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 161.599504][ T5542] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 161.606685][ T5542] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 161.628142][ T5545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 161.639105][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.286'. [ 161.696793][ T5542] vhci_hcd vhci_hcd.0: Device attached [ 161.712287][ T5549] loop3: detected capacity change from 0 to 512 [ 161.941257][ T5549] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.288: casefold flag without casefold feature [ 161.943683][ T5552] device syzkaller0 entered promiscuous mode [ 162.027646][ T4218] vhci_hcd: vhci_device speed not set [ 162.091435][ T5549] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.288: couldn't read orphan inode 15 (err -117) [ 162.115429][ T4214] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 162.151591][ T4218] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 162.316729][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.734343][ T5543] vhci_hcd: connection reset by peer [ 162.748346][ T1204] vhci_hcd: stop threads [ 162.753048][ T1204] vhci_hcd: release socket [ 162.758411][ T4214] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.814651][ T1204] vhci_hcd: disconnect device [ 162.948977][ T4214] usb 5-1: can't read configurations, error -71 [ 162.980465][ T5565] loop2: detected capacity change from 0 to 512 [ 163.651438][ T5574] netlink: 68 bytes leftover after parsing attributes in process `syz.4.293'. [ 163.795382][ T5574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 163.889281][ T5584] loop0: detected capacity change from 0 to 256 [ 164.239161][ T5590] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 165.051396][ T5584] FAT-fs (loop0): Directory bread(block 64) failed [ 165.279539][ T5584] FAT-fs (loop0): Directory bread(block 65) failed [ 165.287679][ T5584] FAT-fs (loop0): Directory bread(block 66) failed [ 165.294768][ T5584] FAT-fs (loop0): Directory bread(block 67) failed [ 165.302471][ T5584] FAT-fs (loop0): Directory bread(block 68) failed [ 165.531465][ T5584] FAT-fs (loop0): Directory bread(block 69) failed [ 165.667877][ T5594] process 'syz.3.294' launched './file0' with NULL argv: empty string added [ 165.677449][ T5584] FAT-fs (loop0): Directory bread(block 70) failed [ 165.698504][ T5584] FAT-fs (loop0): Directory bread(block 71) failed [ 165.732161][ T5584] FAT-fs (loop0): Directory bread(block 72) failed [ 165.934729][ T5584] FAT-fs (loop0): Directory bread(block 73) failed [ 166.431785][ T5599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 166.473108][ T5599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'. [ 166.606660][ T5608] syzkaller0: create flow: hash 2247314493 index 1 [ 166.894609][ T4213] syzkaller0: tun_net_xmit 76 [ 166.900276][ T4213] syzkaller0: tun_net_xmit 48 [ 166.916077][ T5603] syzkaller0: delete flow: hash 2247314493 index 1 [ 167.824059][ T4218] vhci_hcd: vhci_device speed not set [ 167.991402][ T5639] trusted_key: encrypted_key: insufficient parameters specified [ 168.153596][ T5643] netlink: 68 bytes leftover after parsing attributes in process `syz.2.307'. [ 168.301162][ T5646] tmpfs: Unknown parameter 'quota' [ 169.221072][ T26] audit: type=1326 audit(1738373121.398:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.5.301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe12060eda9 code=0x0 [ 169.354856][ T5658] loop2: detected capacity change from 0 to 1764 [ 169.809964][ T5667] netlink: 'syz.0.311': attribute type 3 has an invalid length. [ 169.817926][ T5667] netlink: 'syz.0.311': attribute type 3 has an invalid length. [ 170.622718][ T5672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 170.647578][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 173.591635][ T5683] loop3: detected capacity change from 0 to 32768 [ 173.663743][ T5704] loop2: detected capacity change from 0 to 256 [ 173.679793][ T5705] trusted_key: encrypted_key: insufficient parameters specified [ 173.756848][ T5683] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.314 (5683) [ 173.796468][ T5704] FAT-fs (loop2): Directory bread(block 64) failed [ 173.819531][ T5704] FAT-fs (loop2): Directory bread(block 65) failed [ 173.835805][ T5683] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 173.860488][ T5704] FAT-fs (loop2): Directory bread(block 66) failed [ 173.874001][ T5683] BTRFS info (device loop3): force zlib compression, level 3 [ 173.881823][ T5708] netlink: 68 bytes leftover after parsing attributes in process `syz.0.319'. [ 173.905308][ T5683] BTRFS info (device loop3): force clearing of disk cache [ 173.912550][ T5683] BTRFS info (device loop3): setting nodatasum [ 173.919424][ T5704] FAT-fs (loop2): Directory bread(block 67) failed [ 173.930133][ T5704] FAT-fs (loop2): Directory bread(block 68) failed [ 173.946522][ T5708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 173.957999][ T5683] BTRFS info (device loop3): use zlib compression, level 3 [ 173.971179][ T5704] FAT-fs (loop2): Directory bread(block 69) failed [ 173.978125][ T5683] BTRFS info (device loop3): allowing degraded mounts [ 173.992567][ T5704] FAT-fs (loop2): Directory bread(block 70) failed [ 174.000162][ T5683] BTRFS info (device loop3): enabling disk space caching [ 174.017059][ T5704] FAT-fs (loop2): Directory bread(block 71) failed [ 174.044994][ T5683] BTRFS info (device loop3): disk space caching is enabled [ 174.052509][ T5704] FAT-fs (loop2): Directory bread(block 72) failed [ 174.096642][ T5704] FAT-fs (loop2): Directory bread(block 73) failed [ 174.113985][ T5683] BTRFS info (device loop3): has skinny extents [ 174.712415][ T5739] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 174.720388][ T5739] netlink: 'syz.0.322': attribute type 3 has an invalid length. [ 175.595408][ T5745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 175.644049][ T5744] loop0: detected capacity change from 0 to 1764 [ 175.894530][ T5683] BTRFS error (device loop3): open_ctree failed [ 175.923266][ T5754] loop5: detected capacity change from 0 to 512 [ 176.045527][ T5754] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 176.094146][ T5754] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.122510][ T5754] EXT4-fs (loop5): 1 truncate cleaned up [ 176.138994][ T5754] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.721953][ T5786] netlink: 68 bytes leftover after parsing attributes in process `syz.3.333'. [ 179.265987][ T5794] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.334' resets device [ 181.913638][ T5795] netlink: 'syz.3.336': attribute type 3 has an invalid length. [ 181.921505][ T5795] netlink: 'syz.3.336': attribute type 3 has an invalid length. [ 183.160543][ T5803] loop0: detected capacity change from 0 to 256 [ 183.358387][ T5803] FAT-fs (loop0): Directory bread(block 64) failed [ 183.384038][ T5803] FAT-fs (loop0): Directory bread(block 65) failed [ 183.390704][ T5803] FAT-fs (loop0): Directory bread(block 66) failed [ 183.444067][ T5803] FAT-fs (loop0): Directory bread(block 67) failed [ 183.474348][ T5803] FAT-fs (loop0): Directory bread(block 68) failed [ 183.544010][ T5803] FAT-fs (loop0): Directory bread(block 69) failed [ 183.594135][ T5803] FAT-fs (loop0): Directory bread(block 70) failed [ 183.600748][ T5803] FAT-fs (loop0): Directory bread(block 71) failed [ 183.656226][ T5803] FAT-fs (loop0): Directory bread(block 72) failed [ 183.663417][ T5803] FAT-fs (loop0): Directory bread(block 73) failed [ 183.777844][ T5811] tmpfs: Unknown parameter 'quota' [ 184.762177][ T5813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 186.247091][ T5820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.345'. [ 186.286773][ T5822] loop0: detected capacity change from 0 to 256 [ 186.326279][ T5820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 186.345914][ T5822] FAT-fs (loop0): Unrecognized mount option "nnonumtail=!" or missing value [ 187.392760][ T5822] loop0: detected capacity change from 0 to 4096 [ 187.429385][ T5822] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 187.542361][ T5834] loop5: detected capacity change from 0 to 256 [ 187.760683][ T5837] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.347' resets device [ 189.614871][ T5839] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 189.622842][ T5839] netlink: 'syz.3.348': attribute type 3 has an invalid length. [ 190.010960][ T5834] FAT-fs (loop5): Directory bread(block 64) failed [ 190.062691][ T5836] loop4: detected capacity change from 0 to 1764 [ 190.066292][ T5834] FAT-fs (loop5): Directory bread(block 65) failed [ 190.097663][ T5834] FAT-fs (loop5): Directory bread(block 66) failed [ 190.105767][ T5834] FAT-fs (loop5): Directory bread(block 67) failed [ 190.112517][ T5834] FAT-fs (loop5): Directory bread(block 68) failed [ 190.120886][ T5834] FAT-fs (loop5): Directory bread(block 69) failed [ 190.128141][ T5834] FAT-fs (loop5): Directory bread(block 70) failed [ 190.135163][ T5834] FAT-fs (loop5): Directory bread(block 71) failed [ 190.142142][ T5834] FAT-fs (loop5): Directory bread(block 72) failed [ 190.154194][ T5834] FAT-fs (loop5): Directory bread(block 73) failed [ 190.614547][ T5846] sctp: failed to load transform for md5: -2 [ 191.825901][ T5857] loop2: detected capacity change from 0 to 4096 [ 191.869472][ T5860] loop0: detected capacity change from 0 to 8 [ 191.938816][ T5860] unable to read fragment index table [ 192.036437][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 192.042720][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 192.064727][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 192.106001][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 192.401122][ T4170] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 192.500069][ T4170] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 194.474438][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.480949][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.685088][ T4213] hid-generic 1AA0:0002:0386.0002: item fetching failed at offset 0/2 [ 195.952437][ T4213] hid-generic: probe of 1AA0:0002:0386.0002 failed with error -22 [ 198.624313][ T5885] loop4: detected capacity change from 0 to 512 [ 198.703665][ T5885] EXT4-fs (loop4): Ignoring removed orlov option [ 199.602068][ T5885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.668130][ T5885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.362: bg 0: block 248: padding at end of block bitmap is not set [ 199.873077][ T5885] Quota error (device loop4): write_blk: dquota write failed [ 199.885664][ T5885] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 199.914185][ T5885] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.362: Failed to acquire dquot type 1 [ 199.981040][ T5898] netlink: 'syz.0.363': attribute type 3 has an invalid length. [ 199.988892][ T5898] netlink: 'syz.0.363': attribute type 3 has an invalid length. [ 200.118840][ T5885] EXT4-fs (loop4): 1 truncate cleaned up [ 200.229588][ T5885] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,bsdgroups,noload,grpjquota=,grpjquota=,orlov,abort,nombcache,stripe=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 200.392601][ T5897] loop2: detected capacity change from 0 to 2048 [ 200.754627][ T5900] loop3: detected capacity change from 0 to 2048 [ 200.762676][ T5897] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.777114][ T5902] loop0: detected capacity change from 0 to 128 [ 200.778272][ T4247] udevd[4247]: incorrect nilfs2 checksum on /dev/loop2 [ 200.791970][ T5885] EXT4-fs error (device loop4): ext4_remount:5855: comm syz.4.362: Abort forced by user [ 200.814499][ T5897] NILFS (loop2): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0 [ 200.825953][ T5903] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.836967][ T5905] loop5: detected capacity change from 0 to 256 [ 200.838296][ T5897] NILFS (loop2): error -5 getting root inode [ 200.859884][ T5900] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.863070][ T4328] udevd[4328]: incorrect nilfs2 checksum on /dev/loop3 [ 200.910801][ T5900] NILFS (loop3): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0 [ 200.927609][ T5906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.942589][ T5900] NILFS (loop3): error -5 getting root inode [ 201.046109][ T5902] ufs: Invalid option: "smackfsdef=subj_type" or missing value [ 201.122274][ T5885] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.362: deleted inode referenced: 12 [ 201.164573][ T5902] ufs: wrong mount options [ 201.300699][ T5905] FAT-fs (loop5): Directory bread(block 64) failed [ 201.344093][ T5905] FAT-fs (loop5): Directory bread(block 65) failed [ 201.499944][ T5905] FAT-fs (loop5): Directory bread(block 66) failed [ 201.537223][ T5905] FAT-fs (loop5): Directory bread(block 67) failed [ 201.551636][ T5905] FAT-fs (loop5): Directory bread(block 68) failed [ 201.574417][ T5905] FAT-fs (loop5): Directory bread(block 69) failed [ 201.591488][ T5905] FAT-fs (loop5): Directory bread(block 70) failed [ 202.708671][ T5917] sctp: failed to load transform for md5: -2 [ 202.732130][ T5905] FAT-fs (loop5): Directory bread(block 71) failed [ 202.775687][ T5905] FAT-fs (loop5): Directory bread(block 72) failed [ 202.782279][ T5905] FAT-fs (loop5): Directory bread(block 73) failed [ 203.421845][ T5938] loop0: detected capacity change from 0 to 2048 [ 205.067496][ T5938] loop0: p1 < > p4 [ 205.124629][ T5938] loop0: p4 size 8388608 extends beyond EOD, truncated [ 205.287543][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 205.361952][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.377'. [ 205.396080][ T5951] loop4: detected capacity change from 0 to 2048 [ 205.459026][ T5957] loop0: detected capacity change from 0 to 512 [ 205.534092][ T5957] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 205.552051][ T5951] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 205.634083][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 205.642528][ T4328] udevd[4328]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 205.645821][ T4247] udevd[4247]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 205.935702][ T4333] udevd[4333]: incorrect nilfs2 checksum on /dev/loop4 [ 205.998587][ T5957] EXT4-fs (loop0): 1 truncate cleaned up [ 206.078733][ T5966] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.097750][ T5957] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.511118][ T5975] lo speed is unknown, defaulting to 1000 [ 208.554048][ T21] usb 3-1: unable to read config index 0 descriptor/all [ 208.561060][ T21] usb 3-1: can't read configurations, error -71 [ 208.574612][ T5975] lo speed is unknown, defaulting to 1000 [ 208.591422][ T5975] lo speed is unknown, defaulting to 1000 [ 208.600993][ T5982] loop2: detected capacity change from 0 to 256 [ 208.702836][ T5975] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 208.824642][ T5982] FAT-fs (loop2): Directory bread(block 64) failed [ 208.842559][ T5982] FAT-fs (loop2): Directory bread(block 65) failed [ 208.868285][ T5975] lo speed is unknown, defaulting to 1000 [ 209.734295][ T5982] FAT-fs (loop2): Directory bread(block 66) failed [ 209.740879][ T5982] FAT-fs (loop2): Directory bread(block 67) failed [ 209.764182][ T5982] FAT-fs (loop2): Directory bread(block 68) failed [ 209.770765][ T5982] FAT-fs (loop2): Directory bread(block 69) failed [ 209.794841][ T5989] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 209.814258][ T5975] lo speed is unknown, defaulting to 1000 [ 209.823033][ T5975] lo speed is unknown, defaulting to 1000 [ 209.842687][ T5975] lo speed is unknown, defaulting to 1000 [ 209.859708][ T5982] FAT-fs (loop2): Directory bread(block 70) failed [ 209.883475][ T5975] lo speed is unknown, defaulting to 1000 [ 209.900016][ T5982] FAT-fs (loop2): Directory bread(block 71) failed [ 209.942858][ T5982] FAT-fs (loop2): Directory bread(block 72) failed [ 209.964200][ T5982] FAT-fs (loop2): Directory bread(block 73) failed [ 210.130996][ T6000] loop4: detected capacity change from 0 to 512 [ 211.807782][ T6016] sctp: failed to load transform for md5: -2 [ 212.363048][ T6029] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.417452][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 215.264792][ T6048] device hsr_slave_1 left promiscuous mode [ 215.329564][ T6053] loop5: detected capacity change from 0 to 1024 [ 215.431847][ T6056] loop0: detected capacity change from 0 to 512 [ 215.484921][ T154] hfsplus: b-tree write err: -5, ino 4 [ 215.518634][ T6056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.571249][ T6056] EXT4-fs (loop0): 1 truncate cleaned up [ 215.577084][ T6056] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.926258][ T6071] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.412' resets device [ 217.198402][ T6075] loop0: detected capacity change from 0 to 512 [ 217.404022][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.415'. [ 217.413456][ T6079] device netdevsim0 entered promiscuous mode [ 217.449707][ T1110] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 218.433556][ T6094] loop0: detected capacity change from 0 to 512 [ 219.322417][ T1110] usb 3-1: device descriptor read/all, error -71 [ 219.433428][ T6111] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.424' resets device [ 221.624842][ T6122] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.147819][ T6126] loop4: detected capacity change from 0 to 512 [ 222.846096][ T6113] loop2: detected capacity change from 0 to 32768 [ 222.885069][ T6113] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.427 (6113) [ 223.034323][ T6113] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 223.074126][ T6113] BTRFS info (device loop2): turning on flush-on-commit [ 223.081272][ T6113] BTRFS info (device loop2): enabling disk space caching [ 223.120335][ T6113] BTRFS info (device loop2): turning off barriers [ 223.182361][ T6113] BTRFS info (device loop2): doing ref verification [ 223.207736][ T6113] BTRFS info (device loop2): enabling auto defrag [ 223.293716][ T6113] BTRFS info (device loop2): force clearing of disk cache [ 223.576406][ T6113] BTRFS info (device loop2): turning on sync discard [ 223.749020][ T6113] BTRFS info (device loop2): using default commit interval 30s [ 223.756787][ T6113] BTRFS info (device loop2): disk space caching is enabled [ 223.764166][ T6113] BTRFS info (device loop2): has skinny extents [ 224.036929][ T6113] BTRFS error (device loop2): open_ctree failed [ 225.798296][ T6180] loop2: detected capacity change from 0 to 512 [ 225.848771][ T6160] loop4: detected capacity change from 0 to 32768 [ 225.942642][ T6160] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.437 (6160) [ 226.031650][ T6160] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 226.041012][ T6160] BTRFS info (device loop4): setting nodatacow, compression disabled [ 226.059429][ T6160] BTRFS info (device loop4): force zlib compression, level 3 [ 226.139303][ T6185] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.216458][ T6160] BTRFS info (device loop4): turning off barriers [ 226.330268][ T6160] BTRFS info (device loop4): enabling ssd optimizations [ 226.643239][ T6160] BTRFS info (device loop4): using spread ssd allocation scheme [ 226.657253][ T6160] BTRFS info (device loop4): setting nodatacow [ 226.675617][ T6160] BTRFS info (device loop4): using free space tree [ 226.824793][ T6160] BTRFS info (device loop4): has skinny extents [ 227.219062][ T6196] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.443' resets device [ 227.922448][ T6209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 228.136409][ T6160] BTRFS error (device loop4): open_ctree failed [ 228.140372][ T6215] loop2: detected capacity change from 0 to 512 [ 228.555347][ T6226] device macsec1 entered promiscuous mode [ 228.838123][ T6232] loop4: detected capacity change from 0 to 256 [ 229.076551][ T6232] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 229.884570][ T6233] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.193745][ T26] audit: type=1804 audit(1738373182.368:7): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.452" name="/newroot/88/file1/bus" dev="loop4" ino=1048671 res=1 errno=0 [ 230.205797][ T6239] loop2: detected capacity change from 0 to 512 [ 230.596321][ T6247] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.455' resets device [ 231.436774][ T6249] vivid-001: kernel_thread() failed [ 232.430197][ T6262] loop0: detected capacity change from 0 to 512 [ 232.809548][ T6267] device macsec1 entered promiscuous mode [ 233.680669][ T6271] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.885717][ T6305] loop0: detected capacity change from 0 to 512 [ 236.049460][ T6305] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.125196][ T6308] loop3: detected capacity change from 0 to 512 [ 236.237672][ T6305] EXT4-fs (loop0): 1 truncate cleaned up [ 236.274338][ T6305] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.607884][ T6314] device macsec1 entered promiscuous mode [ 237.883410][ T6322] loop4: detected capacity change from 0 to 2048 [ 237.991822][ T6322] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.241231][ T6339] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.633666][ T6344] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.409027][ T6348] loop0: detected capacity change from 0 to 512 [ 239.545914][ T6352] loop5: detected capacity change from 0 to 512 [ 239.565516][ T6348] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 239.611904][ T6348] EXT4-fs (loop0): 1 truncate cleaned up [ 239.630997][ T6348] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 239.726843][ T6355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16 [ 240.967116][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 242.426709][ T6369] loop5: detected capacity change from 0 to 40427 [ 242.463662][ T6380] loop2: detected capacity change from 0 to 1024 [ 242.520253][ T6369] F2FS-fs (loop5): invalid crc value [ 242.552637][ T6369] F2FS-fs (loop5): Found nat_bits in checkpoint [ 242.626868][ T6384] loop0: detected capacity change from 0 to 4096 [ 242.699751][ T6369] F2FS-fs (loop5): Start checkpoint disabled! [ 242.738560][ T6369] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 243.009263][ T6384] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.034927][ T6378] loop3: detected capacity change from 0 to 40427 [ 243.056486][ T6391] loop2: detected capacity change from 0 to 256 [ 243.760738][ T6378] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 243.796540][ T6378] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.854142][ T6391] FAT-fs (loop2): Directory bread(block 64) failed [ 243.876226][ T6391] FAT-fs (loop2): Directory bread(block 65) failed [ 243.899626][ T6391] FAT-fs (loop2): Directory bread(block 66) failed [ 243.942489][ T6378] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.954647][ T6391] FAT-fs (loop2): Directory bread(block 67) failed [ 243.961296][ T6391] FAT-fs (loop2): Directory bread(block 68) failed [ 243.992356][ T6391] FAT-fs (loop2): Directory bread(block 69) failed [ 244.007950][ T6391] FAT-fs (loop2): Directory bread(block 70) failed [ 244.040941][ T6397] loop0: detected capacity change from 0 to 512 [ 244.047737][ T6391] FAT-fs (loop2): Directory bread(block 71) failed [ 244.073672][ T6391] FAT-fs (loop2): Directory bread(block 72) failed [ 244.082358][ T6397] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 244.102788][ T4427] attempt to access beyond end of device [ 244.102788][ T4427] loop5: rw=2049, want=40968, limit=40427 [ 244.114463][ T6391] FAT-fs (loop2): Directory bread(block 73) failed [ 244.255517][ T6378] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 244.262745][ T6378] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.271413][ T6397] EXT4-fs (loop0): 1 truncate cleaned up [ 244.281112][ T6397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.402336][ T6402] loop4: detected capacity change from 0 to 512 [ 246.315649][ T6413] loop0: detected capacity change from 0 to 2048 [ 246.499659][ T6413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.536678][ T4636] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 247.138465][ T4636] usb 6-1: Using ep0 maxpacket: 8 [ 247.391994][ T6423] capability: warning: `syz.3.506' uses 32-bit capabilities (legacy support in use) [ 247.424214][ T4636] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 247.446446][ T4636] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.484023][ T4636] usb 6-1: Product: syz [ 247.508693][ T4636] usb 6-1: Manufacturer: syz [ 247.513355][ T4636] usb 6-1: SerialNumber: syz [ 247.596701][ T4636] usb 6-1: config 0 descriptor?? [ 247.662365][ T4636] gspca_main: sq905-2.14.0 probing 2770:9120 [ 248.547511][ T6441] loop4: detected capacity change from 0 to 1764 [ 248.754144][ T4636] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 248.762404][ T4636] sq905: probe of 6-1:0.0 failed with error -71 [ 248.822805][ T4636] usb 6-1: USB disconnect, device number 2 [ 249.205974][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 249.865996][ T6455] loop5: detected capacity change from 0 to 512 [ 250.055579][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 250.084294][ T6462] vcan0: Master is either lo or non-ether device [ 250.206714][ T6465] loop2: detected capacity change from 0 to 2048 [ 250.239963][ T6468] loop3: detected capacity change from 0 to 256 [ 251.356968][ T6474] sctp: failed to load transform for md5: -2 [ 251.417813][ T6465] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 251.465639][ T6468] FAT-fs (loop3): Directory bread(block 64) failed [ 251.550030][ T6468] FAT-fs (loop3): Directory bread(block 65) failed [ 251.557776][ T6468] FAT-fs (loop3): Directory bread(block 66) failed [ 251.564393][ T6468] FAT-fs (loop3): Directory bread(block 67) failed [ 251.571121][ T6468] FAT-fs (loop3): Directory bread(block 68) failed [ 251.578071][ T6468] FAT-fs (loop3): Directory bread(block 69) failed [ 251.584883][ T6468] FAT-fs (loop3): Directory bread(block 70) failed [ 251.591439][ T6468] FAT-fs (loop3): Directory bread(block 71) failed [ 251.599443][ T6468] FAT-fs (loop3): Directory bread(block 72) failed [ 251.606041][ T6468] FAT-fs (loop3): Directory bread(block 73) failed [ 251.616875][ T6491] loop0: detected capacity change from 0 to 16 [ 251.689929][ T6491] erofs: (device loop0): mounted with root inode @ nid 36. [ 252.719282][ T6488] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 253.389560][ T6512] Cannot find add_set index 0 as target [ 254.229886][ T6522] loop5: detected capacity change from 0 to 512 [ 254.538943][ T6526] loop4: detected capacity change from 0 to 2048 [ 256.041076][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.052367][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.132049][ T6526] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 257.499786][ T6540] dccp_close: ABORT with 32 bytes unread [ 257.610365][ T6539] loop2: detected capacity change from 0 to 32768 [ 258.463825][ T6539] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.540 (6539) [ 258.523102][ T6539] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 258.559028][ T6571] netlink: 'syz.0.551': attribute type 39 has an invalid length. [ 258.567394][ T6539] BTRFS info (device loop2): force zlib compression, level 3 [ 258.614028][ T6539] BTRFS info (device loop2): force clearing of disk cache [ 258.621329][ T6539] BTRFS info (device loop2): setting nodatasum [ 258.644035][ T6539] BTRFS info (device loop2): use zlib compression, level 3 [ 258.877310][ T6539] BTRFS info (device loop2): allowing degraded mounts [ 260.157753][ T6539] BTRFS info (device loop2): enabling disk space caching [ 260.304166][ T6539] BTRFS info (device loop2): disk space caching is enabled [ 260.324024][ T6539] BTRFS info (device loop2): has skinny extents [ 260.400537][ T6577] loop4: detected capacity change from 0 to 2048 [ 260.900070][ T6602] loop3: detected capacity change from 0 to 512 [ 261.132259][ T6577] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.668069][ T6539] BTRFS error (device loop2): open_ctree failed [ 261.678173][ T4247] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (4247) [ 262.951748][ T6613] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 263.338777][ T6625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.560'. [ 264.235535][ T6631] loop5: detected capacity change from 0 to 512 [ 264.391790][ T6631] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.605014][ T6631] EXT4-fs (loop5): 1 truncate cleaned up [ 264.634756][ T6631] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.754334][ T4639] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 265.033961][ T4639] usb 5-1: Using ep0 maxpacket: 16 [ 265.154917][ T4639] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.326319][ T4639] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.374132][ T4639] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 265.403815][ T4639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.481756][ T4639] usb 5-1: config 0 descriptor?? [ 265.522973][ T6624] loop3: detected capacity change from 0 to 32768 [ 265.544077][ T5748] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 265.586199][ T6644] loop0: detected capacity change from 0 to 2048 [ 265.608189][ T6624] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 265.619576][ T6624] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 265.715434][ T6624] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 9ms [ 265.834051][ T5748] usb 3-1: Using ep0 maxpacket: 16 [ 265.986338][ T5748] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 266.025112][ T6644] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.136030][ T5748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.427204][ T5760] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 267.756511][ T5760] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 268.506005][ T5760] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 749ms [ 268.568430][ T5760] gfs2: fsid=syz:syz.0: jid=0: Done [ 268.577554][ T6624] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 268.611607][ T6624] gfs2: fsid=syz:syz.0: can't start logd thread: -4 [ 268.674203][ T5748] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.700455][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.716506][ T6662] loop5: detected capacity change from 0 to 512 [ 268.736092][ T5748] usb 3-1: can't set config #1, error -71 [ 268.743244][ T5748] usb 3-1: USB disconnect, device number 6 [ 269.631846][ T5760] usb 5-1: USB disconnect, device number 5 [ 271.258439][ T6673] loop4: detected capacity change from 0 to 32768 [ 271.401983][ T6676] netlink: 56 bytes leftover after parsing attributes in process `syz.3.574'. [ 271.564760][ T6673] XFS: ikeep mount option is deprecated. [ 271.570469][ T6673] XFS: ikeep mount option is deprecated. [ 271.646255][ T6685] loop5: detected capacity change from 0 to 512 [ 271.690647][ T6673] XFS (loop4): Mounting V5 Filesystem [ 271.832915][ T6685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.896256][ T6685] EXT4-fs (loop5): 1 truncate cleaned up [ 271.902329][ T6685] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.788167][ T6702] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 272.790269][ T6703] loop3: detected capacity change from 0 to 2048 [ 272.828951][ T6705] loop5: detected capacity change from 0 to 512 [ 272.843178][ T6673] XFS (loop4): Ending clean mount [ 272.881842][ T6703] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.906846][ T6673] XFS (loop4): Quotacheck needed: Please wait. [ 273.031161][ T6712] loop0: detected capacity change from 0 to 2048 [ 273.138688][ T6673] XFS (loop4): Quotacheck: Done. [ 273.164373][ T6712] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.923834][ T6712] NILFS (loop0): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0 [ 273.935536][ T6717] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.946873][ T6712] NILFS (loop0): error -5 getting root inode [ 273.953687][ T6718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.586'. [ 273.998282][ T4171] XFS (loop4): Unmounting Filesystem [ 274.017136][ T6720] loop2: detected capacity change from 0 to 256 [ 274.122897][ T6720] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 274.170168][ T6720] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 274.202690][ T6720] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 274.221079][ T6720] UDF-fs: Scanning with blocksize 512 failed [ 274.347153][ T6720] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 274.630787][ T6720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.033517][ T6740] loop4: detected capacity change from 0 to 512 [ 277.607002][ T6735] loop0: detected capacity change from 0 to 32768 [ 277.614495][ T6749] loop4: detected capacity change from 0 to 4096 [ 277.663468][ T6749] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 277.783738][ T6735] XFS (loop0): Mounting V5 Filesystem [ 277.901859][ T6735] XFS (loop0): Ending clean mount [ 278.432654][ T6770] netlink: 56 bytes leftover after parsing attributes in process `syz.4.598'. [ 278.574759][ T4169] XFS (loop0): Unmounting Filesystem [ 279.145935][ T6775] loop5: detected capacity change from 0 to 2048 [ 279.348737][ T6775] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.348226][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 280.420452][ T6771] loop2: detected capacity change from 0 to 32768 [ 280.553833][ T6771] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.599 (6771) [ 280.648834][ T6789] loop0: detected capacity change from 0 to 512 [ 280.661506][ T6771] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 280.679863][ T6771] BTRFS info (device loop2): enabling disk space caching [ 281.246321][ T6771] BTRFS info (device loop2): enabling auto defrag [ 281.374720][ T6771] BTRFS info (device loop2): doing ref verification [ 281.410886][ T6771] BTRFS info (device loop2): use no compression [ 281.418101][ T6771] BTRFS info (device loop2): force clearing of disk cache [ 281.426060][ T6771] BTRFS info (device loop2): disabling disk space caching [ 281.433204][ T6771] BTRFS info (device loop2): has skinny extents [ 281.572883][ T6771] BTRFS error (device loop2): open_ctree failed [ 281.580634][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 282.700724][ T6829] netlink: 56 bytes leftover after parsing attributes in process `syz.0.613'. [ 283.047058][ T6837] loop0: detected capacity change from 0 to 256 [ 283.165399][ T6837] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 283.230976][ T6837] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 283.303102][ T6837] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 283.360629][ T6837] UDF-fs: Scanning with blocksize 512 failed [ 283.400706][ T6837] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 283.419303][ T6837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.849050][ T6845] loop2: detected capacity change from 0 to 64 [ 285.382165][ T6857] loop5: detected capacity change from 0 to 512 [ 285.451539][ T6857] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 285.475972][ T6857] EXT4-fs (loop5): Unrecognized mount option "=" or missing value [ 285.526314][ T6861] loop4: detected capacity change from 0 to 512 [ 285.784785][ T4215] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 286.195247][ T4215] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 286.204757][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.226306][ T4215] usb 3-1: config 0 descriptor?? [ 286.494760][ T4215] [drm] vendor descriptor length:7 data:07 5f d6 68 b1 cf e8 00 00 00 00 [ 286.510290][ T4215] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 286.704816][ T4215] [drm:udl_init] *ERROR* Selecting channel failed [ 287.922736][ T4215] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 287.941043][ T4215] [drm] Initialized udl on minor 2 [ 287.967421][ T4215] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 288.041022][ T4215] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 288.075983][ T4215] usb 3-1: USB disconnect, device number 7 [ 288.136192][ T6888] ALSA: mixer_oss: invalid OSS volume '' [ 291.113546][ T6899] loop4: detected capacity change from 0 to 2048 [ 291.190256][ T6904] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.547707][ T6912] loop2: detected capacity change from 0 to 512 [ 293.803849][ T6912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.872216][ T6912] EXT4-fs (loop2): 1 truncate cleaned up [ 293.885746][ T6912] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.091309][ T6933] loop5: detected capacity change from 0 to 32768 [ 296.198578][ T6933] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.648 (6933) [ 296.929885][ T6933] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 297.014002][ T6933] BTRFS info (device loop5): force zlib compression, level 3 [ 297.021451][ T6933] BTRFS info (device loop5): force clearing of disk cache [ 297.172739][ T6933] BTRFS info (device loop5): setting nodatasum [ 297.184048][ T6933] BTRFS info (device loop5): use zlib compression, level 3 [ 297.246708][ T6933] BTRFS info (device loop5): allowing degraded mounts [ 297.253548][ T6933] BTRFS info (device loop5): enabling disk space caching [ 297.380849][ T6933] BTRFS info (device loop5): disk space caching is enabled [ 297.456844][ T6933] BTRFS info (device loop5): has skinny extents [ 298.652909][ T6933] BTRFS error (device loop5): open_ctree failed [ 298.664221][ T5963] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by udevd (5963) [ 299.619095][ T6990] loop4: detected capacity change from 0 to 512 [ 299.722008][ T6989] loop3: detected capacity change from 0 to 4096 [ 299.815291][ T6990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 300.151625][ T6990] EXT4-fs (loop4): 1 truncate cleaned up [ 300.228674][ T6993] loop0: detected capacity change from 0 to 1024 [ 300.262949][ T6990] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.310224][ T6989] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 300.737043][ T26] audit: type=1800 audit(1738373252.918:8): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.659" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 300.976772][ T4394] hfsplus: b-tree write err: -5, ino 4 [ 302.167772][ T7005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 303.307495][ T7018] sctp: failed to load transform for md5: -2 [ 303.659123][ T7031] loop0: detected capacity change from 0 to 512 [ 303.704335][ T7029] ªªªªªª: renamed from vlan0 [ 305.747112][ T7048] loop2: detected capacity change from 0 to 512 [ 305.996925][ T7048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 306.047134][ T7048] EXT4-fs (loop2): 1 truncate cleaned up [ 306.074070][ T7048] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 306.244905][ T7060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 306.421680][ T7062] lo speed is unknown, defaulting to 1000 [ 307.677509][ T7050] loop5: detected capacity change from 0 to 32768 [ 307.741412][ T7058] loop0: detected capacity change from 0 to 40427 [ 307.875442][ T7050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.675 (7050) [ 308.679595][ T7050] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 308.821119][ T7050] BTRFS info (device loop5): enabling disk space caching [ 308.837780][ T7090] loop4: detected capacity change from 0 to 512 [ 308.846526][ T7058] F2FS-fs (loop0): Found nat_bits in checkpoint [ 308.877191][ T7050] BTRFS info (device loop5): enabling auto defrag [ 308.920942][ T7050] BTRFS info (device loop5): doing ref verification [ 308.938204][ T7050] BTRFS info (device loop5): use no compression [ 308.965614][ T7050] BTRFS info (device loop5): force clearing of disk cache [ 308.986546][ T7050] BTRFS info (device loop5): disabling disk space caching [ 308.994030][ T7058] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.002229][ T7050] BTRFS info (device loop5): has skinny extents [ 309.104723][ T7050] BTRFS error (device loop5): open_ctree failed [ 309.969024][ T7126] lo speed is unknown, defaulting to 1000 [ 310.698876][ T7143] device sit0 entered promiscuous mode [ 310.983235][ T7148] device pim6reg1 entered promiscuous mode [ 311.069571][ T7128] loop2: detected capacity change from 0 to 40427 [ 311.135971][ T7128] F2FS-fs (loop2): invalid crc value [ 311.188936][ T7128] F2FS-fs (loop2): Found nat_bits in checkpoint [ 311.346648][ T7128] F2FS-fs (loop2): Start checkpoint disabled! [ 311.379426][ T7128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 311.656306][ T7168] loop5: detected capacity change from 0 to 512 [ 312.318840][ T7168] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 312.521278][ T7168] EXT4-fs (loop5): 1 truncate cleaned up [ 312.538000][ T7168] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 312.836545][ T7183] sctp: failed to load transform for md5: -2 [ 313.062037][ T154] attempt to access beyond end of device [ 313.062037][ T154] loop2: rw=2049, want=40976, limit=40427 [ 313.582996][ T7200] lo speed is unknown, defaulting to 1000 [ 313.940911][ T7210] loop3: detected capacity change from 0 to 512 [ 314.058638][ T7211] [ 314.061480][ T7211] ============================= [ 314.132333][ T7211] WARNING: suspicious RCU usage [ 314.156140][ T7211] 5.15.177-syzkaller #0 Not tainted [ 314.419744][ T7211] ----------------------------- [ 314.425122][ T7211] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 314.434279][ T7211] [ 314.434279][ T7211] other info that might help us debug this: [ 314.434279][ T7211] [ 314.445703][ T7211] [ 314.445703][ T7211] rcu_scheduler_active = 2, debug_locks = 1 [ 314.637797][ T7211] 1 lock held by syz.2.715/7211: [ 314.642797][ T7211] #0: ffffffff8cb20480 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 314.653248][ T7211] [ 314.653248][ T7211] stack backtrace: [ 314.659908][ T7211] CPU: 1 PID: 7211 Comm: syz.2.715 Not tainted 5.15.177-syzkaller #0 [ 314.668015][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 314.678102][ T7211] Call Trace: [ 314.681404][ T7211] [ 314.684372][ T7211] dump_stack_lvl+0x1e3/0x2d0 [ 314.689095][ T7211] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 314.694803][ T7211] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 314.700392][ T7211] get_callchain_entry+0x2ac/0x3c0 [ 314.705548][ T7211] get_perf_callchain+0xe6/0x810 [ 314.710623][ T7211] ? put_callchain_entry+0xb0/0xb0 [ 314.715770][ T7211] ? __lock_acquire+0x1295/0x1ff0 [ 314.720850][ T7211] __bpf_get_stack+0x378/0x570 [ 314.725664][ T7211] ? stack_map_get_build_id_offset+0x930/0x930 [ 314.731861][ T7211] ? __cant_sleep+0x270/0x270 [ 314.736583][ T7211] bpf_get_stack_raw_tp+0x1b2/0x220 [ 314.741834][ T7211] bpf_prog_b8a90dd1efcc4ad9+0x3d/0xc0 [ 314.747348][ T7211] bpf_prog_run_pin_on_cpu+0xa2/0x130 [ 314.752768][ T7211] bpf_prog_test_run_syscall+0x366/0x550 [ 314.758446][ T7211] ? sock_gen_cookie+0x60/0x60 [ 314.763255][ T7211] ? sock_gen_cookie+0x60/0x60 [ 314.768132][ T7211] bpf_prog_test_run+0x32f/0x3a0 [ 314.773192][ T7211] __sys_bpf+0x3ac/0x670 [ 314.777446][ T7211] ? bpf_link_show_fdinfo+0x300/0x300 [ 314.782842][ T7211] ? syscall_enter_from_user_mode+0x2e/0x240 [ 314.788830][ T7211] ? lockdep_hardirqs_on+0x94/0x130 [ 314.794034][ T7211] __x64_sys_bpf+0x78/0x90 [ 314.798483][ T7211] do_syscall_64+0x3b/0xb0 [ 314.802921][ T7211] ? clear_bhb_loop+0x15/0x70 [ 314.807619][ T7211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.813550][ T7211] RIP: 0033:0x7f93c7750da9 [ 314.817975][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.837602][ T7211] RSP: 002b:00007f93c55ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.846032][ T7211] RAX: ffffffffffffffda RBX: 00007f93c7969fa0 RCX: 00007f93c7750da9 [ 314.854013][ T7211] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 314.861992][ T7211] RBP: 00007f93c77d22a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.869973][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.878045][ T7211] R13: 0000000000000000 R14: 00007f93c7969fa0 R15: 00007ffc1aaab048 [ 314.886038][ T7211] [ 314.979653][ T7211] [ 314.982141][ T7211] ============================= [ 314.987200][ T7211] WARNING: suspicious RCU usage [ 314.992194][ T7211] 5.15.177-syzkaller #0 Not tainted [ 314.997774][ T7211] ----------------------------- [ 315.003016][ T7211] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 315.012203][ T7211] [ 315.012203][ T7211] other info that might help us debug this: [ 315.012203][ T7211] [ 315.022667][ T7211] [ 315.022667][ T7211] rcu_scheduler_active = 2, debug_locks = 1 [ 315.030927][ T7211] 1 lock held by syz.2.715/7211: [ 315.037203][ T7211] #0: ffffffff8cb20480 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 315.051266][ T7211] [ 315.051266][ T7211] stack backtrace: [ 315.058659][ T7211] CPU: 1 PID: 7211 Comm: syz.2.715 Not tainted 5.15.177-syzkaller #0 [ 315.066765][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 315.076851][ T7211] Call Trace: [ 315.080146][ T7211] [ 315.083083][ T7211] dump_stack_lvl+0x1e3/0x2d0 [ 315.087770][ T7211] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 315.093427][ T7211] ? dump_stack_lvl+0x274/0x2d0 [ 315.098290][ T7211] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 315.104279][ T7211] perf_callchain_user+0x24f/0x10f0 [ 315.109486][ T7211] ? lockdep_rcu_suspicious+0x158/0x1c0 [ 315.115044][ T7211] ? get_callchain_entry+0x186/0x3c0 [ 315.120392][ T7211] get_perf_callchain+0x549/0x810 [ 315.125453][ T7211] ? put_callchain_entry+0xb0/0xb0 [ 315.130568][ T7211] ? __lock_acquire+0x1295/0x1ff0 [ 315.135609][ T7211] __bpf_get_stack+0x378/0x570 [ 315.140397][ T7211] ? stack_map_get_build_id_offset+0x930/0x930 [ 315.146559][ T7211] ? __cant_sleep+0x270/0x270 [ 315.151245][ T7211] bpf_get_stack_raw_tp+0x1b2/0x220 [ 315.156475][ T7211] bpf_prog_b8a90dd1efcc4ad9+0x3d/0xc0 [ 315.161936][ T7211] bpf_prog_run_pin_on_cpu+0xa2/0x130 [ 315.167340][ T7211] bpf_prog_test_run_syscall+0x366/0x550 [ 315.172985][ T7211] ? sock_gen_cookie+0x60/0x60 [ 315.177755][ T7211] ? sock_gen_cookie+0x60/0x60 [ 315.182534][ T7211] bpf_prog_test_run+0x32f/0x3a0 [ 315.187484][ T7211] __sys_bpf+0x3ac/0x670 [ 315.191733][ T7211] ? bpf_link_show_fdinfo+0x300/0x300 [ 315.197205][ T7211] ? syscall_enter_from_user_mode+0x2e/0x240 [ 315.203205][ T7211] ? lockdep_hardirqs_on+0x94/0x130 [ 315.208407][ T7211] __x64_sys_bpf+0x78/0x90 [ 315.212828][ T7211] do_syscall_64+0x3b/0xb0 [ 315.217244][ T7211] ? clear_bhb_loop+0x15/0x70 [ 315.221927][ T7211] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 315.227829][ T7211] RIP: 0033:0x7f93c7750da9 [ 315.232251][ T7211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.251858][ T7211] RSP: 002b:00007f93c55ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 315.260277][ T7211] RAX: ffffffffffffffda RBX: 00007f93c7969fa0 RCX: 00007f93c7750da9 [ 315.268254][ T7211] RDX: 000000000000000c RSI: 00000000200004c0 RDI: 000000000000000a [ 315.276233][ T7211] RBP: 00007f93c77d22a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.284213][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.292206][ T7211] R13: 0000000000000000 R14: 00007f93c7969fa0 R15: 00007ffc1aaab048 [ 315.300198][ T7211] [ 317.245675][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.252067][ T1422] ieee802154 phy1 wpan1: encryption failed: -22