last executing test programs: 4m2.423770205s ago: executing program 2 (id=199): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0xfd00) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x5, 0x402, r1, 0x0}]) 4m2.255297809s ago: executing program 2 (id=200): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) unlinkat(r1, &(0x7f00000003c0)='./file0\x00', 0x200) 4m2.195285341s ago: executing program 2 (id=201): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m54.937111465s ago: executing program 2 (id=203): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) 3m54.388562659s ago: executing program 2 (id=212): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m42.51065158s ago: executing program 2 (id=233): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m42.166223189s ago: executing program 32 (id=233): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m51.088924813s ago: executing program 0 (id=490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2m39.471639738s ago: executing program 0 (id=511): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m38.59688739s ago: executing program 0 (id=525): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 2m38.580121781s ago: executing program 0 (id=526): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_emit_vhci(0x0, 0x7) 2m38.519371232s ago: executing program 0 (id=527): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = msgget$private(0x0, 0x3ac) msgctl$MSG_STAT_ANY(r0, 0xd, 0xfffffffffffffffe) 2m38.519281992s ago: executing program 0 (id=528): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x5, 0x402, r1, 0x0}]) syz_clone(0x42009500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m26.263809722s ago: executing program 3 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2m22.672946624s ago: executing program 33 (id=528): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)='\x00', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x2, 0x5, 0x402, r1, 0x0}]) syz_clone(0x42009500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m15.424723708s ago: executing program 1 (id=582): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x2800, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 2m15.385971068s ago: executing program 3 (id=584): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2m15.30724106s ago: executing program 1 (id=586): syz_emit_ethernet(0xf6, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "5af815", 0xc0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x32}, @routing={0x5e, 0x14, 0x2, 0x5, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x41}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0, @loopback]}], {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m14.92430089s ago: executing program 1 (id=590): r0 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r3, 0x2, [0x80000001, 0x8]}, {r2, 0x0, 0x2, [0xc1b, 0x3]}, 0x1, [0x7d, 0x8]}) 2m14.838959482s ago: executing program 1 (id=592): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_socket_connect_nvme_tcp() r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) 2m14.775644764s ago: executing program 1 (id=593): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000a80)={[{@numtail}, {@fat=@gid}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@rodir}, {@utf8no}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@utf8}, {@shortname_win95}, {@shortname_winnt}, {@utf8no}, {@numtail}, {@utf8no}, {@numtail}, {@shortname_lower}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2m14.663280667s ago: executing program 1 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 2m14.477160241s ago: executing program 3 (id=596): r0 = getuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@auto_da_alloc, 0x32}], [{@euid_eq={'euid', 0x3d, r0}}, {@appraise}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8, 0x3, 0x7}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 2m14.424797443s ago: executing program 4 (id=598): r0 = socket(0x2a, 0x2, 0x9) ioctl$PPPOEIOCDFWD(r0, 0x541b, 0xf0ff1f00000000) 2m14.413059893s ago: executing program 3 (id=607): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2m14.412754383s ago: executing program 4 (id=599): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x1265, 0xffffffffffffffff) 2m14.380977844s ago: executing program 4 (id=600): syz_emit_ethernet(0xf6, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "5af815", 0xc0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x32}, @routing={0x5e, 0x14, 0x2, 0x5, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x41}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0, @loopback]}], {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2m14.287439046s ago: executing program 4 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x17f) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f00000000c0), 0x8) 2m14.287321796s ago: executing program 4 (id=602): r0 = syz_open_dev$media(0x0, 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000003c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{0x80000000, r3, 0x2, [0x80000001, 0x8]}, {r2, 0x0, 0x2, [0xc1b, 0x3]}, 0x1, [0x7d, 0x8]}) 2m14.283400326s ago: executing program 4 (id=603): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_socket_connect_nvme_tcp() r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) 2m13.544757155s ago: executing program 3 (id=604): msgget$private(0x0, 0x208) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000003900)={0x2020}, 0x2020) 2m12.631311728s ago: executing program 3 (id=605): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1m58.841636668s ago: executing program 34 (id=594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x80) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 1m58.823751088s ago: executing program 35 (id=603): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_socket_connect_nvme_tcp() r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7ffc12178ac0ab1eb36bc2b6ddaa5effda9000", 0x5, 0x16, 0xfffffffb, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000080)=0xd, 0x4) 1m56.809520609s ago: executing program 36 (id=605): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 5.569839669s ago: executing program 9 (id=1120): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[r2, r2], 0x2, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 5.480795881s ago: executing program 9 (id=1121): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r1, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) 5.450397732s ago: executing program 9 (id=1122): mknodat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 4.902883226s ago: executing program 9 (id=1130): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, 0x0, 0x0, 0x6}, 0x94) r0 = syz_open_dev$loop(0x0, 0x2, 0x80000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x45) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc0}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x33) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x18, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4824}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000000000d00"/38], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x1, 0x2}, 0x48) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffafa, 0xb2, 0x9, "1beb00000e001000000008010100"}) 2.073184238s ago: executing program 9 (id=1157): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2.063884648s ago: executing program 5 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) 1.417773534s ago: executing program 8 (id=1168): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000011c0)=ANY=[@ANYBLOB='nfs,iocharset=iso8859-7,rodir,uni_xlate=1,uni_xlate=0,uni_xlate=1,iocharset=macinuit,uni_xlate=1,check=normal,time_offset=0x00000000000505,shortname=lower,shortname=lower,shortname=win95,rodir,check=relaxed,uni_xlate=1,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)) 1.384095545s ago: executing program 6 (id=1169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000003380)="0140742a22d1", 0x6, 0x8000, &(0x7f0000003480)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000017e40)="a3912f", 0x3, 0x40014, &(0x7f0000017f40)={0xa, 0x4e23, 0x80000001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x30000000}, 0x1c) 1.318278277s ago: executing program 7 (id=1171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2e, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x73682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/153, 0x0, 0x2, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.301237067s ago: executing program 8 (id=1172): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.211453149s ago: executing program 6 (id=1173): syz_emit_ethernet(0xee, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "5af815", 0xb8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x5e, 0x14, 0x2, 0x5, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x41}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0, @loopback]}], {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.209870329s ago: executing program 7 (id=1174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) 1.17312368s ago: executing program 5 (id=1175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2e, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/153, 0x0, 0x2, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 749.572921ms ago: executing program 6 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 737.627991ms ago: executing program 5 (id=1177): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x105, 0x42020054, &(0x7f0000000200)="01000000000000000000", 0xa) 675.372923ms ago: executing program 7 (id=1178): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 615.670004ms ago: executing program 5 (id=1179): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r1, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6) 611.405824ms ago: executing program 6 (id=1180): llistxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x210c1e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 577.551096ms ago: executing program 7 (id=1181): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x9, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 501.677988ms ago: executing program 5 (id=1182): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f00000011c0)=ANY=[@ANYBLOB='nfs,iocharset=iso8859-7,rodir,uni_xlate=1,uni_xlate=0,uni_xlate=1,iocharset=macinuit,uni_xlate=1,check=normal,time_offset=0x00000000000505,shortname=lower,shortname=lower,shortname=win95,rodir,check=relaxed,uni_xlate=1,\x00'], 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)) 468.228588ms ago: executing program 7 (id=1183): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000040)=[r5, r5], 0x2, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 404.59384ms ago: executing program 6 (id=1184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2e, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x73682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/153, 0x0, 0x2, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 403.84933ms ago: executing program 8 (id=1185): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 328.339102ms ago: executing program 7 (id=1186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) 327.936922ms ago: executing program 8 (id=1187): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2e, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/153, 0x0, 0x2, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 304.773102ms ago: executing program 6 (id=1188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) 245.168834ms ago: executing program 9 (id=1189): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x105, 0x42020054, &(0x7f0000000200)="01000000000000000000", 0xa) 244.950354ms ago: executing program 8 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 256.14µs ago: executing program 5 (id=1191): syz_emit_ethernet(0xee, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "5af815", 0xb8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@routing={0x5e, 0x14, 0x2, 0x5, 0x0, [@private0, @private2={0xfc, 0x2, '\x00', 0x41}, @remote, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x38}, @private0, @loopback]}], {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x1, 0x100, @val=0x80}}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4855}, 0x24000052) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 0s ago: executing program 8 (id=1192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={r2, 0x8, 0x3, 0x7}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) kernel console output (not intermixed with test programs): 7][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 50.584127][ T4604] binder: 4603:4604 tried to acquire reference to desc 0, got 1 instead [ 50.586378][ T4604] binder: 4603:4604 got transaction with invalid offset (24, min 24 max 46) or object. [ 50.587999][ T4604] binder: 4603:4604 transaction call to 4603:0 failed 12/29201/-22, size 46-24 line 3363 [ 50.589768][ T4340] binder: undelivered TRANSACTION_ERROR: 29201 [ 52.534676][ T4378] kernel write not supported for file bpf-prog (pid: 4378 comm: kworker/1:7) [ 52.603368][ T4638] netlink: 116 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.605043][ T4638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 52.624274][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 57.643136][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 58.049275][ T4682] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 58.076429][ T4685] loop2: detected capacity change from 0 to 256 [ 58.378963][ T4687] netlink: 160 bytes leftover after parsing attributes in process `syz.0.94'. [ 58.389522][ T4687] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 58.602930][ T4710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 58.653005][ T4712] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.103'. [ 58.705410][ T4721] loop2: detected capacity change from 0 to 256 [ 60.592549][ T4740] loop2: detected capacity change from 0 to 8 [ 64.011863][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 64.502786][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.504051][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.615131][ T1518] cfg80211: failed to load regulatory.db [ 70.105949][ T4722] netlink: 'syz.1.99': attribute type 10 has an invalid length. [ 70.110722][ T4722] team0: Port device netdevsim0 added [ 70.199691][ T4760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 70.262990][ T4766] loop2: detected capacity change from 0 to 256 [ 70.264638][ T4766] FAT-fs (loop2): Unrecognized mount option "uni_xlate=" or missing value [ 70.353680][ T4773] loop4: detected capacity change from 0 to 8 [ 70.355652][ T4773] ======================================================= [ 70.355652][ T4773] WARNING: The mand mount option has been deprecated and [ 70.355652][ T4773] and is ignored by this kernel. Remove the mand [ 70.355652][ T4773] option from the mount to silence this warning. [ 70.355652][ T4773] ======================================================= [ 70.388078][ T4776] Bluetooth: MGMT ver 1.22 [ 70.733151][ T4778] loop4: detected capacity change from 0 to 2048 [ 70.764664][ T4778] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.806904][ T4335] EXT4-fs (loop4): unmounting filesystem. [ 71.323759][ T4762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.325691][ T4762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 71.338848][ T4762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 71.353714][ T4762] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 71.362867][ T4762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 71.365381][ T4762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 71.369329][ T4762] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 71.375576][ T4762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 71.387182][ T4762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 71.394757][ T4762] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 71.400405][ T4762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 71.403896][ T4762] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 71.410902][ T4762] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 71.545024][ T4802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 73.372229][ T4341] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.372242][ T4337] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.453309][ T4337] Bluetooth: hci4: command 0x0c1a tx timeout [ 73.453930][ T4342] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.451644][ T4341] Bluetooth: hci3: command 0x0406 tx timeout [ 75.463987][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 75.531603][ T4341] Bluetooth: hci1: command 0x0406 tx timeout [ 75.541624][ T4341] Bluetooth: hci4: command 0x0406 tx timeout [ 82.509826][ T4818] loop1: detected capacity change from 0 to 8 [ 82.609631][ T4831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 82.624605][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 82.626120][ T4835] netlink: 'syz.2.136': attribute type 10 has an invalid length. [ 82.627300][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 82.932388][ T4835] device geneve2 entered promiscuous mode [ 82.934243][ T4835] Zero length message leads to an empty skb [ 82.952119][ T4838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 83.535559][ T4862] loop0: detected capacity change from 0 to 8 [ 94.329722][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 95.000236][ T4901] loop3: detected capacity change from 0 to 8 [ 95.011598][ T4905] loop0: detected capacity change from 0 to 256 [ 95.053977][ T4906] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.163'. [ 95.055785][ T4903] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.163'. [ 95.117815][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 95.794520][ T4939] loop4: detected capacity change from 0 to 128 [ 96.231372][ T4943] loop1: detected capacity change from 0 to 512 [ 96.247492][ T4943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 96.284332][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 97.546560][ T4960] slcan: can't register candev [ 99.229113][ T4991] binder: 4990:4991 tried to acquire reference to desc 0, got 1 instead [ 99.230900][ T4991] binder: 4990:4991 got transaction with invalid data ptr [ 99.232223][ T4991] binder: 4990:4991 transaction call to 4990:0 failed 19/29201/-14, size 0-24 line 3350 [ 99.234929][ T114] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.207676][ T5005] loop2: detected capacity change from 0 to 1024 [ 100.256093][ T4888] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.920936][ T4956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 107.924803][ T4961] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.948381][ T5021] loop2: detected capacity change from 0 to 512 [ 108.012110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 108.050333][ T5021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.085360][ T5039] loop1: detected capacity change from 0 to 256 [ 108.497219][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.500455][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.519592][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.528367][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.534924][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.542992][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.549508][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.558621][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.563662][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.566131][ T4334] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 108.576756][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 109.946436][ T5079] loop1: detected capacity change from 0 to 128 [ 109.954449][ T5079] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.973274][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 109.996469][ T5082] process 'syz.1.223' launched './file3' with NULL argv: empty string added [ 120.208090][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 120.326297][ T4334] EXT4-fs (loop2): unmounting filesystem. [ 120.678837][ T5111] loop1: detected capacity change from 0 to 1024 [ 120.684414][ T5111] EXT4-fs: Ignoring removed oldalloc option [ 120.687771][ T5111] EXT4-fs: Ignoring removed orlov option [ 120.705126][ T5111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 120.718766][ T5111] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.232: lblock 0 mapped to illegal pblock 0 (length 6) [ 120.736344][ T5111] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 120.740741][ T5111] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.740741][ T5111] [ 120.794590][ T278] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm kworker/u4:4: bg 0: block 112: padding at end of block bitmap is not set [ 120.798190][ T278] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 120.805626][ T278] EXT4-fs (loop1): This should not happen!! Data will be lost [ 120.805626][ T278] [ 120.809827][ T278] EXT4-fs (loop1): Total free blocks count 0 [ 120.811938][ T278] EXT4-fs (loop1): Free/Dirty block details [ 120.813838][ T4342] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.815938][ T4342] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.817757][ T4342] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.819564][ T4342] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.821671][ T4342] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.823679][ T4342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.828952][ T278] EXT4-fs (loop1): free_blocks=0 [ 121.203287][ T278] EXT4-fs (loop1): dirty_blocks=48 [ 121.204252][ T278] EXT4-fs (loop1): Block reservation details [ 121.255140][ T5129] loop1: detected capacity change from 0 to 2048 [ 121.260747][ T5129] EXT4-fs: Ignoring removed i_version option [ 121.275599][ T5129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.289497][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 122.898973][ T4342] Bluetooth: hci2: command 0x0409 tx timeout [ 123.616600][ T5163] loop0: detected capacity change from 0 to 256 [ 124.971642][ T4342] Bluetooth: hci2: command 0x041b tx timeout [ 125.931922][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933096][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.051620][ T4341] Bluetooth: hci2: command 0x040f tx timeout [ 129.131580][ T4341] Bluetooth: hci2: command 0x0419 tx timeout [ 133.173289][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 133.223606][ T4602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.427257][ T5184] ptrace attach of "ci2-linux-6-1-kasan-arm64/syz-executor exec"[4333] was attempted by ""[5184] [ 133.765047][ T4602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.843523][ T4602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.868021][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 133.989395][ T5200] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.990890][ T5200] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 133.992745][ T4602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.004059][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.006944][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.008635][ T5120] device bridge_slave_0 entered promiscuous mode [ 134.011022][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.012602][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.014329][ T5120] device bridge_slave_1 entered promiscuous mode [ 134.022349][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.025197][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.035034][ T5120] team0: Port device team_slave_0 added [ 134.037992][ T5120] team0: Port device team_slave_1 added [ 134.350560][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.372656][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.385619][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.394712][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.397105][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.416073][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.420182][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 134.432009][ T5211] loop1: detected capacity change from 0 to 128 [ 134.759755][ T5211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.766462][ T5120] device hsr_slave_0 entered promiscuous mode [ 134.815460][ T4333] EXT4-fs (loop1): unmounting filesystem. [ 134.823286][ T5120] device hsr_slave_1 entered promiscuous mode [ 134.871723][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.873053][ T5120] Cannot create hsr debugfs directory [ 145.749643][ T5120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.764165][ T5120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.833419][ T5120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.866224][ T5120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.170807][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.179106][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.180862][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.184178][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.186756][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.188611][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.190737][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.192020][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.198018][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.201688][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.203517][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.205066][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.206203][ T4650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.208381][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.212946][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.218827][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.224009][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.225856][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.278142][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.280016][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.285965][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.287640][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.297401][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.299593][ T5120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.304439][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.306249][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.382806][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.384273][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.386421][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.528852][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.530770][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.542531][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.544290][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.546409][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.547879][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.549971][ T5120] device veth0_vlan entered promiscuous mode [ 146.587883][ T5120] device veth1_vlan entered promiscuous mode [ 146.630245][ T5120] device veth0_macvtap entered promiscuous mode [ 146.689743][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.691467][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.693666][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.695248][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.697946][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.703258][ T5120] device veth1_macvtap entered promiscuous mode [ 146.769030][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.770861][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.776062][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.777761][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.779354][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.781044][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.783096][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.785035][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.786782][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.788513][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.790868][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.793233][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.794998][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.799367][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.801361][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.803852][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.805574][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.807330][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.809129][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.810774][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.815626][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.817347][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.819074][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.821328][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.823081][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.825387][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.831317][ T5120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.833090][ T5120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.834503][ T5120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.835869][ T5120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.944463][ T4650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.945842][ T4650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.947172][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 147.530747][ T5355] loop3: detected capacity change from 0 to 256 [ 147.606797][ T4565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.608401][ T4565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.621829][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.126152][ T5373] loop0: detected capacity change from 0 to 128 [ 148.129638][ T5373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 148.205738][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 148.369460][ T5408] loop5: detected capacity change from 0 to 1024 [ 148.373403][ T5408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.402752][ T4602] device hsr_slave_0 left promiscuous mode [ 148.410110][ T5408] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 148.432268][ T4602] device hsr_slave_1 left promiscuous mode [ 148.446866][ T5408] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.282: lblock 0 mapped to illegal pblock 0 (length 1) [ 148.455151][ T5408] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 148.459109][ T5408] EXT4-fs (loop5): This should not happen!! Data will be lost [ 148.459109][ T5408] [ 148.561844][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.563140][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.573250][ T4602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.576389][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 148.581228][ T4602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.583192][ T4602] device bridge_slave_1 left promiscuous mode [ 148.585128][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.633204][ T4602] device bridge_slave_0 left promiscuous mode [ 148.634423][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.771918][ T4602] device veth1_macvtap left promiscuous mode [ 148.773175][ T4602] device veth0_macvtap left promiscuous mode [ 148.774168][ T4602] device veth1_vlan left promiscuous mode [ 148.775240][ T4602] device veth0_vlan left promiscuous mode [ 149.462579][ T5437] loop0: detected capacity change from 0 to 512 [ 149.480896][ T5437] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.488386][ T5437] EXT4-fs warning (device loop0): ext4_group_add:1723: Can't resize non-sparse filesystem further [ 149.502447][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 149.714040][ T5450] loop5: detected capacity change from 0 to 256 [ 151.783517][ T4602] team0 (unregistering): Port device team_slave_1 removed [ 151.966260][ T4602] team0 (unregistering): Port device team_slave_0 removed [ 152.122518][ T4602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.342098][ T4602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.612068][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 153.613234][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 153.793127][ T4602] bond0 (unregistering): Released all slaves [ 154.106449][ T5458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.165794][ T5458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 154.199129][ T5471] device syzkaller0 entered promiscuous mode [ 156.065325][ T5522] loop0: detected capacity change from 0 to 256 [ 156.584851][ T5549] loop1: detected capacity change from 0 to 8192 [ 158.517584][ T5585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.526707][ T4342] Bluetooth: hci3: unexpected event for opcode 0x080b [ 160.342372][ T4342] Bluetooth: hci4: unexpected event for opcode 0x080b [ 160.525876][ T5655] syz.5.343 uses obsolete (PF_INET,SOCK_PACKET) [ 160.610767][ T27] audit: type=1326 audit(160.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.620451][ T27] audit: type=1326 audit(160.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.625610][ T27] audit: type=1326 audit(160.610:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.639323][ T27] audit: type=1326 audit(160.610:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.659971][ T27] audit: type=1326 audit(160.610:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.678109][ T27] audit: type=1326 audit(160.610:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.691369][ T27] audit: type=1326 audit(160.610:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 160.698983][ T27] audit: type=1326 audit(160.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5670 comm="syz.1.347" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb857a168 code=0x7ffc0000 [ 161.664386][ T5701] netlink: 204 bytes leftover after parsing attributes in process `syz.3.354'. [ 161.666800][ T5701] netlink: 84 bytes leftover after parsing attributes in process `syz.3.354'. [ 161.791205][ T5712] loop5: detected capacity change from 0 to 1024 [ 161.796804][ T5712] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.798624][ T5712] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.661665][ T4342] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 162.663301][ T4342] Bluetooth: hci3: Injecting HCI hardware error event [ 162.665273][ T4337] Bluetooth: hci3: hardware error 0x00 [ 162.700035][ T5712] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 162.804135][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 163.541688][ T5761] syz.5.369 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 163.887737][ T5765] block device autoloading is deprecated and will be removed. [ 163.930162][ T4342] Bluetooth: hci0: unexpected event for opcode 0x080b [ 164.501132][ T4342] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 164.502988][ T4342] Bluetooth: hci4: Injecting HCI hardware error event [ 164.505865][ T4342] Bluetooth: hci4: hardware error 0x00 [ 164.821663][ T4337] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 165.722965][ T4337] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 165.724580][ T4337] Bluetooth: hci2: Injecting HCI hardware error event [ 165.728089][ T4341] Bluetooth: hci2: hardware error 0x00 [ 166.413194][ T5887] loop0: detected capacity change from 0 to 512 [ 166.435766][ T5887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.466981][ T5887] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 166.478211][ T5887] EXT4-fs (loop0): Delayed block allocation failed for inode 13 at logical offset 65537 with max blocks 1 with error 28 [ 166.481876][ T5887] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.481876][ T5887] [ 166.483686][ T5887] EXT4-fs (loop0): Total free blocks count 0 [ 166.487931][ T5887] EXT4-fs (loop0): Free/Dirty block details [ 166.490032][ T5887] EXT4-fs (loop0): free_blocks=65280 [ 166.494108][ T5887] EXT4-fs (loop0): dirty_blocks=1 [ 166.496084][ T5887] EXT4-fs (loop0): Block reservation details [ 166.497177][ T5887] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 166.527066][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 166.651687][ T4342] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 166.712052][ T5907] capability: warning: `syz.4.409' uses 32-bit capabilities (legacy support in use) [ 166.730204][ T5909] loop5: detected capacity change from 0 to 128 [ 166.732056][ T5909] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 166.734613][ T5909] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 167.151208][ T4342] Bluetooth: hci2: unexpected event for opcode 0x080b [ 167.658648][ T5938] loop5: detected capacity change from 0 to 256 [ 167.746152][ T5816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.849556][ T5954] smc: adding net device syzkaller1 with user defined pnetid SYZ0 [ 167.861150][ T5953] smc: removing net device syzkaller1 with user defined pnetid SYZ0 [ 168.005982][ T5935] overlayfs: statfs failed on './file0' [ 168.251770][ T4341] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 168.435253][ T4341] Bluetooth: hci1: unexpected event for opcode 0x080b [ 168.681533][ T6015] binder: 6013:6015 tried to acquire reference to desc 0, got 1 instead [ 168.683774][ T6017] loop0: detected capacity change from 0 to 512 [ 168.685385][ T6015] binder: cannot allocate buffer: no space left [ 168.685408][ T6015] binder: 6013:6015 transaction async to 6013:0 failed 24/29201/-28, size 6144-24 line 3247 [ 168.691344][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 168.710513][ T6017] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 168.728978][ T6017] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.751264][ T6017] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 168.758224][ T6017] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.761086][ T6017] EXT4-fs (loop0): 1 truncate cleaned up [ 168.765760][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.898525][ T4328] EXT4-fs (loop0): unmounting filesystem. [ 169.576143][ T6080] loop3: detected capacity change from 0 to 256 [ 170.959678][ T6169] loop3: detected capacity change from 0 to 512 [ 170.961202][ T6169] ext4: Unknown parameter 'auto_da_alloc2euid' [ 170.993315][ T5236] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 171.725006][ T6207] loop0: detected capacity change from 0 to 512 [ 171.730977][ T6207] ext4: Unknown parameter 'auto_da_alloc2euid' [ 172.491692][ T4341] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 172.494923][ T4341] Bluetooth: hci1: Injecting HCI hardware error event [ 172.497132][ T4341] Bluetooth: hci1: hardware error 0x00 [ 172.690407][ T6246] loop1: detected capacity change from 0 to 512 [ 172.696689][ T6246] ext4: Unknown parameter 'auto_da_alloc2euid' [ 174.644243][ T6273] Injecting memory failure for pfn 0x136993 at process virtual address 0x20000000 [ 174.647021][ T6273] Memory failure: 0x136993: recovery action for dirty LRU page: Recovered [ 174.648490][ T6273] Injecting memory failure for pfn 0x210d76 at process virtual address 0x20001000 [ 174.650042][ T6273] Memory failure: 0x210d76: recovery action for reserved kernel page: Ignored [ 174.651875][ T4341] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 187.422136][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.423302][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.676564][ T6390] loop1: detected capacity change from 0 to 512 [ 188.682800][ T6390] ext4: Unknown parameter 'auto_da_alloc2euid' [ 188.702703][ T6392] capability: warning: `syz.1.552' uses deprecated v2 capabilities in a way that may be insecure [ 188.748064][ T6396] loop1: detected capacity change from 0 to 512 [ 188.753928][ T6396] ext4: Unknown parameter 'auto_da_alloc2euid' [ 196.026395][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 196.209590][ T6423] loop5: detected capacity change from 0 to 512 [ 196.484914][ T6423] ext4: Unknown parameter 'auto_da_alloc2euid' [ 196.563715][ T6438] loop5: detected capacity change from 0 to 512 [ 196.570528][ T6438] ext4: Unknown parameter 'auto_da_alloc2euid' [ 200.235291][ T4342] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 200.237330][ T4342] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 200.238960][ T4342] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 200.240594][ T4342] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 200.243250][ T4342] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 200.244763][ T4342] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.251763][ T4342] Bluetooth: hci5: command 0x0409 tx timeout [ 204.331650][ T4341] Bluetooth: hci5: command 0x041b tx timeout [ 206.411627][ T4342] Bluetooth: hci5: command 0x040f tx timeout [ 207.471008][ T6486] loop5: detected capacity change from 0 to 512 [ 207.490760][ T6486] ext4: Unknown parameter 'auto_da_alloc2euid' [ 207.979130][ T6476] chnl_net:caif_netlink_parms(): no params data found [ 208.000067][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.001772][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.003724][ T6476] device bridge_slave_0 entered promiscuous mode [ 208.006219][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.007529][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.009413][ T6476] device bridge_slave_1 entered promiscuous mode [ 208.019032][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.022530][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.033873][ T6476] team0: Port device team_slave_0 added [ 208.036782][ T6476] team0: Port device team_slave_1 added [ 208.043074][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.044380][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.050899][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.057656][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.060008][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.065303][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.104654][ T6476] device hsr_slave_0 entered promiscuous mode [ 208.115777][ T6524] loop1: detected capacity change from 0 to 256 [ 208.132392][ T6476] device hsr_slave_1 entered promiscuous mode [ 208.161646][ T6476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.163777][ T6476] Cannot create hsr debugfs directory [ 208.411164][ T6532] loop3: detected capacity change from 0 to 512 [ 208.420203][ T6532] ext4: Unknown parameter 'auto_da_alloc2euid' [ 208.492010][ T4342] Bluetooth: hci5: command 0x0419 tx timeout [ 219.987642][ T6574] loop5: detected capacity change from 0 to 512 [ 219.989256][ T6574] ext4: Unknown parameter 'auto_da_alloc2euid' [ 224.075756][ T4342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.077655][ T4342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.079272][ T4342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.080972][ T4342] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.085591][ T4342] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.087000][ T4342] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.094693][ T4337] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.096797][ T4337] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.105263][ T4337] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.107718][ T4337] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.109331][ T4337] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 224.110805][ T4337] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.099997][ T4337] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.101765][ T4337] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.103323][ T4337] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.105263][ T4337] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.106635][ T4337] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 226.107956][ T4337] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.171685][ T4341] Bluetooth: hci6: command 0x0409 tx timeout [ 226.173120][ T4341] Bluetooth: hci0: command 0x0409 tx timeout [ 228.171619][ T4337] Bluetooth: hci7: command 0x0409 tx timeout [ 228.251605][ T4341] Bluetooth: hci0: command 0x041b tx timeout [ 228.252668][ T4341] Bluetooth: hci6: command 0x041b tx timeout [ 230.251783][ T4337] Bluetooth: hci7: command 0x041b tx timeout [ 230.285127][ T6476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.316708][ T6476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.341844][ T4341] Bluetooth: hci6: command 0x040f tx timeout [ 230.342921][ T4341] Bluetooth: hci0: command 0x040f tx timeout [ 230.361020][ T6628] loop5: detected capacity change from 0 to 512 [ 230.377330][ T6628] ext4: Unknown parameter 'auto_da_alloc2euid' [ 230.553533][ T6476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.652880][ T6476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.005743][ T5750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.048521][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 231.084848][ T5750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.095371][ T6609] chnl_net:caif_netlink_parms(): no params data found [ 231.105536][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 231.146244][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.147593][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.149341][ T6597] device bridge_slave_0 entered promiscuous mode [ 231.153610][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.154995][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.156687][ T6597] device bridge_slave_1 entered promiscuous mode [ 231.212641][ T5750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.223749][ T6609] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.225422][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.227096][ T6609] device bridge_slave_0 entered promiscuous mode [ 231.232604][ T6609] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.233841][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.235424][ T6609] device bridge_slave_1 entered promiscuous mode [ 231.242377][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.243595][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.245261][ T6600] device bridge_slave_0 entered promiscuous mode [ 231.247195][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.248337][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.249903][ T6600] device bridge_slave_1 entered promiscuous mode [ 231.256533][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.292525][ T5750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.306685][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.309569][ T6609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.314026][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.316642][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.324031][ T6600] team0: Port device team_slave_0 added [ 231.325875][ T6600] team0: Port device team_slave_1 added [ 231.331525][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.332700][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.337336][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.339811][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.340916][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.346335][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.363048][ T6609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.372653][ T6597] team0: Port device team_slave_0 added [ 231.375570][ T6597] team0: Port device team_slave_1 added [ 231.402893][ T6600] device hsr_slave_0 entered promiscuous mode [ 231.441908][ T6600] device hsr_slave_1 entered promiscuous mode [ 231.481677][ T6600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.483160][ T6600] Cannot create hsr debugfs directory [ 231.491389][ T6609] team0: Port device team_slave_0 added [ 231.493137][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.494325][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.498619][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.508541][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.514023][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.523169][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.524774][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.526627][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.527997][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.532333][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.534980][ T6609] team0: Port device team_slave_1 added [ 232.331601][ T4337] Bluetooth: hci7: command 0x040f tx timeout [ 232.411628][ T4337] Bluetooth: hci0: command 0x0419 tx timeout [ 232.411661][ T4341] Bluetooth: hci6: command 0x0419 tx timeout [ 234.411689][ T4342] Bluetooth: hci7: command 0x0419 tx timeout [ 242.276384][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.278252][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.279833][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.281071][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.296088][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.297786][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.299384][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.300604][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.306827][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.308717][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.311424][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.335570][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.336871][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.341080][ T6609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.354541][ T6609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.355801][ T6609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.360403][ T6609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.396721][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.399167][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.400940][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.442923][ T6597] device hsr_slave_0 entered promiscuous mode [ 242.482426][ T6597] device hsr_slave_1 entered promiscuous mode [ 242.541813][ T6597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.543235][ T6597] Cannot create hsr debugfs directory [ 242.582868][ T6609] device hsr_slave_0 entered promiscuous mode [ 242.631862][ T6609] device hsr_slave_1 entered promiscuous mode [ 242.671647][ T6609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.673207][ T6609] Cannot create hsr debugfs directory [ 242.882869][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.884951][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.888331][ T6600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.968560][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.970520][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.976333][ T6600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 243.002954][ T6600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.045646][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.047516][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.106962][ T6600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.195679][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.358705][ T6600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.370415][ T6600] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.382372][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.383816][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.385170][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.386759][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.436865][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.444435][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.446192][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.447752][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.449000][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.450383][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.465881][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.472904][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.474120][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.475599][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.484773][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.486634][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.495326][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 243.497783][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 243.545371][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.547004][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.548683][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.550265][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.552138][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.553596][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.555240][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.560657][ T6600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.640557][ T6597] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.653911][ T6723] loop5: detected capacity change from 0 to 512 [ 243.655532][ T6723] ext4: Unknown parameter 'auto_da_alloc2euid' [ 243.666437][ T6597] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.754475][ T6597] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.792044][ T6476] device veth0_vlan entered promiscuous mode [ 243.794371][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.796133][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.797755][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.799320][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.803240][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.804791][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.814200][ T6597] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.955312][ T6609] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 243.983518][ T6609] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 244.084032][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.086003][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.088401][ T6609] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 244.431042][ T6476] device veth1_vlan entered promiscuous mode [ 244.434782][ T6600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.436187][ T6609] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 244.473823][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.569016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.570920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.584566][ T6476] device veth0_macvtap entered promiscuous mode [ 244.827137][ T6476] device veth1_macvtap entered promiscuous mode [ 244.842740][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.844480][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.846084][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.847824][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.849508][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.861588][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.863269][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.864971][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.866595][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.868328][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.871352][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.883959][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.885731][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.887227][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.888832][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.924498][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.926393][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.928060][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.929785][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.931410][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.935846][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.937547][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.939269][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.940835][ T6476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.942859][ T6476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.945170][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.957260][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.959229][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.967841][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.975143][ T5750] device hsr_slave_0 left promiscuous mode [ 245.002793][ T5750] device hsr_slave_1 left promiscuous mode [ 245.071918][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.073279][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.074764][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.076110][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.077721][ T5750] device bridge_slave_1 left promiscuous mode [ 245.078822][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.106197][ T5750] device bridge_slave_0 left promiscuous mode [ 245.107413][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.301911][ T5750] device veth1_macvtap left promiscuous mode [ 245.303038][ T5750] device veth0_macvtap left promiscuous mode [ 245.304146][ T5750] device veth1_vlan left promiscuous mode [ 245.305225][ T5750] device veth0_vlan left promiscuous mode [ 247.396882][ T5750] team0 (unregistering): Port device team_slave_1 removed [ 247.583401][ T5750] team0 (unregistering): Port device team_slave_0 removed [ 247.742423][ T5750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.952803][ T5750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.812187][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.813287][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.503161][ T5750] bond0 (unregistering): Released all slaves [ 249.865500][ T6476] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.867114][ T6476] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.868952][ T6476] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.870471][ T6476] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.914111][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 249.916048][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.929239][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.956259][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.957876][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.959768][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.961306][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.967179][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.968255][ T4681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.981415][ T6609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.990938][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.998523][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.999792][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.001422][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.011213][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.013285][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.014779][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.015998][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.034789][ T6600] device veth0_vlan entered promiscuous mode [ 250.037391][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.039104][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.040687][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 250.065474][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 250.080640][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.082240][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.082388][ T6600] device veth1_vlan entered promiscuous mode [ 250.087287][ T6609] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.088936][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 250.090423][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 250.099059][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 250.100655][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.104489][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.119226][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.121112][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.124637][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.126646][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.128296][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.129956][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.131044][ T4681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.142847][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.144674][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.147610][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.148922][ T4681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.154791][ T6597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.156564][ T6597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.165992][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.167808][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.169413][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.171208][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.175931][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.177638][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.179291][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.180918][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.205346][ T6825] loop5: detected capacity change from 0 to 512 [ 250.220051][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 250.223824][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.227105][ T6825] ext4: Unknown parameter 'auto_da_alloc2euid' [ 250.229722][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.251918][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.253871][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 250.256899][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 250.269177][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.273458][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.280041][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.282916][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.284690][ T4681] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.310673][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.312659][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.314155][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.315600][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.317706][ T6600] device veth0_macvtap entered promiscuous mode [ 250.324181][ T6609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.346847][ T6600] device veth1_macvtap entered promiscuous mode [ 250.348986][ T6833] loop6: detected capacity change from 0 to 512 [ 250.350522][ T6833] ext4: Unknown parameter 'auto_da_alloc2euid' [ 250.367769][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.369726][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.371350][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.384693][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.386468][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.388264][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.391275][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.399141][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.400727][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.403700][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.406576][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.451786][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.453538][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.455159][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.456764][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.460081][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.461376][ T5716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.464006][ T6812] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.482553][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.484282][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.485847][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.498652][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.504845][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.506402][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.508016][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.509630][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.528858][ T6600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.530734][ T6600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.538070][ T6600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.645824][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.659178][ T6600] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.681724][ T6600] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.683241][ T6600] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.684637][ T6600] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.700300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.702466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.762933][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.766748][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.823244][ T6609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.844282][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.845726][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.855940][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.911782][ T5716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.913126][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.922352][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.123480][ T6875] loop6: detected capacity change from 0 to 512 [ 251.298325][ T6875] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.656: EA inode hash validation failed [ 251.301375][ T6875] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.656: corrupted inode contents [ 251.308896][ T6875] EXT4-fs (loop6): Remounting filesystem read-only [ 251.310082][ T6875] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #15: comm syz.6.656: mark_inode_dirty error [ 251.316584][ T6875] EXT4-fs (loop6): Remounting filesystem read-only [ 251.317809][ T6875] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #15: comm syz.6.656: corrupted inode contents [ 251.321312][ T6875] EXT4-fs (loop6): Remounting filesystem read-only [ 251.322607][ T6875] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2947: inode #15: comm syz.6.656: mark_inode_dirty error [ 251.327061][ T6875] EXT4-fs (loop6): Remounting filesystem read-only [ 251.328293][ T6875] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2950: inode #15: comm syz.6.656: mark inode dirty (error -117) [ 251.331211][ T6875] EXT4-fs (loop6): Remounting filesystem read-only [ 251.332477][ T6875] EXT4-fs warning (device loop6): ext4_evict_inode:301: xattr delete (err -117) [ 251.334959][ T6875] EXT4-fs (loop6): 1 orphan inode deleted [ 251.336017][ T6875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 252.196429][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 252.344201][ T6910] loop5: detected capacity change from 0 to 512 [ 252.357879][ T6910] ext4: Unknown parameter 'auto_da_alloc2euid' [ 252.845471][ T5750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.153262][ T6923] loop8: detected capacity change from 0 to 512 [ 253.154996][ T6923] ext4: Unknown parameter 'auto_da_alloc2euid' [ 253.202899][ T6812] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 253.450771][ T6929] loop8: detected capacity change from 0 to 512 [ 253.822506][ T6929] EXT4-fs warning (device loop8): ext4_xattr_inode_get:506: inode #11: comm syz.8.668: EA inode hash validation failed [ 253.826574][ T6929] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.668: corrupted inode contents [ 253.830366][ T6929] EXT4-fs (loop8): Remounting filesystem read-only [ 253.831449][ T6929] EXT4-fs error (device loop8): ext4_dirty_inode:6156: inode #15: comm syz.8.668: mark_inode_dirty error [ 253.837910][ T6929] EXT4-fs (loop8): Remounting filesystem read-only [ 253.839165][ T6929] EXT4-fs error (device loop8): ext4_do_update_inode:5279: inode #15: comm syz.8.668: corrupted inode contents [ 253.842340][ T6929] EXT4-fs (loop8): Remounting filesystem read-only [ 253.843483][ T6929] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2947: inode #15: comm syz.8.668: mark_inode_dirty error [ 253.846962][ T6929] EXT4-fs (loop8): Remounting filesystem read-only [ 253.848139][ T6929] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2950: inode #15: comm syz.8.668: mark inode dirty (error -117) [ 253.851018][ T6929] EXT4-fs (loop8): Remounting filesystem read-only [ 253.852282][ T6929] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 253.854186][ T6929] EXT4-fs (loop8): 1 orphan inode deleted [ 253.855297][ T6929] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 254.351543][ C0] sched: RT throttling activated [ 254.533160][ T6600] EXT4-fs (loop8): unmounting filesystem. [ 254.609270][ T6942] loop8: detected capacity change from 0 to 512 [ 254.610767][ T6942] ext4: Unknown parameter 'auto_da_alloc2euid' [ 255.138245][ T6952] loop8: detected capacity change from 0 to 512 [ 255.148051][ T6952] ext4: Unknown parameter 'auto_da_alloc2euid' [ 258.530706][ T6962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.667388][ T6974] loop8: detected capacity change from 0 to 512 [ 258.672126][ T6974] ext4: Unknown parameter 'auto_da_alloc2euid' [ 258.797115][ T6975] loop5: detected capacity change from 0 to 512 [ 259.042991][ T6975] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.682: EA inode hash validation failed [ 259.046616][ T6975] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.682: corrupted inode contents [ 259.049169][ T6975] EXT4-fs (loop5): Remounting filesystem read-only [ 259.050307][ T6975] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #15: comm syz.5.682: mark_inode_dirty error [ 259.054042][ T6975] EXT4-fs (loop5): Remounting filesystem read-only [ 259.055225][ T6975] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #15: comm syz.5.682: corrupted inode contents [ 259.057669][ T6975] EXT4-fs (loop5): Remounting filesystem read-only [ 259.058832][ T6975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2947: inode #15: comm syz.5.682: mark_inode_dirty error [ 259.061190][ T6975] EXT4-fs (loop5): Remounting filesystem read-only [ 259.062428][ T6975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2950: inode #15: comm syz.5.682: mark inode dirty (error -117) [ 259.064945][ T6975] EXT4-fs (loop5): Remounting filesystem read-only [ 259.066112][ T6975] EXT4-fs warning (device loop5): ext4_evict_inode:301: xattr delete (err -117) [ 259.068017][ T6975] EXT4-fs (loop5): 1 orphan inode deleted [ 259.069013][ T6975] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 259.725345][ T6984] loop8: detected capacity change from 0 to 512 [ 259.743220][ T6984] ext4: Unknown parameter 'auto_da_alloc2euid' [ 259.799044][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 259.818331][ T6812] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 260.913258][ T6999] loop8: detected capacity change from 0 to 512 [ 260.929744][ T6999] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 260.935108][ T6999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 260.937202][ T6999] EXT4-fs (loop8): orphan cleanup on readonly fs [ 260.939067][ T6999] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.691: bg 0: block 361: padding at end of block bitmap is not set [ 260.943005][ T6999] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 260.944617][ T6999] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #11: comm syz.8.691: attempt to clear invalid blocks 33619980 len 1 [ 260.947884][ T6999] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.691: invalid indirect mapped block 1811939328 (level 0) [ 260.950297][ T6999] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.691: invalid indirect mapped block 2185560079 (level 1) [ 260.958539][ T6999] EXT4-fs (loop8): 1 truncate cleaned up [ 260.959780][ T6999] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 260.990836][ T6600] EXT4-fs (loop8): unmounting filesystem. [ 261.120165][ T7007] loop8: detected capacity change from 0 to 512 [ 261.123025][ T7007] ext4: Unknown parameter 'auto_da_alloc2euid' [ 265.904461][ T6597] device veth0_vlan entered promiscuous mode [ 265.910723][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.912637][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.914241][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.915881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.917663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.919116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.922595][ T6986] netlink: 104 bytes leftover after parsing attributes in process `syz.5.687'. [ 265.962847][ T5750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.973320][ T6597] device veth1_vlan entered promiscuous mode [ 265.978533][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.980416][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.984776][ T6609] device veth0_vlan entered promiscuous mode [ 265.988363][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.990092][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.992536][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.994205][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.996921][ T6609] device veth1_vlan entered promiscuous mode [ 266.007511][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.009267][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.010914][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.014068][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.020026][ T6609] device veth0_macvtap entered promiscuous mode [ 266.022743][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 266.031298][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.057085][ T5750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.060377][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.065582][ T6597] device veth0_macvtap entered promiscuous mode [ 266.067542][ T6609] device veth1_macvtap entered promiscuous mode [ 266.070400][ T6597] device veth1_macvtap entered promiscuous mode [ 266.078955][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.080767][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.087303][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.089110][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.091873][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.093781][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.095549][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.097301][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.099017][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.100812][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.107623][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.109322][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.112334][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.113901][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.115664][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.117393][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.119263][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.120918][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.125217][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.127001][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.128761][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.130350][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.136626][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.139319][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.141032][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.142924][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.144625][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.147096][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.148464][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 266.150689][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.152844][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 266.154414][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.156052][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.157828][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 266.159415][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.218434][ T5750] team0: Port device netdevsim0 removed [ 266.220407][ T5750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.224556][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.226325][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.227984][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.229681][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.231268][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.233434][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.235133][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.236857][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.238342][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.240009][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.241801][ T6609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.243561][ T6609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.245920][ T6609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.248158][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.250109][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.253468][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.255224][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.256935][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.258729][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.260475][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.262560][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.264320][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.266031][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.267675][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.269234][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.270689][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.272699][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.275324][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.280940][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.282912][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.284598][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.286247][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.296487][ T6609] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.297998][ T6609] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.299650][ T6609] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.301119][ T6609] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.309921][ T6597] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.311489][ T6597] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.315213][ T6597] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.316723][ T6597] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.365607][ T4602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.367261][ T4602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.368661][ T6979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.411097][ T4602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.412687][ T4602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.417273][ T4602] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.464712][ T5750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.474497][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.475983][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.477901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.496313][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.497778][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.499162][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.549396][ T5750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.589890][ T7045] loop5: detected capacity change from 0 to 512 [ 266.591469][ T7045] ext4: Unknown parameter 'auto_da_alloc2euid' [ 266.654356][ T5750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.675383][ T7059] loop7: detected capacity change from 0 to 512 [ 266.677864][ T7059] ext4: Unknown parameter 'auto_da_alloc2euid' [ 266.745681][ T7035] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.780131][ T7033] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 266.896665][ T7064] loop9: detected capacity change from 0 to 512 [ 267.368531][ T7064] EXT4-fs warning (device loop9): ext4_xattr_inode_get:506: inode #11: comm syz.9.696: EA inode hash validation failed [ 267.371460][ T7064] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.696: corrupted inode contents [ 267.375528][ T7064] EXT4-fs (loop9): Remounting filesystem read-only [ 267.376694][ T7064] EXT4-fs error (device loop9): ext4_dirty_inode:6156: inode #15: comm syz.9.696: mark_inode_dirty error [ 267.384047][ T7064] EXT4-fs (loop9): Remounting filesystem read-only [ 267.385360][ T7064] EXT4-fs error (device loop9): ext4_do_update_inode:5279: inode #15: comm syz.9.696: corrupted inode contents [ 267.387726][ T7064] EXT4-fs (loop9): Remounting filesystem read-only [ 267.388778][ T7064] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2947: inode #15: comm syz.9.696: mark_inode_dirty error [ 267.391102][ T7064] EXT4-fs (loop9): Remounting filesystem read-only [ 267.392329][ T7064] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2950: inode #15: comm syz.9.696: mark inode dirty (error -117) [ 267.395041][ T7064] EXT4-fs (loop9): Remounting filesystem read-only [ 267.396268][ T7064] EXT4-fs warning (device loop9): ext4_evict_inode:301: xattr delete (err -117) [ 267.398152][ T7064] EXT4-fs (loop9): 1 orphan inode deleted [ 267.399247][ T7064] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 267.899897][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 268.541099][ T7086] loop9: detected capacity change from 0 to 512 [ 268.554891][ T7086] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.558913][ T7086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 268.560844][ T7086] EXT4-fs (loop9): orphan cleanup on readonly fs [ 268.564353][ T7086] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.701: bg 0: block 361: padding at end of block bitmap is not set [ 268.567108][ T7086] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 268.568969][ T7086] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.701: attempt to clear invalid blocks 33619980 len 1 [ 268.578423][ T7086] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.701: invalid indirect mapped block 1811939328 (level 0) [ 268.581992][ T7086] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.701: invalid indirect mapped block 2185560079 (level 1) [ 268.584562][ T7086] EXT4-fs (loop9): 1 truncate cleaned up [ 268.585485][ T7086] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 268.619035][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 269.538128][ T7101] loop9: detected capacity change from 0 to 512 [ 269.539872][ T7101] ext4: Unknown parameter 'auto_da_alloc2euid' [ 269.556662][ T7033] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.583808][ T7103] loop9: detected capacity change from 0 to 512 [ 269.586472][ T7103] ext4: Unknown parameter 'auto_da_alloc2euid' [ 269.618502][ T7033] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 270.651755][ T4341] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 270.653458][ T4341] Bluetooth: hci7: Injecting HCI hardware error event [ 270.656581][ T4342] Bluetooth: hci7: hardware error 0x00 [ 272.741798][ T4341] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 272.743342][ T4341] Bluetooth: hci6: Injecting HCI hardware error event [ 272.745319][ T4341] Bluetooth: hci6: hardware error 0x00 [ 272.891797][ T4342] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 273.196999][ T7117] file system registered [ 273.962684][ T7123] loop9: detected capacity change from 0 to 512 [ 273.977223][ T7123] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 273.979638][ T7123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 273.981303][ T7123] EXT4-fs (loop9): orphan cleanup on readonly fs [ 273.983157][ T7123] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.718: bg 0: block 361: padding at end of block bitmap is not set [ 273.985460][ T7123] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 273.986971][ T7123] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #11: comm syz.9.718: attempt to clear invalid blocks 33619980 len 1 [ 273.989490][ T7123] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.718: invalid indirect mapped block 1811939328 (level 0) [ 273.995611][ T7123] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.718: invalid indirect mapped block 2185560079 (level 1) [ 273.998127][ T7123] EXT4-fs (loop9): 1 truncate cleaned up [ 273.999058][ T7123] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 274.035820][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 274.971711][ T4341] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 274.983299][ T7135] loop9: detected capacity change from 0 to 512 [ 274.986415][ T7135] ext4: Unknown parameter 'auto_da_alloc2euid' [ 275.032822][ T7137] loop9: detected capacity change from 0 to 512 [ 275.035623][ T7137] ext4: Unknown parameter 'auto_da_alloc2euid' [ 279.632787][ T5750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.666818][ T7099] netlink: 16 bytes leftover after parsing attributes in process `syz.8.710'. [ 279.668445][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.710'. [ 279.722933][ T7147] loop6: detected capacity change from 0 to 1024 [ 279.724669][ T7147] EXT4-fs: Ignoring removed bh option [ 280.136164][ T7160] loop9: detected capacity change from 0 to 512 [ 280.138861][ T7160] ext4: Unknown parameter 'auto_da_alloc2euid' [ 280.169376][ T7162] loop7: detected capacity change from 0 to 512 [ 280.178510][ T7142] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.190682][ T7162] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 280.197523][ T7147] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 280.247619][ T7162] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 280.249475][ T7162] EXT4-fs (loop7): orphan cleanup on readonly fs [ 280.251004][ T7162] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.729: bg 0: block 361: padding at end of block bitmap is not set [ 280.258354][ T7162] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 280.265454][ T7162] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.729: attempt to clear invalid blocks 33619980 len 1 [ 280.279273][ T7162] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.729: invalid indirect mapped block 1811939328 (level 0) [ 280.288510][ T7162] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.729: invalid indirect mapped block 2185560079 (level 1) [ 280.302180][ T7162] EXT4-fs (loop7): 1 truncate cleaned up [ 280.303308][ T7162] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 280.374710][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 280.446569][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 280.551030][ T7195] loop6: detected capacity change from 0 to 512 [ 280.552635][ T7195] ext4: Unknown parameter 'auto_da_alloc2euid' [ 280.945745][ T7199] loop5: detected capacity change from 0 to 512 [ 280.968852][ T7199] EXT4-fs: Ignoring removed orlov option [ 280.982514][ T7166] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.009977][ T7199] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 281.011305][ T7199] EXT4-fs (loop5): mount failed [ 281.055241][ T7209] loop6: detected capacity change from 0 to 512 [ 281.248452][ T7145] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.286890][ T7209] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 281.390173][ T7209] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.740: invalid size [ 281.419318][ T7222] loop9: detected capacity change from 0 to 512 [ 281.622488][ T7222] ext4: Unknown parameter 'auto_da_alloc2euid' [ 281.637907][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 281.727375][ T7166] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.798798][ T7234] loop9: detected capacity change from 0 to 512 [ 281.800801][ T7234] ext4: Unknown parameter 'auto_da_alloc2euid' [ 282.922089][ T7261] loop5: detected capacity change from 0 to 512 [ 282.923408][ T7260] loop6: detected capacity change from 0 to 512 [ 282.925998][ T7260] EXT4-fs: Ignoring removed orlov option [ 282.940895][ T7260] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 282.944922][ T7261] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 282.950648][ T7260] EXT4-fs (loop6): mount failed [ 282.975838][ T7261] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.758: invalid size [ 283.034352][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 283.438679][ T7273] ext4: Unknown parameter 'auto_da_alloc2euid' [ 283.465027][ T7275] ext4: Unknown parameter 'auto_da_alloc2euid' [ 283.494971][ T7166] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 284.458943][ T7288] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 284.491786][ T4341] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 284.493643][ T4341] Bluetooth: hci0: Injecting HCI hardware error event [ 284.496551][ T4342] Bluetooth: hci0: hardware error 0x00 [ 284.502042][ T7288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 284.503797][ T7288] EXT4-fs (loop6): orphan cleanup on readonly fs [ 284.505259][ T7288] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.778: bg 0: block 361: padding at end of block bitmap is not set [ 284.522365][ T7288] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 284.524836][ T7288] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #11: comm syz.6.778: attempt to clear invalid blocks 33619980 len 1 [ 284.527637][ T7288] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.778: invalid indirect mapped block 1811939328 (level 0) [ 284.530097][ T7288] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.778: invalid indirect mapped block 2185560079 (level 1) [ 284.534636][ T7288] EXT4-fs (loop6): 1 truncate cleaned up [ 284.535617][ T7288] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 284.557840][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 285.469301][ T7302] set_capacity_and_notify: 3 callbacks suppressed [ 285.469310][ T7302] loop5: detected capacity change from 0 to 512 [ 285.492508][ T7302] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 285.514020][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 285.584530][ T7310] loop5: detected capacity change from 0 to 512 [ 285.586168][ T7310] ext4: Unknown parameter 'auto_da_alloc2euid' [ 285.622876][ T7166] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.645458][ T7312] loop5: detected capacity change from 0 to 512 [ 285.647836][ T7312] ext4: Unknown parameter 'auto_da_alloc2euid' [ 285.771785][ T4337] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 285.773483][ T4337] Bluetooth: hci5: Injecting HCI hardware error event [ 285.776930][ T4341] Bluetooth: hci5: hardware error 0x00 [ 286.901881][ T4342] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 288.261640][ T4341] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 293.729502][ T7326] loop5: detected capacity change from 0 to 512 [ 293.737622][ T7326] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 293.765456][ T7329] loop7: detected capacity change from 0 to 512 [ 293.767004][ T7329] EXT4-fs: Ignoring removed orlov option [ 293.785872][ T7329] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 293.787141][ T7329] EXT4-fs (loop7): mount failed [ 293.793068][ T7326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 293.794797][ T7326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 293.802437][ T7326] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.780: bg 0: block 361: padding at end of block bitmap is not set [ 293.805224][ T7326] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 293.816866][ T7326] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.780: attempt to clear invalid blocks 33619980 len 1 [ 293.822423][ T7326] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.780: invalid indirect mapped block 1811939328 (level 0) [ 293.829737][ T7326] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.780: invalid indirect mapped block 2185560079 (level 1) [ 293.838474][ T7326] EXT4-fs (loop5): 1 truncate cleaned up [ 293.839472][ T7326] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 294.169555][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 294.889716][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.891982][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.964567][ T7348] loop6: detected capacity change from 0 to 512 [ 295.015247][ T7348] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 295.384456][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 295.508835][ T7366] loop9: detected capacity change from 0 to 512 [ 295.510402][ T7366] ext4: Unknown parameter 'auto_da_alloc2euid' [ 295.643483][ T7374] loop5: detected capacity change from 0 to 512 [ 295.653600][ T7374] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 295.659271][ T7374] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c800e018, mo2=0002] [ 295.661157][ T7374] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.664653][ T7374] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.793: bg 0: block 361: padding at end of block bitmap is not set [ 295.667370][ T7374] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 295.670049][ T7374] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.793: attempt to clear invalid blocks 33619980 len 1 [ 295.673614][ T7374] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.793: invalid indirect mapped block 1811939328 (level 0) [ 295.676945][ T7374] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.793: invalid indirect mapped block 2185560079 (level 1) [ 295.679759][ T7374] EXT4-fs (loop5): 1 truncate cleaned up [ 295.680782][ T7374] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 295.708817][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 295.714346][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.746146][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.802729][ T7381] loop7: detected capacity change from 0 to 1024 [ 295.812823][ T7381] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 2: comm syz.7.795: lblock 2 mapped to illegal pblock 2 (length 1) [ 295.815838][ T7381] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 295.817499][ T7381] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.795: lblock 0 mapped to illegal pblock 48 (length 1) [ 295.820413][ T7381] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 295.822968][ T7381] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.795: Failed to acquire dquot type 0 [ 295.825286][ T7381] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 295.827166][ T7381] EXT4-fs error (device loop7): ext4_evict_inode:281: inode #11: comm syz.7.795: mark_inode_dirty error [ 295.829660][ T7381] EXT4-fs warning (device loop7): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 295.832037][ T7381] EXT4-fs (loop7): 1 orphan inode deleted [ 295.833175][ T7381] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 295.860997][ T9] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 295.866681][ T9] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 295.868344][ T9] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0 [ 295.908176][ T7385] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 295.913477][ T7381] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 295.915428][ T7381] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #3: block 48: comm syz.7.795: lblock 0 mapped to illegal pblock 48 (length 1) [ 295.918045][ T7381] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=-117 [ 295.919910][ T7381] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 295.964389][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 296.519147][ T7253] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.520902][ T7253] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.523419][ T7253] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.525125][ T7253] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.875817][ T7396] loop7: detected capacity change from 0 to 512 [ 296.898217][ T7396] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 296.925850][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 297.360936][ T7434] loop9: detected capacity change from 0 to 512 [ 297.362419][ T7435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.809'. [ 297.367728][ T7434] ext4: Unknown parameter 'auto_da_alloc2euid' [ 297.418120][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.419591][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.452255][ T7322] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.926884][ T7441] netlink: 52 bytes leftover after parsing attributes in process `syz.5.809'. [ 298.045209][ T7460] loop5: detected capacity change from 0 to 256 [ 298.076626][ T7460] FAT-fs (loop5): Directory bread(block 64) failed [ 298.078048][ T7460] FAT-fs (loop5): Directory bread(block 65) failed [ 298.079420][ T7460] FAT-fs (loop5): Directory bread(block 66) failed [ 298.080675][ T7460] FAT-fs (loop5): Directory bread(block 67) failed [ 298.087202][ T7460] FAT-fs (loop5): Directory bread(block 68) failed [ 298.088533][ T7460] FAT-fs (loop5): Directory bread(block 69) failed [ 298.098442][ T7460] FAT-fs (loop5): Directory bread(block 70) failed [ 298.102094][ T7460] FAT-fs (loop5): Directory bread(block 71) failed [ 298.104473][ T7460] FAT-fs (loop5): Directory bread(block 72) failed [ 298.107031][ T7460] FAT-fs (loop5): Directory bread(block 73) failed [ 298.258543][ T5716] kworker/u4:13: attempt to access beyond end of device [ 298.258543][ T5716] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 298.750201][ T7495] loop6: detected capacity change from 0 to 512 [ 298.760411][ T7495] ext4: Unknown parameter 'auto_da_alloc2euid' [ 298.888606][ T7498] netlink: 'syz.8.830': attribute type 1 has an invalid length. [ 298.893286][ T7498] netlink: 'syz.8.830': attribute type 2 has an invalid length. [ 299.541157][ T7544] loop7: detected capacity change from 0 to 512 [ 299.600060][ T7544] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 299.664995][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 299.728759][ T7562] loop7: detected capacity change from 0 to 512 [ 299.735752][ T7562] ext4: Unknown parameter 'auto_da_alloc2euid' [ 299.794158][ T7322] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.203328][ T7586] loop9: detected capacity change from 0 to 512 [ 300.535231][ T7594] loop6: detected capacity change from 0 to 512 [ 300.547616][ T7594] ext4: Unknown parameter 'auto_da_alloc2euid' [ 300.569859][ T7586] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 300.608500][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 300.619360][ T7602] loop8: detected capacity change from 0 to 512 [ 300.700528][ T7602] EXT4-fs (loop8): Test dummy encryption mode enabled [ 300.704980][ T7602] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.855: inode has both inline data and extents flags [ 300.753598][ T7602] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.855: couldn't read orphan inode 15 (err -117) [ 300.787957][ T7602] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 301.228300][ T7626] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 301.738945][ T7635] loop9: detected capacity change from 0 to 256 [ 302.048262][ T6600] EXT4-fs (loop8): unmounting filesystem. [ 302.077701][ T7657] loop6: detected capacity change from 0 to 512 [ 302.090086][ T7652] loop9: detected capacity change from 0 to 512 [ 302.151936][ T7652] ext4: Unknown parameter 'auto_da_alloc2euid' [ 302.426618][ T7322] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.445764][ T7657] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 302.510348][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 303.064847][ T7687] loop9: detected capacity change from 0 to 1024 [ 303.149408][ T7697] EXT4-fs (loop6): Test dummy encryption mode enabled [ 303.176556][ T7687] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 303.178934][ T7697] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.880: inode has both inline data and extents flags [ 303.182793][ T7697] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.880: couldn't read orphan inode 15 (err -117) [ 303.188508][ T7697] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 303.196543][ T7687] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 3: comm syz.9.876: lblock 3 mapped to illegal pblock 3 (length 3) [ 303.209328][ T7687] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 303.248657][ T7687] EXT4-fs (loop9): This should not happen!! Data will be lost [ 303.248657][ T7687] [ 303.341043][ T7687] EXT4-fs error (device loop9): ext4_map_blocks:747: inode #15: block 8: comm syz.9.876: lblock 8 mapped to illegal pblock 8 (length 8) [ 303.346401][ T5750] device hsr_slave_0 left promiscuous mode [ 303.357268][ T7687] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 303.359399][ T7687] EXT4-fs (loop9): This should not happen!! Data will be lost [ 303.359399][ T7687] [ 303.381685][ T5750] device hsr_slave_1 left promiscuous mode [ 303.742251][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.744462][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.753322][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.839718][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.115988][ T5750] device bridge_slave_1 left promiscuous mode [ 304.117255][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.178520][ T7722] set_capacity_and_notify: 1 callbacks suppressed [ 304.178529][ T7722] loop7: detected capacity change from 0 to 512 [ 304.181785][ T7720] loop8: detected capacity change from 0 to 512 [ 304.193794][ T7720] ext4: Unknown parameter 'auto_da_alloc2euid' [ 304.215709][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 304.294180][ T5750] device bridge_slave_0 left promiscuous mode [ 304.295315][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.315389][ T7722] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 304.366409][ T5750] device hsr_slave_0 left promiscuous mode [ 304.386198][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 304.404389][ T5750] device hsr_slave_1 left promiscuous mode [ 304.431279][ T7445] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 304.482554][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.483952][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.485562][ T5750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.486707][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.488085][ T5750] device bridge_slave_1 left promiscuous mode [ 304.489183][ T5750] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.604029][ T5750] device bridge_slave_0 left promiscuous mode [ 304.605200][ T5750] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.062002][ T5750] device veth1_macvtap left promiscuous mode [ 305.063335][ T5750] device veth0_macvtap left promiscuous mode [ 305.064612][ T5750] device veth1_vlan left promiscuous mode [ 305.065716][ T5750] device veth0_vlan left promiscuous mode [ 305.302990][ T5750] device veth1_macvtap left promiscuous mode [ 305.304376][ T5750] device veth0_macvtap left promiscuous mode [ 305.305715][ T5750] device veth1_vlan left promiscuous mode [ 305.307020][ T5750] device veth0_vlan left promiscuous mode [ 305.531032][ T7760] loop8: detected capacity change from 0 to 512 [ 305.539690][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.893'. [ 305.542103][ T7761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.893'. [ 305.635131][ T7760] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 305.645525][ T7767] loop5: detected capacity change from 0 to 512 [ 305.647116][ T7767] ext4: Unknown parameter 'auto_da_alloc2euid' [ 305.660859][ T6600] EXT4-fs (loop8): unmounting filesystem. [ 306.065331][ T7322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 306.089017][ T7774] netlink: 44 bytes leftover after parsing attributes in process `syz.5.899'. [ 306.105629][ T7774] netlink: 43 bytes leftover after parsing attributes in process `syz.5.899'. [ 306.107223][ T7774] netlink: 'syz.5.899': attribute type 5 has an invalid length. [ 306.108473][ T7774] netlink: 43 bytes leftover after parsing attributes in process `syz.5.899'. [ 306.723377][ T7798] loop9: detected capacity change from 0 to 512 [ 306.775449][ T7798] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 306.810650][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 307.337346][ T7809] loop8: detected capacity change from 0 to 512 [ 307.352368][ T7809] ext4: Unknown parameter 'auto_da_alloc2euid' [ 307.466821][ T7814] loop5: detected capacity change from 0 to 512 [ 307.490558][ T7816] loop8: detected capacity change from 0 to 256 [ 307.507895][ T7816] sctp: [Deprecated]: syz.8.913 (pid 7816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.507895][ T7816] Use struct sctp_sack_info instead [ 307.522260][ T7814] EXT2-fs (loop5): error: ext2_check_page: size of directory #12 is not a multiple of chunk size [ 307.524949][ T7814] EXT2-fs (loop5): error: ext2_readdir: bad page in #12 [ 307.845058][ T7831] loop9: detected capacity change from 0 to 512 [ 308.229042][ T7831] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 308.705995][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 309.494660][ T5750] team0 (unregistering): Port device team_slave_1 removed [ 309.592209][ T7846] loop5: detected capacity change from 0 to 512 [ 309.598222][ T7846] ext4: Unknown parameter 'auto_da_alloc2euid' [ 309.699447][ T5750] team0 (unregistering): Port device team_slave_0 removed [ 310.022110][ T5750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.232727][ T5750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.252932][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.254068][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.733033][ T5750] bond0 (unregistering): Released all slaves [ 314.113539][ T5750] team0 (unregistering): Port device team_slave_1 removed [ 314.294181][ T5750] team0 (unregistering): Port device team_slave_0 removed [ 314.462428][ T5750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.662063][ T5750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.243069][ T5750] bond0 (unregistering): Released all slaves [ 316.568463][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 316.570767][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.8.913'. [ 317.128649][ T7891] loop7: detected capacity change from 0 to 512 [ 317.147655][ T7891] ext4: Unknown parameter 'auto_da_alloc2euid' [ 317.469823][ T7875] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 317.737129][ T7920] loop7: detected capacity change from 0 to 512 [ 317.748904][ T7920] EXT4-fs (loop7): Test dummy encryption mode enabled [ 317.776080][ T7920] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.943: inode has both inline data and extents flags [ 317.779844][ T7920] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.943: couldn't read orphan inode 15 (err -117) [ 317.855007][ T7920] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 319.308771][ T7949] loop6: detected capacity change from 0 to 512 [ 319.310543][ T7949] ext4: Unknown parameter 'auto_da_alloc2euid' [ 319.405935][ T6597] EXT4-fs (loop7): unmounting filesystem. [ 319.517030][ T7962] netlink: 'syz.5.956': attribute type 1 has an invalid length. [ 319.550571][ T7962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.552085][ T7969] loop7: detected capacity change from 0 to 256 [ 319.643478][ T7962] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 319.645851][ T7962] bond1: (slave batadv1): making interface the new active one [ 319.657389][ T7962] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 319.671388][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 320.311331][ T8008] loop9: detected capacity change from 0 to 512 [ 320.317020][ T8008] EXT4-fs (loop9): Test dummy encryption mode enabled [ 320.328521][ T8008] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.970: inode has both inline data and extents flags [ 320.331233][ T8008] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.970: couldn't read orphan inode 15 (err -117) [ 320.337792][ T8008] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 320.498071][ T8019] loop6: detected capacity change from 0 to 256 [ 321.983274][ T7974] bond1 (unregistering): (slave batadv1): Releasing active interface [ 322.167736][ T7974] bond1 (unregistering): Released all slaves [ 322.213528][ T6609] EXT4-fs (loop9): unmounting filesystem. [ 323.194234][ T8078] loop5: detected capacity change from 0 to 256 [ 323.346755][ T8094] loop5: detected capacity change from 0 to 512 [ 323.358705][ T8094] EXT4-fs (loop5): Test dummy encryption mode enabled [ 323.370838][ T8094] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.992: inode has both inline data and extents flags [ 323.385555][ T8094] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.992: couldn't read orphan inode 15 (err -117) [ 323.397719][ T8094] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 324.644794][ T5120] EXT4-fs (loop5): unmounting filesystem. [ 326.237989][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1016'. [ 326.824499][ T8221] fuse: Bad value for 'fd' [ 328.829706][ T8269] fuse: Bad value for 'fd' [ 329.503296][ T8311] loop9: detected capacity change from 0 to 256 [ 329.553451][ T8315] fuse: Bad value for 'fd' [ 329.776742][ T8337] binder: 8334:8337 tried to acquire reference to desc 0, got 1 instead [ 329.781285][ T8337] binder: 8334:8337 got transaction with invalid offset (24, min 24 max 46) or object. [ 329.788710][ T8337] binder: 8334:8337 transaction call to 8334:0 failed 29/29201/-22, size 46-24 line 3363 [ 329.794650][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 330.860925][ T8372] loop6: detected capacity change from 0 to 256 [ 331.146108][ T8391] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 331.383729][ T4389] Bluetooth: hci1: Frame reassembly failed (-84) [ 331.499360][ T8398] binder: 8390:8398 tried to acquire reference to desc 0, got 1 instead [ 331.504460][ T8398] binder: 8390:8398 got transaction with invalid offset (24, min 24 max 46) or object. [ 331.506430][ T8398] binder: 8390:8398 transaction call to 8390:0 failed 36/29201/-22, size 46-24 line 3363 [ 331.508909][ T1518] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.964454][ T8416] binder: 8415:8416 tried to acquire reference to desc 0, got 1 instead [ 331.966329][ T8416] binder: 8415:8416 got transaction with invalid offset (24, min 24 max 46) or object. [ 331.968561][ T8416] binder: 8415:8416 transaction call to 8415:0 failed 43/29201/-22, size 46-24 line 3363 [ 331.970786][ T5237] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.360391][ T8425] loop5: detected capacity change from 0 to 256 [ 332.596135][ T8448] binder: tried to use weak ref as strong ref [ 332.597376][ T8448] binder: 8447:8448 Acquire 1 refcount change on invalid ref 0 ret -22 [ 332.608504][ T8448] binder: 8447:8448 got transaction to invalid handle, 1 [ 332.609827][ T8448] binder: 8448:8447 cannot find target node [ 332.618004][ T8448] binder: 8447:8448 transaction call to 0:0 failed 48/29201/-22, size 46-24 line 3062 [ 332.675249][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.371937][ T4341] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 333.441219][ T8472] binder: 8471:8472 tried to acquire reference to desc 0, got 1 instead [ 333.462538][ T8472] binder: 8471:8472 transaction call to 8471:0 failed 53/29201/-22, size 46-24 line 3363 [ 334.124395][ T8502] loop8: detected capacity change from 0 to 256 [ 334.629936][ T8526] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 334.697493][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 334.834361][ T8532] loop9: detected capacity change from 0 to 256 [ 335.544317][ T8551] binder_user_error: 4 callbacks suppressed [ 335.544327][ T8551] binder: tried to use weak ref as strong ref [ 335.546544][ T8551] binder: 8550:8551 Acquire 1 refcount change on invalid ref 0 ret -22 [ 335.566243][ T8551] binder: 8550:8551 got transaction to invalid handle, 1 [ 335.573789][ T8551] binder_debug: 4 callbacks suppressed [ 335.573805][ T8551] binder: 8551:8550 cannot find target node [ 335.578607][ T8551] binder: 8550:8551 transaction call to 0:0 failed 59/29201/-22, size 46-24 line 3062 [ 335.587045][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 335.822269][ T8575] binder: tried to use weak ref as strong ref [ 335.823329][ T8575] binder: 8574:8575 Acquire 1 refcount change on invalid ref 0 ret -22 [ 335.825324][ T8575] binder: 8574:8575 got transaction to invalid handle, 1 [ 335.826472][ T8575] binder: 8575:8574 cannot find target node [ 335.827436][ T8575] binder: 8574:8575 transaction call to 0:0 failed 62/29201/-22, size 46-24 line 3062 [ 335.829820][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 336.637488][ T8593] loop8: detected capacity change from 0 to 256 [ 336.741762][ T4342] Bluetooth: hci1: command 0x1003 tx timeout [ 336.743803][ T4341] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 336.819770][ T8602] binder: 8599:8602 got transaction to invalid handle, 1 [ 336.821194][ T8602] binder: 8602:8599 cannot find target node [ 336.826452][ T8602] binder: 8599:8602 transaction call to 0:0 failed 65/29201/-22, size 46-24 line 3062 [ 336.828917][ T5239] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.818201][ T8640] binder: BINDER_SET_CONTEXT_MGR already set [ 337.819570][ T8640] binder: 8637:8640 ioctl 4018620d 20004a80 returned -16 [ 337.848519][ T8640] binder: 8637:8640 got transaction to invalid handle, 1 [ 337.849883][ T8640] binder: 8640:8637 cannot find target node [ 337.876157][ T8648] loop6: detected capacity change from 0 to 256 [ 338.258470][ T8655] binder: 8653:8655 got transaction to invalid handle, 1 [ 338.628136][ T8665] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 338.650644][ T4494] Bluetooth: hci1: Frame reassembly failed (-84) [ 338.658364][ T8668] binder: tried to use weak ref as strong ref [ 339.557396][ T8722] loop6: detected capacity change from 0 to 256 [ 340.268522][ T8757] fuse: Bad value for 'fd' [ 340.309105][ T8760] loop5: detected capacity change from 0 to 256 [ 340.747670][ T4337] Bluetooth: hci1: command 0x1003 tx timeout [ 340.751113][ T4341] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 340.837245][ T8770] binder_user_error: 4 callbacks suppressed [ 340.837255][ T8770] binder: tried to use weak ref as strong ref [ 340.852274][ T8770] binder: 8769:8770 Acquire 1 refcount change on invalid ref 0 ret -22 [ 340.854203][ T8770] binder: 8769:8770 got transaction to invalid handle, 1 [ 340.872634][ T8770] binder_debug: 14 callbacks suppressed [ 340.872651][ T8770] binder: 8770:8769 cannot find target node [ 340.874665][ T8770] binder: 8769:8770 transaction call to 0:0 failed 86/29201/-22, size 46-24 line 3062 [ 340.915189][ T4541] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.920430][ T8781] binder: 8780:8781 got transaction to invalid handle, 1 [ 340.922021][ T8781] binder: 8781:8780 cannot find target node [ 340.923126][ T8781] binder: 8780:8781 transaction call to 0:0 failed 90/29201/-22, size 46-24 line 3062 [ 340.925330][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.438221][ T8800] fuse: Bad value for 'fd' [ 341.486821][ T8806] loop8: detected capacity change from 0 to 256 [ 341.594000][ T8815] binder: 8813:8815 got transaction to invalid handle, 1 [ 341.600769][ T8815] binder: 8815:8813 cannot find target node [ 341.604271][ T8815] binder: 8813:8815 transaction call to 0:0 failed 94/29201/-22, size 46-24 line 3062 [ 341.608237][ T4541] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.090310][ T8830] binder: tried to use weak ref as strong ref [ 342.091377][ T8830] binder: 8824:8830 Acquire 1 refcount change on invalid ref 0 ret -22 [ 342.093873][ T8830] binder: 8824:8830 got transaction to invalid handle, 1 [ 342.095038][ T8830] binder: 8830:8824 cannot find target node [ 342.298001][ T8844] loop6: detected capacity change from 0 to 512 [ 342.310758][ T8844] EXT4-fs: Ignoring removed nobh option [ 342.352038][ T8850] fuse: Bad value for 'fd' [ 342.371340][ T8844] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 342.415823][ T8856] loop5: detected capacity change from 0 to 256 [ 342.499325][ T6476] EXT4-fs (loop6): unmounting filesystem. [ 342.525797][ T8863] binder: tried to use weak ref as strong ref [ 342.526981][ T8863] binder: 8862:8863 Acquire 1 refcount change on invalid ref 0 ret -22 [ 342.877258][ T8876] ================================================================== [ 342.878734][ T8876] BUG: KASAN: slab-out-of-bounds in copy_from_sockptr+0x44/0x1a8 [ 342.880020][ T8876] Read of size 84 at addr ffff0000eea8ad00 by task syz.9.1189/8876 [ 342.881295][ T8876] [ 342.881653][ T8876] CPU: 0 PID: 8876 Comm: syz.9.1189 Not tainted syzkaller #0 [ 342.882838][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 342.884578][ T8876] Call trace: [ 342.885199][ T8876] dump_backtrace+0x1c4/0x1f0 [ 342.886007][ T8876] show_stack+0x2c/0x3c [ 342.886717][ T8876] __dump_stack+0x30/0x40 [ 342.887438][ T8876] dump_stack_lvl+0xf4/0x15c [ 342.888208][ T8876] print_address_description+0x88/0x218 [ 342.889084][ T8876] print_report+0x50/0x68 [ 342.889830][ T8876] kasan_report+0xa8/0xfc [ 342.890575][ T8876] kasan_check_range+0x258/0x290 [ 342.891394][ T8876] memcpy+0x48/0x90 [ 342.892038][ T8876] copy_from_sockptr+0x44/0x1a8 [ 342.892824][ T8876] vcc_setsockopt+0x17c/0x694 [ 342.893597][ T8876] pvc_setsockopt+0x84/0xb0 [ 342.894338][ T8876] __sys_setsockopt+0x2fc/0x50c [ 342.895161][ T8876] __arm64_sys_setsockopt+0xc0/0xdc [ 342.896082][ T8876] invoke_syscall+0x98/0x290 [ 342.896843][ T8876] el0_svc_common+0x13c/0x258 [ 342.897692][ T8876] do_el0_svc+0x5c/0x134 [ 342.898327][ T8876] el0_svc+0x58/0x128 [ 342.898957][ T8876] el0t_64_sync_handler+0x84/0xf0 [ 342.899768][ T8876] el0t_64_sync+0x18c/0x190 [ 342.900516][ T8876] [ 342.900890][ T8876] Allocated by task 8876: [ 342.901681][ T8876] kasan_set_track+0x4c/0x80 [ 342.902470][ T8876] kasan_save_alloc_info+0x24/0x30 [ 342.903354][ T8876] __kasan_kmalloc+0xa0/0xb8 [ 342.904153][ T8876] __kmalloc+0xd8/0x180 [ 342.904886][ T8876] __cgroup_bpf_run_filter_setsockopt+0xa1c/0xbe0 [ 342.905906][ T8876] __sys_setsockopt+0x4c0/0x50c [ 342.906718][ T8876] __arm64_sys_setsockopt+0xc0/0xdc [ 342.907586][ T8876] invoke_syscall+0x98/0x290 [ 342.908366][ T8876] el0_svc_common+0x13c/0x258 [ 342.909125][ T8876] do_el0_svc+0x5c/0x134 [ 342.909842][ T8876] el0_svc+0x58/0x128 [ 342.910525][ T8876] el0t_64_sync_handler+0x84/0xf0 [ 342.911357][ T8876] el0t_64_sync+0x18c/0x190 [ 342.912120][ T8876] [ 342.912522][ T8876] Last potentially related work creation: [ 342.913468][ T8876] kasan_save_stack+0x40/0x70 [ 342.914212][ T8876] __kasan_record_aux_stack+0xc0/0xdc [ 342.915084][ T8876] kasan_record_aux_stack_noalloc+0x14/0x20 [ 342.916067][ T8876] kvfree_call_rcu+0xb4/0x6f0 [ 342.916874][ T8876] cfg80211_update_known_bss+0x11c/0x7fc [ 342.917821][ T8876] cfg80211_bss_update+0x150/0x1ccc [ 342.918688][ T8876] cfg80211_inform_bss_frame_data+0x890/0x10f8 [ 342.919735][ T8876] ieee80211_bss_info_update+0x640/0xa7c [ 342.920713][ T8876] ieee80211_ibss_rx_queued_mgmt+0x143c/0x2608 [ 342.921754][ T8876] ieee80211_iface_work+0x5a8/0xa4c [ 342.922660][ T8876] cfg80211_wiphy_work+0x1e0/0x220 [ 342.923574][ T8876] process_one_work+0x7e4/0x13bc [ 342.924386][ T8876] worker_thread+0x8cc/0xfe8 [ 342.925145][ T8876] kthread+0x254/0x2e0 [ 342.925849][ T8876] ret_from_fork+0x10/0x20 [ 342.926594][ T8876] [ 342.927008][ T8876] The buggy address belongs to the object at ffff0000eea8ad00 [ 342.927008][ T8876] which belongs to the cache kmalloc-128 of size 128 [ 342.929409][ T8876] The buggy address is located 0 bytes inside of [ 342.929409][ T8876] 128-byte region [ffff0000eea8ad00, ffff0000eea8ad80) [ 342.931572][ T8876] [ 342.931961][ T8876] The buggy address belongs to the physical page: [ 342.933079][ T8876] page:00000000b37e070f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12ea8a [ 342.934811][ T8876] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 342.936091][ T8876] raw: 05ffc00000000200 dead000000000100 dead000000000122 ffff0000c0002300 [ 342.937549][ T8876] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 342.938945][ T8876] page dumped because: kasan: bad access detected [ 342.940011][ T8876] [ 342.940426][ T8876] Memory state around the buggy address: [ 342.941356][ T8876] ffff0000eea8ac00: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.942751][ T8876] ffff0000eea8ac80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.944096][ T8876] >ffff0000eea8ad00: 00 02 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.945363][ T8876] ^ [ 342.946059][ T8876] ffff0000eea8ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 342.947370][ T8876] ffff0000eea8ae00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 342.948648][ T8876] ================================================================== [ 342.961682][ T8876] Disabling lock debugging due to kernel taint